IntrusionLabs IntrusionLabs
← Back to feed

207.244.224.200

Threat Confidence
28%
Location
🇺🇸 US / St Louis
ASN
AS40021 · Contabo Inc.
Cloud Provider
—
Total Events
63
Above average by volume
Agent Count
1
First / Last Seen
2026-08-23 18:38 — 2026-08-24 17:54
Attack Types
ssh:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
T1595.002
Initial Access
T1078
Credential Access
T1110 T1110.001
Discovery
T1016 T1082
External Corroboration
Not flagged by any external feeds
Campaigns
HASSH 594c57870d0e… — SSH-2.0-Go (50 IPs, 15 countries) HASSH Ended high 🇺🇸 US
50 IPs 2275 events
ssh:bruteforce
2026-05-25 — ongoing · 50 IPs are running an identical SSH client (HASSH fingerprint 594c57870d0e…). Top network: OVH SAS (AS16276). Geographic and …
Session Forensics
reconnaissance ×1 credential_probe ×8 opportunistic_bruter ×3
Sessions
12 (4 with login)
Avg Depth Score
0.31
Commands Executed
1
Files Downloaded
0
Notable Commands
  • uname -a 2>/dev/null || echo 'Unknown'
Fingerprints
HASSH
573bb97fc7efb4683c0c5cdca848ea3e594c57870d0ec290ad3f328d5116eb185ffe0ca58a0f0ddea94b2e7fe0bbc9f1636e28d4a161801d4667cf39e262e68b876a5b564d21e3f5de0c51269c4fc8f991ff3a2fc82d433b0be90592ebcd13ecbb57e7b4fa9747bbe6ef7767c55fcacbd21d699a3fea40a29e5b4b07a440dcb6e07b411ce8152604c2179aaa5cda7d56e8f4e1a8ca978dd1afc67098059a7b18eac68bdd6e8245aa51b8d700ce5ea875
SSH Client
SSH-2.0-Go
Evidence Timeline
Credential Probe 24b82330c1bb newark_01 · 2026-08-24 17:54
1 20%
Loading events...
Credential Probe d799ddf532af newark_01 · 2026-08-24 13:21
1 20%
Loading events...
Opportunistic Bruter bf41fd38228d newark_01 · 2026-08-24 05:33
1 50%
Loading events...
Credential Probe 700fc7ddebd7 newark_01 · 2026-08-24 03:26
1 20%
Loading events...
Credential Probe 49941b755d88 newark_01 · 2026-08-24 02:43
1 20%
Loading events...
Opportunistic Bruter 2a9d3fd5a21a newark_01 · 2026-08-24 00:37
1 50%
Loading events...
Opportunistic Bruter b043aeff6201 newark_01 · 2026-08-23 23:55
1 50%
Loading events...
Credential Probe 86b3df92b6ad newark_01 · 2026-08-23 21:51
1 20%
Loading events...
Credential Probe 9102945b269d newark_01 · 2026-08-23 21:10
1 20%
Loading events...
Credential Probe a2b8e2a826b3 newark_01 · 2026-08-23 19:44
1 20%
Loading events...
Credential Probe c5e3d6f92629 newark_01 · 2026-08-23 19:12
1 20%
Loading events...
Reconnaissance 163a7deeb9ca newark_01 · 2026-08-23 18:38
1 1 60%
Loading events...
{# Cloudflare Web Analytics — cookieless, public pages only. The context processor withholds the token from authenticated requests. #}