IntrusionLabs IntrusionLabs
← Back to feed

14.103.120.152

Threat Confidence
15%
Location
🇨🇳 CN
ASN
AS4811 · China Telecom Group
Cloud Provider
—
Total Events
17
Average by volume
Agent Count
1
First / Last Seen
2026-03-09 21:30 — 2026-08-18 10:43
Attack Types
ssh:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
T1595
Credential Access
T1110 T1110.001
Discovery
T1046
External Corroboration
Not flagged by any external feeds
Campaigns
Subnet 14.103.120.0/24 SUBNET Ended high 🇨🇳 CN
3 IPs 247 events
ssh:bruteforce
2026-02-19 — ongoing · 3 IPs from the same /24 subnet (14.103.120.0/24) were observed attacking our sensors within the same time window. …
Session Forensics
scanner ×6
Sessions
6
Avg Depth Score
0.15
Commands Executed
0
Files Downloaded
0
Fingerprints
SSH Client
SSH-2.0-libssh_0.9.6
Evidence Timeline
Scanner 30e1ea33cc45 w4m_singapore_01 · 2026-08-18 10:41
15%
Loading events...
Scanner b9a3a4bd17d0 w4m_singapore_01 · 2026-07-16 14:16
15%
Loading events...
Scanner eaa1459ff5c9 w4m_singapore_01 · 2026-07-11 06:40
15%
Loading events...
Scanner 13849d5ff1c6 w4m_singapore_01 · 2026-06-25 17:10
15%
Loading events...
Scanner 69efaf917f8d w4m_singapore_01 · 2026-06-03 09:11
15%
Loading events...
Scanner d2e9fe701ebb w4m_singapore_01 · 2026-03-09 21:30
15%
Loading events...
{# Cloudflare Web Analytics — cookieless, public pages only. The context processor withholds the token from authenticated requests. #}