IntrusionLabs IntrusionLabs
← Back to feed

108.61.171.2

TAGGED MALICIOUS how we decide →
Threat Confidence
52%
Location
🇩🇪 DE / Frankfurt am Main
ASN
AS20473 · The Constant Company, LLC
Cloud Provider
Vultr
Total Events
96
Above average by volume
Agent Count
1
First / Last Seen
2026-05-01 01:33 — 2026-05-10 00:44
Attack Types
ssh:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
T1595 T1595.002
Initial Access
T1078
Execution
T1059.004
Credential Access
T1110 T1110.001
Discovery
T1016 T1046 T1082
Command and Control
T1105
Exfiltration
T1048
External Corroboration
Not flagged by any external feeds
Campaigns
Not associated with any campaigns
Session Forensics
scanner ×1 reconnaissance ×3 malware_dropper ×3 credential_probe ×2 data_exfiltrator ×3 opportunistic_bruter ×3
Sessions
15 (12 with login)
Avg Depth Score
0.64
Commands Executed
6
Files Downloaded
3
Notable Commands
  • nohup /tmp/.sorry_TkbaEbPK >/tmp/.sorry_UV3oiCHj.log 2>&1 &
  • chmod +x /tmp/.sorry_TkbaEbPK
  • nohup /tmp/.sorry_PnXdwGCj >/tmp/.sorry_4L7Yf7nB.log 2>&1 &
  • chmod +x /tmp/.sorry_PnXdwGCj
  • nohup /tmp/.sorry_pblZXvDj >/tmp/.sorry_VqirZkrm.log 2>&1 &
  • chmod +x /tmp/.sorry_pblZXvDj
Fingerprints
HASSH
16443846184eafde36765c9bab2f4397
SSH Client
SSH-2.0-Go
Evidence Timeline
Malware Dropper 5c10d69a3011 newark_01 · 2026-05-10 00:44
1 1 1 100%
Loading events...
Reconnaissance e5479e687226 newark_01 · 2026-05-10 00:44
1 1 60%
Loading events...
Data Exfiltrator d51b8178b8d1 newark_01 · 2026-05-10 00:44
1 90%
Loading events...
Malware Dropper e79d79a81224 newark_01 · 2026-05-10 00:44
1 1 1 100%
Loading events...
Reconnaissance 317b47d47643 newark_01 · 2026-05-10 00:44
1 1 60%
Loading events...
Data Exfiltrator e7d8a9f75ed9 newark_01 · 2026-05-10 00:44
1 90%
Loading events...
Malware Dropper 62867a1daaef newark_01 · 2026-05-10 00:43
1 1 1 100%
Loading events...
Reconnaissance fc2d63b05f7e newark_01 · 2026-05-10 00:43
1 1 60%
Loading events...
Data Exfiltrator cd4054ff35a6 newark_01 · 2026-05-10 00:43
1 90%
Loading events...
Credential Probe 1b22a001e6a2 newark_01 · 2026-05-10 00:43
1 20%
Loading events...
Credential Probe 1de0c61c9046 newark_01 · 2026-05-10 00:43
1 20%
Loading events...
Opportunistic Bruter f9d4f09f33b0 newark_01 · 2026-05-10 00:43
1 50%
Loading events...
Opportunistic Bruter 7cdf0d038ead newark_01 · 2026-05-10 00:43
1 50%
Loading events...
Opportunistic Bruter 7810371ff126 newark_01 · 2026-05-10 00:43
1 50%
Loading events...
Scanner 7595709af802 newark_01 · 2026-05-01 01:33
15%
Loading events...