← Back to feed
201.79.4.116
TAGGED SUSPICIOUS how we decide →
Why: Our sensors observed credential harvester sessions · certainty: inferred
Assessment
SSH password brute-forcer
- Part of a 237-IP campaign probing the same targets.
Generated from the counts on this page by fixed rules; each line cites the number it rests on.
Location
🇩🇪 DE / Frankfurt am Main
ASN
AS14061 · DigitalOcean, LLC
Cloud Provider
DigitalOcean
Total Events
24
Average by volume
Agent Count
2
First / Last Seen
2026-10-19 10:51 — 2026-10-20 10:17
Attack Types
MITRE ATT&CK Techniques
External Corroboration
Blocklist.de
blocklist_de:reported
Campaigns
Multi-Agent Scan
SCAN
Active
medium
75 IPs
88631 events
2026-10-17 — ongoing · 75 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
118 IPs
495802 events
2026-04-24 — ongoing · 118 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
98 IPs
113836 events
2026-04-21 — ongoing · 98 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
201 IPs
833289 events
2026-04-15 — ongoing · 201 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
195 IPs
658708 events
2026-04-15 — ongoing · 195 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
237 IPs
960556 events
2026-03-02 — ongoing · 237 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
4 IPs
7843 events
2026-02-28 — ongoing · 4 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
10 IPs
8210 events
2026-02-26 — ongoing · 10 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Session Forensics
Sessions
6
Avg Depth Score
0.25
Commands Executed
0
Files Downloaded
0
Evidence Timeline
Credential Probe
2759c8daf0a9
2
25%
Loading events...
Credential Probe
5cf74d9d4b38
2
25%
Loading events...
Credential Probe
993e11966a7d
2
25%
Loading events...
Credential Probe
1459ce2465f9
2
25%
Loading events...
Credential Probe
fb3f67f570a6
2
25%
Loading events...
Credential Probe
43af0b194681
2
25%
Loading events...