← Back to feed
85.95.190.139
85-95-190-139.saransk.ru
(saransk.ru)
✓ FCrDNS
Assessment
Post-login reconnaissance: logs in and surveys the host
- Ran 2 commands on the host.
- Part of a 254-IP campaign probing the same targets.
Generated from the counts on this page by fixed rules; each line cites the number it rests on.
Location
🇷🇺 RU / Saransk
ASN
AS12389 · Rostelecom
Cloud Provider
—
Total Events
10
Average by volume
Agent Count
2
First / Last Seen
2026-10-22 12:07 — 2026-10-22 12:20
Attack Types
MITRE ATT&CK Techniques
External Corroboration
Not flagged by any external feeds
Campaigns
Multi-Agent Scan
SCAN
Active
medium
210 IPs
511150 events
2026-09-14 — ongoing · 210 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
6 IPs
9393 events
2026-05-29 — ongoing · 6 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
153 IPs
497838 events
2026-03-26 — ongoing · 153 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
128 IPs
200774 events
2026-03-18 — ongoing · 128 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
254 IPs
665816 events
2026-03-04 — ongoing · 254 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Session Forensics
Sessions
2 (1 with login)
Avg Depth Score
0.38
Commands Executed
2
Files Downloaded
0
Notable Commands
- /bin/busybox
- cd /proc && cat self/cmdline
Evidence Timeline
Reconnaissance
b7c1609aa6c7
LOGIN
2
1
60%
Loading events...
$ /bin/busybox$ cd /proc && cat self/cmdline
Scanner
079ae8bee046
15%
Loading events...