IntrusionLabs IntrusionLabs
← Back to feed

14.103.230.55

Threat Confidence
16%
Location
🇨🇳 CN
ASN
AS4811 · China Telecom (Group)
Cloud Provider
—
Total Events
25
Average by volume
Agent Count
1
First / Last Seen
2026-06-03 14:38 — 2026-06-03 14:47
Attack Types
ssh:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
T1595
Credential Access
T1110 T1110.001
Discovery
T1046
External Corroboration
Not flagged by any external feeds
Campaigns
HASSH 084386fa7ae5… — SSH-2.0-Go (53 IPs, 9 countries) HASSH Active high 🇺🇸 US
53 IPs 369710 events
ssh:bruteforce
2026-02-23 — ongoing · 53 IPs are running an identical SSH client (HASSH fingerprint 084386fa7ae5…). Top network: Microsoft Corporation (AS8075). Geographic and …
HASSH 0a07365cc01f… — SSH-2.0-Go (50 IPs, 14 countries) HASSH Active high 🇳🇱 NL
50 IPs 388449 events
ssh:bruteforce
2026-02-22 — ongoing · 50 IPs are running an identical SSH client (HASSH fingerprint 0a07365cc01f…). Top network: Pfcloud UG (haftungsbeschrankt) (AS51396). Geographic …
AS4811 China Telecom Group ASN Active medium 🇨🇳 CN
29 IPs 1904 events
ssh:bruteforce
2026-02-16 — ongoing · 29 IPs from the same network (China Telecom Group, AS4811) were active during overlapping time periods. Temporal correlation …
Session Forensics
scanner ×7
Sessions
7
Avg Depth Score
0.15
Commands Executed
0
Files Downloaded
0
Fingerprints
HASSH
084386fa7ae5039bcf6f07298a05a2270a07365cc01fa9fc82608ba4019af499
SSH Client
SSH-2.0-Go
Evidence Timeline
Scanner 588412bc133c w4m_singapore_01 · 2026-06-03 14:45
15%
Loading events...
Scanner b6f6e29261d5 w4m_singapore_01 · 2026-06-03 14:45
15%
Loading events...
Scanner 36d0e81c33dc w4m_singapore_01 · 2026-06-03 14:44
15%
Loading events...
Scanner 873993464489 w4m_singapore_01 · 2026-06-03 14:46
15%
Loading events...
Scanner 5fb969851985 w4m_singapore_01 · 2026-06-03 14:45
15%
Loading events...
Scanner 6919ee83b705 w4m_singapore_01 · 2026-06-03 14:44
15%
Loading events...
Scanner 5c52f2f4e238 w4m_singapore_01 · 2026-06-03 14:38
15%
Loading events...