IntrusionLabs IntrusionLabs
← Back to feed

183.160.124.157

Threat Confidence
20%
Assessment
Port and service scanner
  • Part of a 111-IP campaign from the same network, active in the same window.
Generated from the counts on this page by fixed rules; each line cites the number it rests on.
Location
🇨🇳 CN / Hefei
ASN
AS4134 · Chinanet
Cloud Provider
—
Total Events
18
Average by volume
Agent Count
1
First / Last Seen
2026-10-14 11:37 — 2026-10-14 11:58
Attack Types
ssh:bruteforce ssh:connection
MITRE ATT&CK Techniques
Reconnaissance
T1595 T1595.001 T1595.002
Credential Access
T1110 T1110.001
Discovery
T1046
External Corroboration
Not flagged by any external feeds
Campaigns
AS4134 Chinanet ASN Active medium 🇨🇳 CN
111 IPs 12291 events
ftp:bruteforcehttp:scanmysql:bruteforcessh:bruteforcessh:connectionssh:intrusionssh:malwaretelnet:bruteforcetelnet:connection
2026-02-18 — ongoing · 111 IPs from the same network (Chinanet, AS4134) were active during overlapping time periods. Temporal correlation across a …
Session Forensics
scanner ×5 credential_probe ×1
Sessions
6
Avg Depth Score
0.16
Commands Executed
0
Files Downloaded
0
Fingerprints
1 SSH client banner · 1 HASSH fingerprint
HASSH
03a80b21afa810682a776a7d42e5e6fb
SSH Client
SSH-2.0-libssh_0.11.1
Evidence Timeline
Scanner 0f486f03972f w4m_singapore_01 · 2026-10-14 11:56
15%
Loading events...
Scanner 359ca7d132e2 w4m_singapore_01 · 2026-10-14 11:55
15%
Loading events...
Scanner eb23043e80c5 w4m_singapore_01 · 2026-10-14 11:52
15%
Loading events...
Scanner 1e421d289f8d w4m_singapore_01 · 2026-10-14 11:53
15%
Loading events...
Scanner 4bd57ff92b03 w4m_singapore_01 · 2026-10-14 11:51
15%
Loading events...
Credential Probe c8d3f8db75e3 w4m_singapore_01 · 2026-10-14 11:37
1 20%
Loading events...