← Back to feed

116.99.170.252

Threat Confidence
63%
Location
🇻🇳 VN
ASN
AS24086 · Viettel Corporation
Cloud Provider
—
Total Events
177
Above average by volume
Agent Count
2
First / Last Seen
2026-04-04 00:41 — 2026-04-04 02:47
Attack Types
ssh:bruteforce
External Corroboration
Blocklist.de
Reported 2026-04-04 03:06
blocklist_de:reported
Campaigns
AS24086 Viettel Corporation ASN Active medium 🇻🇳 VN
5 IPs 722 events
ssh:bruteforce
2026-03-16 — ongoing · 5 IPs from the same network (Viettel Corporation, AS24086) were active during overlapping time periods. Temporal correlation across …
Multi-Agent Scan SCAN Active medium
80 IPs 125967 events
2026-03-01 — ongoing · 80 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
81 IPs 126142 events
2026-03-01 — ongoing · 81 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Session Forensics
scanner ×3 proxy_abuser ×3 credential_harvester ×27 opportunistic_bruter ×2
Sessions
35 (5 with login)
Avg Depth Score
0.38
Commands Executed
0
Files Downloaded
0
Fingerprints
HASSH
fda360b1b4f4d3455cb75c6e7edb1d11
SSH Client
SSH-2.0-AsyncSSH_2.1.0
Recent Events (last 50)
Timestamp Port Proto Event Location
2026-04-04 02:47:39 :22 ssh cowrie.session.closed sea
2026-04-04 02:47:38 :22 ssh cowrie.login.failed sea
2026-04-04 02:47:35 :22 ssh cowrie.client.kex sea
2026-04-04 02:47:35 :22 ssh cowrie.client.version sea
2026-04-04 02:47:35 :22 ssh cowrie.session.connect sea
2026-04-04 01:20:18 :22 ssh cowrie.session.closed sin
2026-04-04 01:20:16 :22 ssh cowrie.login.failed sin
2026-04-04 01:20:16 :22 ssh cowrie.client.kex sin
2026-04-04 01:20:16 :22 ssh cowrie.client.version sin
2026-04-04 01:20:15 :22 ssh cowrie.session.connect sin
2026-04-04 01:19:34 :22 ssh cowrie.session.closed sin
2026-04-04 01:19:33 :22 ssh cowrie.login.failed sin
2026-04-04 01:19:27 :22 ssh cowrie.session.closed sin
2026-04-04 01:19:26 :22 ssh cowrie.login.failed sin
2026-04-04 01:19:25 :22 ssh cowrie.client.kex sin
2026-04-04 01:19:25 :22 ssh cowrie.client.version sin
2026-04-04 01:19:25 :22 ssh cowrie.session.connect sin
2026-04-04 01:19:19 :22 ssh cowrie.session.closed sin
2026-04-04 01:19:17 :22 ssh cowrie.login.failed sin
2026-04-04 01:19:14 :22 ssh cowrie.client.kex sin
2026-04-04 01:19:14 :22 ssh cowrie.client.version sin
2026-04-04 01:19:14 :22 ssh cowrie.session.connect sin
2026-04-04 01:18:59 :22 ssh cowrie.client.kex sin
2026-04-04 01:18:59 :22 ssh cowrie.client.version sin
2026-04-04 01:18:59 :22 ssh cowrie.session.connect sin
2026-04-04 01:18:54 :22 ssh cowrie.session.closed sin
2026-04-04 01:18:53 :22 ssh cowrie.login.failed sin
2026-04-04 01:18:43 :22 ssh cowrie.client.kex sin
2026-04-04 01:18:41 :22 ssh cowrie.client.version sin
2026-04-04 01:18:41 :22 ssh cowrie.session.connect sin
2026-04-04 01:17:11 :22 ssh cowrie.session.closed sin
2026-04-04 01:17:10 :22 ssh cowrie.login.failed sin
2026-04-04 01:17:09 :22 ssh cowrie.client.kex sin
2026-04-04 01:17:09 :22 ssh cowrie.client.version sin
2026-04-04 01:17:09 :22 ssh cowrie.session.connect sin
2026-04-04 01:14:37 :22 ssh cowrie.session.closed sin
2026-04-04 01:14:15 :22 ssh cowrie.session.closed sin
2026-04-04 01:14:12 :22 ssh cowrie.login.failed sin
2026-04-04 01:14:07 :22 ssh cowrie.client.kex sin
2026-04-04 01:14:07 :22 ssh cowrie.client.version sin
2026-04-04 01:14:07 :22 ssh cowrie.session.connect sin
2026-04-04 01:14:04 :22 ssh cowrie.login.failed sin
2026-04-04 01:14:03 :22 ssh cowrie.client.kex sin
2026-04-04 01:14:02 :22 ssh cowrie.client.version sin
2026-04-04 01:14:02 :22 ssh cowrie.session.connect sin
2026-04-04 01:13:43 :22 ssh cowrie.session.closed sin
2026-04-04 01:13:42 :22 ssh cowrie.login.failed sin
2026-04-04 01:13:42 :22 ssh cowrie.client.kex sin
2026-04-04 01:13:42 :22 ssh cowrie.client.version sin
2026-04-04 01:13:42 :22 ssh cowrie.session.connect sin