IntrusionLabs IntrusionLabs
← Back to feed

91.92.242.247

TAGGED MALICIOUS how we decide →
Why: Our sensors observed proxy abuser sessions · certainty: inferred
Threat Confidence
48%
Assessment
Proxy checker: validates compromised hosts as traffic relays
  • Logged in with one credential in 2,193 of 2,193 logins: it returns to a host it treats as already compromised rather than guessing passwords.
  • Opened tunnels through the host in 2,193 sessions (2,193 proxy checks), requesting google.com to confirm the relay works.
  • Active for 15 days, 2026-09-16 to 2026-10-01.
  • Part of a 5-IP campaign from the same network, active in the same window.
Generated from the counts on this page by fixed rules; each line cites the number it rests on.
Location
🇳🇱 NL / Amsterdam
ASN
AS202412 · Omegatech LTD
Cloud Provider
—
Total Events
24563
Top 1% by volume
Agent Count
1
First / Last Seen
2026-09-16 17:55 — 2026-10-01 18:44
Attack Types
ssh:connection ssh:credential-reuse ssh:proxy-abuse
MITRE ATT&CK Techniques
Reconnaissance
T1595 T1595.001
Initial Access
T1078
Discovery
T1046
Command and Control
T1090 T1572
External Corroboration
Not flagged by any external feeds
Campaigns
AS202412 Omegatech LTD ASN Active medium 🇳🇱 NL
5 IPs 276248 events
ssh:bruteforcetelnet:bruteforce
2026-02-18 — 2026-05-11 · 5 IPs from the same network (Omegatech LTD, AS202412) were active during overlapping time periods. Temporal correlation across …
Session Forensics
scanner ×40 proxy_abuser ×2189 opportunistic_bruter ×4
Sessions
2233 (2193 with login)
Avg Depth Score
0.84
Commands Executed
0
Files Downloaded
0
Fingerprints
1 SSH client banner · 1 HASSH fingerprint
HASSH
a7a87fbe86774c2e40cc4a7ea2ab1b3c
SSH Client
SSH-2.0-libssh2_1.8.1
Evidence Timeline
Proxy Abuser 03e4ab7381ce w4m_singapore_01 · 2026-10-01 18:44
1 85%
Loading events...
Proxy Abuser 80ad604355db w4m_singapore_01 · 2026-10-01 18:09
1 85%
Loading events...
Proxy Abuser 1d8c701a8445 w4m_singapore_01 · 2026-10-01 17:44
1 85%
Loading events...
Proxy Abuser 7235a5b5beff w4m_singapore_01 · 2026-10-01 17:08
1 85%
Loading events...
Proxy Abuser c3a431febc2d w4m_singapore_01 · 2026-10-01 16:40
1 85%
Loading events...
Proxy Abuser 8129c405f86c w4m_singapore_01 · 2026-10-01 16:10
1 85%
Loading events...
Proxy Abuser d6e5b9f2a373 w4m_singapore_01 · 2026-10-01 15:38
1 85%
Loading events...
Proxy Abuser 84e098098404 w4m_singapore_01 · 2026-10-01 15:07
1 85%
Loading events...
Proxy Abuser 5fbefeebe20e w4m_singapore_01 · 2026-10-01 14:36
1 85%
Loading events...
Proxy Abuser c7b073612d79 w4m_singapore_01 · 2026-10-01 14:06
1 85%
Loading events...
Proxy Abuser f65f54ad9a86 w4m_singapore_01 · 2026-10-01 13:42
1 85%
Loading events...
Proxy Abuser 764d8659e362 w4m_singapore_01 · 2026-10-01 13:07
1 85%
Loading events...
Proxy Abuser 74d0f5bf5769 w4m_singapore_01 · 2026-10-01 12:37
1 85%
Loading events...
Proxy Abuser f5bb88bbc11a w4m_singapore_01 · 2026-10-01 12:08
1 85%
Loading events...
Proxy Abuser 8bf377115af5 w4m_singapore_01 · 2026-10-01 11:39
1 85%
Loading events...
Proxy Abuser a9814fe0cf1d w4m_singapore_01 · 2026-10-01 11:10
1 85%
Loading events...
Proxy Abuser e75f41478ce6 w4m_singapore_01 · 2026-10-01 10:36
1 85%
Loading events...
