IntrusionLabs IntrusionLabs
← Back to feed

180.106.80.16

TAGGED SUSPICIOUS how we decide →
Threat Confidence
35%
Location
🇨🇳 CN
ASN
AS4134 · Chinanet
Cloud Provider
—
Total Events
29
Average by volume
Agent Count
1
First / Last Seen
2026-03-16 12:48 — 2026-06-07 15:40
Attack Types
ssh:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
T1595 T1595.002
Credential Access
T1110 T1110.001
Discovery
T1046
External Corroboration
Blocklist.de
Reported 2026-06-07 18:02
blocklist_de:reported
Campaigns
Multi-Agent Scan SCAN Active medium
10 IPs 1524 events
2026-05-08 — ongoing · 10 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
20 IPs 6907 events
2026-04-16 — ongoing · 20 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
182 IPs 245095 events
2026-03-31 — ongoing · 182 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
185 IPs 246786 events
2026-03-16 — ongoing · 185 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
164 IPs 82171 events
2026-03-16 — ongoing · 164 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
182 IPs 244943 events
2026-03-04 — ongoing · 182 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan SCAN Active medium
90 IPs 170802 events
2026-02-27 — ongoing · 90 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
AS4134 Chinanet ASN Active medium 🇨🇳 CN
43 IPs 7956 events
ftp:bruteforcehttp:scanmysql:bruteforcessh:bruteforce
2026-02-18 — ongoing · 43 IPs from the same network (Chinanet, AS4134) were active during overlapping time periods. Temporal correlation across a …
Session Forensics
scanner ×9 credential_probe ×1
Sessions
10
Avg Depth Score
0.15
Commands Executed
0
Files Downloaded
0
Fingerprints
HASSH
03a80b21afa810682a776a7d42e5e6fb
SSH Client
SSH-2.0-libssh_0.11.1
Evidence Timeline
Scanner 37c8a688b0e8 w4m_singapore_01 · 2026-05-18 03:32
15%
Loading events...
Scanner 4dbec688c15b w4m_singapore_01 · 2026-05-15 22:16
15%
Loading events...
Scanner cf0248bedc8d w4m_singapore_01 · 2026-04-16 22:40
15%
Loading events...
Scanner daad64c5e7f7 w4m_singapore_01 · 2026-04-11 12:51
15%
Loading events...
Scanner dfab22602562 w4m_singapore_01 · 2026-03-18 21:56
15%
Loading events...
Scanner aa5be8b2861b w4m_singapore_01 · 2026-03-18 21:55
15%
Loading events...
Scanner dcc2f65e4d75 w4m_singapore_01 · 2026-03-18 21:49
15%
Loading events...
Scanner 68f7d4cd4861 w4m_singapore_01 · 2026-03-18 21:46
15%
Loading events...
Credential Probe f2ffbd86f2db w4m_singapore_01 · 2026-03-18 21:43
1 20%
Loading events...
Scanner 5b025bc88e7d w4m_singapore_01 · 2026-03-16 12:48
15%
Loading events...