IntrusionLabs IntrusionLabs
← Back to feed

109.194.2.248

109x194x2x248.static-business.bryansk.ertelecom.ru (ertelecom.ru) ✗ FCrDNS
Threat Confidence
33%
Assessment
Post-login reconnaissance: logs in and surveys the host
  • Logged in with 3,488 different credentials across 3,488 logins.
  • Ran 3,458 commands on the host.
  • Part of a 5-IP campaign from the same network, active in the same window.
Generated from the counts on this page by fixed rules; each line cites the number it rests on.
Location
🇷🇺 RU / Bryansk
ASN
AS57044 · JSC ER-Telecom Holding
Cloud Provider
—
Total Events
28211
Top 1% by volume
Agent Count
1
First / Last Seen
2026-10-03 06:35 — 2026-10-03 10:59
Attack Types
ssh:bruteforce ssh:connection ssh:intrusion
MITRE ATT&CK Techniques
Reconnaissance
T1595 T1595.001
Initial Access
T1078
Execution
T1059.004
Credential Access
T1110 T1110.001
Discovery
T1016 T1046 T1082
External Corroboration
Not flagged by any external feeds
Campaigns
AS57044 JSC ER-Telecom Holding ASN Ended medium 🇷🇺 RU
5 IPs 28273 events
ssh:bruteforcessh:connectionssh:intrusiontelnet:connection
2026-09-24 — ongoing · 5 IPs from the same network (JSC ER-Telecom Holding, AS57044) were active during overlapping time periods. Temporal correlation …
Session Forensics
scanner ×45 reconnaissance ×3458 opportunistic_bruter ×30
Sessions
3533 (3488 with login)
Avg Depth Score
0.59
Commands Executed
3458
Files Downloaded
0
Notable Commands
  • echo -e "\x6F\x6B"
Fingerprints
2 SSH client banners · 1 HASSH fingerprint
HASSH
01ca35584ad5a1b66cf6a9846b5b2821
SSH Client
GET / HTTP/1.1SSH-2.0-Go
Evidence Timeline
Scanner 4f44eb3d8e48 w4m_singapore_01 · 2026-10-03 10:57
15%
Loading events...
Reconnaissance 830e957800af w4m_singapore_01 · 2026-10-03 10:57
1 1 60%
Loading events...
Reconnaissance 0bbcac164577 w4m_singapore_01 · 2026-10-03 10:57
1 1 60%
Loading events...
Reconnaissance 073616a2e1f5 w4m_singapore_01 · 2026-10-03 10:57
1 1 60%
Loading events...
Reconnaissance 67cd84323236 w4m_singapore_01 · 2026-10-03 10:57
1 1 60%
Loading events...
Reconnaissance 89240dfca513 w4m_singapore_01 · 2026-10-03 10:57
1 1 60%
Loading events...
Reconnaissance 44c9ed8b4cdc w4m_singapore_01 · 2026-10-03 10:57
1 1 60%
Loading events...
Reconnaissance 38cf4d93e03b w4m_singapore_01 · 2026-10-03 10:57
1 1 60%
Loading events...
Reconnaissance fe13fd3ba355 w4m_singapore_01 · 2026-10-03 10:57
1 1 60%
Loading events...
Reconnaissance b489a01889d0 w4m_singapore_01 · 2026-10-03 10:56
1 1 60%
Loading events...
Reconnaissance 1b2c76a07658 w4m_singapore_01 · 2026-10-03 10:56
1 1 60%
Loading events...
Reconnaissance d961bd5907bd w4m_singapore_01 · 2026-10-03 10:56
1 1 60%
Loading events...
Reconnaissance 9afdae96b2ba w4m_singapore_01 · 2026-10-03 10:56
1 1 60%
Loading events...
Reconnaissance 9c83ed527814 w4m_singapore_01 · 2026-10-03 10:56
1 1 60%
Loading events...
Reconnaissance b2f51d87cb9e w4m_singapore_01 · 2026-10-03 10:56
1 1 60%
Loading events...
Reconnaissance 2c9cd9284a59 w4m_singapore_01 · 2026-10-03 10:56
1 1 60%
Loading events...
Reconnaissance 1d6575694740 w4m_singapore_01 · 2026-10-03 10:56
1 1 60%
Loading events...
