← Back to feed

AS24086 Viettel Corporation

ASN Ended medium
Why this campaign was detected
5 IPs from the same network (Viettel Corporation, AS24086) were active during overlapping time periods. Temporal correlation across a shared autonomous system suggests infrastructure controlled by the same entity.
Primary ASN
AS24086 · Viettel Corporation
Subnet
Country
🇻🇳 VN
Cloud Provider
Member Count
5 IPs
Below average
Total Events
366
Below average by volume
Started / Ended
2026-03-16 05:06 — 2026-07-04 03:48
Attack Types
ssh:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
Initial Access
Credential Access
Discovery
Command and Control
Member Actors
IP Address Behavior Confidence Flags Events Agents Attack Types Hostname Last Seen
116.110.158.190 credential_harvester 36% 179 1 ssh:bruteforce 2026-08-19 12:52 evidence →
116.110.221.40 credential_harvester 35% 91 1 ssh:bruteforce 2026-08-19 12:55 evidence →
116.110.219.159 credential_harvester 34% 66 1 ssh:bruteforce 2026-08-19 12:31 evidence →
116.110.16.129 credential_probe 22% 15 2 ssh:bruteforce 2026-08-17 10:37 evidence →
116.110.16.166 credential_probe 22% 15 2 ssh:bruteforce 2026-08-17 10:39 evidence →
VPN Known VPN or proxy provider
DROP ASN on Spamhaus DROP list
Nx OSINT Corroborated by N external threat feeds
{# Cloudflare Web Analytics — cookieless, public pages only. The context processor withholds the token from authenticated requests. #}