IntrusionLabs IntrusionLabs
← Back to feed

92.205.229.83

83.229.205.92.host.secureserver.net (secureserver.net) ✓ FCrDNS
Threat Confidence
37%
Assessment
Post-login reconnaissance: logs in and surveys the host
  • Logged in with 2 different credentials across 4 logins.
  • Ran 4 commands on the host.
  • Active for 29 days, 2026-09-15 to 2026-10-15.
  • Runs the same SSH client fingerprint (HASSH) as 120 other IPs.
Generated from the counts on this page by fixed rules; each line cites the number it rests on.
Location
🇩🇪 DE
ASN
AS21499 · Host Europe GmbH
Cloud Provider
—
Total Events
30
Average by volume
Agent Count
1
First / Last Seen
2026-09-15 22:41 — 2026-10-15 00:17
Attack Types
ssh:bruteforce ssh:connection ssh:intrusion
MITRE ATT&CK Techniques
Reconnaissance
T1595 T1595.001
Initial Access
T1078
Execution
T1059.004
Credential Access
T1110 T1110.001
Discovery
T1016 T1046 T1082
External Corroboration
Blocklist.de
Reported 2026-10-19 05:01
blocklist_de:reported
Campaigns
HASSH 0a07365cc01f… — SSH-2.0-Go (121 IPs, 16 countries) HASSH Active high 🇧🇬 BG
121 IPs 1921527 events
ftp:bruteforcessh:bruteforcessh:connectionssh:intrusiontelnet:bruteforcetelnet:connection
2026-02-22 — ongoing · 121 IPs are running an identical SSH client (HASSH fingerprint 0a07365cc01f…). Top network: TechTies Inc. (AS197170). Geographic and …
Session Forensics
scanner ×1 reconnaissance ×2 opportunistic_bruter ×2
Sessions
5 (4 with login)
Avg Depth Score
0.47
Commands Executed
4
Files Downloaded
0
Notable Commands
  • echo "TEST"; echo -n "System :"; lsb_release -d | awk -F':' '{print " "$2}'; echo -n "Apt : "; which apt; echo -n "Cpu speed :"; cat /proc/cpuinfo | grep 'cpu MHz' | uniq | awk -F: '{printf " %.3f\n", $2}'; echo -n "Cpu count : "; nproc; echo -n "Memory : "; free -h | awk '/Mem:/ {print $2}'
  • lsb_release -d
Fingerprints
1 SSH client banner · 1 HASSH fingerprint
HASSH
0a07365cc01fa9fc82608ba4019af499
SSH Client
SSH-2.0-Go
Evidence Timeline
Reconnaissance 972ec8280863 w4m_singapore_01 · 2026-10-15 00:17
2 1 60%
Loading events...
Opportunistic Bruter ab249ad40cfd w4m_singapore_01 · 2026-10-15 00:17
1 50%
Loading events...
Scanner 64f13da91425 w4m_singapore_01 · 2026-10-14 21:49
15%
Loading events...
Reconnaissance cbd2d4d1e01c w4m_singapore_01 · 2026-09-15 22:41
2 1 60%
Loading events...
Opportunistic Bruter 42418f28fcd8 w4m_singapore_01 · 2026-09-15 22:41
1 50%
Loading events...