IntrusionLabs IntrusionLabs
← Back to feed

91.219.63.36

TAGGED SUSPICIOUS how we decide →
Threat Confidence
44%
Location
🇳🇱 NL
ASN
AS50673 · Serverius Holding B.V.
Cloud Provider
—
Total Events
28
Average by volume
Agent Count
2
First / Last Seen
2026-05-03 17:46 — 2026-05-03 21:23
Attack Types
ssh:bruteforce
MITRE ATT&CK Techniques
Credential Access
T1110 T1110.001
External Corroboration
Not flagged by any external feeds
Campaigns
HASSH 14b2ddda386a… — SSH-2.0-libssh2_1.11.0 (165 IPs, 24 countries) HASSH Active high 🇺🇸 US
165 IPs 4517 events
ssh:bruteforce
2026-04-22 — ongoing · 165 IPs are running an identical SSH client (HASSH fingerprint 14b2ddda386a…). Top network: Internap Holding LLC (AS32475). Geographic …
Multi-Agent Scan SCAN Active medium
134 IPs 146061 events
2026-04-21 — ongoing · 134 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
184 IPs 164596 events
2026-04-21 — ongoing · 184 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
124 IPs 45728 events
2026-04-17 — ongoing · 124 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
53 IPs 10008 events
2026-04-07 — ongoing · 53 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
115 IPs 35105 events
2026-04-07 — ongoing · 115 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
152 IPs 145181 events
2026-02-28 — ongoing · 152 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Session Forensics
credential_harvester ×2
Sessions
2
Avg Depth Score
0.4
Commands Executed
0
Files Downloaded
0
Fingerprints
HASSH
14b2ddda386a4d1006108ccd231b42fc
SSH Client
SSH-2.0-libssh2_1.11.0
Evidence Timeline
Credential Harvester 06d6cb8b3167 w4m_singapore_01 · 2026-05-03 21:23
5 40%
Loading events...
Credential Harvester 210e4f119477 w4m_seattle_01 · 2026-05-03 17:46
5 40%
Loading events...