IntrusionLabs IntrusionLabs
← Back to feed

178.128.204.108

TAGGED SUSPICIOUS how we decide →
Threat Confidence
65%
Location
🇩🇪 DE / Frankfurt am Main
ASN
AS14061 · DigitalOcean, LLC
Cloud Provider
DigitalOcean
Total Events
7
Below average by volume
Agent Count
3
First / Last Seen
2026-05-04 08:01 — 2026-05-22 19:58
Attack Types
http:scan ssh:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
T1595 T1595.002
Initial Access
T1190
Credential Access
T1110 T1110.001
Discovery
T1046
External Corroboration
Blocklist.de
Reported 2026-05-22 22:02
blocklist_de:reported
Campaigns
Multi-Agent Scan SCAN Active medium
38 IPs 9150 events
2026-05-18 — ongoing · 38 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
141 IPs 189149 events
2026-05-04 — ongoing · 141 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan SCAN Active medium
157 IPs 214479 events
2026-05-03 — ongoing · 157 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
88 IPs 170758 events
2026-04-30 — ongoing · 88 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
52 IPs 35315 events
2026-03-16 — ongoing · 52 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
43 IPs 35574 events
2026-02-28 — ongoing · 43 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan SCAN Active medium
90 IPs 166543 events
2026-02-27 — ongoing · 90 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Session Forensics
scanner ×1 web_probe ×3
Sessions
4
Avg Depth Score
0.23
Commands Executed
0
Files Downloaded
0
Fingerprints
HASSH
2aec6b44b06bec95d73f66b5d30cb69a
SSH Client
SSH-2.0-Go
Evidence Timeline
Scanner 79f685867dbb w4m_singapore_01 · 2026-05-22 19:58
15%
Loading events...
Web Probe 6020dfb26bf0055a newark_01 · 2026-05-20 10:58
25%
Loading events...
Web Probe 98c4d299f50db45a w4m_seattle_01 · 2026-05-04 11:51
25%
Loading events...
Web Probe 52ee9ad3a622c178 w4m_seattle_01 · 2026-05-04 08:01
25%
Loading events...
Non-Session Events
Timestamp Port Proto Event Source Location
2026-05-20 10:58:11 :80 http HTTP GET request opencanary ewr
2026-05-04 11:51:44 :80 http HTTP GET request opencanary sea
2026-05-04 08:01:30 :80 http HTTP GET request opencanary sea