IntrusionLabs / threat intelligence

Sign in

← Back to feed

138.68.67.252

Threat Confidence

42%

Assessment

Post-login reconnaissance: logs in and surveys the host

Logged in with 15,383 different credentials across 15,384 logins.
Ran 15,197 commands on the host.
Active for 12 days, 2026-09-22 to 2026-10-05.

Generated from the counts on this page by fixed rules; each line cites the number it rests on.

Location

🇩🇪 DE / Frankfurt am Main

ASN

AS14061 · DigitalOcean, LLC

Cloud Provider

DigitalOcean

Total Events

126763

Top 1% by volume

Agent Count

2

First / Last Seen

2026-09-22 17:43 — 2026-10-05 07:32

Attack Types

ssh:bruteforce ssh:connection ssh:intrusion

MITRE ATT&CK Techniques

Reconnaissance

T1595 T1595.001

Initial Access

T1078

Execution

T1059.004

Credential Access

T1110 T1110.001

Discovery

T1016 T1046 T1082

External Corroboration

Not flagged by any external feeds

Campaigns

Not associated with any campaigns

Session Forensics

scanner ×463 unknown ×1 reconnaissance ×15196 opportunistic_bruter ×188

Sessions

15848 (15384 with login)

Avg Depth Score

0.59

Commands Executed

15197

Files Downloaded

0

Notable Commands

echo -e "\x6F\x6B"

Fingerprints

2 SSH client banners · 1 HASSH fingerprint

HASSH

01ca35584ad5a1b66cf6a9846b5b2821

SSH Client

GET / HTTP/1.1SSH-2.0-Go

Evidence Timeline

Scanner 404dcc565b4d greencloud_phx_01 · 2026-10-05 07:32

15%

Loading events...

Reconnaissance 05944a38275c w4m_seattle_01 · 2026-09-23 20:01

1 1 60%

Loading events...

Reconnaissance 29fb48412755 w4m_seattle_01 · 2026-09-23 20:01

1 1 60%

Loading events...

Reconnaissance b68caec0c9f3 w4m_seattle_01 · 2026-09-23 20:01

1 1 60%

Loading events...

Reconnaissance 2996cea0dd39 w4m_seattle_01 · 2026-09-23 20:01

1 1 60%

Loading events...

Reconnaissance 519d9b359434 w4m_seattle_01 · 2026-09-23 20:01

1 1 60%

Loading events...

Reconnaissance e166046b2aba w4m_seattle_01 · 2026-09-23 20:01

1 1 60%

Loading events...

Reconnaissance dd55ddd5601f w4m_seattle_01 · 2026-09-23 20:00

1 1 60%

Loading events...

Reconnaissance 0b64e3572797 w4m_seattle_01 · 2026-09-23 20:00

1 1 60%

Loading events...

Reconnaissance d4eea9a7a47b w4m_seattle_01 · 2026-09-23 20:00

1 1 60%

Loading events...

Reconnaissance e2382cd6b6d5 w4m_seattle_01 · 2026-09-23 20:00

1 1 60%

Loading events...

Reconnaissance a4844491dd11 w4m_seattle_01 · 2026-09-23 20:00

1 1 60%

Loading events...

Reconnaissance 09425b9992ee w4m_seattle_01 · 2026-09-23 20:00

1 1 60%

Loading events...

Reconnaissance 4ff14369c574 w4m_seattle_01 · 2026-09-23 20:00

1 1 60%

Loading events...

Opportunistic Bruter fa63318fff57 w4m_seattle_01 · 2026-09-23 20:00

1 50%

Loading events...

Reconnaissance d7c47d99c40b w4m_seattle_01 · 2026-09-23 20:00

1 1 60%

Loading events...

Reconnaissance 65f81e863176 w4m_seattle_01 · 2026-09-23 20:00

1 1 60%

Loading events...

Reconnaissance 04836100d2c8 w4m_seattle_01 · 2026-09-23 20:00

1 1 60%

Loading events...

Reconnaissance 4cf3ada134f2 w4m_seattle_01 · 2026-09-23 19:59

1 1 60%

Loading events...

