← Back to feed
Location
🇺🇸 US / Buffalo
ASN
AS36352 · HostPapa
Cloud Provider
—
Total Events
100
Above average by volume
Agent Count
1
First / Last Seen
2026-06-02 22:11 — 2026-06-02 22:52
Attack Types
MITRE ATT&CK Techniques
External Corroboration
Blocklist.de
blocklist_de:reported
Campaigns
HASSH f555226df196… — SSH-2.0-libssh_0.9.6 (1006 IPs, 87 countries)
HASSH
Active
high
🇨🇳 CN
1006 IPs
430328 events
http:scanssh:bruteforce
2026-02-25 — ongoing · 1006 IPs are running an identical SSH client (HASSH fingerprint f555226df196…). Top network: UCLOUD INFORMATION TECHNOLOGY HK LIMITED …
AS36352 HostPapa
ASN
Active
medium
🇺🇸 US
31 IPs
6026 events
ssh:bruteforce
2026-02-19 — ongoing · 31 IPs from the same network (HostPapa, AS36352) were active during overlapping time periods. Temporal correlation across a …
Session Forensics
Sessions
20
Avg Depth Score
0.2
Commands Executed
0
Files Downloaded
0
Fingerprints
HASSH
SSH Client
Evidence Timeline