IntrusionLabs IntrusionLabs
← Back to feed

200.118.190.207

static-ip-200118190207.cobog01p.clarocloud.com.co (clarocloud.com.co) ✓ FCrDNS
Threat Confidence
14%
Assessment
  • Ran 1 commands on the host.
  • Part of a 5-IP campaign from the same network, active in the same window.
Generated from the counts on this page by fixed rules; each line cites the number it rests on.
Location
🇨🇴 CO
ASN
AS14080 · Telmex Colombia S.A.
Cloud Provider
—
Total Events
23
Average by volume
Agent Count
1
First / Last Seen
2026-09-28 09:18 — 2026-09-28 11:47
Attack Types
ssh:bruteforce ssh:intrusion
MITRE ATT&CK Techniques
Reconnaissance
T1595.002
Initial Access
T1078
Execution
T1059.004
Credential Access
T1110 T1110.001
Discovery
T1016 T1082
External Corroboration
Not flagged by any external feeds
Campaigns
AS14080 Telmex Colombia S.A. ASN Ended medium 🇨🇴 CO
5 IPs 2323 events
ssh:bruteforce
2026-03-02 — ongoing · 5 IPs from the same network (Telmex Colombia S.A., AS14080) were active during overlapping time periods. Temporal correlation …
Session Forensics
reconnaissance ×1 credential_probe ×3
Sessions
4 (1 with login)
Avg Depth Score
0.3
Commands Executed
1
Files Downloaded
0
Notable Commands
  • uname -a 2>/dev/null
Fingerprints
1 SSH client banner · 1 HASSH fingerprint
HASSH
06ff3615a51b2af343ec22abc8e30bbc
SSH Client
SSH-2.0-Go
Evidence Timeline
Credential Probe 40ed7005a109 newark_01 · 2026-09-28 11:47
1 20%
Loading events...
Credential Probe 03ebd7ad450c newark_01 · 2026-09-28 10:45
1 20%
Loading events...
Reconnaissance 4a8cf28021a1 newark_01 · 2026-09-28 10:20
1 1 60%
Loading events...
Credential Probe a7643b4cdb4f newark_01 · 2026-09-28 09:18
1 20%
Loading events...