IntrusionLabs IntrusionLabs
← Back to feed

93.152.221.108

TAGGED SUSPICIOUS how we decide →
Threat Confidence
36%
Location
🇩🇪 DE / Frankfurt am Main
ASN
AS197170 · TechTies Inc.
Cloud Provider
—
Total Events
25
Average by volume
Agent Count
1
First / Last Seen
2026-09-14 18:24 — 2026-09-14 23:06
Attack Types
ssh:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
T1595 T1595.002
Credential Access
T1110 T1110.001
Discovery
T1046
Command and Control
T1090 T1572
External Corroboration
Blocklist.de
Reported 2026-09-15 17:01
blocklist_de:reported
DShield Top Attackers
Reported 2026-09-15 06:01
dshield:top_attacker
Campaigns
Not associated with any campaigns
Session Forensics
scanner ×1 proxy_abuser ×1 credential_probe ×3
Sessions
5 (1 with login)
Avg Depth Score
0.32
Commands Executed
0
Files Downloaded
0
Fingerprints
HASSH
a591c4ddccc960a2da8099958270fc92
SSH Client
CONNECT 93.152.221.108:80 HTTP/1.0SSH-2.0-libssh_0.12.0
Evidence Timeline
Credential Probe 4cdd3398517e w4m_seattle_01 · 2026-09-14 23:06
1 20%
Loading events...
Proxy Abuser d8ea788d060b w4m_seattle_01 · 2026-09-14 22:20
1 85%
Loading events...
Credential Probe a92f8a2ebf9d w4m_seattle_01 · 2026-09-14 21:27
1 20%
Loading events...
Credential Probe 5ea5baaf74c8 w4m_seattle_01 · 2026-09-14 18:24
1 20%
Loading events...
Scanner 5184622707c4 w4m_seattle_01 · 2026-09-14 18:24
15%
Loading events...
{# Cloudflare Web Analytics — cookieless, public pages only. The context processor withholds the token from authenticated requests. #}