IntrusionLabs IntrusionLabs
← Back to feed

198.98.53.110

TAGGED SUSPICIOUS how we decide →
Threat Confidence
35%
Location
🇺🇸 US / Staten Island
ASN
AS53667 · FranTech Solutions
Cloud Provider
—
Total Events
60
Above average by volume
Agent Count
2
First / Last Seen
2026-07-30 12:18 — 2026-08-12 08:39
Attack Types
ssh:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
T1595.002
Initial Access
T1078
Credential Access
T1110 T1110.001
External Corroboration
Not flagged by any external feeds
Campaigns
Multi-Agent Scan SCAN Active medium
58 IPs 277562 events
2026-07-27 — ongoing · 58 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan SCAN Active medium
111 IPs 367963 events
2026-07-27 — ongoing · 111 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
4 IPs 38410 events
2026-07-04 — ongoing · 4 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
102 IPs 476890 events
2026-06-28 — ongoing · 102 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
93 IPs 404109 events
2026-04-03 — ongoing · 93 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
5 IPs 16536 events
2026-03-21 — ongoing · 5 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
84 IPs 302613 events
2026-03-21 — ongoing · 84 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
107 IPs 372945 events
2026-03-09 — ongoing · 107 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
95 IPs 327059 events
2026-03-09 — ongoing · 95 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
57 IPs 314923 events
2026-03-06 — ongoing · 57 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
53 IPs 268163 events
2026-03-06 — ongoing · 53 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
46 IPs 97762 events
2026-03-06 — ongoing · 46 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
19 IPs 78681 events
2026-02-28 — ongoing · 19 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
97 IPs 342736 events
2026-02-27 — ongoing · 97 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
101 IPs 333262 events
2026-02-25 — ongoing · 101 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
58 IPs 308929 events
2026-02-24 — ongoing · 58 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
83 IPs 335289 events
2026-02-24 — ongoing · 83 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
88 IPs 305606 events
2026-02-24 — ongoing · 88 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
99 IPs 334536 events
2026-02-24 — ongoing · 99 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
61 IPs 290347 events
2026-02-24 — ongoing · 61 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
AS53667 FranTech Solutions ASN Ended medium 🇺🇸 US
5 IPs 5630 events
ssh:bruteforce
2026-02-16 — ongoing · 5 IPs from the same network (FranTech Solutions, AS53667) were active during overlapping time periods. Temporal correlation across …
Session Forensics
credential_probe ×8 opportunistic_bruter ×4
Sessions
12 (4 with login)
Avg Depth Score
0.3
Commands Executed
0
Files Downloaded
0
Fingerprints
HASSH
19532158b559096b89b1a5f7d17175b2
SSH Client
SSH-2.0-libssh2_1.11.1
Evidence Timeline
Opportunistic Bruter b0751d338889 newark_01 · 2026-08-12 08:39
1 50%
Loading events...
Credential Probe 235aae5caf61 newark_01 · 2026-08-12 08:27
1 20%
Loading events...
Credential Probe c9588ea05955 newark_01 · 2026-08-12 08:15
1 20%
Loading events...
Opportunistic Bruter 569ad1415db1 w4m_singapore_01 · 2026-08-11 18:22
1 50%
Loading events...
Credential Probe 9e812d023861 w4m_singapore_01 · 2026-08-11 18:10
1 20%
Loading events...
Credential Probe 5d244adc81b8 w4m_singapore_01 · 2026-08-11 17:58
1 20%
Loading events...
Opportunistic Bruter c2c7c356033a w4m_singapore_01 · 2026-08-06 22:29
1 50%
Loading events...
Credential Probe ab01031a8eea w4m_singapore_01 · 2026-08-06 22:16
1 20%
Loading events...
Credential Probe 0664e74efb19 w4m_singapore_01 · 2026-08-06 22:03
1 20%
Loading events...
Opportunistic Bruter 5eca462e5d22 w4m_singapore_01 · 2026-07-30 12:43
1 50%
Loading events...
Credential Probe 0495b193e976 w4m_singapore_01 · 2026-07-30 12:30
1 20%
Loading events...
Credential Probe fed36cb9796f w4m_singapore_01 · 2026-07-30 12:18
1 20%
Loading events...
{# Cloudflare Web Analytics — cookieless, public pages only. The context processor withholds the token from authenticated requests. #}