IntrusionLabs IntrusionLabs
← Back to feed

82.152.98.13

Threat Confidence
15%
Location
🇩🇪 DE / Limburg an der Lahn
ASN
AS16276 · OVH SAS
Cloud Provider
—
Total Events
33
Average by volume
Agent Count
1
First / Last Seen
2026-08-23 18:33 — 2026-08-24 06:19
Attack Types
ssh:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
T1595.002
Initial Access
T1078
Credential Access
T1110 T1110.001
Discovery
T1016 T1082
External Corroboration
Not flagged by any external feeds
Campaigns
Not associated with any campaigns
Session Forensics
reconnaissance ×1 credential_probe ×3 opportunistic_bruter ×2
Sessions
6 (3 with login)
Avg Depth Score
0.37
Commands Executed
1
Files Downloaded
0
Notable Commands
  • uname -a 2>/dev/null || echo 'Unknown'
Fingerprints
HASSH
14828912b7b323da0724f25181c467e822f0cd297c87162931b0a31af9a1f58e68246235630700161004d82055bdafb69b15be1d5ecc50185ad32333abb6e1d9a61d09a4785ec9c01627dc9cf941065fdf18c29d817ba4808e9bc33947067740
SSH Client
SSH-2.0-Go
Evidence Timeline
Credential Probe 24e327a35821 newark_01 · 2026-08-24 06:19
1 20%
Loading events...
Opportunistic Bruter 5ceedcb92080 newark_01 · 2026-08-24 03:35
1 50%
Loading events...
Opportunistic Bruter 386ba18bb23d newark_01 · 2026-08-24 01:46
1 50%
Loading events...
Credential Probe 41866446bddb newark_01 · 2026-08-23 23:18
1 20%
Loading events...
Credential Probe ac2cde138c28 newark_01 · 2026-08-23 21:33
1 20%
Loading events...
Reconnaissance 29e2f9fb4a3b newark_01 · 2026-08-23 18:33
1 1 60%
Loading events...
{# Cloudflare Web Analytics — cookieless, public pages only. The context processor withholds the token from authenticated requests. #}