IntrusionLabs / threat intelligence

Sign in

← Back to feed

115.46.144.221

Threat Confidence

13%

Assessment

Port and service scanner

Part of a 69-IP campaign from the same network, active in the same window.

Generated from the counts on this page by fixed rules; each line cites the number it rests on.

Location

🇨🇳 CN

ASN

AS4837 · CHINA UNICOM China169 Backbone

Cloud Provider

—

Total Events

2

Below average by volume

Agent Count

1

First / Last Seen

2026-10-13 06:22 — 2026-10-13 06:22

Attack Types

telnet:connection

MITRE ATT&CK Techniques

Reconnaissance

T1595 T1595.001

Discovery

T1046

External Corroboration

Not flagged by any external feeds

Campaigns

AS4837 CHINA UNICOM China169 Backbone ASN Active medium 🇨🇳 CN

69 IPs 2508 events

ssh:bruteforcessh:connectionssh:intrusionssh:malwaretelnet:connection

2026-02-16 — ongoing · 69 IPs from the same network (CHINA UNICOM China169 Backbone, AS4837) were active during overlapping time periods. Temporal …

Session Forensics

scanner ×1

Sessions

1

Avg Depth Score

0.15

Commands Executed

0

Files Downloaded

0

Evidence Timeline

Scanner 6d1dfabcea8f w4m_seattle_01 · 2026-10-13 06:22

15%

Loading events...