Forensia CTI Core

Verdict

MENTIONED — 2 reports, unverified

What is this: IP observed in Alienvault Otx. Hosted on AS6698 Virtual Systems LLC.
Should you care: Weak signal — mentioned in 2 reports, not corroborated across feeds.
What to do: No action — weak signal.

What this is

IP indicator: 213.111.148.90

Mentioned in Microsoft Security Blog research ingest

Exposure

Open ports, software & known CVEs · via Shodan InternetDB

Open ports (4)

22 SSH80 HTTP443 HTTPS8080 HTTP-alt

Software

openssh 10.2p1linux kernelnginx 1.28.3ubuntu linux

simonis.resagning.com

Threat detail

Exploitation status and malware-family attribution from stored fields.

exploitation: unknown

Graph preview

Neighborhood topology — open the graph for interactive pivots.

Loading graph…

CONTINUE INVESTIGATION

High-signal pivots without leaving the thread you started in search.

Related alerts, reports, and entities
Structured pivots from local graph context.
Open intel graph (neighborhood)
See edges, pivots, and corroboration at a glance.
Investigation canvas
Full inspector with neighbor expansion.