IntrusionLabs IntrusionLabs
← Back to feed

116.114.94.242

Threat Confidence
19%
Location
🇨🇳 CN
ASN
AS4837 · CHINA UNICOM China169 Backbone
Cloud Provider
—
Total Events
27
Average by volume
Agent Count
1
First / Last Seen
2026-02-23 01:23 — 2026-08-14 10:46
Attack Types
ssh:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
T1595.002
Credential Access
T1110 T1110.001
Command and Control
T1090 T1572
External Corroboration
Blocklist.de
Reported 2026-09-01 16:01
blocklist_de:reported
Campaigns
Not associated with any campaigns
Session Forensics
proxy_abuser ×2 credential_probe ×3
Sessions
5 (2 with login)
Avg Depth Score
0.46
Commands Executed
0
Files Downloaded
0
Fingerprints
HASSH
acaa53e0a7d7ac7d1255103f37901306
SSH Client
SSH-2.0-OpenSSH_7.4
Evidence Timeline
Proxy Abuser 29fa9b3f0a7f w4m_singapore_01 · 2026-08-14 10:46
1 85%
Loading events...
Credential Probe f25ffd087d03 w4m_singapore_01 · 2026-03-07 19:28
1 20%
Loading events...
Credential Probe 7bfc39a352c8 w4m_singapore_01 · 2026-03-07 13:16
1 20%
Loading events...
Credential Probe b647f143c197 w4m_singapore_01 · 2026-03-02 07:40
1 20%
Loading events...
Proxy Abuser 5222564691e1 w4m_singapore_01 · 2026-02-23 01:23
1 85%
Loading events...
{# Cloudflare Web Analytics — cookieless, public pages only. The context processor withholds the token from authenticated requests. #}