IntrusionLabs IntrusionLabs
← Back to feed

200.119.252.26

Threat Confidence
28%
Location
🇨🇱 CL / Antofagasta
ASN
AS18822 · Manquehuenet
Cloud Provider
—
Total Events
69
Above average by volume
Agent Count
1
First / Last Seen
2026-08-05 09:18 — 2026-08-11 20:22
Attack Types
ssh:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
T1595 T1595.002
Initial Access
T1078
Credential Access
T1110 T1110.001
Discovery
T1016 T1046 T1082
External Corroboration
Not flagged by any external feeds
Campaigns
HASSH 80d9e1d7a4fa… — SSH-2.0-Go (54 IPs, 18 countries) HASSH Ended high 🇩🇪 DE
54 IPs 1968 events
ssh:bruteforce
2026-05-23 — ongoing · 54 IPs are running an identical SSH client (HASSH fingerprint 80d9e1d7a4fa…). Top network: netcup GmbH (AS197540). Geographic and …
Session Forensics
scanner ×9 reconnaissance ×2 credential_probe ×7
Sessions
18 (2 with login)
Avg Depth Score
0.22
Commands Executed
2
Files Downloaded
0
Notable Commands
  • uname -a
Fingerprints
HASSH
80d9e1d7a4faebe9cda3e69e3a839c6cc37911009092bf8d11043acb83be1a6c
SSH Client
SSH-2.0-Go
Evidence Timeline
Reconnaissance 74c89a5af1ee newark_01 · 2026-08-11 20:22
1 1 60%
Loading events...
Credential Probe 96ffdc94c69c newark_01 · 2026-08-10 11:51
1 20%
Loading events...
Scanner 0822fe67adbf newark_01 · 2026-08-10 11:51
15%
Loading events...
Credential Probe fe4a8e70377d newark_01 · 2026-08-10 02:40
1 20%
Loading events...
Scanner dde5ea144947 newark_01 · 2026-08-10 02:40
15%
Loading events...
Scanner c4e5cbc537af newark_01 · 2026-08-08 15:03
15%
Loading events...
Credential Probe 33b9368b4d76 newark_01 · 2026-08-08 00:18
1 20%
Loading events...
Scanner a64a77cb84ea newark_01 · 2026-08-08 00:18
15%
Loading events...
Credential Probe cd1d1c80b5e0 newark_01 · 2026-08-07 17:32
1 20%
Loading events...
Scanner 49e74a07c96c newark_01 · 2026-08-07 17:32
15%
Loading events...
Credential Probe 2e73d8c7621b newark_01 · 2026-08-07 10:09
1 20%
Loading events...
Scanner 3c0421b4bbc4 newark_01 · 2026-08-07 10:09
15%
Loading events...
Credential Probe 6860f918c12a newark_01 · 2026-08-07 02:47
1 20%
Loading events...
Scanner d73b43d7356f newark_01 · 2026-08-07 02:47
15%
Loading events...
Credential Probe b302bad5da3d newark_01 · 2026-08-06 12:07
1 20%
Loading events...
Scanner b10366d47f4b newark_01 · 2026-08-06 12:07
15%
Loading events...
Reconnaissance e7e638466299 newark_01 · 2026-08-05 09:18
1 1 60%
Loading events...
Scanner 57e8f73cb174 newark_01 · 2026-08-05 09:18
15%
Loading events...
{# Cloudflare Web Analytics — cookieless, public pages only. The context processor withholds the token from authenticated requests. #}