← Back to feed

138.68.227.175

Threat Confidence

28%

Assessment

Runs the same SSH client fingerprint (HASSH) as 67 other IPs.

Generated from the counts on this page by fixed rules; each line cites the number it rests on.

Location

🇺🇸 US / Santa Clara

ASN

AS14061 · DigitalOcean, LLC

Cloud Provider

DigitalOcean

Total Events

Average by volume

Agent Count

First / Last Seen

2026-10-18 00:23 — 2026-10-18 00:25

Attack Types

ssh:bruteforce ssh:connection

MITRE ATT&CK Techniques

Reconnaissance

T1595 T1595.001 T1595.002

Credential Access

T1110 T1110.001

Discovery

T1046

External Corroboration

Blocklist.de

Reported 2026-10-19 05:01

blocklist_de:reported

Campaigns

HASSH 16443846184e… — SSH-2.0-Go (68 IPs, 20 countries) HASSH Active high 🇺🇸 US

68 IPs 133038 events

ftp:bruteforcemysql:bruteforcessh:bruteforcessh:connectionssh:intrusionssh:malwaretelnet:bruteforcetelnet:connectiontelnet:intrusiontelnet:malware

2026-02-22 — ongoing · 68 IPs are running an identical SSH client (HASSH fingerprint 16443846184e…). Top network: DigitalOcean, LLC (AS14061). Geographic and …

Session Forensics

scanner ×1 credential_probe ×1

Sessions

Avg Depth Score

0.17

Commands Executed

Files Downloaded

Fingerprints

1 SSH client banner · 1 HASSH fingerprint

HASSH

16443846184eafde36765c9bab2f4397

SSH Client

SSH-2.0-Go

Evidence Timeline

Credential Probe 5d9fd1a08553 newark_01 · 2026-10-18 00:25

1 20%

Loading events...

Scanner 91f14b6403cd newark_01 · 2026-10-18 00:23

15%

Loading events...