← Back to feed

114.70.63.104

Threat Confidence

31%

Location

🇰🇷 KR

ASN

AS10088 · KWANGWOON UNIVERSITY

Cloud Provider

—

Total Events

Average by volume

Agent Count

First / Last Seen

2026-08-04 04:52 — 2026-08-08 07:37

Attack Types

ssh:bruteforce

MITRE ATT&CK Techniques

Reconnaissance

T1595 T1595.002

Initial Access

T1078

Credential Access

T1110 T1110.001

Discovery

T1016 T1046 T1082

External Corroboration

Blocklist.de

Reported 2026-09-01 10:01

blocklist_de:reported

Campaigns

HASSH 80d9e1d7a4fa… — SSH-2.0-Go (54 IPs, 18 countries) HASSH Ended high 🇩🇪 DE

54 IPs 1968 events

ssh:bruteforce

2026-05-23 — ongoing · 54 IPs are running an identical SSH client (HASSH fingerprint 80d9e1d7a4fa…). Top network: netcup GmbH (AS197540). Geographic and …

Session Forensics

scanner ×2 reconnaissance ×1 credential_probe ×1

Sessions

4 (1 with login)

Avg Depth Score

0.27

Commands Executed

Files Downloaded

Notable Commands

uname -a

Fingerprints

HASSH

80d9e1d7a4faebe9cda3e69e3a839c6c

SSH Client

SSH-2.0-Go

Evidence Timeline

Reconnaissance 60a7fc9bc7cc newark_01 · 2026-08-08 07:37

1 1 60%

Loading events...

Scanner 6337e30a8a45 newark_01 · 2026-08-08 07:37

15%

Loading events...

Credential Probe 89ac936b3c67 newark_01 · 2026-08-04 04:52

1 20%

Loading events...

Scanner ac6c12d220a1 newark_01 · 2026-08-04 04:52

15%

Loading events...