← Back to feed
Location
🇧🇬 BG
ASN
AS197170 · TechTies Inc.
Cloud Provider
—
Total Events
2530
Top 5% by volume
Agent Count
2
First / Last Seen
2026-09-06 13:33 — 2026-09-11 06:36
Attack Types
MITRE ATT&CK Techniques
Initial Access
External Corroboration
Blocklist.de
blocklist_de:reported
Campaigns
Subnet 109.160.32.0/24
SUBNET
Active
high
🇧🇬 BG
54 IPs
207086 events
ssh:bruteforce
2026-09-05 — ongoing · 54 IPs from the same /24 subnet (109.160.32.0/24) were observed attacking our sensors within the same time window. …
Multi-Agent Scan
SCAN
Active
medium
63 IPs
295396 events
2026-03-03 — ongoing · 63 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
84 IPs
309125 events
2026-03-03 — ongoing · 84 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
70 IPs
310512 events
2026-03-02 — ongoing · 70 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
HASSH 084386fa7ae5… — SSH-2.0-Go (82 IPs, 11 countries)
HASSH
Active
high
🇧🇬 BG
82 IPs
680795 events
http:scanssh:bruteforce
2026-02-23 — ongoing · 82 IPs are running an identical SSH client (HASSH fingerprint 084386fa7ae5…). Top network: TechTies Inc. (AS197170). Geographic and …
HASSH 0a07365cc01f… — SSH-2.0-Go (99 IPs, 20 countries)
HASSH
Active
high
🇧🇬 BG
99 IPs
631527 events
ssh:bruteforce
2026-02-22 — ongoing · 99 IPs are running an identical SSH client (HASSH fingerprint 0a07365cc01f…). Top network: TechTies Inc. (AS197170). Geographic and …
Session Forensics
Sessions
506
Avg Depth Score
0.2
Commands Executed
0
Files Downloaded
0
Fingerprints
HASSH
SSH Client
Evidence Timeline
Scanner
435b4d1c82ac
15%
Loading events...