IntrusionLabs / threat intelligence

Sign in

← Back to feed

181.26.120.148

181-26-120-148.mrse.com.ar (mrse.com.ar) ✗ FCrDNS

Threat Confidence

23%

Assessment

Port and service scanner

Part of a 37-IP campaign from the same network, active in the same window.

Generated from the counts on this page by fixed rules; each line cites the number it rests on.

Location

🇦🇷 AR / Glew

ASN

AS22927 · Telefonica de Argentina

Cloud Provider

—

Total Events

4

Below average by volume

Agent Count

1

First / Last Seen

2026-10-13 14:24 — 2026-10-13 14:25

Attack Types

ssh:connection telnet:connection

MITRE ATT&CK Techniques

Reconnaissance

T1595 T1595.001

Discovery

T1046

External Corroboration

Not flagged by any external feeds

Campaigns

AS22927 Telefonica de Argentina ASN Active medium 🇦🇷 AR

37 IPs 364 events

ssh:bruteforcessh:connectiontelnet:connectiontelnet:intrusion

2026-03-04 — ongoing · 37 IPs from the same network (Telefonica de Argentina, AS22927) were active during overlapping time periods. Temporal correlation …

Session Forensics

scanner ×2

Sessions

2

Avg Depth Score

0.15

Commands Executed

0

Files Downloaded

0

Evidence Timeline

Scanner 12fc3009dbbc newark_01 · 2026-10-13 14:25

15%

Loading events...

Scanner 56228d8599e9 newark_01 · 2026-10-13 14:24

15%

Loading events...