← Back to feed
139.59.86.13
TAGGED SUSPICIOUS how we decide →
Why: Our sensors observed credential harvester sessions · certainty: inferred
Assessment
SSH password brute-forcer
- Logged in with 59 different credentials across 59 logins.
- Ran 59 commands on the host.
- Active for 9 days, 2026-10-12 to 2026-10-21.
Generated from the counts on this page by fixed rules; each line cites the number it rests on.
Location
🇮🇳 IN / Bengaluru
ASN
AS14061 · DigitalOcean, LLC
Cloud Provider
DigitalOcean
Total Events
1320
Top 5% by volume
Agent Count
1
First / Last Seen
2026-10-12 09:14 — 2026-10-21 11:53
Attack Types
MITRE ATT&CK Techniques
Initial Access
Execution
External Corroboration
Not flagged by any external feeds
Campaigns
Not associated with any campaigns
Session Forensics
Sessions
229 (59 with login)
Avg Depth Score
0.3
Commands Executed
59
Files Downloaded
0
Notable Commands
- uname -s -v -n -r -m 2>/dev/null
Fingerprints
2 SSH client banners · 1 HASSH fingerprint
HASSH
SSH Client
Evidence Timeline
Reconnaissance
65f93baa0594
LOGIN
1
1
60%
Loading events...