← Back to feed

62.60.130.219

TAGGED SUSPICIOUS how we decide →

Threat Confidence

29%

Location

🇮🇷 IR / Tehran

ASN

AS215930 · Cipher Operations Doo Beograd - Novi Beograd

Cloud Provider

—

Total Events

Average by volume

Agent Count

First / Last Seen

2026-06-24 22:04 — 2026-07-03 04:03

Attack Types

ssh:bruteforce

MITRE ATT&CK Techniques

Initial Access

T1078

Credential Access

T1110 T1110.001

External Corroboration

Blocklist.de

Reported 2026-07-18 01:01

blocklist_de:reported

Campaigns

Subnet 62.60.130.0/24 SUBNET Ended high 🇮🇷 IR

3 IPs 34 events

http:scanssh:bruteforce

2026-06-24 — ongoing · 3 IPs from the same /24 subnet (62.60.130.0/24) were observed attacking our sensors within the same time window. …

Session Forensics

opportunistic_bruter ×3

Sessions

3 (3 with login)

Avg Depth Score

0.5

Commands Executed

Files Downloaded

Fingerprints

HASSH

5bd26477da5440a6187bd3f1b39a429c

SSH Client

SSH-2.0-PUTTY

Evidence Timeline

Opportunistic Bruter 2f88514d6b11 newark_01 · 2026-07-02 16:06

1 50%

Loading events...

Opportunistic Bruter f75a38c359f8 newark_01 · 2026-07-01 07:04

1 50%

Loading events...

Opportunistic Bruter 75f544635e93 newark_01 · 2026-06-24 22:04

1 50%

Loading events...