← Back to feed

93.158.90.151

Threat Confidence

45%

Location

🇸🇪 SE

ASN

AS12552 · GlobalConnect AB

Cloud Provider

—

Total Events

Below average by volume

Agent Count

First / Last Seen

2026-07-07 16:55 — 2026-09-12 16:09

Attack Types

http:scan ssh:bruteforce

MITRE ATT&CK Techniques

Reconnaissance

T1595 T1595.002

Initial Access

T1190

Credential Access

T1110 T1110.001

Discovery

T1046

External Corroboration

CINS Army

Reported 2026-09-15 17:01

cins:bad_reputation

Campaigns

Subnet 93.158.90.0/24 SUBNET Active high 🇸🇪 SE

6 IPs 19 events

http:scanssh:bruteforce

2026-05-26 — ongoing · 6 IPs from the same /24 subnet (93.158.90.0/24) were observed attacking our sensors within the same time window. …

Session Forensics

scanner ×2 web_probe ×1

Sessions

Avg Depth Score

0.18

Commands Executed

Files Downloaded

Fingerprints

SSH Client

\xfcL(\xc6M\xd8F\xbf{d.\xec8\xb34\x8eo\xad,r\xf6I .\xa2\xe8\xacR\xc1\xde\xeb\xa5U &\xb8 .\xd9\x97?\xf7\xfe\xb19\xbe\xb1\x81\xd3e!\x89\x86\xe5\x99 j\xf81\xc0+\xc0/\xc0,\xc00̨̩\xc0 \xc0\xc0

Evidence Timeline

Scanner 6d908db9f4be w4m_seattle_01 · 2026-09-12 16:09

15%

Loading events...

Scanner aadc98d95eb9 w4m_seattle_01 · 2026-09-12 16:09

15%

Loading events...

Web Probe aed7068f294a6f4f newark_01 · 2026-07-07 16:55

25%

Loading events...

Non-Session Events

Timestamp	Port	Proto	Event	Source	Location
2026-07-07 16:55:30	:80	http	HTTP GET request	opencanary	ewr