← Back to feed

103.82.27.19

Threat Confidence

47%

Location

🇻🇳 VN

ASN

AS135905 · VIETNAM POSTS AND TELECOMMUNICATIONS GROUP

Cloud Provider

—

Total Events

2639

Top 1% by volume

Agent Count

First / Last Seen

2026-03-19 16:28 — 2026-03-25 14:05

Attack Types

ssh:bruteforce

External Corroboration

Blocklist.de

Reported 2026-03-27 19:41

blocklist_de:reported

Campaigns

AS135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP

ASN · 6 IPs · 5868 events

Session Forensics

scanner ×4 reconnaissance ×321 credential_harvester ×2 opportunistic_bruter ×9

Sessions

336 (96 with login)

Avg Depth Score

0.57

Commands Executed

Files Downloaded

Notable Commands

hostname; echo '___BSEP_A1B2C3___'; uname -a; echo '___BSEP_A1B2C3___'; whoami; echo '___BSEP_A1B2C3___'; pwd; echo '___BSEP_A1B2C3___'; ls -la /; echo '___BSEP_A1B2C3___'; ps aux | head -15; echo '___BSEP_A1B2C3___'; netstat -tulpn | head -10; echo '___BSEP_A1B2C3___'; history | tail -5; echo '___BSEP_A1B2C3___'; ssh -V 2>&1; echo '___BSEP_A1B2C3___'; uptime; echo '___BSEP_A1B2C3___'; mount | head -5; echo '___BSEP_A1B2C3___'; env | head -10; echo '___BSEP_A1B2C3___'; cat /etc/os-release 2>/dev/null | head -6; echo '___BSEP_A1B2C3___'; grep MemTotal /proc/meminfo 2>/dev/null; echo '___BSEP_A1B2C3___'; df -h / 2>/dev/null | tail -1; echo '___BSEP_A1B2C3___'; cat /proc/version 2>/dev/null; echo '___BSEP_A1B2C3___'; grep 'model name' /proc/cpuinfo 2>/dev/null | head -1; echo '___BSEP_A1B2C3___'; cat /etc/issue 2>/dev/null; echo '___BSEP_A1B2C3___'; last -n 3 2>/dev/null | head -3; echo '___BSEP_A1B2C3___'; ls /dev 2>/dev/null | wc -l; echo '___BSEP_A1B2C3___'; ls /var/log 2>/dev/null | wc -l; echo '___BSEP_A1B2C3___'; ls /opt 2>/dev/null; echo '___BSEP_A1B2C3___'; crontab -l 2>/dev/null | head -5; echo '___BSEP_A1B2C3___'; nproc 2>/dev/null || grep -c '^processor' /proc/cpuinfo 2>/dev/null

Fingerprints

HASSH

16443846184eafde36765c9bab2f4397

SSH Client

SSH-2.0-Go

Recent Events (last 50)

Timestamp	Port	Proto	Event	Location
2026-03-25 14:05:43	:22	ssh	cowrie.session.closed	sin
2026-03-25 14:05:32	:22	ssh	cowrie.client.kex	sin
2026-03-25 14:05:32	:22	ssh	cowrie.client.version	sin
2026-03-25 14:05:31	:22	ssh	cowrie.session.connect	sin
2026-03-25 13:35:48	:22	ssh	cowrie.session.closed	sin
2026-03-25 13:35:45	:22	ssh	cowrie.login.success	sin
2026-03-25 13:35:37	:22	ssh	cowrie.client.kex	sin
2026-03-25 13:35:37	:22	ssh	cowrie.client.version	sin
2026-03-25 13:35:35	:22	ssh	cowrie.session.connect	sin
2026-03-25 13:06:18	:22	ssh	cowrie.session.closed	sin
2026-03-25 13:06:18	:22	ssh	cowrie.log.closed	sin
2026-03-25 13:06:16	:22	ssh	cowrie.command.input	sin
2026-03-25 13:06:16	:22	ssh	cowrie.session.params	sin
2026-03-25 13:06:12	:22	ssh	cowrie.login.success	sin
2026-03-25 13:06:04	:22	ssh	cowrie.client.kex	sin
2026-03-25 13:06:04	:22	ssh	cowrie.client.version	sin
2026-03-25 13:06:02	:22	ssh	cowrie.session.connect	sin
2026-03-25 12:36:58	:22	ssh	cowrie.session.closed	sin
2026-03-25 12:36:58	:22	ssh	cowrie.log.closed	sin
2026-03-25 12:36:57	:22	ssh	cowrie.command.input	sin
2026-03-25 12:36:57	:22	ssh	cowrie.session.params	sin
2026-03-25 12:36:54	:22	ssh	cowrie.login.success	sin
2026-03-25 12:36:50	:22	ssh	cowrie.client.kex	sin
2026-03-25 12:36:50	:22	ssh	cowrie.client.version	sin
2026-03-25 12:36:49	:22	ssh	cowrie.session.connect	sin
2026-03-25 12:07:56	:22	ssh	cowrie.session.closed	sin
2026-03-25 12:07:56	:22	ssh	cowrie.login.success	sin
2026-03-25 12:07:46	:22	ssh	cowrie.client.kex	sin
2026-03-25 12:07:46	:22	ssh	cowrie.client.version	sin
2026-03-25 12:07:44	:22	ssh	cowrie.session.connect	sin
2026-03-25 11:38:40	:22	ssh	cowrie.session.closed	sin
2026-03-25 11:38:29	:22	ssh	cowrie.client.kex	sin
2026-03-25 11:38:29	:22	ssh	cowrie.client.version	sin
2026-03-25 11:38:28	:22	ssh	cowrie.session.connect	sin
2026-03-25 11:07:56	:22	ssh	cowrie.session.closed	sin
2026-03-25 11:07:56	:22	ssh	cowrie.log.closed	sin
2026-03-25 11:07:54	:22	ssh	cowrie.command.input	sin
2026-03-25 11:07:54	:22	ssh	cowrie.session.params	sin
2026-03-25 11:07:50	:22	ssh	cowrie.login.success	sin
2026-03-25 11:07:44	:22	ssh	cowrie.client.kex	sin
2026-03-25 11:07:43	:22	ssh	cowrie.client.version	sin
2026-03-25 11:07:42	:22	ssh	cowrie.session.connect	sin
2026-03-25 10:37:09	:22	ssh	cowrie.session.closed	sin
2026-03-25 10:37:09	:22	ssh	cowrie.log.closed	sin
2026-03-25 10:37:08	:22	ssh	cowrie.command.input	sin
2026-03-25 10:37:08	:22	ssh	cowrie.session.params	sin
2026-03-25 10:37:04	:22	ssh	cowrie.login.success	sin
2026-03-25 10:36:58	:22	ssh	cowrie.client.kex	sin
2026-03-25 10:36:58	:22	ssh	cowrie.client.version	sin
2026-03-25 10:36:57	:22	ssh	cowrie.session.connect	sin