IntrusionLabs IntrusionLabs
← Back to feed

185.74.4.143

mail.tshtt.uz (tshtt.uz) ✗ FCrDNS
Threat Confidence
41%
Assessment
Port and service scanner
  • Logged in with 10 different credentials across 10 logins.
  • Ran 7 commands on the host.
  • Active for 21 days, 2026-09-16 to 2026-10-07.
  • Part of a 5-IP campaign from the same network, active in the same window.
Generated from the counts on this page by fixed rules; each line cites the number it rests on.
Location
🇺🇿 UZ
ASN
AS202660 · Uzbektelekom Joint Stock Company
Cloud Provider
—
Total Events
573
Top 10% by volume
Agent Count
1
First / Last Seen
2026-09-16 09:32 — 2026-10-07 11:26
Attack Types
ssh:bruteforce ssh:connection ssh:intrusion
MITRE ATT&CK Techniques
Reconnaissance
T1595 T1595.001 T1595.002
Initial Access
T1078
Execution
T1059.004
Credential Access
T1110 T1110.001
Discovery
T1016 T1046 T1082
External Corroboration
Not flagged by any external feeds
Campaigns
AS202660 Uzbektelekom Joint Stock Company ASN Ended medium 🇺🇿 UZ
5 IPs 2749 events
ssh:bruteforcessh:connectionssh:intrusionssh:malware
2026-08-23 — ongoing · 5 IPs from the same network (Uzbektelekom Joint Stock Company, AS202660) were active during overlapping time periods. Temporal …
Session Forensics
scanner ×89 reconnaissance ×7 credential_probe ×32 opportunistic_bruter ×3
Sessions
131 (10 with login)
Avg Depth Score
0.19
Commands Executed
7
Files Downloaded
0
Notable Commands
  • uname -a 2>/dev/null
Fingerprints
1 SSH client banner · 1 HASSH fingerprint
HASSH
06ff3615a51b2af343ec22abc8e30bbc
SSH Client
SSH-2.0-Go
Evidence Timeline
Reconnaissance aacc4b5866d3 newark_01 · 2026-10-07 11:26
1 1 60%
Loading events...
Credential Probe 8a6805883335 newark_01 · 2026-10-07 11:04
1 20%
Loading events...
Scanner 6fe4a86f6e32 newark_01 · 2026-10-07 06:54
15%
Loading events...
Opportunistic Bruter 8da15fb449c3 newark_01 · 2026-10-07 06:22
1 50%
Loading events...
Scanner 408be8757628 newark_01 · 2026-10-07 05:49
15%
Loading events...
Scanner 252e2ee6d05d newark_01 · 2026-10-07 05:16
15%
Loading events...
Scanner 8fd84f84cef6 newark_01 · 2026-10-07 04:43
15%
Loading events...
Scanner 7fad175412ca newark_01 · 2026-10-07 03:38
15%
Loading events...
Scanner b64b8ed2de88 newark_01 · 2026-10-07 03:05
15%
Loading events...
Scanner 1aefb5006253 newark_01 · 2026-10-07 02:32
15%
Loading events...
Scanner 3ddabcbed1f4 newark_01 · 2026-10-07 01:28
15%
Loading events...
Scanner e0e68ea2981b newark_01 · 2026-10-07 00:55
15%
Loading events...
Scanner c311be3f62ae newark_01 · 2026-10-06 23:50
15%
Loading events...
Scanner d6403960f83c newark_01 · 2026-10-06 23:17
15%
Loading events...
Scanner 0d81571ce3a1 newark_01 · 2026-10-06 22:12
15%
Loading events...
Scanner d00a46489373 newark_01 · 2026-10-06 20:35
15%
Loading events...
Scanner 7e5c9098012d newark_01 · 2026-10-06 20:02
15%
Loading events...
Scanner 683e4659f79e newark_01 · 2026-10-06 18:25
15%
Loading events...
Scanner 91e65c1e6361 newark_01 · 2026-10-06 17:52
15%
Loading events...
Scanner b1e13808962b newark_01 · 2026-10-06 16:46
15%
Loading events...
Scanner f6cb574bac58 newark_01 · 2026-10-06 16:14
15%
Loading events...
Scanner de0ab1d0878b newark_01 · 2026-10-06 15:41
15%
Loading events...
Scanner fbac9feffbda newark_01 · 2026-10-06 15:10
15%
Loading events...
Credential Probe 3c3059c218e6 newark_01 · 2026-10-06 14:38
1 20%
Loading events...
Scanner 7472795f4394 newark_01 · 2026-10-06 14:06
15%
Loading events...
Scanner b0a67b5532ee newark_01 · 2026-10-06 13:03
15%
Loading events...
Scanner 01058494d3b2 newark_01 · 2026-10-06 07:28
15%
Loading events...
Scanner d5d8620c01f2 newark_01 · 2026-10-06 06:43
15%
Loading events...
Scanner 06e76908f4eb newark_01 · 2026-10-06 05:09
15%
Loading events...
Scanner 31de48b4d26a newark_01 · 2026-10-06 04:22
15%
Loading events...
Scanner 1711d6aaf0de newark_01 · 2026-10-06 03:36
15%
Loading events...
Scanner 27a1b8bf92a2 newark_01 · 2026-10-06 02:49
15%
Loading events...
Scanner db4a2d5e54b7 newark_01 · 2026-10-06 00:30
15%
Loading events...
Scanner 70ab8f4fe1f9 newark_01 · 2026-10-05 22:56
15%
Loading events...
Scanner 798138251561 newark_01 · 2026-10-05 20:37
15%
Loading events...
Scanner 4808f1ea1fd3 newark_01 · 2026-10-05 19:51
15%
Loading events...
Scanner a5c0c0de3501 newark_01 · 2026-10-05 19:04
15%
Loading events...
Credential Probe dfe24daf051b newark_01 · 2026-10-05 14:25
1 20%
Loading events...
Credential Probe 09fcb309534a newark_01 · 2026-10-05 10:41
1 20%
Loading events...
Credential Probe dbbc1abed0d7 newark_01 · 2026-10-05 10:11
1 20%
Loading events...
Reconnaissance a72bbc13a8c0 newark_01 · 2026-10-05 09:41
1 1 60%
Loading events...
Credential Probe 17ca9e40b2e3 newark_01 · 2026-10-05 09:10
1 20%
Loading events...
Credential Probe 3b64ea871fca newark_01 · 2026-10-05 08:52
1 20%
Loading events...
Credential Probe f9c9baffa2f4 newark_01 · 2026-10-05 08:23
1 20%
Loading events...
Scanner 658014b64206 newark_01 · 2026-10-05 07:56
15%
Loading events...
Credential Probe f398afffc5dd newark_01 · 2026-10-05 07:36
1 20%
Loading events...
Scanner 8ef39fba6c70 newark_01 · 2026-10-05 07:21
15%
Loading events...
Scanner 4d1a286ace06 newark_01 · 2026-10-05 06:49
15%
Loading events...
Credential Probe b2695871bc45 newark_01 · 2026-10-05 06:33
1 20%
Loading events...
Credential Probe 0c9c478aa64b newark_01 · 2026-10-05 06:17
1 20%
Loading events...