Critical Alert
Security alert: 103.159.54.61 rated 10/10 based on 70 verified incidents.
Threat profile indicates sustained malicious activity with 90% confidence rating.
More threatening than 100% of monitored IPs
IP Address
103.159.54.61
IPv4
Public
VN
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
VN
Location
HT3 VIETNAM TECHNOLOGY IN...
ASN 153413
70
Reports
Honeypot
Data Source
Threat Categories
SSH
29
Brute-Force
15
Hacking
13
Exploited Host
3
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 2 weeks indicates persistent threat actor operations.
First Observed
7. September 2026
Last Activity
23. September 2026
Recent (7 days)
0 incidents
High-Risk Network Association
This IP belongs to a network (ASN 153413) with elevated threat levels. The ISP HT3 VIETNAM TECHNOLOGY INVESTMENT AND DEVELOPMENT JOINT STOCK COMPANY hosts multiple reported malicious addresses, suggesting systemic security issues or permissive policies.
Network-wide patterns may indicate this is part of a larger malicious infrastructure.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Long-term blocking recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
1/10
Very Low
Confidence Score
90%
Verified
Confidence History
8. Jul 2026 - 23. Sep 2026
90%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Exploited Host Hacking SSH | Honeypot x3 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH Exploited Host | Honeypot x3 | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH Hacking | Honeypot x2 | 75% |
Technical Details
Basic Information
- IP Address
- 103.159.54.61
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
VN
- ASN
- AS153413
- ISP
- HT3 VIETNAM TECHNOLOGY INVESTMENT AND DEVELOPMENT JOINT STOCK COMPANY
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 70
- First Reported
- 7 Apr 2026
- Last Reported
- 23 Sep 2026, 21:17
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS153413
HT3 VIETNAM TECHNOLOGY INVESTMENT AND DEVELOPMENT JOINT STOCK COMPANY
VN
Network Threat Assessment
8/10
This network has a high threat level with significant malicious activity reported across multiple IPs.
Network Statistics
1
Total IPs Monitored
16
Total Reports
16
Reports per IP
Network Context
This IP address belongs to HT3 VIETNAM TECHNOLOGY INVESTMENT AND DEVELOPMENT JOINT STOCK COMPANY (AS153413), which manages 1 IP addresses in our monitoring system. Out of these, 16 have been reported for suspicious activities, resulting in a network-wide threat level of 8/10.
Network warning:
This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
100
%
Global Threat Ranking
This IP is more threatening than 100% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 810,892 reported IPs worldwide
Threat Level
10/10
avg: 6.3
++
Total Reports
70
avg: 9
++
Network Comparison
Compared against 2 IPs in ASN 153413
Threat Level
10/10
network avg: 9.0
=
Total Reports
70
network avg: 44
++
Network HT3 VIETNAM TECHNOLOGY INVESTMENT AND DEVELOPMENT JOINT STOCK COMPANY has overall threat level 8/10
Geographic Comparison
Compared against 8,870 IPs in VN
Threat Level
10/10
country avg: 6.6
++
Total Reports
70
country avg: 9
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
7 Sep 2026
7 reports
Daily Average
0.6
reports/day
Most Active
Wednesday
19 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
67
Hacking
17
Brute-Force
15
Exploited Host
5
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 21:00 with 15 reports
Weekly Activity
Geographic Threat Distribution
737,373 threat incidents tracked globally • Last 24h: 35,163 Logs
FEED
Top Threat Sources
-
01
United States144,136 19.5% -
02
Brazil110,954 15%
-
03
India82,861 11.2%
-
04
China45,003 6.1%
-
05
SC29,242 4%
-
06
Germany17,668 2.4%
-
07
Netherlands17,557 2.4%
-
08
Pakistan16,824 2.3%
-
09
Argentina16,204 2.2%
-
10
Colombia15,143 2.1%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
1
Related IPs
8/10
Avg Threat
97%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same subnet range, likely same network segment.
1
Related IPs
8/10
Avg Threat
97%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
10/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
103.153.65.59
10/10
Confidence
100%
Reports
93
ISP
VIET DIGITAL TE...
103.154.63.88
10/10
Confidence
100%
Reports
86
ISP
VIETNAM POSTS A...
14.224.253.94
10/10
Confidence
100%
Reports
75
ISP
VNPT Corp
14.225.239.154
10/10
Confidence
100%
Reports
71
ISP
VIETNAM POSTS A...
103.28.37.12
10/10
Confidence
100%
Reports
63
ISP
NhanHoa Softwar...
171.244.5.213
10/10
Confidence
100%
Reports
60
ISP
CHT Compamy Ltd
42.117.2.215
10/10
Confidence
100%
Reports
57
ISP
FPT Telecom Com...
123.30.238.247
10/10
Confidence
100%
Reports
56
ISP
VNPT Corp
115.146.121.179
10/10
Confidence
100%
Reports
53
ISP
CMC Telecom Inf...
115.146.121.88
10/10
Confidence
100%
Reports
52
ISP
CMC Telecom Inf...
42.112.31.145
10/10
Confidence
100%
Reports
47
ISP
FPT Telecom Com...
27.118.20.168
10/10
Confidence
100%
Reports
44
ISP
Hanel Communica...
221.133.3.83
10/10
Confidence
100%
Reports
38
ISP
Sai gon Postel ...
103.252.123.105
10/10
Confidence
100%
Reports
37
ISP
VMON CLOUD COMP...
117.2.125.84
10/10
Confidence
100%
Reports
27
ISP
Viettel Group
IPs with similar threat level and confidence scores.
15
Related IPs
9.3/10
Avg Threat
90%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
192.161.49.2
8/10
Confidence
90%
Reports
5,403
Location
US
US
130.12.180.101
10/10
Confidence
90%
Reports
1,202
Location
US
US
130.12.180.89
10/10
Confidence
90%
Reports
1,195
Location
US
US
88.119.170.179
10/10
Confidence
90%
Reports
580
Location
NL
NL
211.223.107.86
10/10
Confidence
90%
Reports
433
Location
KR
KR
103.99.179.204
8/10
Confidence
90%
Reports
422
Location
US
US
221.228.203.3
10/10
Confidence
90%
Reports
384
Location
CN
CN
101.89.141.184
10/10
Confidence
90%
Reports
378
Location
CN
CN
158.94.209.22
8/10
Confidence
90%
Reports
320
Location
NL
NL
176.65.149.236
8/10
Confidence
90%
Reports
274
Location
NL
NL
94.154.43.254
8/10
Confidence
90%
Reports
264
Location
NL
NL
80.94.92.179
10/10
Confidence
90%
Reports
200
Location
RO
RO
80.66.83.73
10/10
Confidence
90%
Reports
189
Location
RU
RU
91.196.152.51
10/10
Confidence
90%
Reports
180
Location
FR
FR
91.196.152.83
10/10
Confidence
90%
Reports
169
Location
FR
FR