Reconnaissance d3f30d788d6c w4m_singapore_01 · 2026-10-03 10:56
1 1 60%
Loading events...
Reconnaissance be2153de75d4 w4m_singapore_01 · 2026-10-03 10:56
1 1 60%
Loading events...
Reconnaissance 56cd23192b11 w4m_singapore_01 · 2026-10-03 10:56
1 1 60%
Loading events...
Reconnaissance 6dae5158b31b w4m_singapore_01 · 2026-10-03 10:56
1 1 60%
Loading events...
Reconnaissance 18dc6ebe49be w4m_singapore_01 · 2026-10-03 10:56
1 1 60%
Loading events...
Reconnaissance a868e1a889c2 w4m_singapore_01 · 2026-10-03 10:56
1 1 60%
Loading events...
Reconnaissance f5123d2e4dfd w4m_singapore_01 · 2026-10-03 10:56
1 1 60%
Loading events...
Reconnaissance 7e98c10673ee w4m_singapore_01 · 2026-10-03 10:56
1 1 60%
Loading events...
Reconnaissance d103ab47cba6 w4m_singapore_01 · 2026-10-03 10:56
1 1 60%
Loading events...
Reconnaissance 39a903ac1898 w4m_singapore_01 · 2026-10-03 10:56
1 1 60%
Loading events...
Reconnaissance f8391df3892b w4m_singapore_01 · 2026-10-03 10:56
1 1 60%
Loading events...
Reconnaissance 4d54cc14823e w4m_singapore_01 · 2026-10-03 10:56
1 1 60%
Loading events...
Reconnaissance c2dbfdbecb1d w4m_singapore_01 · 2026-10-03 10:56
1 1 60%
Loading events...
Reconnaissance 963c79a043b2 w4m_singapore_01 · 2026-10-03 10:56
1 1 60%
Loading events...
Reconnaissance 8006222c1158 w4m_singapore_01 · 2026-10-03 10:56
1 1 60%
Loading events...
Reconnaissance 42fc1f74eaeb w4m_singapore_01 · 2026-10-03 10:56
1 1 60%
Loading events...
Reconnaissance 43fadbabf65d w4m_singapore_01 · 2026-10-03 10:56
1 1 60%
Loading events...
Reconnaissance 57ca326e4f90 w4m_singapore_01 · 2026-10-03 10:56
1 1 60%
Loading events...
Reconnaissance d7b6fa3432f0 w4m_singapore_01 · 2026-10-03 10:56
1 1 60%
Loading events...
Reconnaissance c13d4e757987 w4m_singapore_01 · 2026-10-03 10:56
1 1 60%
Loading events...
Reconnaissance e06b7483f116 w4m_singapore_01 · 2026-10-03 10:56
1 1 60%
Loading events...
Reconnaissance be6a7b2542a7 w4m_singapore_01 · 2026-10-03 10:56
1 1 60%
Loading events...
Reconnaissance daf38e7debee w4m_singapore_01 · 2026-10-03 10:56
1 1 60%
Loading events...
Reconnaissance 8d59ac23542c w4m_singapore_01 · 2026-10-03 10:56
1 1 60%
Loading events...
Reconnaissance 389c7f3317a3 w4m_singapore_01 · 2026-10-03 10:56
1 1 60%
Loading events...
Reconnaissance 340b9de5a8e2 w4m_singapore_01 · 2026-10-03 10:55
1 1 60%
Loading events...
Reconnaissance 6fd20028bd30 w4m_singapore_01 · 2026-10-03 10:55
1 1 60%
Loading events...
Reconnaissance ace710f5c7ca w4m_singapore_01 · 2026-10-03 10:55
1 1 60%
Loading events...
Reconnaissance 0cb1c2ae879e w4m_singapore_01 · 2026-10-03 10:55
1 1 60%
Loading events...
Reconnaissance 3102733cdc70 w4m_singapore_01 · 2026-10-03 10:55
1 1 60%
Loading events...
Reconnaissance a05fab8c787f w4m_singapore_01 · 2026-10-03 10:55
1 1 60%
Loading events...
Reconnaissance 4f76557f6f2f w4m_singapore_01 · 2026-10-03 10:55
1 1 60%
Loading events...
Reconnaissance e56f41c0b965 w4m_singapore_01 · 2026-10-03 10:55
1 1 60%
Loading events...