IntrusionLabs IntrusionLabs
← Back to feed

94.207.48.249

TAGGED SUSPICIOUS how we decide →
Threat Confidence
46%
Location
🇦🇪 AE / Dubai
ASN
AS15802 · Emirates Integrated Telecommunications Company PJSC
Cloud Provider
—
Total Events
72
Above average by volume
Agent Count
1
First / Last Seen
2026-07-28 04:55 — 2026-07-28 04:56
Attack Types
ftp:bruteforce ssh:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
T1595.002
Initial Access
T1078
Credential Access
T1110 T1110.001
Command and Control
T1105
External Corroboration
Not flagged by any external feeds
Campaigns
Not associated with any campaigns
Session Forensics
ftp_probe ×4 malware_dropper ×2 credential_probe ×8 opportunistic_bruter ×2
Sessions
16 (4 with login)
Avg Depth Score
0.34
Commands Executed
2
Files Downloaded
2
Notable Commands
  • scp -pf '/'
Fingerprints
HASSH
1df281da760a0c16d115179a9ea5957c
SSH Client
SSH-2.0-libssh2_1.10.0
Evidence Timeline
Credential Probe b07f432997d4 newark_01 · 2026-07-28 04:56
1 20%
Loading events...
Credential Probe 429b359cb560 newark_01 · 2026-07-28 04:56
1 20%
Loading events...
Credential Probe 7604a4171568 newark_01 · 2026-07-28 04:55
1 20%
Loading events...
Malware Dropper 3468dc5a3623 newark_01 · 2026-07-28 04:55
1 1 1 100%
Loading events...
Malware Dropper 983389b016c5 newark_01 · 2026-07-28 04:55
1 1 1 100%
Loading events...
Credential Probe 672c90478bca newark_01 · 2026-07-28 04:55
1 20%
Loading events...
Credential Probe 2f3fcf7538c7 newark_01 · 2026-07-28 04:55
1 20%
Loading events...
Credential Probe bdca9d99c701 newark_01 · 2026-07-28 04:55
1 20%
Loading events...
Credential Probe 0aebeec9910c newark_01 · 2026-07-28 04:55
1 20%
Loading events...
Opportunistic Bruter 548b29b8a2e1 newark_01 · 2026-07-28 04:55
1 50%
Loading events...
Opportunistic Bruter 86a1cd7c3364 newark_01 · 2026-07-28 04:55
1 50%
Loading events...
FTP Probe d0f85ec8e8ddeede newark_01 · 2026-07-28 04:55
1 20%
Loading events...
FTP Probe 0635565aa594e90f newark_01 · 2026-07-28 04:55
1 20%
Loading events...
Credential Probe 53e8373dc8bd newark_01 · 2026-07-28 04:55
1 20%
Loading events...
FTP Probe c778c3fbcaabe523 newark_01 · 2026-07-28 04:55
1 20%
Loading events...
FTP Probe 00e91453071314ec newark_01 · 2026-07-28 04:55
1 20%
Loading events...
Non-Session Events
Timestamp Port Proto Event Source Location
2026-07-28 04:55:42 :21 ftp FTP connection opencanary ewr
2026-07-28 04:55:41 :21 ftp FTP connection opencanary ewr
2026-07-28 04:55:40 :21 ftp FTP connection opencanary ewr
2026-07-28 04:55:38 :21 ftp FTP connection opencanary ewr
{# Cloudflare Web Analytics — cookieless, public pages only. The context processor withholds the token from authenticated requests. #}