IntrusionLabs IntrusionLabs
← Back to feed

103.154.137.43

TAGGED SUSPICIOUS how we decide →
Why: Our sensors observed credential harvester sessions · certainty: inferred
lenrekaprima.co.id (lenrekaprima.co.id) ✗ FCrDNS
Threat Confidence
41%
Assessment
SSH password brute-forcer
  • Logged in with 48 different credentials across 48 logins.
  • Ran 48 commands on the host.
  • Active for 15 days, 2026-09-16 to 2026-10-02.
  • Part of a 5-IP campaign from the same network, active in the same window.
Generated from the counts on this page by fixed rules; each line cites the number it rests on.
Location
🇮🇩 ID / Central Jakarta
ASN
AS131111 · PT Mora Telematika Indonesia
Cloud Provider
—
Total Events
655
Top 10% by volume
Agent Count
1
First / Last Seen
2026-09-16 15:59 — 2026-10-02 09:58
Attack Types
ssh:bruteforce ssh:connection ssh:intrusion
MITRE ATT&CK Techniques
Reconnaissance
T1595 T1595.001 T1595.002
Initial Access
T1078
Execution
T1059.004
Credential Access
T1110 T1110.001
Discovery
T1016 T1046 T1082
External Corroboration
Not flagged by any external feeds
Campaigns
AS131111 PT Mora Telematika Indonesia ASN Active medium 🇮🇩 ID
5 IPs 1749 events
ssh:bruteforcessh:connectionssh:intrusionssh:malware
2026-09-16 — ongoing · 5 IPs from the same network (PT Mora Telematika Indonesia, AS131111) were active during overlapping time periods. Temporal …
Session Forensics
scanner ×3 reconnaissance ×48 credential_probe ×52
Sessions
103 (48 with login)
Avg Depth Score
0.38
Commands Executed
48
Files Downloaded
0
Notable Commands
  • uname -a 2>/dev/null
Fingerprints
1 SSH client banner · 1 HASSH fingerprint
HASSH
06ff3615a51b2af343ec22abc8e30bbc
SSH Client
SSH-2.0-Go
Evidence Timeline
Credential Probe 4ef289d446c0 newark_01 · 2026-10-02 09:58
1 20%
Loading events...
Credential Probe 782cc0ee3c5a newark_01 · 2026-10-02 09:44
1 20%
Loading events...
Credential Probe 69db717e7fed newark_01 · 2026-10-02 09:33
1 20%
Loading events...
Credential Probe 628763ff13f5 newark_01 · 2026-10-02 09:21
1 20%
Loading events...
Credential Probe e214269eabf8 newark_01 · 2026-10-02 09:05
1 20%
Loading events...
Credential Probe 14de5b3c4299 newark_01 · 2026-10-02 08:36
1 20%
Loading events...
Reconnaissance be83729fe0dd newark_01 · 2026-10-02 08:32
1 1 60%
Loading events...
Reconnaissance 4ef4d2d498ff newark_01 · 2026-10-02 08:11
1 1 60%
Loading events...
Reconnaissance 4439ecfccda2 newark_01 · 2026-10-02 07:42
1 1 60%
Loading events...
Reconnaissance d744002a989a newark_01 · 2026-10-02 07:06
1 1 60%
Loading events...
Reconnaissance 16b87dc1750a newark_01 · 2026-10-02 06:43
1 1 60%
Loading events...
Reconnaissance d6222af473bd newark_01 · 2026-10-02 06:20
1 1 60%
Loading events...
Reconnaissance 4cc6c58086ad newark_01 · 2026-10-02 05:58
1 1 60%
Loading events...
Reconnaissance f79d21f18a42 newark_01 · 2026-10-02 05:35
1 1 60%
Loading events...
Reconnaissance c1d938938858 newark_01 · 2026-10-02 05:13
1 1 60%
Loading events...
Reconnaissance 6fb4348d4f15 newark_01 · 2026-10-02 04:50
1 1 60%
Loading events...
