IntrusionLabs IntrusionLabs
← Back to feed

191.44.112.76

Threat Confidence
40%
Assessment
  • Part of a 308-IP campaign probing the same targets.
Generated from the counts on this page by fixed rules; each line cites the number it rests on.
Location
🇩🇪 DE / Frankfurt am Main
ASN
AS198550 · Node Host Limited
Cloud Provider
—
Total Events
20
Average by volume
Agent Count
2
First / Last Seen
2026-10-27 16:20 — 2026-10-28 06:45
Attack Types
telnet:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
T1595.002
Initial Access
T1078
Credential Access
T1110 T1110.001
External Corroboration
CINS Army
Reported 2026-10-28 06:02
cins:bad_reputation
Campaigns
Multi-Agent Scan SCAN Active medium
229 IPs 1026774 events
2026-09-25 — ongoing · 229 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan SCAN Active medium
157 IPs 220661 events
2026-03-09 — ongoing · 157 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
308 IPs 1036893 events
2026-03-07 — ongoing · 308 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan SCAN Active medium
19 IPs 61635 events
2026-03-02 — ongoing · 19 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Session Forensics
credential_probe ×1 opportunistic_bruter ×1
Sessions
2 (1 with login)
Avg Depth Score
0.35
Commands Executed
0
Files Downloaded
0
Evidence Timeline
Credential Probe f1f1f6caaa1a w4m_seattle_01 · 2026-10-28 06:45
1 20%
Loading events...
Opportunistic Bruter 70a41bf5efab greencloud_phx_01 · 2026-10-27 16:20
1 50%
Loading events...