IntrusionLabs IntrusionLabs
← Back to feed

138.68.93.155

TAGGED SUSPICIOUS how we decide →
Threat Confidence
31%
Location
🇩🇪 DE / Frankfurt am Main
ASN
AS14061 · DigitalOcean, LLC
Cloud Provider
DigitalOcean
Total Events
43
Average by volume
Agent Count
1
First / Last Seen
2026-07-13 00:02 — 2026-07-13 00:21
Attack Types
ssh:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
T1595.002
Initial Access
T1078
Execution
T1059.004
Credential Access
T1110 T1110.001
Discovery
T1016 T1082
External Corroboration
Not flagged by any external feeds
Campaigns
HASSH 16443846184e… — SSH-2.0-Go (50 IPs, 22 countries) HASSH Active high 🇫🇷 FR
50 IPs 41739 events
http:scanmysql:bruteforcessh:bruteforce
2026-02-22 — ongoing · 50 IPs are running an identical SSH client (HASSH fingerprint 16443846184e…). Top network: Contabo GmbH (AS51167). Geographic and …
Session Forensics
reconnaissance ×1 credential_probe ×7
Sessions
8 (1 with login)
Avg Depth Score
0.25
Commands Executed
1
Files Downloaded
0
Notable Commands
  • /bin/./uname -s -v -n -r -m
Fingerprints
HASSH
16443846184eafde36765c9bab2f4397
SSH Client
SSH-2.0-Go
Evidence Timeline
Reconnaissance a51150ca8d20 newark_01 · 2026-07-13 00:21
1 1 60%
Loading events...
Credential Probe eef9cbccec9c newark_01 · 2026-07-13 00:18
1 20%
Loading events...
Credential Probe f82ce5d0bb35 newark_01 · 2026-07-13 00:16
1 20%
Loading events...
Credential Probe 42e6cdd52a6d newark_01 · 2026-07-13 00:13
1 20%
Loading events...
Credential Probe 44ba9790145f newark_01 · 2026-07-13 00:10
1 20%
Loading events...
Credential Probe 5b933db6fd95 newark_01 · 2026-07-13 00:07
1 20%
Loading events...
Credential Probe f1be392da0f9 newark_01 · 2026-07-13 00:04
1 20%
Loading events...
Credential Probe 21b437ed3648 newark_01 · 2026-07-13 00:02
1 20%
Loading events...