IntrusionLabs / threat intelligence

Sign in

← Back to feed

103.99.214.149

TAGGED SUSPICIOUS how we decide →

Threat Confidence

42%

Location

🇮🇩 ID

ASN

AS136837 · Universitas Muhammadiyah Palembang

Cloud Provider

—

Total Events

592

Top 10% by volume

Agent Count

1

First / Last Seen

2026-07-09 05:06 — 2026-07-09 06:55

Attack Types

ssh:bruteforce

MITRE ATT&CK Techniques

Reconnaissance

T1595.002

Initial Access

T1078

Defense Evasion

T1070.004

Credential Access

T1110 T1110.001

Command and Control

T1105

External Corroboration

Not flagged by any external feeds

Campaigns

Not associated with any campaigns

Session Forensics

malware_dropper ×18 credential_probe ×50 opportunistic_bruter ×20

Sessions

88 (38 with login)

Avg Depth Score

0.43

Commands Executed

54

Files Downloaded

18

Notable Commands

cd ~; chattr -ia .ssh; lockr -ia .ssh
lockr -ia .ssh
cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Fingerprints

HASSH

f555226df1963d1d3c09daf865abdc9a

SSH Client

SSH-2.0-libssh_0.9.6

Evidence Timeline

Credential Probe ec2cb6917e9a w4m_singapore_01 · 2026-07-09 06:55

1 20%

Loading events...

Credential Probe 709e5d55bd70 w4m_singapore_01 · 2026-07-09 06:53

1 20%

Loading events...

Credential Probe a27de0180cc8 w4m_singapore_01 · 2026-07-09 06:50

1 20%

Loading events...

Opportunistic Bruter 708dfa9627bc w4m_singapore_01 · 2026-07-09 06:48

1 50%

Loading events...

Malware Dropper 13c82a4d9286 w4m_singapore_01 · 2026-07-09 06:48

3 1 1 100%

Loading events...

Credential Probe df59ff8ea0f6 w4m_singapore_01 · 2026-07-09 06:48

1 20%

Loading events...

Credential Probe 5f575506fd89 w4m_singapore_01 · 2026-07-09 06:46

1 20%

Loading events...

Opportunistic Bruter 8d302cc781fb w4m_singapore_01 · 2026-07-09 06:44

1 50%

Loading events...

Malware Dropper 1cf91be72dbe w4m_singapore_01 · 2026-07-09 06:43

3 1 1 100%

Loading events...

Credential Probe 6bac081f0098 w4m_singapore_01 · 2026-07-09 06:43

1 20%

Loading events...

Credential Probe a2dd036f5d69 w4m_singapore_01 · 2026-07-09 06:41

1 20%

Loading events...

Credential Probe 2abbf08c0cb9 w4m_singapore_01 · 2026-07-09 06:39

1 20%

Loading events...

Credential Probe 559bc1a051ae w4m_singapore_01 · 2026-07-09 06:37

1 20%

Loading events...

Credential Probe c4858327d1f0 w4m_singapore_01 · 2026-07-09 06:34

1 20%

Loading events...

Credential Probe 8c2c9aaec340 w4m_singapore_01 · 2026-07-09 06:32

1 20%

Loading events...

Opportunistic Bruter 246b8b8c864b w4m_singapore_01 · 2026-07-09 06:30

1 50%

Loading events...

Malware Dropper 1a2e2b1c14ec w4m_singapore_01 · 2026-07-09 06:30

3 1 1 100%

Loading events...

Credential Probe b2ca250ba394 w4m_singapore_01 · 2026-07-09 06:30

1 20%

Loading events...

Credential Probe d782ad983219 w4m_singapore_01 · 2026-07-09 06:28

1 20%

Loading events...

Opportunistic Bruter c7342426934d w4m_singapore_01 · 2026-07-09 06:25

1 50%

Loading events...

Malware Dropper 4853b5ad64a5 w4m_singapore_01 · 2026-07-09 06:25

3 1 1 100%

Loading events...

Credential Probe 3a15afb9d848 w4m_singapore_01 · 2026-07-09 06:25

1 20%

Loading events...

Credential Probe 68d225538881 w4m_singapore_01 · 2026-07-09 06:23

1 20%

Loading events...

Credential Probe 2c9cb707c78c w4m_singapore_01 · 2026-07-09 06:21

1 20%

Loading events...

Opportunistic Bruter 2fb776a124c2 w4m_singapore_01 · 2026-07-09 06:18

1 50%

Loading events...

Malware Dropper ba62cb068370 w4m_singapore_01 · 2026-07-09 06:18

3 1 1 100%

Loading events...

Credential Probe c5457ffd761c w4m_singapore_01 · 2026-07-09 06:18

1 20%

Loading events...

Opportunistic Bruter c1ac0641f8ff w4m_singapore_01 · 2026-07-09 06:16

1 50%

Loading events...

Malware Dropper a1d304da6e9a w4m_singapore_01 · 2026-07-09 06:16

3 1 1 100%

Loading events...

Credential Probe 1f80d9e1634e w4m_singapore_01 · 2026-07-09 06:16

1 20%

Loading events...

Credential Probe a5cb3d129916 w4m_singapore_01 · 2026-07-09 06:14

1 20%

Loading events...

Credential Probe a2a12777e775 w4m_singapore_01 · 2026-07-09 06:11

1 20%

Loading events...

Credential Probe 02538dba5a02 w4m_singapore_01 · 2026-07-09 06:09

1 20%

Loading events...

Credential Probe 90c247d96724 w4m_singapore_01 · 2026-07-09 06:07

1 20%

Loading events...

Opportunistic Bruter ee96a7478558 w4m_singapore_01 · 2026-07-09 06:06

1 50%

Loading events...

Malware Dropper db5d08400ce6 w4m_singapore_01 · 2026-07-09 06:06

3 1 1 100%

Loading events...

Credential Probe 61fd98b1a79f w4m_singapore_01 · 2026-07-09 06:06

1 20%

Loading events...

Opportunistic Bruter dc994c5a6fad w4m_singapore_01 · 2026-07-09 06:04

1 50%

Loading events...

Malware Dropper f89f0bfcdcb1 w4m_singapore_01 · 2026-07-09 06:04

3 1 1 100%

Loading events...

Credential Probe 0221b434e26c w4m_singapore_01 · 2026-07-09 06:04

1 20%

Loading events...

Credential Probe e5f132167cbc w4m_singapore_01 · 2026-07-09 06:01

1 20%

Loading events...

Opportunistic Bruter 7f8c6cd02ce3 w4m_singapore_01 · 2026-07-09 05:59

1 50%

Loading events...

Malware Dropper 094d7abba984 w4m_singapore_01 · 2026-07-09 05:59

3 1 1 100%

Loading events...

Credential Probe 05944205aa43 w4m_singapore_01 · 2026-07-09 05:59

1 20%

Loading events...

Credential Probe b439c742518d w4m_singapore_01 · 2026-07-09 05:57

1 20%

Loading events...

Credential Probe 7cd7d7dd0403 w4m_singapore_01 · 2026-07-09 05:55

1 20%

Loading events...

Credential Probe 7200a0cbeeef w4m_singapore_01 · 2026-07-09 05:52

1 20%

Loading events...

Opportunistic Bruter d385676f5818 w4m_singapore_01 · 2026-07-09 05:50

1 50%

Loading events...

Malware Dropper 9a800c2df9df w4m_singapore_01 · 2026-07-09 05:50

3 1 1 100%

Loading events...

Credential Probe 3b20e41eb484 w4m_singapore_01 · 2026-07-09 05:50

1 20%

Loading events...