IntrusionLabs IntrusionLabs
← Back to feed

201.219.166.206

Threat Confidence
31%
Location
🇦🇷 AR / Concordia
ASN
AS28015 · MERCO COMUNICACIONES
Cloud Provider
—
Total Events
16
Average by volume
Agent Count
2
First / Last Seen
2026-08-06 05:25 — 2026-08-29 10:55
Attack Types
ssh:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
T1595
Credential Access
T1110 T1110.001
Discovery
T1046
External Corroboration
Not flagged by any external feeds
Campaigns
Multi-Agent Scan SCAN Active medium
40 IPs 30661 events
2026-08-18 — ongoing · 40 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Subnet 201.219.166.0/24 SUBNET Active high 🇦🇷 AR
3 IPs 16 events
ssh:bruteforce
2026-08-06 — ongoing · 3 IPs from the same /24 subnet (201.219.166.0/24) were observed attacking our sensors within the same time window. …
AS28015 MERCO COMUNICACIONES ASN Active medium 🇦🇷 AR
5 IPs 24 events
ssh:bruteforce
2026-08-06 — ongoing · 5 IPs from the same network (MERCO COMUNICACIONES, AS28015) were active during overlapping time periods. Temporal correlation across …
Multi-Agent Scan SCAN Active medium
41 IPs 72366 events
2026-05-19 — ongoing · 41 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
13 IPs 41899 events
2026-05-13 — ongoing · 13 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan SCAN Active medium
78 IPs 240101 events
2026-04-09 — ongoing · 78 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
6 IPs 280 events
2026-04-04 — ongoing · 6 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
13 IPs 5144 events
2026-04-01 — ongoing · 13 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
114 IPs 346453 events
2026-04-01 — ongoing · 114 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
21 IPs 4115 events
2026-03-31 — ongoing · 21 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
26 IPs 46341 events
2026-03-09 — ongoing · 26 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
57 IPs 283997 events
2026-03-09 — ongoing · 57 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
48 IPs 214939 events
2026-03-09 — ongoing · 48 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
36 IPs 89506 events
2026-03-09 — ongoing · 36 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
52 IPs 216235 events
2026-03-09 — ongoing · 52 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
53 IPs 233270 events
2026-03-09 — ongoing · 53 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
43 IPs 183490 events
2026-03-09 — ongoing · 43 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
22 IPs 5639 events
2026-03-09 — ongoing · 22 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
63 IPs 240641 events
2026-03-09 — ongoing · 63 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
71 IPs 219278 events
2026-03-09 — ongoing · 71 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
109 IPs 417936 events
2026-03-09 — ongoing · 109 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
85 IPs 333441 events
2026-03-09 — ongoing · 85 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
77 IPs 254232 events
2026-03-04 — ongoing · 77 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan SCAN Active medium
79 IPs 189239 events
2026-03-03 — ongoing · 79 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
63 IPs 67423 events
2026-03-03 — ongoing · 63 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan SCAN Active medium
82 IPs 287569 events
2026-03-02 — ongoing · 82 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan SCAN Active medium
30 IPs 54734 events
2026-03-01 — ongoing · 30 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
41 IPs 128713 events
2026-02-27 — ongoing · 41 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
36 IPs 150771 events
2026-02-27 — ongoing · 36 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
91 IPs 370982 events
2026-02-27 — ongoing · 91 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
54 IPs 227696 events
2026-02-26 — ongoing · 54 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
109 IPs 338829 events
2026-02-26 — ongoing · 109 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
59 IPs 252864 events
2026-02-26 — ongoing · 59 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
63 IPs 261970 events
2026-02-26 — ongoing · 63 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
105 IPs 390882 events
2026-02-26 — ongoing · 105 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan SCAN Active medium
97 IPs 369427 events
2026-02-26 — ongoing · 97 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
74 IPs 264361 events
2026-02-26 — ongoing · 74 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
81 IPs 312637 events
2026-02-26 — ongoing · 81 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Session Forensics
scanner ×8
Sessions
8
Avg Depth Score
0.15
Commands Executed
0
Files Downloaded
0
Evidence Timeline
Scanner 5ff697003198 w4m_singapore_01 · 2026-08-29 10:55
15%
Loading events...
Scanner 20518ddcb984 w4m_singapore_01 · 2026-08-29 10:55
15%
Loading events...
Scanner 61cd20766440 w4m_seattle_01 · 2026-08-25 03:31
15%
Loading events...
Scanner ebcaa2c62675 w4m_seattle_01 · 2026-08-25 03:30
15%
Loading events...
Scanner 2d7ea12deb2b w4m_singapore_01 · 2026-08-18 18:36
15%
Loading events...
Scanner 64a8d98f6edd w4m_singapore_01 · 2026-08-18 18:35
15%
Loading events...
Scanner 81df0b74a2e5 w4m_seattle_01 · 2026-08-06 05:25
15%
Loading events...
Scanner 475b2d065436 w4m_seattle_01 · 2026-08-06 05:25
15%
Loading events...
{# Cloudflare Web Analytics — cookieless, public pages only. The context processor withholds the token from authenticated requests. #}