Reconnaissance b5b2792e4a3c w4m_seattle_01 · 2026-09-23 19:59

1 1 60%

Loading events...

Reconnaissance 253204ec8b15 w4m_seattle_01 · 2026-09-23 19:59

1 1 60%

Loading events...

Reconnaissance 4f862a53d213 w4m_seattle_01 · 2026-09-23 19:59

1 1 60%

Loading events...

Reconnaissance d5609dd2bfc3 w4m_seattle_01 · 2026-09-23 19:59

1 1 60%

Loading events...

Reconnaissance f72a34f01082 w4m_seattle_01 · 2026-09-23 19:59

1 1 60%

Loading events...

Reconnaissance fe17556bda27 w4m_seattle_01 · 2026-09-23 19:59

1 1 60%

Loading events...

Reconnaissance 5ed0ef75cc5f w4m_seattle_01 · 2026-09-23 19:59

1 1 60%

Loading events...

Reconnaissance e00c44f308be w4m_seattle_01 · 2026-09-23 19:59

1 1 60%

Loading events...

Reconnaissance aeb73131c4ab w4m_seattle_01 · 2026-09-23 19:59

1 1 60%

Loading events...

Reconnaissance eb0f3f79e49b w4m_seattle_01 · 2026-09-23 19:59

1 1 60%

Loading events...

Reconnaissance 97e1be227df2 w4m_seattle_01 · 2026-09-23 19:59

1 1 60%

Loading events...

Reconnaissance bcb08a2a1084 w4m_seattle_01 · 2026-09-23 19:58

1 1 60%

Loading events...

Reconnaissance 0e69e765ad4a w4m_seattle_01 · 2026-09-23 19:58

1 1 60%

Loading events...

Reconnaissance 3b30fcc19be8 w4m_seattle_01 · 2026-09-23 19:58

1 1 60%

Loading events...

Reconnaissance a85a23b3d73b w4m_seattle_01 · 2026-09-23 19:58

1 1 60%

Loading events...

Reconnaissance d29306d01848 w4m_seattle_01 · 2026-09-23 19:58

1 1 60%

Loading events...

Reconnaissance 4a15f0278ac5 w4m_seattle_01 · 2026-09-23 19:58

1 1 60%

Loading events...

Reconnaissance 4ca09f97416f w4m_seattle_01 · 2026-09-23 19:58

1 1 60%

Loading events...

Reconnaissance e4c564e6cb87 w4m_seattle_01 · 2026-09-23 19:58

1 1 60%

Loading events...

Scanner dc4f1626199f w4m_seattle_01 · 2026-09-23 19:58

15%

Loading events...

Reconnaissance 11427f840e29 w4m_seattle_01 · 2026-09-23 19:58

1 1 60%

Loading events...

Reconnaissance 79b82378dc48 w4m_seattle_01 · 2026-09-23 19:58

1 1 60%

Loading events...

Reconnaissance a4cb07281b35 w4m_seattle_01 · 2026-09-23 19:58

1 1 60%

Loading events...

Reconnaissance 09ea70a956f0 w4m_seattle_01 · 2026-09-23 19:57

1 1 60%

Loading events...

Reconnaissance 159e78a69a6c w4m_seattle_01 · 2026-09-23 19:57

1 1 60%

Loading events...

Reconnaissance 9cf287e90bbb w4m_seattle_01 · 2026-09-23 19:57

1 1 60%

Loading events...

Reconnaissance c1004089a2a7 w4m_seattle_01 · 2026-09-23 19:57

1 1 60%

Loading events...

Reconnaissance 5e6d9f6fc3da w4m_seattle_01 · 2026-09-23 19:57

1 1 60%

Loading events...

Reconnaissance 92a07709a478 w4m_seattle_01 · 2026-09-23 19:57

1 1 60%

Loading events...

Reconnaissance 628def232f93 w4m_seattle_01 · 2026-09-23 19:57

1 1 60%

Loading events...

Reconnaissance 7acf3b05dee5 w4m_seattle_01 · 2026-09-23 19:57

1 1 60%

Loading events...