IntrusionLabs / threat intelligence

Sign in

← Back to feed

152.42.203.248

TAGGED MALICIOUS how we decide →

Threat Confidence

36%

Location

🇸🇬 SG / Singapore

ASN

AS14061 · DigitalOcean, LLC

Cloud Provider

DigitalOcean

Total Events

60

Above average by volume

Agent Count

1

First / Last Seen

2026-06-11 07:45 — 2026-06-11 07:54

Attack Types

ssh:bruteforce

MITRE ATT&CK Techniques

Initial Access

T1078

Execution

T1059.004

Credential Access

T1110 T1110.001

Discovery

T1082 T1083

Command and Control

T1105

External Corroboration

Not flagged by any external feeds

Campaigns

Not associated with any campaigns

Session Forensics

interactive_operator ×4

Sessions

4 (4 with login)

Avg Depth Score

0.9

Commands Executed

32

Files Downloaded

0

Notable Commands

which ls 2>/dev/null || echo 'missing:ls'; echo '---SEP---'; which ps 2>/dev/null || echo 'missing:ps'; echo '---SEP---'; which cat 2>/dev/null || echo 'missing:cat'; echo '---SEP---'; which netstat 2>/dev/null || echo 'missing:netstat'; echo '---SEP---'; uname -m 2>/dev/null | tr -d '\n\r' || echo 'unknown'; echo '---SEP---'; cat /etc/os-release 2>/dev/null | grep '^NAME=' | cut -d'=' -f2 | tr -d '"' | tr -d '\n\r' || echo 'Linux'; echo '---SEP---'; hostname 2>/dev/null | tr -d '\n\r' || echo 'unknown'; echo '---SEP---'; curl -s --connect-timeout 2 ipinfo.io/country 2>/dev/null | tr -d '\n\r' || echo 'N/A'; echo '---SEP---'; nproc 2>/dev/null | tr -d '\n\r' || echo '1'; echo '---SEP---'; free -h 2>/dev/null | awk '/^Mem:/ {print $2}' | tr -d '\n\r' || echo 'N/A'; echo '---SEP---'; df -h / 2>/dev/null | awk 'NR==2{print $2}' | tr -d '\n\r' || echo 'N/A'; echo '---END---'
tr -d \n\r

Fingerprints

HASSH

16443846184eafde36765c9bab2f4397

SSH Client

SSH-2.0-Go

Evidence Timeline

Interactive Operator c0f2eb7546e9 w4m_singapore_01 · 2026-06-11 07:54

8 1 90%

Loading events...

Interactive Operator 44e4f7453673 w4m_singapore_01 · 2026-06-11 07:54

8 1 90%

Loading events...

Interactive Operator af5f76a71bf6 w4m_singapore_01 · 2026-06-11 07:45

8 1 90%

Loading events...

Interactive Operator ce6b6bcc1a0c w4m_singapore_01 · 2026-06-11 07:45

8 1 90%

Loading events...

{# Cloudflare Web Analytics — cookieless, public pages only. The context processor withholds the token from authenticated requests. #}