← Back to feed

27.79.44.206

TAGGED SUSPICIOUS how we decide →

Threat Confidence

63%

Location

🇻🇳 VN / Da Nang

ASN

AS7552 · Viettel Group

Cloud Provider

—

Total Events

152

Above average by volume

Agent Count

First / Last Seen

2026-06-05 03:43 — 2026-06-05 06:06

Attack Types

ssh:bruteforce

MITRE ATT&CK Techniques

Reconnaissance

T1595 T1595.002

Initial Access

T1078

Credential Access

T1110 T1110.001

Discovery

T1046

Command and Control

T1090 T1572

External Corroboration

Blocklist.de

Reported 2026-06-05 06:02

blocklist_de:reported

Campaigns

Multi-Agent Scan SCAN Active medium

69 IPs 205243 events

2026-03-02 — ongoing · 69 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …

AS7552 Viettel Group ASN Active medium 🇻🇳 VN

15 IPs 3431 events

ssh:bruteforce

2026-02-16 — ongoing · 15 IPs from the same network (Viettel Group, AS7552) were active during overlapping time periods. Temporal correlation across …

Session Forensics

scanner ×4 proxy_abuser ×3 credential_probe ×19 opportunistic_bruter ×2

Sessions

28 (5 with login)

Avg Depth Score

0.28

Commands Executed

Files Downloaded

Fingerprints

HASSH

fda360b1b4f4d3455cb75c6e7edb1d11

SSH Client

SSH-2.0-AsyncSSH_2.1.0

Evidence Timeline

Credential Probe 4026734eff38 newark_01 · 2026-06-05 06:06

1 20%

Loading events...

Credential Probe 3dbc7d4171ed newark_01 · 2026-06-05 06:01

1 20%

Loading events...

Credential Probe 17f71a3bd91d newark_01 · 2026-06-05 05:57

1 20%

Loading events...

Credential Probe 3f578da78ebe w4m_singapore_01 · 2026-06-05 04:23

1 20%

Loading events...

Credential Probe dfed643ef2da w4m_singapore_01 · 2026-06-05 04:19

1 20%

Loading events...

Scanner c0026853ec7f w4m_singapore_01 · 2026-06-05 04:18

15%

Loading events...

Proxy Abuser df28f87ef405 w4m_singapore_01 · 2026-06-05 04:15

1 85%

Loading events...

Credential Probe 62ac42fab907 w4m_singapore_01 · 2026-06-05 04:12

1 20%

Loading events...

Credential Probe 4b4dcd2466c1 w4m_singapore_01 · 2026-06-05 04:12

1 20%

Loading events...

Scanner c92f6eaccb02 w4m_singapore_01 · 2026-06-05 04:10

15%

Loading events...

Credential Probe e489ed4f03f1 w4m_singapore_01 · 2026-06-05 04:07

1 20%

Loading events...

Credential Probe b0ebac35f285 w4m_singapore_01 · 2026-06-05 04:07

1 20%

Loading events...

Opportunistic Bruter 8aebf1f55aef w4m_singapore_01 · 2026-06-05 04:05

1 50%

Loading events...

Scanner 4654b0f42495 w4m_singapore_01 · 2026-06-05 04:03

15%

Loading events...

Credential Probe 1a7e7e0db9e4 w4m_singapore_01 · 2026-06-05 04:01

1 20%

Loading events...

Credential Probe f578a5903090 w4m_singapore_01 · 2026-06-05 04:00

1 20%

Loading events...

Proxy Abuser 9d3c6da5acec w4m_singapore_01 · 2026-06-05 03:59

1 85%

Loading events...

Proxy Abuser 164e54546e1e w4m_singapore_01 · 2026-06-05 03:57

1 85%

Loading events...

Credential Probe abb13ff5c806 w4m_singapore_01 · 2026-06-05 03:55

1 20%

Loading events...

Credential Probe 210f9244514d w4m_singapore_01 · 2026-06-05 03:54

1 20%

Loading events...

Credential Probe 1c70bb46c0d5 w4m_singapore_01 · 2026-06-05 03:53

1 20%

Loading events...

Credential Probe fdcfbb3e6d91 w4m_singapore_01 · 2026-06-05 03:51

1 20%

Loading events...

Opportunistic Bruter 2444747966b8 w4m_singapore_01 · 2026-06-05 03:49

1 50%

Loading events...

Credential Probe 7b8a2b227988 w4m_singapore_01 · 2026-06-05 03:46

1 20%

Loading events...

Scanner 29b7a94766ff w4m_singapore_01 · 2026-06-05 03:43

15%

Loading events...

Credential Probe e6ba49b91d64 w4m_singapore_01 · 2026-06-05 03:45

1 20%

Loading events...

Credential Probe 49d49abe51de w4m_singapore_01 · 2026-06-05 03:44

1 20%

Loading events...

Credential Probe 16173140f6f2 w4m_singapore_01 · 2026-06-05 03:43

1 20%

Loading events...