IntrusionLabs IntrusionLabs
← Back to feed

156.59.50.231

Threat Confidence
24%
Assessment
Port and service scanner
  • Runs the same SSH client fingerprint (HASSH) as 120 other IPs.
Generated from the counts on this page by fixed rules; each line cites the number it rests on.
Location
🇹🇭 TH / Bangkok
ASN
AS21859 · Zenlayer Inc
Cloud Provider
—
Total Events
18
Average by volume
Agent Count
1
First / Last Seen
2026-10-17 05:56 — 2026-10-17 05:56
Attack Types
ssh:connection
MITRE ATT&CK Techniques
Reconnaissance
T1595 T1595.001
Discovery
T1046
External Corroboration
Not flagged by any external feeds
Campaigns
HASSH 0a07365cc01f… — SSH-2.0-Go (121 IPs, 16 countries) HASSH Active high 🇧🇬 BG
121 IPs 1921527 events
ftp:bruteforcessh:bruteforcessh:connectionssh:intrusiontelnet:bruteforcetelnet:connection
2026-02-22 — ongoing · 121 IPs are running an identical SSH client (HASSH fingerprint 0a07365cc01f…). Top network: TechTies Inc. (AS197170). Geographic and …
Session Forensics
scanner ×5
Sessions
5
Avg Depth Score
0.15
Commands Executed
0
Files Downloaded
0
Fingerprints
1 SSH client banner · 1 HASSH fingerprint
HASSH
0a07365cc01fa9fc82608ba4019af499
SSH Client
SSH-2.0-Go
Evidence Timeline
Scanner bd580fa6a5cb greencloud_phx_01 · 2026-10-17 05:56
15%
Loading events...
Scanner 33566f1f4770 greencloud_phx_01 · 2026-10-17 05:56
15%
Loading events...
Scanner 8a939d2b0309 greencloud_phx_01 · 2026-10-17 05:56
15%
Loading events...
Scanner d6ba3aab5fcf greencloud_phx_01 · 2026-10-17 05:56
15%
Loading events...
Scanner ad2f3084f08c greencloud_phx_01 · 2026-10-17 05:56
15%
Loading events...