← Back to feed

AS45820 Tata Teleservices ISP AS

ASN Ended medium
Why this campaign was detected
5 IPs from the same network (Tata Teleservices ISP AS, AS45820) were active during overlapping time periods. Temporal correlation across a shared autonomous system suggests infrastructure controlled by the same entity.
Primary ASN
AS45820 · Tata Teleservices ISP AS
Subnet
Country
🇮🇳 IN
Cloud Provider
Member Count
5 IPs
Below average
Total Events
206
Below average by volume
Started / Ended
2026-02-22 18:35 — 2026-05-11 14:22
Attack Types
ssh:bruteforce
MITRE ATT&CK Techniques
Initial Access
Credential Access
Command and Control
Member Actors
IP Address Behavior Confidence Flags Events Agents Attack Types Hostname Last Seen
14.195.83.210 credential_harvester 49% 183 2 ssh:bruteforce mail.tataidc.com 2026-04-02 15:21 evidence →
49.200.178.146 malware_dropper 36% 23 1 ssh:bruteforce 2026-03-04 19:52 evidence →
14.194.128.158 credential_probe 13% 21 1 ssh:bruteforce static-158.128.194.14-tataidc.co.in 2026-03-04 08:10 evidence →
61.12.86.90 credential_probe 13% 15 1 ssh:bruteforce mail.tataidc.com 2026-03-04 14:52 evidence →
14.98.28.43 credential_probe 12% 10 1 ssh:bruteforce 2026-03-06 22:54 evidence →
VPN Known VPN or proxy provider
DROP ASN on Spamhaus DROP list
Nx OSINT Corroborated by N external threat feeds
{# Cloudflare Web Analytics — cookieless, public pages only. The context processor withholds the token from authenticated requests. #}