IntrusionLabs IntrusionLabs
← Back to feed

14.103.123.232

TAGGED SUSPICIOUS how we decide →
Threat Confidence
31%
Location
🇨🇳 CN
ASN
AS4811 · China Telecom Group
Cloud Provider
—
Total Events
60
Average by volume
Agent Count
1
First / Last Seen
2026-02-28 01:29 — 2026-05-04 18:26
Attack Types
ssh:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
T1595 T1595.002
Credential Access
T1110 T1110.001
Discovery
T1046
External Corroboration
Not flagged by any external feeds
Campaigns
HASSH af8223ac9914… — SSH-2.0-libssh_0.12.0 (567 IPs, 76 countries) HASSH Active high 🇭🇰 HK
567 IPs 246942 events
ssh:bruteforce
2026-02-28 — ongoing · 567 IPs are running an identical SSH client (HASSH fingerprint af8223ac9914…). Top network: UCLOUD INFORMATION TECHNOLOGY HK LIMITED …
Subnet 14.103.123.0/24 SUBNET Active high 🇨🇳 CN
3 IPs 130 events
ssh:bruteforce
2026-02-20 — ongoing · 3 IPs from the same /24 subnet (14.103.123.0/24) were observed attacking our sensors within the same time window. …
Session Forensics
scanner ×20 credential_probe ×1
Sessions
21
Avg Depth Score
0.15
Commands Executed
0
Files Downloaded
0
Fingerprints
HASSH
03a80b21afa810682a776a7d42e5e6fbaf8223ac9914f509afdadfaf5f7ee94e
SSH Client
SSH-2.0-libssh_0.11.1SSH-2.0-libssh_0.12.0
Evidence Timeline
Scanner e9eea1846cfc w4m_singapore_01 · 2026-05-04 18:25
15%
Loading events...
Scanner 1658e8e4c822 w4m_singapore_01 · 2026-05-04 18:24
15%
Loading events...
Scanner c6c0a4dace27 w4m_singapore_01 · 2026-05-04 18:24
15%
Loading events...
Scanner ae8a4acb829e w4m_singapore_01 · 2026-05-04 18:21
15%
Loading events...
Scanner 58297bd9b7fb w4m_singapore_01 · 2026-05-04 18:23
15%
Loading events...
Scanner 932c5d2f2931 w4m_singapore_01 · 2026-05-04 18:17
15%
Loading events...
Scanner d7b7a0142f94 w4m_singapore_01 · 2026-05-04 18:16
15%
Loading events...
Scanner b4ea365c57d0 w4m_singapore_01 · 2026-05-04 18:18
15%
Loading events...
Scanner 81327be1a7bd w4m_singapore_01 · 2026-05-04 18:10
15%
Loading events...
Scanner 4be24f6c9db2 w4m_singapore_01 · 2026-05-04 18:09
15%
Loading events...
Credential Probe 5546a376f884 w4m_singapore_01 · 2026-05-04 17:57
1 20%
Loading events...
Scanner 5ece3c5f7233 w4m_singapore_01 · 2026-05-02 03:00
15%
Loading events...
Scanner f440df2f484c w4m_singapore_01 · 2026-04-10 11:04
15%
Loading events...
Scanner 4a0716cd6685 w4m_singapore_01 · 2026-04-10 11:04
15%
Loading events...
Scanner 2be5a2fe072b w4m_singapore_01 · 2026-04-09 04:29
15%
Loading events...
Scanner fecadeb5d7b5 w4m_singapore_01 · 2026-04-08 19:33
15%
Loading events...
Scanner 696c98ffaeef w4m_singapore_01 · 2026-03-19 09:03
15%
Loading events...
Scanner 49e5b4d4ee4c w4m_singapore_01 · 2026-03-11 02:35
15%
Loading events...
Scanner 88e6d5558c6f w4m_singapore_01 · 2026-03-07 01:16
15%
Loading events...
Scanner 9dda0476c796 w4m_singapore_01 · 2026-03-01 07:24
15%
Loading events...
Scanner 16d4c9db2c69 w4m_singapore_01 · 2026-02-28 01:29
15%
Loading events...