IntrusionLabs IntrusionLabs
← Back to feed

58.48.53.254

TAGGED SUSPICIOUS how we decide →
Threat Confidence
32%
Location
🇨🇳 CN / Wuhan
ASN
AS4134 · Chinanet
Cloud Provider
—
Total Events
6
Below average by volume
Agent Count
1
First / Last Seen
2026-06-04 13:23 — 2026-06-04 13:26
Attack Types
ssh:bruteforce
MITRE ATT&CK Techniques
Initial Access
T1078
Credential Access
T1110 T1110.001
Exfiltration
T1048
External Corroboration
Not flagged by any external feeds
Campaigns
HASSH 98ddc5604ef6… — SSH-2.0-Go (64 IPs, 20 countries) HASSH Active high 🇺🇸 US
64 IPs 3132 events
ssh:bruteforce
2026-03-14 — ongoing · 64 IPs are running an identical SSH client (HASSH fingerprint 98ddc5604ef6…). Top network: DigitalOcean, LLC (AS14061). Geographic and …
Session Forensics
data_exfiltrator ×1 opportunistic_bruter ×1
Sessions
2 (2 with login)
Avg Depth Score
0.7
Commands Executed
0
Files Downloaded
0
Fingerprints
HASSH
98ddc5604ef6a1006a2b49a58759fbe6
SSH Client
SSH-2.0-Go
Evidence Timeline
Opportunistic Bruter d4f6cce2793d w4m_seattle_01 · 2026-07-17 22:59
1 50%
Loading events...
Data Exfiltrator 991d972b3304 w4m_seattle_01 · 2026-06-04 13:23
1 90%
Loading events...