← Back to feed

213.199.52.47

TAGGED SUSPICIOUS how we decide →
Threat Confidence
44%
Location
🇫🇷 FR / Lauterbourg
ASN
AS51167 · Contabo GmbH
Cloud Provider
Total Events
42
Average by volume
Agent Count
2
First / Last Seen
2026-05-17 23:59 — 2026-05-27 15:13
Attack Types
ssh:bruteforce
MITRE ATT&CK Techniques
Credential Access
External Corroboration
Not flagged by any external feeds
Campaigns
Multi-Agent Scan SCAN Active medium
116 IPs 253442 events
2026-05-08 — ongoing · 116 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
126 IPs 263717 events
2026-05-08 — ongoing · 126 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
HASSH 14b2ddda386a… — SSH-2.0-libssh2_1.11.0 (270 IPs, 39 countries) HASSH Active high 🇺🇸 US
270 IPs 69418 events
ssh:bruteforce
2026-04-22 — ongoing · 270 IPs are running an identical SSH client (HASSH fingerprint 14b2ddda386a…). Top network: OVH SAS (AS16276). Geographic and …
Multi-Agent Scan SCAN Active medium
65 IPs 92797 events
2026-04-05 — ongoing · 65 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
129 IPs 149011 events
2026-03-10 — ongoing · 129 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
37 IPs 72198 events
2026-03-07 — ongoing · 37 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
37 IPs 73123 events
2026-03-07 — ongoing · 37 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
41 IPs 105764 events
2026-03-07 — ongoing · 41 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
33 IPs 23394 events
2026-03-07 — ongoing · 33 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
39 IPs 72799 events
2026-03-07 — ongoing · 39 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
86 IPs 184733 events
2026-03-07 — ongoing · 86 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
38 IPs 73686 events
2026-03-07 — ongoing · 38 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
37 IPs 102989 events
2026-03-07 — ongoing · 37 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
38 IPs 104329 events
2026-03-07 — ongoing · 38 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
96 IPs 223258 events
2026-03-01 — ongoing · 96 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
79 IPs 173570 events
2026-02-22 — ongoing · 79 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
AS51167 Contabo GmbH ASN Active medium 🇫🇷 FR
29 IPs 3743 events
ftp:bruteforcessh:bruteforce
2026-02-18 — ongoing · 29 IPs from the same network (Contabo GmbH, AS51167) were active during overlapping time periods. Temporal correlation across …
Session Forensics
credential_harvester ×3
Sessions
3
Avg Depth Score
0.4
Commands Executed
0
Files Downloaded
0
Fingerprints
SSH-2.0-libssh2_1.11.0
Evidence Timeline
Credential Harvester 4e7636ff9653 w4m_seattle_01 · 2026-05-27 15:13
5 40%
Loading events...
Credential Harvester 97c9267e9360 w4m_singapore_01 · 2026-05-27 05:32
5 40%
Loading events...
Credential Harvester f13a6a33c046 w4m_singapore_01 · 2026-05-17 23:59
5 40%
Loading events...