IntrusionLabs IntrusionLabs
← Back to feed

101.99.14.52

Threat Confidence
35%
Location
🇻🇳 VN / Hanoi
ASN
AS45903 · CMC Telecom Infrastructure Company
Cloud Provider
—
Total Events
29
Average by volume
Agent Count
1
First / Last Seen
2026-08-27 13:51 — 2026-08-29 22:20
Attack Types
ssh:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
T1595 T1595.002
Initial Access
T1078
Credential Access
T1110 T1110.001
Discovery
T1016 T1046 T1082 T1083
External Corroboration
Not flagged by any external feeds
Campaigns
Not associated with any campaigns
Session Forensics
scanner ×3 reconnaissance ×2 credential_probe ×1
Sessions
6 (2 with login)
Avg Depth Score
0.31
Commands Executed
2
Files Downloaded
0
Notable Commands
  • cat /etc/issue
Fingerprints
HASSH
748f8c627d3f8ff9921d02f86f55ba2c
SSH Client
SSH-2.0-Renci.SshNet.SshClient.0.0.1
Evidence Timeline
Reconnaissance afd8b936aacb newark_01 · 2026-08-29 22:20
1 1 60%
Loading events...
Scanner f384b661a932 newark_01 · 2026-08-29 22:20
15%
Loading events...
Reconnaissance 1084d304c1ba newark_01 · 2026-08-29 10:45
1 1 60%
Loading events...
Scanner 1cfbb2880e5f newark_01 · 2026-08-29 10:45
15%
Loading events...
Credential Probe fbf1e037a132 newark_01 · 2026-08-27 13:51
1 20%
Loading events...
Scanner d2d418c06a7a newark_01 · 2026-08-27 13:51
15%
Loading events...
{# Cloudflare Web Analytics — cookieless, public pages only. The context processor withholds the token from authenticated requests. #}