IntrusionLabs IntrusionLabs
← Back to feed

61.169.143.228

Threat Confidence
14%
Location
🇨🇳 CN / Shanghai
ASN
AS4812 · China Telecom (Group)
Cloud Provider
—
Total Events
8
Below average by volume
Agent Count
1
First / Last Seen
2026-07-25 00:12 — 2026-07-29 15:37
Attack Types
ssh:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
T1595
Credential Access
T1110 T1110.001
Discovery
T1046
External Corroboration
Not flagged by any external feeds
Campaigns
AS4812 China Telecom Group ASN Active medium 🇨🇳 CN
5 IPs 1086 events
ssh:bruteforce
2026-02-19 — ongoing · 5 IPs from the same network (China Telecom Group, AS4812) were active during overlapping time periods. Temporal correlation …
Session Forensics
scanner ×3
Sessions
3
Avg Depth Score
0.15
Commands Executed
0
Files Downloaded
0
Fingerprints
SSH Client
SSH-2.0-libssh_0.9.6
Evidence Timeline
Scanner 89879bc0ea4f w4m_singapore_01 · 2026-07-29 15:35
15%
Loading events...
Scanner 7d62dd7f2fc5 w4m_singapore_01 · 2026-07-27 13:33
15%
Loading events...
Scanner 282ba81a5a64 w4m_singapore_01 · 2026-07-25 00:12
15%
Loading events...
{# Cloudflare Web Analytics — cookieless, public pages only. The context processor withholds the token from authenticated requests. #}