IntrusionLabs IntrusionLabs
← Back to feed

201.219.164.56

Threat Confidence
13%
Location
🇦🇷 AR / Concordia
ASN
AS28015 · MERCO COMUNICACIONES
Cloud Provider
—
Total Events
4
Below average by volume
Agent Count
1
First / Last Seen
2026-08-16 09:53 — 2026-08-16 09:54
Attack Types
ssh:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
T1595
Credential Access
T1110 T1110.001
Discovery
T1046
External Corroboration
Not flagged by any external feeds
Campaigns
AS28015 MERCO COMUNICACIONES ASN Active medium 🇦🇷 AR
5 IPs 24 events
ssh:bruteforce
2026-08-06 — ongoing · 5 IPs from the same network (MERCO COMUNICACIONES, AS28015) were active during overlapping time periods. Temporal correlation across …
Session Forensics
scanner ×2
Sessions
2
Avg Depth Score
0.15
Commands Executed
0
Files Downloaded
0
Evidence Timeline
Scanner 30ff978c24b1 w4m_singapore_01 · 2026-08-16 09:54
15%
Loading events...
Scanner b05336e4437b w4m_singapore_01 · 2026-08-16 09:53
15%
Loading events...
{# Cloudflare Web Analytics — cookieless, public pages only. The context processor withholds the token from authenticated requests. #}