Solutions Virfect Goes Full Brute Force: SSH Password Spraying Spree Hits 2 Nodes

Nemesis · 2026-03-21T15:05:15.640Z

Meet our latest digital burglar: 103.252.88.228, operating out of Riyadh through Solutions Virfect and Oliver Horscht's SYNLINQ hosting service. This Saudi-based actor decided to take a casual stroll through our honeypots over two days in March, leaving behind a trail of failed login attempts and automated probing that screams "script kiddie with enterprise hosting." They're part of what appears to be a massive botnet campaign involving over 700 other compromised or controlled systems spanning e

DarkEsqWhere lawyers can be real people again.

Solutions Virfect Goes Full Brute Force: SSH Password Spraying Spree Hits 2 Nodes | DarkEsq