← Back to feed
AS7303 Telecom Argentina S.A.
ASN Active mediumWhy this campaign was detected
34 IPs from the same network (Telecom Argentina S.A., AS7303) were active during overlapping time periods. Temporal correlation across a shared autonomous system suggests infrastructure controlled by the same entity.
Primary ASN
AS7303 · Telecom Argentina S.A.
Subnet
—
Country
🇦🇷 AR
Cloud Provider
—
Member Count
34 IPs
Below average
Total Events
4493
Below average by volume
Started / Ended
2026-02-26 22:22 — 2026-05-20 06:16
Attack Types
MITRE ATT&CK Techniques
Initial Access
Execution
Command and Control
Member Actors
| IP Address | Behavior | Confidence | Flags | Events | Agents | Attack Types | Hostname | Last Seen | |
|---|---|---|---|---|---|---|---|---|---|
| 181.10.138.162 | credential_harvester | 83% | 1x OSINT | 933 | 3 | ssh:bruteforcessh:connectionssh:malware | host162.181-10-138.telecom.net.ar | 2026-10-25 08:11 | evidence → |
| 186.139.251.57 | credential_harvester | 81% | 1x OSINT | 272 | 3 | ssh:bruteforcessh:malware | 57-251-139-186.fibertel.com.ar | 2026-10-25 07:27 | evidence → |
| 181.28.101.14 | credential_harvester | 81% | 1x OSINT | 1624 | 3 | ssh:bruteforcessh:connectionssh:malware | 14-101-28-181.fibertel.com.ar | 2026-10-23 23:35 | evidence → |
| 181.166.208.69 | scanner | 72% | 82 | 3 | telnet:connectiontelnet:intrusion | 69-208-166-181.fibertel.com.ar | 2026-10-25 06:52 | evidence → | |
| 190.19.65.132 | malware_dropper | 49% | 1168 | 1 | telnet:malware | 132-65-19-190.fibertel.com.ar | 2026-10-22 12:45 | evidence → | |
| 190.230.219.208 | credential_harvester | 48% | 1x OSINT | 298 | 1 | ssh:bruteforcessh:intrusionssh:malware | host208.190-230-219.telecom.net.ar | 2026-10-20 06:37 | evidence → |
| 190.188.25.14 | scanner | 38% | 8 | 2 | ssh:connectiontelnet:connection | 14-25-188-190.cab.prima.net.ar | 2026-10-23 07:55 | evidence → | |
| 190.189.16.252 | scanner | 34% | 8 | 1 | ssh:connectiontelnet:connection | 252-16-189-190.cab.prima.net.ar | 2026-10-25 20:46 | evidence → | |
| 200.117.150.51 | scanner | 33% | 6 | 1 | ssh:connectiontelnet:connection | host51.200-117-150.telecom.net.ar | 2026-10-25 18:37 | evidence → | |
| 181.30.195.25 | scanner | 31% | 4 | 1 | ssh:connectiontelnet:connection | 25-195-30-181.fibertel.com.ar | 2026-10-24 23:28 | evidence → | |
| 201.235.23.223 | scanner | 30% | 6 | 1 | ssh:connectiontelnet:connection | 223-23-235-201.fibertel.com.ar | 2026-10-24 05:15 | evidence → | |
| 190.195.26.99 | scanner | 30% | 4 | 1 | ssh:connectiontelnet:connection | 99-26-195-190.cab.prima.net.ar | 2026-10-24 01:38 | evidence → | |
| 152.169.208.95 | scanner | 27% | 6 | 1 | ssh:connectiontelnet:connection | 95-208-169-152.fibertel.com.ar | 2026-10-22 13:27 | evidence → | |
| 181.168.39.114 | scanner | 27% | 4 | 1 | ssh:connectiontelnet:connection | 114-39-168-181.fibertel.com.ar | 2026-10-22 18:14 | evidence → | |
| 190.229.25.78 | scanner | 25% | 4 | 1 | ssh:connection | host78.190-229-25.telecom.net.ar | 2026-10-25 15:15 | evidence → | |
| 181.99.6.160 | scanner | 24% | 4 | 1 | ssh:connection | host160.181-99-6.telecom.net.ar | 2026-10-25 13:50 | evidence → | |
| 190.194.106.221 | scanner | 24% | 2 | 1 | telnet:connection | 221-106-194-190.cab.prima.net.ar | 2026-10-25 16:25 | evidence → | |
| 190.16.117.224 | scanner | 23% | 4 | 1 | ssh:connectiontelnet:connection | 224-117-16-190.fibertel.com.ar | 2026-10-20 15:49 | evidence → | |
| 190.225.236.222 | scanner | 22% | 4 | 1 | ssh:connection | host222.190-225-236.telecom.net.ar | 2026-10-24 00:44 | evidence → | |
| 181.105.146.58 | scanner | 21% | 4 | 1 | ssh:connection | host58.181-105-146.telecom.net.ar | 2026-10-23 23:19 | evidence → | |
| 190.137.199.243 | scanner | 21% | 4 | 1 | ssh:connection | host243.190-137-199.telecom.net.ar | 2026-10-23 21:13 | evidence → | |
| 190.192.134.183 | scanner | 21% | 2 | 1 | telnet:connection | 183-134-192-190.cab.prima.net.ar | 2026-10-24 06:33 | evidence → | |
| 190.231.234.80 | scanner | 20% | 4 | 1 | ssh:connection | host80.190-231-234.telecom.net.ar | 2026-10-23 06:47 | evidence → | |
| 181.165.233.221 | scanner | 20% | 2 | 1 | telnet:connection | 221-233-165-181.fibertel.com.ar | 2026-10-23 15:41 | evidence → | |
| 181.229.67.157 | scanner | 19% | 4 | 1 | telnet:connection | 157-67-229-181.cab.prima.com.ar | 2026-10-22 11:31 | evidence → | |
| 181.14.255.155 | scanner | 18% | 4 | 1 | ssh:connection | host155.181-14-255.telecom.net.ar | 2026-10-21 22:15 | evidence → | |
| 181.168.108.98 | scanner | 17% | 2 | 1 | telnet:connection | 98-108-168-181.fibertel.com.ar | 2026-10-22 04:28 | evidence → | |
| 186.109.120.142 | scanner | 16% | 4 | 1 | ssh:connection | host142.186-109-120.telecom.net.ar | 2026-10-21 02:46 | evidence → | |
| 181.84.72.134 | scanner | 16% | 4 | 1 | ssh:connection | host134.181-84-72.telecom.net.ar | 2026-10-20 23:10 | evidence → | |
| 190.229.167.52 | scanner | 16% | 4 | 1 | ssh:connection | host52.190-229-167.telecom.net.ar | 2026-10-20 22:26 | evidence → | |
| 186.153.233.64 | scanner | 16% | 4 | 1 | ssh:connection | host64.186-153-233.telecom.net.ar | 2026-10-20 22:08 | evidence → | |
| 190.230.138.170 | scanner | 15% | 4 | 1 | ssh:connection | host170.190-230-138.telecom.net.ar | 2026-10-20 16:19 | evidence → | |
| 190.189.110.251 | scanner | 14% | 2 | 1 | telnet:connection | 251-110-189-190.cab.prima.net.ar | 2026-10-20 05:06 | evidence → | |
| 181.84.83.102 | scanner | 13% | 4 | 1 | ssh:connection | host102.181-84-83.telecom.net.ar | 2026-10-19 14:10 | evidence → |
VPN Known VPN or proxy provider
DROP ASN on Spamhaus DROP list
Nx OSINT Corroborated by N external threat feeds