← Back to feed

27.79.40.99

TAGGED SUSPICIOUS how we decide →

Threat Confidence

63%

Location

🇻🇳 VN / Da Nang

ASN

AS7552 · Viettel Group

Cloud Provider

—

Total Events

187

Above average by volume

Agent Count

First / Last Seen

2026-04-23 01:54 — 2026-04-23 04:11

Attack Types

ssh:bruteforce

MITRE ATT&CK Techniques

Reconnaissance

T1595 T1595.002

Initial Access

T1078

Credential Access

T1110 T1110.001

Discovery

T1046

Command and Control

T1090 T1572

External Corroboration

Blocklist.de

Reported 2026-04-23 04:01

blocklist_de:reported

Campaigns

Multi-Agent Scan SCAN Active medium

63 IPs 114683 events

2026-02-24 — ongoing · 63 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …

AS7552 Viettel Group ASN Active medium 🇻🇳 VN

6 IPs 1174 events

ssh:bruteforce

2026-02-16 — ongoing · 6 IPs from the same network (Viettel Group, AS7552) were active during overlapping time periods. Temporal correlation across …

Session Forensics

scanner ×4 proxy_abuser ×6 credential_probe ×24 opportunistic_bruter ×1

Sessions

35 (7 with login)

Avg Depth Score

0.31

Commands Executed

Files Downloaded

Fingerprints

HASSH

fda360b1b4f4d3455cb75c6e7edb1d11

SSH Client

SSH-2.0-AsyncSSH_2.1.0

Evidence Timeline

Credential Probe 9341154694ed w4m_seattle_01 · 2026-04-23 04:11

1 20%

Loading events...

Credential Probe 76b942ced0ab w4m_seattle_01 · 2026-04-23 04:09

1 20%

Loading events...

Credential Probe cd9f3e050eb1 w4m_seattle_01 · 2026-04-23 04:04

1 20%

Loading events...

Proxy Abuser 1b3b7b60b45b w4m_seattle_01 · 2026-04-23 04:03

1 85%

Loading events...

Credential Probe 3a748af04f8c w4m_singapore_01 · 2026-04-23 02:37

1 20%

Loading events...

Credential Probe ef3d24561b33 w4m_singapore_01 · 2026-04-23 02:37

1 20%

Loading events...

Credential Probe 0ba525703a99 w4m_singapore_01 · 2026-04-23 02:35

1 20%

Loading events...

Credential Probe 8a4a5aea5df6 w4m_singapore_01 · 2026-04-23 02:33

1 20%

Loading events...

Credential Probe 4cce323c02f0 w4m_singapore_01 · 2026-04-23 02:32

1 20%

Loading events...

Credential Probe 28b2c4a12c69 w4m_singapore_01 · 2026-04-23 02:31

1 20%

Loading events...

Credential Probe 9565d2ec9875 w4m_singapore_01 · 2026-04-23 02:31

1 20%

Loading events...

Credential Probe c0ff94c13c52 w4m_singapore_01 · 2026-04-23 02:30

1 20%

Loading events...

Scanner 1c69dfbb2f85 w4m_singapore_01 · 2026-04-23 02:29

15%

Loading events...

Scanner e28f518de2f0 w4m_singapore_01 · 2026-04-23 02:26

15%

Loading events...

Proxy Abuser d98e5ec3a1c7 w4m_singapore_01 · 2026-04-23 02:25

1 85%

Loading events...

Credential Probe a2bc04fd8bd8 w4m_singapore_01 · 2026-04-23 02:23

1 20%

Loading events...

Opportunistic Bruter bc05804ef3b3 w4m_singapore_01 · 2026-04-23 02:21

1 50%

Loading events...

Credential Probe fbc96497d03e w4m_singapore_01 · 2026-04-23 02:21

1 20%

Loading events...

Credential Probe a2f2345fde2b w4m_singapore_01 · 2026-04-23 02:19

1 20%

Loading events...

Credential Probe 281fa3f4b56f w4m_singapore_01 · 2026-04-23 02:17

1 20%

Loading events...

Credential Probe 34c30f90c963 w4m_singapore_01 · 2026-04-23 02:16

1 20%

Loading events...

Scanner f3a46c099665 w4m_singapore_01 · 2026-04-23 02:15

15%

Loading events...

Proxy Abuser f93b5e67b2e1 w4m_singapore_01 · 2026-04-23 02:14

1 85%

Loading events...

Credential Probe 3f2d74453e91 w4m_singapore_01 · 2026-04-23 02:14

1 20%

Loading events...

Credential Probe 912d8464a2f0 w4m_singapore_01 · 2026-04-23 02:11

1 20%

Loading events...

Proxy Abuser db16d77121e5 w4m_singapore_01 · 2026-04-23 02:08

1 85%

Loading events...

Credential Probe 5d4d92111825 w4m_singapore_01 · 2026-04-23 02:06

1 20%

Loading events...

Credential Probe 65ef7b308be5 w4m_singapore_01 · 2026-04-23 02:03

1 20%

Loading events...

Credential Probe abc48046d271 w4m_singapore_01 · 2026-04-23 02:02

1 20%

Loading events...

Credential Probe d0251ede8321 w4m_singapore_01 · 2026-04-23 02:02

1 20%

Loading events...

Proxy Abuser 722156bc5de4 w4m_singapore_01 · 2026-04-23 02:00

1 85%

Loading events...

Scanner 9c6d0584afb2 w4m_singapore_01 · 2026-04-23 01:58

15%

Loading events...

Credential Probe 7a2f5d945860 w4m_singapore_01 · 2026-04-23 01:56

1 20%

Loading events...

Credential Probe 89d8056ae058 w4m_singapore_01 · 2026-04-23 01:54

1 20%

Loading events...

Proxy Abuser 87c87adf2802 w4m_singapore_01 · 2026-04-23 01:54

1 85%

Loading events...