IntrusionLabs IntrusionLabs
← Back to feed

154.0.166.123

alfrescodemo.dedicated.co.za (dedicated.co.za) ✓ FCrDNS
Threat Confidence
31%
Assessment
Post-login reconnaissance: logs in and surveys the host
  • Logged in with 32 different credentials across 32 logins.
  • Ran 32 commands on the host.
  • Part of a 5-IP campaign from the same network, active in the same window.
Generated from the counts on this page by fixed rules; each line cites the number it rests on.
Location
🇿🇦 ZA / Johannesburg
ASN
AS37611 · AFRIHOST SP (PTY) LTD
Cloud Provider
—
Total Events
356
Top 10% by volume
Agent Count
1
First / Last Seen
2026-10-01 20:43 — 2026-10-07 10:25
Attack Types
ssh:bruteforce ssh:connection ssh:intrusion
MITRE ATT&CK Techniques
Reconnaissance
T1595 T1595.001 T1595.002
Initial Access
T1078
Execution
T1059.004
Credential Access
T1110 T1110.001
Discovery
T1016 T1046 T1082
External Corroboration
Not flagged by any external feeds
Campaigns
AS37611 AFRIHOST SP (PTY) LTD ASN Ended medium 🇿🇦 ZA
5 IPs 516 events
ssh:bruteforcessh:connectionssh:intrusiontelnet:bruteforcetelnet:connectiontelnet:intrusion
2026-09-28 — ongoing · 5 IPs from the same network (AFRIHOST SP (PTY) LTD, AS37611) were active during overlapping time periods. Temporal …
Session Forensics
scanner ×18 reconnaissance ×32 credential_probe ×6
Sessions
56 (32 with login)
Avg Depth Score
0.41
Commands Executed
32
Files Downloaded
0
Notable Commands
  • uname -a 2>/dev/null
Fingerprints
1 SSH client banner · 1 HASSH fingerprint
HASSH
06ff3615a51b2af343ec22abc8e30bbc
SSH Client
SSH-2.0-Go
Evidence Timeline
Scanner e7fb7cb94eef newark_01 · 2026-10-07 10:25
15%
Loading events...
Reconnaissance c5a724141fab newark_01 · 2026-10-07 04:21
1 1 60%
Loading events...
Reconnaissance 09673aff7a41 newark_01 · 2026-10-06 21:56
1 1 60%
Loading events...
Scanner b410e182c8e6 newark_01 · 2026-10-06 19:13
15%
Loading events...
Scanner bb7769b54c0d newark_01 · 2026-10-06 16:27
15%
Loading events...
Scanner 89239d5031ba newark_01 · 2026-10-05 16:26
15%
Loading events...
Scanner 198b55463744 newark_01 · 2026-10-05 14:49
15%
Loading events...
Scanner cd24901517f3 newark_01 · 2026-10-05 12:36
15%
Loading events...
Scanner be3309863d19 newark_01 · 2026-10-05 10:28
15%
Loading events...
Scanner 1c019147d0c9 newark_01 · 2026-10-05 09:35
15%
Loading events...
Scanner f4a171e6a523 newark_01 · 2026-10-05 08:57
15%
Loading events...
Scanner a7df5e613089 newark_01 · 2026-10-05 08:03
15%
Loading events...
Credential Probe 5385f28d896a newark_01 · 2026-10-05 06:39
1 20%
Loading events...
Credential Probe 9b7eb7eca160 newark_01 · 2026-10-05 04:19
1 20%
Loading events...
Credential Probe d8ea98ccb6b6 newark_01 · 2026-10-05 03:00
1 20%
Loading events...
Scanner 733af5c1d066 newark_01 · 2026-10-05 00:35
15%
Loading events...
Credential Probe 4106775875a5 newark_01 · 2026-10-04 23:16
1 20%
Loading events...
Scanner 607ddf858089 newark_01 · 2026-10-04 22:11
15%
Loading events...
Scanner 9e329ed26bd8 newark_01 · 2026-10-04 21:39
15%
Loading events...
Scanner 12d2294963f7 newark_01 · 2026-10-04 21:07
15%
Loading events...
Credential Probe d709ead0f7da newark_01 · 2026-10-04 20:19
1 20%
Loading events...
Scanner d55f9e133206 newark_01 · 2026-10-04 19:00
15%
Loading events...
Reconnaissance 5964ecde4f78 newark_01 · 2026-10-04 17:46
1 1 60%
Loading events...
Credential Probe 1fa275de1973 newark_01 · 2026-10-04 12:57
1 20%
Loading events...
Scanner 853ac59ece22 newark_01 · 2026-10-04 12:16
15%
Loading events...
Scanner 6ba2ce164d5e newark_01 · 2026-10-02 09:56
15%
Loading events...
Scanner c98cf0d34025 newark_01 · 2026-10-02 09:35
15%
Loading events...
Reconnaissance b130ff646b13 newark_01 · 2026-10-02 08:02
1 1 60%
Loading events...
Reconnaissance 458aff754087 newark_01 · 2026-10-02 07:33
1 1 60%
Loading events...
Reconnaissance 01df6c5d1ae8 newark_01 · 2026-10-02 07:10
1 1 60%
Loading events...
Reconnaissance 81334f7b027c newark_01 · 2026-10-02 06:46
1 1 60%
Loading events...
Reconnaissance 991313c6d614 newark_01 · 2026-10-02 06:22
1 1 60%
Loading events...
Reconnaissance 4755c170c0e9 newark_01 · 2026-10-02 05:58
1 1 60%
Loading events...
Reconnaissance 2d89ff04c6b6 newark_01 · 2026-10-02 05:34
1 1 60%
Loading events...
Reconnaissance bb95bed1abd9 newark_01 · 2026-10-02 05:10
1 1 60%
Loading events...
Reconnaissance 09d9da1d1957 newark_01 · 2026-10-02 04:46
1 1 60%
Loading events...
Reconnaissance 856bd262f70f newark_01 · 2026-10-02 04:22
1 1 60%
Loading events...
Reconnaissance 530f816973d5 newark_01 · 2026-10-02 03:58
1 1 60%
Loading events...
Reconnaissance aff93f3519a2 newark_01 · 2026-10-02 03:34
1 1 60%
Loading events...
Reconnaissance eb09f863715b newark_01 · 2026-10-02 03:10
1 1 60%
Loading events...
Reconnaissance 9ed83ab37446 newark_01 · 2026-10-02 02:46
1 1 60%
Loading events...
Reconnaissance 48b4bbbd15cd newark_01 · 2026-10-02 02:22
1 1 60%
Loading events...
Reconnaissance b256d3f5e0f8 newark_01 · 2026-10-02 01:58
1 1 60%
Loading events...
Reconnaissance 8a7600d92921 newark_01 · 2026-10-02 01:34
1 1 60%
Loading events...
Reconnaissance c93559ae28d7 newark_01 · 2026-10-02 01:10
1 1 60%
Loading events...
Reconnaissance 7045fa2e87b1 newark_01 · 2026-10-02 00:46
1 1 60%
Loading events...
Reconnaissance 1aa6a07c306b newark_01 · 2026-10-02 00:23
1 1 60%
Loading events...
Reconnaissance 28201e9526b2 newark_01 · 2026-10-01 23:59
1 1 60%
Loading events...
Reconnaissance dc858dffc6fe newark_01 · 2026-10-01 23:35
1 1 60%
Loading events...
Reconnaissance c7d055ae595e newark_01 · 2026-10-01 23:11
1 1 60%
Loading events...