Proxy Abuser 6bc9fd4d15b3 w4m_singapore_01 · 2026-10-01 06:34
1 85%
Loading events...
Proxy Abuser 0748f60fbed5 w4m_singapore_01 · 2026-10-01 06:06
1 85%
Loading events...
Proxy Abuser 98d94393cdfa w4m_singapore_01 · 2026-10-01 05:31
1 85%
Loading events...
Proxy Abuser 34521c37f264 w4m_singapore_01 · 2026-10-01 05:01
1 85%
Loading events...
Proxy Abuser 809958594a92 w4m_singapore_01 · 2026-10-01 04:31
1 85%
Loading events...
Proxy Abuser ab7083caae9d w4m_singapore_01 · 2026-10-01 03:59
1 85%
Loading events...
Proxy Abuser cc0adf953289 w4m_singapore_01 · 2026-10-01 03:31
1 85%
Loading events...
Proxy Abuser 422d11bc15fe w4m_singapore_01 · 2026-10-01 03:04
1 85%
Loading events...
Proxy Abuser 45f750a4ab47 w4m_singapore_01 · 2026-10-01 02:31
1 85%
Loading events...
Proxy Abuser 3f83e9c9013e w4m_singapore_01 · 2026-10-01 02:03
1 85%
Loading events...
Proxy Abuser f48fe9867eef w4m_singapore_01 · 2026-10-01 01:31
1 85%
Loading events...
Proxy Abuser 28655c283193 w4m_singapore_01 · 2026-10-01 01:04
1 85%
Loading events...
Proxy Abuser e8bef98cda7c w4m_singapore_01 · 2026-10-01 00:36
1 85%
Loading events...
Proxy Abuser b7e5321fb359 w4m_singapore_01 · 2026-10-01 00:01
1 85%
Loading events...
Proxy Abuser cd38a8ed1969 w4m_singapore_01 · 2026-09-30 23:33
1 85%
Loading events...
Proxy Abuser f64fac8d89a9 w4m_singapore_01 · 2026-09-30 23:05
1 85%
Loading events...
Proxy Abuser 6f7fb35f4966 w4m_singapore_01 · 2026-09-30 22:29
1 85%
Loading events...
Proxy Abuser f1be19935738 w4m_singapore_01 · 2026-09-30 22:02
1 85%
Loading events...
Proxy Abuser 335aea2c524d w4m_singapore_01 · 2026-09-30 21:34
1 85%
Loading events...
Proxy Abuser ce3caa68468a w4m_singapore_01 · 2026-09-30 21:01
1 85%
Loading events...
Proxy Abuser ad0d37b6028c w4m_singapore_01 · 2026-09-30 20:29
1 85%
Loading events...
Proxy Abuser caa92052d676 w4m_singapore_01 · 2026-09-30 20:01
1 85%
Loading events...
Proxy Abuser c2c6aa8338c9 w4m_singapore_01 · 2026-09-30 19:31
1 85%
Loading events...
Proxy Abuser f1b2fcae316d w4m_singapore_01 · 2026-09-30 19:05
1 85%
Loading events...
Proxy Abuser 5acf21f26955 w4m_singapore_01 · 2026-09-30 18:30
1 85%
Loading events...
Proxy Abuser c6598dbc5098 w4m_singapore_01 · 2026-09-30 18:03
1 85%
Loading events...
Proxy Abuser e263234a710c w4m_singapore_01 · 2026-09-30 17:29
1 85%
Loading events...
Proxy Abuser d1cc1ff01386 w4m_singapore_01 · 2026-09-30 17:06
1 85%
Loading events...
Proxy Abuser f24c02941bb5 w4m_singapore_01 · 2026-09-30 16:38
1 85%
Loading events...
Proxy Abuser a233bcb76f22 w4m_singapore_01 · 2026-09-30 16:00
1 85%
Loading events...
Proxy Abuser 89d66b5bb1e6 w4m_singapore_01 · 2026-09-30 15:31
1 85%
Loading events...
Proxy Abuser 786bc3eccce7 w4m_singapore_01 · 2026-09-30 15:08
1 85%
Loading events...
Proxy Abuser b22a8d016311 w4m_singapore_01 · 2026-09-30 14:31
1 85%
Loading events...