Reconnaissance e3b8f9990c29 newark_01 · 2026-10-02 04:28
1 1 60%
Loading events...
Reconnaissance f85ee271805a newark_01 · 2026-10-02 04:05
1 1 60%
Loading events...
Reconnaissance 54a8d34b2b01 newark_01 · 2026-10-02 03:42
1 1 60%
Loading events...
Reconnaissance e1e4e8589eaa newark_01 · 2026-10-02 03:20
1 1 60%
Loading events...
Reconnaissance 70737ea6c1cd newark_01 · 2026-10-02 02:57
1 1 60%
Loading events...
Reconnaissance bd91e87870f8 newark_01 · 2026-10-02 02:35
1 1 60%
Loading events...
Reconnaissance 845d216add67 newark_01 · 2026-10-02 02:12
1 1 60%
Loading events...
Reconnaissance 1733d961c892 newark_01 · 2026-10-02 01:49
1 1 60%
Loading events...
Reconnaissance 8da89f714fe3 newark_01 · 2026-10-02 01:26
1 1 60%
Loading events...
Reconnaissance 201766bbe4b5 newark_01 · 2026-10-02 01:04
1 1 60%
Loading events...
Reconnaissance 23674d804c24 newark_01 · 2026-10-02 00:41
1 1 60%
Loading events...
Reconnaissance 910eb9b0d683 newark_01 · 2026-10-02 00:19
1 1 60%
Loading events...
Reconnaissance 13fa463f21aa newark_01 · 2026-10-01 23:57
1 1 60%
Loading events...
Reconnaissance 132b5c44c7b5 newark_01 · 2026-10-01 23:34
1 1 60%
Loading events...
Reconnaissance 08666211be29 newark_01 · 2026-10-01 23:12
1 1 60%
Loading events...
Reconnaissance 287da59265e1 newark_01 · 2026-10-01 22:49
1 1 60%
Loading events...
Reconnaissance 6881d8beca4b newark_01 · 2026-10-01 22:27
1 1 60%
Loading events...
Reconnaissance c48de3efe80d newark_01 · 2026-10-01 22:05
1 1 60%
Loading events...
Reconnaissance b0511be2c053 newark_01 · 2026-10-01 21:43
1 1 60%
Loading events...
Reconnaissance 889e15a297e1 newark_01 · 2026-10-01 21:20
1 1 60%
Loading events...
Reconnaissance 1f4ab5597e54 newark_01 · 2026-10-01 20:56
1 1 60%
Loading events...
Reconnaissance 5d928eefcd48 newark_01 · 2026-09-28 07:24
1 1 60%
Loading events...
Credential Probe 9463e359bd3f newark_01 · 2026-09-28 06:46
1 20%
Loading events...
Credential Probe 6d90aed82308 newark_01 · 2026-09-28 06:06
1 20%
Loading events...
Credential Probe ed267c74cae6 newark_01 · 2026-09-28 05:28
1 20%
Loading events...
Credential Probe 9b63c5e0ef5a newark_01 · 2026-09-28 04:49
1 20%
Loading events...
Credential Probe 9a27d5212f6c newark_01 · 2026-09-28 04:11
1 20%
Loading events...
Credential Probe 1f12713a310c newark_01 · 2026-09-28 03:33
1 20%
Loading events...
Reconnaissance 833a2eed34dc newark_01 · 2026-09-28 02:54
1 1 60%
Loading events...
Reconnaissance 16816d7449c8 newark_01 · 2026-09-28 02:16
1 1 60%
Loading events...
Credential Probe a43abeb6f3c1 newark_01 · 2026-09-28 01:37
1 20%
Loading events...
Credential Probe ccf6ccfe37e4 newark_01 · 2026-09-28 00:59
1 20%
Loading events...
Credential Probe d0fdbe8432f6 newark_01 · 2026-09-28 00:21
1 20%
Loading events...
Credential Probe fae93a483a9b newark_01 · 2026-09-27 23:44
1 20%
Loading events...