IntrusionLabs IntrusionLabs
← Back to feed

2.57.122.98

TAGGED SUSPICIOUS how we decide →
Threat Confidence
25%
Location
🇷🇴 RO
ASN
AS47890 · Unmanaged Ltd
Cloud Provider
—
Total Events
30
Average by volume
Agent Count
1
First / Last Seen
2026-07-23 23:43 — 2026-08-25 23:18
Attack Types
ssh:bruteforce
MITRE ATT&CK Techniques
Initial Access
T1078
Credential Access
T1110 T1110.001
External Corroboration
Not flagged by any external feeds
Campaigns
Subnet 2.57.122.0/24 SUBNET Active high 🇷🇴 RO
6 IPs 74666 events
ssh:bruteforce
2026-02-18 — ongoing · 6 IPs from the same /24 subnet (2.57.122.0/24) were observed attacking our sensors within the same time window. …
Session Forensics
opportunistic_bruter ×7
Sessions
7 (7 with login)
Avg Depth Score
0.5
Commands Executed
0
Files Downloaded
0
Fingerprints
HASSH
1ab01ea559275860be73fe29c5d077bd
SSH Client
SSH-2.0-Ganymed_null
Evidence Timeline
Opportunistic Bruter 79038993e09d newark_01 · 2026-08-31 21:07
1 50%
Loading events...
Opportunistic Bruter ebde6724a1d1 newark_01 · 2026-08-25 23:18
1 50%
Loading events...
Opportunistic Bruter 3abd8afc92dc newark_01 · 2026-08-04 14:46
1 50%
Loading events...
Opportunistic Bruter fa30e2c777f7 newark_01 · 2026-08-02 06:10
1 50%
Loading events...
Opportunistic Bruter e7bce1f36a57 newark_01 · 2026-07-27 17:18
1 50%
Loading events...
Opportunistic Bruter b55f13e49040 newark_01 · 2026-07-26 13:10
1 50%
Loading events...
Opportunistic Bruter cc6fe1818815 newark_01 · 2026-07-23 23:43
1 50%
Loading events...
{# Cloudflare Web Analytics — cookieless, public pages only. The context processor withholds the token from authenticated requests. #}