IOC Radar
IPMediumSignal 67/100

161.248.147.250

Location
VietnamVietnam
Ho Chi Minh City, Ho Chi Minh City (HCMC)
ASN
AS135918
Pow Pow LLC
First Seen
Mar 23, 2026
Last Seen
Jun 4, 2026
Mar 23
First Seen
81d ago
Jun 4
Last Seen
9d ago
12
Reports
source reports
67%
Confidence
medium
Found in 12 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
67%
Signal Score
67 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

10 techniques

Network Information

CountryVNVietnam
RegionHo Chi Minh City, Ho Chi Minh City (HCMC)
ASNAS135918
OrganizationPow Pow LLC

Feed Intelligence Summary

12 reports67% confidence
12
Source reports
67%
Confidence score
Category tags
active scanactive scanningaptasiabad web botblocklist_allblog spambotnet activitybrute forcebrute force attackbrute force attackerbrute-forcebruteforcecredential accesscredential stuffingddosddos attackdenial of servicedigital oceanexploitation activityexploited hosthackingidentity & access exploitationindicatornetworkpassword attacksping of deathreconnaissanceresearchedscannerspamsshssh attackt1110.001t1110.002t1110.003t1110.004t1190t1203t1499.001t1595.001t1595.002t1595.003threat actortor nodevietnamvnweb app attackweb application attackweb exploitationweb spam

Activity Timeline

1 total obs
Jun 4Jun 4

Threat Activity Heatmap

· Peak: 2026-06-04
Less
More
Mon
Wed
Fri
Jun
·
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Threat ScoreMedium Risk
67
SIGNAL
Signal Score
67%
Confidence
12
Reports
First seenMar 23, 2026
Last seenJun 4, 2026
GeolocationVN
CountryVietnam
LocationHo Chi Minh City, Ho Chi Minh City (HCMC)
ASNAS135918
OrgPow Pow LLC
Coords0.0000, 0.0000

VirusTotal

Not checked

WHOIS

description
IPv4 hosts detected attempting to brute force SSH on DigitalOcean Toronto (CA) honeypot
raw
inetnum: 161.248.146.0 - 161.248.147.255 netname: POWCLOUD-VN descr: Pow Pow LLC descr: C13/18 Road No. 2, Hamlet 3B, Vinh Loc B Commune, Binh Chanh District, Ho Chi Minh City admin-c: NTN19-AP tech-c: NQC6-AP country: VN mnt-by: MAINT-VN-VNNIC mnt-irt: IRT-VNNIC-AP mnt-routes: MAINT-VN-VNNIC status: ASSIGNED PORTABLE last-modified: 2025-01-10T04:14:12Z source: APNIC irt: IRT-VNNIC-AP address: Ha Noi, VietNam phone: +84-24-35564944 fax-no: +84-24-37821462 e-mail: [email protected] abuse-mailbox: [email protected] admin-c: NTTT1-AP tech-c: NTTT1-AP auth: # Filtered mnt-by: MAINT-VN-VNNIC last-modified: 2025-11-17T23:08:34Z source: APNIC person: Nguyen Quoc Cuong address: POWCLOUD-VN country: VN phone: +84-847087387 e-mail: [email protected] nic-hdl: NQC6-AP mnt-by: MAINT-VN-VNNIC last-modified: 2025-01-10T04:10:51Z source: APNIC person: Nguyen Thu Ngan address: POWCLOUD-VN country: VN phone: +84-945409956 e-mail: [email protected] nic-hdl: NTN19-AP mnt-by: MAINT-VN-VNNIC last-modified: 2025-01-10T04:10:27Z source: APNIC route: 161.248.146.0/23 descr: POWCLOUD-VN origin: AS135918 mnt-by: MAINT-VN-VNNIC last-modified: 2025-01-21T09:31:56Z source: APNIC
references
https://jamesbrine.com.au/digitaloceantoronto-ssh-bruteforce-ip-list-2026-04-16/, https://jamesbrine.com.au

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 2 months ago · Last seen 9 days ago
Appeared in 12 threat reports