IntrusionLabs IntrusionLabs
← Back to feed

5.196.106.17

Threat Confidence
28%
Location
🇫🇷 FR
ASN
AS16276 · OVH SAS
Cloud Provider
—
Total Events
55
Above average by volume
Agent Count
1
First / Last Seen
2026-06-21 23:32 — 2026-06-22 00:07
Attack Types
ssh:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
T1595 T1595.002
Initial Access
T1078
Credential Access
T1110 T1110.001
Discovery
T1016 T1046 T1082
External Corroboration
Not flagged by any external feeds
Campaigns
Not associated with any campaigns
Session Forensics
scanner ×1 reconnaissance ×1 credential_probe ×9
Sessions
11 (1 with login)
Avg Depth Score
0.23
Commands Executed
1
Files Downloaded
0
Notable Commands
  • uname -a
Fingerprints
HASSH
16443846184eafde36765c9bab2f4397
SSH Client
SSH-2.0-Go
Evidence Timeline
Reconnaissance e689619b8007 newark_01 · 2026-06-22 00:07
1 1 60%
Loading events...
Credential Probe 968676a8092f newark_01 · 2026-06-22 00:07
1 20%
Loading events...
Credential Probe bb99ff0bf11c newark_01 · 2026-06-22 00:07
1 20%
Loading events...
Credential Probe e1f45a2822e2 newark_01 · 2026-06-22 00:07
1 20%
Loading events...
Credential Probe 6ce5ce48f256 newark_01 · 2026-06-22 00:07
1 20%
Loading events...
Credential Probe b68e67b38cc2 newark_01 · 2026-06-22 00:07
1 20%
Loading events...
Credential Probe 8ea32ae9744f newark_01 · 2026-06-22 00:07
1 20%
Loading events...
Credential Probe 689dbd9e397a newark_01 · 2026-06-22 00:07
1 20%
Loading events...
Credential Probe 153cea4c8865 newark_01 · 2026-06-22 00:07
1 20%
Loading events...
Credential Probe dd1e4a8ce10f newark_01 · 2026-06-22 00:07
1 20%
Loading events...
Scanner 00d2bddccfb3 newark_01 · 2026-06-21 23:32
15%
Loading events...
{# Cloudflare Web Analytics — cookieless, public pages only. The context processor withholds the token from authenticated requests. #}