← Back to feed

116.99.172.104

Threat Confidence
52%
Location
🇻🇳 VN
ASN
AS24086 · Viettel Corporation
Cloud Provider
—
Total Events
74
Above average by volume
Agent Count
1
First / Last Seen
2026-04-04 02:50 — 2026-04-04 03:38
Attack Types
ssh:bruteforce
External Corroboration
Blocklist.de
Reported 2026-04-04 04:54
blocklist_de:reported
Campaigns
AS24086 Viettel Corporation ASN Active medium 🇻🇳 VN
7 IPs 806 events
ssh:bruteforce
2026-03-16 — ongoing · 7 IPs from the same network (Viettel Corporation, AS24086) were active during overlapping time periods. Temporal correlation across …
Session Forensics
scanner ×1 proxy_abuser ×3 credential_harvester ×9
Sessions
13 (3 with login)
Avg Depth Score
0.45
Commands Executed
0
Files Downloaded
0
Fingerprints
HASSH
fda360b1b4f4d3455cb75c6e7edb1d11
SSH Client
SSH-2.0-AsyncSSH_2.1.0
Recent Events (last 50)
Timestamp Port Proto Event Location
2026-04-04 03:38:26 :22 ssh cowrie.session.closed sea
2026-04-04 03:37:48 :22 ssh cowrie.login.failed sea
2026-04-04 03:37:30 :22 ssh cowrie.client.kex sea
2026-04-04 03:37:28 :22 ssh cowrie.client.version sea
2026-04-04 03:37:28 :22 ssh cowrie.session.connect sea
2026-04-04 03:34:45 :22 ssh cowrie.session.closed sea
2026-04-04 03:34:41 :22 ssh cowrie.login.failed sea
2026-04-04 03:33:48 :22 ssh cowrie.client.kex sea
2026-04-04 03:33:37 :22 ssh cowrie.client.version sea
2026-04-04 03:33:37 :22 ssh cowrie.session.connect sea
2026-04-04 03:29:37 :22 ssh cowrie.session.closed sea
2026-04-04 03:29:35 :22 ssh cowrie.login.failed sea
2026-04-04 03:29:35 :22 ssh cowrie.client.kex sea
2026-04-04 03:29:35 :22 ssh cowrie.client.version sea
2026-04-04 03:29:35 :22 ssh cowrie.session.connect sea
2026-04-04 03:17:31 :22 ssh cowrie.session.closed sea
2026-04-04 03:17:26 :22 ssh cowrie.login.failed sea
2026-04-04 03:17:25 :22 ssh cowrie.client.kex sea
2026-04-04 03:17:23 :22 ssh cowrie.client.version sea
2026-04-04 03:17:23 :22 ssh cowrie.session.connect sea
2026-04-04 03:13:16 :22 ssh cowrie.session.closed sea
2026-04-04 03:13:15 :22 ssh cowrie.login.failed sea
2026-04-04 03:13:13 :22 ssh cowrie.client.kex sea
2026-04-04 03:13:13 :22 ssh cowrie.client.version sea
2026-04-04 03:13:13 :22 ssh cowrie.session.connect sea
2026-04-04 03:11:36 :22 ssh cowrie.session.closed sea
2026-04-04 03:11:36 :80 ssh cowrie.direct-tcpip.data sea
2026-04-04 03:11:36 :80 ssh cowrie.direct-tcpip.ja4h sea
2026-04-04 03:11:35 :80 ssh cowrie.direct-tcpip.request sea
2026-04-04 03:11:35 :22 ssh cowrie.login.success sea
2026-04-04 03:11:33 :22 ssh cowrie.client.kex sea
2026-04-04 03:11:33 :22 ssh cowrie.client.version sea
2026-04-04 03:11:33 :22 ssh cowrie.session.connect sea
2026-04-04 03:05:23 :22 ssh cowrie.session.closed sea
2026-04-04 03:05:22 :80 ssh cowrie.direct-tcpip.data sea
2026-04-04 03:05:22 :80 ssh cowrie.direct-tcpip.ja4h sea
2026-04-04 03:05:19 :80 ssh cowrie.direct-tcpip.request sea
2026-04-04 03:05:18 :22 ssh cowrie.login.success sea
2026-04-04 03:05:16 :22 ssh cowrie.client.kex sea
2026-04-04 03:05:11 :22 ssh cowrie.client.version sea
2026-04-04 03:05:11 :22 ssh cowrie.session.connect sea
2026-04-04 03:03:36 :22 ssh cowrie.session.closed sea
2026-04-04 03:03:10 :22 ssh cowrie.login.failed sea
2026-04-04 03:03:08 :22 ssh cowrie.client.kex sea
2026-04-04 03:03:08 :22 ssh cowrie.client.version sea
2026-04-04 03:03:08 :22 ssh cowrie.session.connect sea
2026-04-04 02:56:26 :22 ssh cowrie.session.closed sea
2026-04-04 02:56:26 :22 ssh cowrie.session.closed sea
2026-04-04 02:56:24 :22 ssh cowrie.login.failed sea
2026-04-04 02:56:23 :22 ssh cowrie.login.failed sea