← Back to feed

165.101.40.180

Threat Confidence
27%
Location
🇻🇳 VN
ASN
AS153410 · NEXT STEP TECHNOLOGY JOINT STOCK COMPANY
Cloud Provider
Total Events
30
Average by volume
Agent Count
1
First / Last Seen
2026-09-01 11:10 — 2026-09-01 17:06
Attack Types
ssh:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
Initial Access
Credential Access
Discovery
External Corroboration
Not flagged by any external feeds
Campaigns
Not associated with any campaigns
Session Forensics
scanner ×1 reconnaissance ×2 opportunistic_bruter ×2
Sessions
5 (4 with login)
Avg Depth Score
0.47
Commands Executed
4
Files Downloaded
0
Notable Commands
  • echo "TEST"; echo -n "System :"; lsb_release -d | awk -F':' '{print " "$2}'; echo -n "Apt : "; which apt; echo -n "Cpu speed :"; cat /proc/cpuinfo | grep 'cpu MHz' | uniq | awk -F: '{printf " %.3f\n", $2}'; echo -n "Cpu count : "; nproc; echo -n "Memory : "; free -h | awk '/Mem:/ {print $2}'
  • lsb_release -d
Fingerprints
SSH-2.0-Go
Evidence Timeline
Reconnaissance 5a8a2d4bf2f7 w4m_seattle_01 · 2026-09-01 17:06
2 1 60%
Loading events...
Opportunistic Bruter d8964a2e40cf w4m_seattle_01 · 2026-09-01 17:06
1 50%
Loading events...
Reconnaissance e9504f96987b w4m_seattle_01 · 2026-09-01 11:47
2 1 60%
Loading events...
Opportunistic Bruter f2a80d12c3cb w4m_seattle_01 · 2026-09-01 11:47
1 50%
Loading events...
Scanner 2211da058caa w4m_seattle_01 · 2026-09-01 11:10
15%
Loading events...
{# Cloudflare Web Analytics — cookieless, public pages only. The context processor withholds the token from authenticated requests. #}