IntrusionLabs IntrusionLabs
← Back to feed

27.79.45.168

TAGGED SUSPICIOUS how we decide →
Threat Confidence
22%
Location
🇻🇳 VN / Da Nang
ASN
AS7552 · Viettel Group
Cloud Provider
—
Total Events
39
Average by volume
Agent Count
1
First / Last Seen
2026-05-07 07:22 — 2026-05-07 07:31
Attack Types
ssh:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
T1595 T1595.002
Credential Access
T1110 T1110.001
Discovery
T1046
External Corroboration
Not flagged by any external feeds
Campaigns
AS7552 Viettel Group ASN Active medium 🇻🇳 VN
18 IPs 3752 events
ssh:bruteforce
2026-02-16 — ongoing · 18 IPs from the same network (Viettel Group, AS7552) were active during overlapping time periods. Temporal correlation across …
Session Forensics
scanner ×1 credential_probe ×7
Sessions
8
Avg Depth Score
0.19
Commands Executed
0
Files Downloaded
0
Fingerprints
HASSH
fda360b1b4f4d3455cb75c6e7edb1d11
SSH Client
SSH-2.0-AsyncSSH_2.1.0
Evidence Timeline
Credential Probe 9493e2c32be5 w4m_singapore_01 · 2026-05-07 07:30
1 20%
Loading events...
Credential Probe fdc619ac2bd1 w4m_singapore_01 · 2026-05-07 07:30
1 20%
Loading events...
Credential Probe cd4b88d5f94f w4m_singapore_01 · 2026-05-07 07:28
1 20%
Loading events...
Credential Probe 6265ea71ad5f w4m_singapore_01 · 2026-05-07 07:27
1 20%
Loading events...
Scanner 8e725b78766d w4m_singapore_01 · 2026-05-07 07:25
15%
Loading events...
Credential Probe e43efa59ffa3 w4m_singapore_01 · 2026-05-07 07:25
1 20%
Loading events...
Credential Probe 9ea660a80d46 w4m_singapore_01 · 2026-05-07 07:24
1 20%
Loading events...
Credential Probe b5e0b5945ebf w4m_singapore_01 · 2026-05-07 07:22
1 20%
Loading events...