IntrusionLabs IntrusionLabs
← Back to feed

27.79.41.68

TAGGED SUSPICIOUS how we decide →
Threat Confidence
48%
Location
🇻🇳 VN / Da Nang
ASN
AS7552 · Viettel Group
Cloud Provider
—
Total Events
106
Above average by volume
Agent Count
1
First / Last Seen
2026-05-31 01:34 — 2026-05-31 01:59
Attack Types
ssh:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
T1595 T1595.002
Initial Access
T1078
Credential Access
T1110 T1110.001
Discovery
T1046
Command and Control
T1090 T1572
External Corroboration
Not flagged by any external feeds
Campaigns
AS7552 Viettel Group ASN Active medium 🇻🇳 VN
18 IPs 2717 events
ssh:bruteforce
2026-02-16 — ongoing · 18 IPs from the same network (Viettel Group, AS7552) were active during overlapping time periods. Temporal correlation across …
Session Forensics
scanner ×3 proxy_abuser ×2 credential_probe ×14 opportunistic_bruter ×2
Sessions
21 (4 with login)
Avg Depth Score
0.28
Commands Executed
0
Files Downloaded
0
Fingerprints
HASSH
fda360b1b4f4d3455cb75c6e7edb1d11
SSH Client
SSH-2.0-AsyncSSH_2.1.0
Evidence Timeline
Credential Probe 4c888c03273b w4m_singapore_01 · 2026-05-31 01:59
1 20%
Loading events...
Credential Probe 84c6540fa7c6 w4m_singapore_01 · 2026-05-31 01:58
1 20%
Loading events...
Credential Probe 5fdc8e92a987 w4m_singapore_01 · 2026-05-31 01:58
1 20%
Loading events...
Credential Probe 5bd06090aacc w4m_singapore_01 · 2026-05-31 01:55
1 20%
Loading events...
Credential Probe 19f2eac4fe2a w4m_singapore_01 · 2026-05-31 01:55
1 20%
Loading events...
Scanner 1128d06ed359 w4m_singapore_01 · 2026-05-31 01:52
15%
Loading events...
Scanner 8ecde3d98f51 w4m_singapore_01 · 2026-05-31 01:50
15%
Loading events...
Credential Probe fa2cc10b0e61 w4m_singapore_01 · 2026-05-31 01:52
1 20%
Loading events...
Proxy Abuser c38460b86c76 w4m_singapore_01 · 2026-05-31 01:49
1 85%
Loading events...
Opportunistic Bruter f583ac804bd5 w4m_singapore_01 · 2026-05-31 01:48
1 50%
Loading events...
Credential Probe 426eeeb5c4c3 w4m_singapore_01 · 2026-05-31 01:48
1 20%
Loading events...
Opportunistic Bruter 9f5714d3ec12 w4m_singapore_01 · 2026-05-31 01:44
1 50%
Loading events...
Scanner 0fa50902de2d w4m_singapore_01 · 2026-05-31 01:42
15%
Loading events...
Credential Probe 0afadd113c27 w4m_singapore_01 · 2026-05-31 01:42
1 20%
Loading events...
Credential Probe f994201d3f9d w4m_singapore_01 · 2026-05-31 01:41
1 20%
Loading events...
Credential Probe 1f0b47e190bb w4m_singapore_01 · 2026-05-31 01:39
1 20%
Loading events...
Credential Probe cb147a3bad9b w4m_singapore_01 · 2026-05-31 01:39
1 20%
Loading events...
Credential Probe fcfeb0c5b4d6 w4m_singapore_01 · 2026-05-31 01:37
1 20%
Loading events...
Proxy Abuser 7d5eff2c34f7 w4m_singapore_01 · 2026-05-31 01:37
1 85%
Loading events...
Credential Probe ae0501ce7b49 w4m_singapore_01 · 2026-05-31 01:34
1 20%
Loading events...
Credential Probe a7950c9fccfe w4m_singapore_01 · 2026-05-31 01:34
1 20%
Loading events...