IntrusionLabs IntrusionLabs
← Back to feed

187.141.210.92

customer-187-141-210-92-sta.uninet-ide.com.mx (uninet-ide.com.mx)
Threat Confidence
40%
Location
🇲🇽 MX / Puebla City
ASN
AS8151 · UNINET
Cloud Provider
—
Total Events
12
Below average by volume
Agent Count
1
First / Last Seen
2026-02-25 21:36 — 2026-04-12 16:32
Attack Types
ssh:bruteforce
MITRE ATT&CK Techniques
Initial Access
T1078
Credential Access
T1110 T1110.001
Exfiltration
T1048
External Corroboration
Not flagged by any external feeds
Campaigns
AS8151 UNINET ASN Active medium 🇲🇽 MX
5 IPs 3046 events
ssh:bruteforce
2026-02-18 — ongoing · 5 IPs from the same network (UNINET, AS8151) were active during overlapping time periods. Temporal correlation across a …
Session Forensics
data_exfiltrator ×2
Sessions
2 (2 with login)
Avg Depth Score
0.9
Commands Executed
0
Files Downloaded
0
Fingerprints
HASSH
98ddc5604ef6a1006a2b49a58759fbe6
SSH Client
SSH-2.0-Go
Evidence Timeline
Data Exfiltrator e09757c58805 w4m_seattle_01 · 2026-04-12 16:32
1 90%
Loading events...
Data Exfiltrator 908d4f282062 w4m_seattle_01 · 2026-02-25 21:36
1 90%
Loading events...