← Back to feed

52.15.42.219

Threat Confidence
36%
Location
🇺🇸 US / Columbus
ASN
AS16509 · Amazon.com, Inc.
Cloud Provider
Amazon Web Services
Total Events
14
Below average by volume
Agent Count
2
First / Last Seen
2026-05-24 13:26 — 2026-05-24 13:39
Attack Types
ssh:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
Credential Access
Discovery
External Corroboration
Not flagged by any external feeds
Campaigns
Multi-Agent Scan SCAN Active medium
82 IPs 30702 events
2026-04-10 — ongoing · 82 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
104 IPs 190656 events
2026-03-02 — ongoing · 104 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on AWS. Scanning the same …
Multi-Agent Scan SCAN Active medium
77 IPs 39439 events
2026-03-02 — ongoing · 77 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
100 IPs 189615 events
2026-03-02 — ongoing · 100 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
178 IPs 90341 events
2026-03-02 — ongoing · 178 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
102 IPs 189666 events
2026-03-02 — ongoing · 102 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
101 IPs 190092 events
2026-03-02 — ongoing · 101 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
HASSH 084386fa7ae5… — SSH-2.0-Go (51 IPs, 12 countries) HASSH Active high 🇺🇸 US
51 IPs 276435 events
http:scanssh:bruteforce
2026-02-23 — ongoing · 51 IPs are running an identical SSH client (HASSH fingerprint 084386fa7ae5…). Top network: Microsoft Corporation (AS8075). Geographic and …
Session Forensics
scanner ×4
Sessions
4
Avg Depth Score
0.15
Commands Executed
0
Files Downloaded
0
Fingerprints
SSH-2.0-Go
Evidence Timeline
Scanner 98ba5039c5d2 newark_01 · 2026-05-24 13:38
15%
Loading events...
Scanner b8587efbed93 newark_01 · 2026-05-24 13:37
15%
Loading events...
Scanner 655c540b77ea w4m_singapore_01 · 2026-05-24 13:30
15%
Loading events...
Scanner 380d52e31431 w4m_singapore_01 · 2026-05-24 13:26
15%
Loading events...