← Back to feed
Location
🇺🇸 US / Buffalo
ASN
AS36352 · HostPapa
Cloud Provider
—
Total Events
42
Average by volume
Agent Count
2
First / Last Seen
2026-05-03 02:50 — 2026-05-03 04:00
Attack Types
MITRE ATT&CK Techniques
External Corroboration
DShield Top Attackers
dshield:top_attacker
Campaigns
HASSH 14b2ddda386a… — SSH-2.0-libssh2_1.11.0 (58 IPs, 16 countries)
HASSH
Active
high
🇺🇸 US
58 IPs
1586 events
ssh:bruteforce
2026-04-22 — ongoing · 58 IPs are running an identical SSH client (HASSH fingerprint 14b2ddda386a…). Top network: HostPapa (AS36352). Geographic and ASN …
Multi-Agent Scan
SCAN
Active
medium
76 IPs
127444 events
2026-04-21 — ongoing · 76 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
113 IPs
153868 events
2026-04-21 — ongoing · 113 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
99 IPs
156308 events
2026-04-20 — ongoing · 99 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
109 IPs
147737 events
2026-04-08 — ongoing · 109 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
75 IPs
11517 events
2026-03-23 — ongoing · 75 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Linode. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
126 IPs
179230 events
2026-03-15 — ongoing · 126 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
90 IPs
128769 events
2026-03-09 — ongoing · 90 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
55 IPs
39708 events
2026-03-03 — ongoing · 55 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Session Forensics
Sessions
3
Avg Depth Score
0.4
Commands Executed
0
Files Downloaded
0
Fingerprints
HASSH
SSH Client
Evidence Timeline
Credential Harvester
7e2377e5c55c
5
40%
Loading events...
HASSH 14b2ddda386a4d1…
SSH-2.0-libssh2_1.11.0
Credential Harvester
a800199ec182
5
40%
Loading events...
HASSH 14b2ddda386a4d1…
SSH-2.0-libssh2_1.11.0
Credential Harvester
babde5bfb0aa
5
40%
Loading events...
HASSH 14b2ddda386a4d1…
SSH-2.0-libssh2_1.11.0