IntrusionLabs IntrusionLabs
← Back to feed

2.57.122.192

Threat Confidence
50%
Location
🇷🇴 RO
ASN
AS47890 · Unmanaged Ltd
Cloud Provider
—
Total Events
20
Average by volume
Agent Count
2
First / Last Seen
2026-03-16 04:02 — 2026-04-06 04:02
Attack Types
ssh:bruteforce
External Corroboration
Blocklist.de
Reported 2026-04-06 07:39
blocklist_de:reported
Campaigns
Multi-Agent Scan SCAN Active medium
84 IPs 169549 events
2026-03-02 — ongoing · 84 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Linode. Scanning the same …
Multi-Agent Scan SCAN Active medium
85 IPs 175549 events
2026-03-02 — ongoing · 85 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
45 IPs 5326 events
2026-03-02 — ongoing · 45 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
84 IPs 175873 events
2026-03-02 — ongoing · 84 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
57 IPs 71075 events
2026-03-02 — ongoing · 57 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
54 IPs 84251 events
2026-02-27 — ongoing · 54 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Linode. Scanning the same …
Multi-Agent Scan SCAN Active medium
49 IPs 68602 events
2026-02-23 — ongoing · 49 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on AWS. Scanning the same …
Multi-Agent Scan SCAN Active medium
56 IPs 12101 events
2026-02-23 — ongoing · 56 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Linode. Scanning the same …
Subnet 2.57.122.0/24 SUBNET Active high 🇷🇴 RO
10 IPs 10418 events
ssh:bruteforce
2026-02-18 — ongoing · 10 IPs from the same /24 subnet (2.57.122.0/24) were observed attacking our sensors within the same time window. …
Session Forensics
opportunistic_bruter ×4
Sessions
4 (4 with login)
Avg Depth Score
0.5
Commands Executed
0
Files Downloaded
0
Fingerprints
HASSH
5bd26477da5440a6187bd3f1b39a429c
SSH Client
SSH-2.0-PUTTY
Evidence Timeline
Opportunistic Bruter 5ea958a4397e w4m_seattle_01 · 2026-04-06 04:02
1 50%
Loading events...
Opportunistic Bruter 251487cadccc w4m_singapore_01 · 2026-04-03 01:03
1 50%
Loading events...
Opportunistic Bruter 5dda078a5a6a w4m_singapore_01 · 2026-03-28 19:02
1 50%
Loading events...
Opportunistic Bruter 6042d5cc3a37 w4m_singapore_01 · 2026-03-16 04:02
1 50%
Loading events...