Possible fingerprinting/campaign tracking

[brianwarehime]

Use ssh keys/algorithms, ips, env, ssh client, malware to potentially assign campaign name