← Back to feed

27.79.2.141

Threat Confidence
64%
Location
🇻🇳 VN / Da Nang
ASN
AS7552 · Viettel Group
Cloud Provider
—
Total Events
299
Top 10% by volume
Agent Count
2
First / Last Seen
2026-04-04 17:37 — 2026-04-04 20:26
Attack Types
ssh:bruteforce
External Corroboration
Blocklist.de
Reported 2026-04-05 00:00
blocklist_de:reported
Campaigns
Multi-Agent Scan SCAN Active medium
96 IPs 175299 events
2026-02-27 — ongoing · 96 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
87 IPs 164455 events
2026-02-27 — ongoing · 87 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
91 IPs 165840 events
2026-02-27 — ongoing · 91 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
93 IPs 166550 events
2026-02-27 — ongoing · 93 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
95 IPs 167044 events
2026-02-27 — ongoing · 95 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
42 IPs 7539 events
2026-02-23 — ongoing · 42 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Linode. Scanning the same …
Multi-Agent Scan SCAN Active medium
43 IPs 65660 events
2026-02-22 — ongoing · 43 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
AS7552 Viettel Group ASN Active medium 🇻🇳 VN
24 IPs 3829 events
ssh:bruteforce
2026-02-16 — ongoing · 24 IPs from the same network (Viettel Group, AS7552) were active during overlapping time periods. Temporal correlation across …
Session Forensics
scanner ×4 proxy_abuser ×10 credential_harvester ×39 opportunistic_bruter ×1
Sessions
54 (11 with login)
Avg Depth Score
0.43
Commands Executed
0
Files Downloaded
0
Fingerprints
HASSH
fda360b1b4f4d3455cb75c6e7edb1d11
SSH Client
SSH-2.0-AsyncSSH_2.1.0
Recent Events (last 50)
Timestamp Port Proto Event Location
2026-04-04 20:26:58 :22 ssh cowrie.session.closed sea
2026-04-04 20:26:57 :22 ssh cowrie.login.failed sea
2026-04-04 20:26:55 :22 ssh cowrie.client.kex sea
2026-04-04 20:26:53 :22 ssh cowrie.client.version sea
2026-04-04 20:26:53 :22 ssh cowrie.session.connect sea
2026-04-04 20:23:47 :22 ssh cowrie.session.closed sea
2026-04-04 20:23:46 :22 ssh cowrie.login.failed sea
2026-04-04 20:23:43 :22 ssh cowrie.client.kex sea
2026-04-04 20:23:43 :22 ssh cowrie.client.version sea
2026-04-04 20:23:43 :22 ssh cowrie.session.connect sea
2026-04-04 20:20:19 :22 ssh cowrie.session.closed sea
2026-04-04 20:20:18 :22 ssh cowrie.login.failed sea
2026-04-04 20:20:17 :22 ssh cowrie.client.kex sea
2026-04-04 20:20:17 :22 ssh cowrie.client.version sea
2026-04-04 20:20:17 :22 ssh cowrie.session.connect sea
2026-04-04 20:16:54 :22 ssh cowrie.session.closed sea
2026-04-04 20:16:52 :22 ssh cowrie.login.failed sea
2026-04-04 20:16:52 :22 ssh cowrie.client.kex sea
2026-04-04 20:16:50 :22 ssh cowrie.client.version sea
2026-04-04 20:16:50 :22 ssh cowrie.session.connect sea
2026-04-04 20:12:37 :22 ssh cowrie.session.closed sea
2026-04-04 20:12:36 :22 ssh cowrie.login.failed sea
2026-04-04 20:12:34 :22 ssh cowrie.client.kex sea
2026-04-04 20:12:34 :22 ssh cowrie.client.version sea
2026-04-04 20:12:34 :22 ssh cowrie.session.connect sea
2026-04-04 20:07:06 :22 ssh cowrie.session.closed sea
2026-04-04 20:07:05 :22 ssh cowrie.login.failed sea
2026-04-04 20:07:05 :22 ssh cowrie.client.kex sea
2026-04-04 20:07:04 :22 ssh cowrie.client.version sea
2026-04-04 20:07:04 :22 ssh cowrie.session.connect sea
2026-04-04 20:05:38 :22 ssh cowrie.session.closed sea
2026-04-04 20:05:37 :22 ssh cowrie.login.failed sea
2026-04-04 20:05:35 :22 ssh cowrie.client.kex sea
2026-04-04 20:05:35 :22 ssh cowrie.client.version sea
2026-04-04 20:05:35 :22 ssh cowrie.session.connect sea
2026-04-04 20:02:22 :22 ssh cowrie.session.closed sea
2026-04-04 20:02:20 :22 ssh cowrie.login.failed sea
2026-04-04 20:02:19 :22 ssh cowrie.client.kex sea
2026-04-04 20:02:19 :22 ssh cowrie.client.version sea
2026-04-04 20:02:19 :22 ssh cowrie.session.connect sea
2026-04-04 19:55:50 :22 ssh cowrie.session.closed sea
2026-04-04 19:55:49 :22 ssh cowrie.login.failed sea
2026-04-04 19:55:47 :22 ssh cowrie.client.kex sea
2026-04-04 19:55:47 :22 ssh cowrie.client.version sea
2026-04-04 19:55:47 :22 ssh cowrie.session.connect sea
2026-04-04 19:53:16 :22 ssh cowrie.session.closed sea
2026-04-04 19:53:16 :80 ssh cowrie.direct-tcpip.data sea
2026-04-04 19:53:16 :80 ssh cowrie.direct-tcpip.ja4h sea
2026-04-04 19:53:16 :80 ssh cowrie.direct-tcpip.request sea
2026-04-04 19:53:15 :22 ssh cowrie.login.success sea