← Back to feed

197.253.54.22

TAGGED SUSPICIOUS how we decide →

Threat Confidence

30%

Location

🇳🇬 NG / Lagos Island

ASN

AS37282 · Main one Cable Company Nigeria Limited

Cloud Provider

—

Total Events

Above average by volume

Agent Count

First / Last Seen

2026-08-23 19:20 — 2026-08-25 10:21

Attack Types

ssh:bruteforce

MITRE ATT&CK Techniques

Reconnaissance

T1595.002

Initial Access

T1078

Credential Access

T1110 T1110.001

External Corroboration

Blocklist.de

Reported 2026-09-01 10:01

blocklist_de:reported

Campaigns

HASSH 594c57870d0e… — SSH-2.0-Go (50 IPs, 15 countries) HASSH Ended high 🇺🇸 US

50 IPs 2275 events

ssh:bruteforce

2026-05-25 — ongoing · 50 IPs are running an identical SSH client (HASSH fingerprint 594c57870d0e…). Top network: OVH SAS (AS16276). Geographic and …

Session Forensics

credential_probe ×6 opportunistic_bruter ×4

Sessions

10 (4 with login)

Avg Depth Score

0.32

Commands Executed

Files Downloaded

Fingerprints

HASSH

395758246789bf179d3afa84dbf399e9 41ceb444bf2e8b35581d2d700815f30e 4950bb6b8ded222a0a1db6d153ca9171 594c57870d0ec290ad3f328d5116eb18 59d91721b0f8bc8737417606eb81b0b7 59fbf9fbbe29d56a77567c9eba17e7d9 64a870bf8a134842b6374d47dfbf9ca9 8469c64c4063cbe209dd64b98a6b21a8 bc95567b13fd974eabcbfd484ed30049 c862f0a4450c15289889d7cc014e8696

SSH Client

SSH-2.0-Go

Evidence Timeline

Credential Probe fef6c00a76be newark_01 · 2026-08-25 10:21

1 20%

Loading events...

Opportunistic Bruter 133cd4201cd2 newark_01 · 2026-08-24 06:52

1 50%

Loading events...

Opportunistic Bruter 31867cdc5aad newark_01 · 2026-08-24 06:41

1 50%

Loading events...

Opportunistic Bruter c07b16e1090c newark_01 · 2026-08-24 03:52

1 50%

Loading events...

Opportunistic Bruter 8a3a01b3a1d6 newark_01 · 2026-08-24 03:42

1 50%

Loading events...

Credential Probe 026b9a57046e newark_01 · 2026-08-24 00:56

1 20%

Loading events...

Credential Probe eb5c697806b8 newark_01 · 2026-08-24 00:46

1 20%

Loading events...

Credential Probe 79aafef87b03 newark_01 · 2026-08-23 21:49

1 20%

Loading events...

Credential Probe cd729aea9331 newark_01 · 2026-08-23 21:34

1 20%

Loading events...

Credential Probe 0456d34f4a76 newark_01 · 2026-08-23 19:20

1 20%

Loading events...