← Back to feed

159.223.29.238

TAGGED SUSPICIOUS how we decide →

Threat Confidence

33%

Location

🇩🇪 DE / Frankfurt am Main

ASN

AS14061 · DigitalOcean, LLC

Cloud Provider

DigitalOcean

Total Events

Above average by volume

Agent Count

First / Last Seen

2026-08-07 20:23 — 2026-08-24 06:31

Attack Types

ssh:bruteforce

MITRE ATT&CK Techniques

Reconnaissance

T1595 T1595.002

Initial Access

T1078

Credential Access

T1110 T1110.001

Discovery

T1016 T1046 T1082

External Corroboration

Blocklist.de

Reported 2026-09-01 10:01

blocklist_de:reported

Campaigns

HASSH a4bb6308c6d3… — SSH-2.0-Go (74 IPs, 22 countries) HASSH Ended high 🇩🇪 DE

74 IPs 2741 events

ssh:bruteforce

2026-08-03 — ongoing · 74 IPs are running an identical SSH client (HASSH fingerprint a4bb6308c6d3…). Top network: netcup GmbH (AS197540). Geographic and …

HASSH 80d9e1d7a4fa… — SSH-2.0-Go (54 IPs, 18 countries) HASSH Ended high 🇩🇪 DE

54 IPs 1968 events

ssh:bruteforce

2026-05-23 — ongoing · 54 IPs are running an identical SSH client (HASSH fingerprint 80d9e1d7a4fa…). Top network: netcup GmbH (AS197540). Geographic and …

Session Forensics

scanner ×2 reconnaissance ×4 credential_probe ×7 opportunistic_bruter ×2

Sessions

15 (6 with login)

Avg Depth Score

0.34

Commands Executed

Files Downloaded

Notable Commands

uname -a 2>/dev/null || echo 'Unknown'
uname -a

Fingerprints

HASSH

36042a20e4f38ea93cc1920c6e767934 409971e73fedc6f2176a737a05e10b6e 588595637b14d124feceb3c799601b0a 74e085f27a93e44c9b1604d59678eae4 80d9e1d7a4faebe9cda3e69e3a839c6c 9fd075c2e974e392dea7f6546b03e4a7 a4bb6308c6d3a1e3fe1a437ba6ba379a b4c918238c9a2502356ce60e0051f131 b6fa5c84ff5efda0593022dee59e1ad3 b738f22c89a2fb7d1d2cada66aed0687 fc2ecded1b5387d71b05a7770606fb94

SSH Client

SSH-2.0-Go

Evidence Timeline

Opportunistic Bruter 054c70e94a79 newark_01 · 2026-08-24 06:31

1 50%

Loading events...

Opportunistic Bruter f07615d1d6f2 newark_01 · 2026-08-24 05:49

1 50%

Loading events...

Credential Probe d04ad73e26cc newark_01 · 2026-08-24 03:44

1 20%

Loading events...

Credential Probe 2b8585308a7e newark_01 · 2026-08-24 03:03

1 20%

Loading events...

Credential Probe 02ce59b3b6e9 newark_01 · 2026-08-24 00:59

1 20%

Loading events...

Credential Probe 0bbc68e575de newark_01 · 2026-08-24 00:18

1 20%

Loading events...

Credential Probe 30ec82c7e9ff newark_01 · 2026-08-23 22:16

1 20%

Loading events...

Credential Probe 57dfc379967f newark_01 · 2026-08-23 21:35

1 20%

Loading events...

Reconnaissance 89bc05552e10 newark_01 · 2026-08-23 17:57

1 1 60%

Loading events...

Credential Probe b90c0afd4bdc newark_01 · 2026-08-08 18:37

1 20%

Loading events...

Reconnaissance 6def69de793c newark_01 · 2026-08-08 17:54

1 1 60%

Loading events...

Reconnaissance 543d4f6065f6 newark_01 · 2026-08-08 04:10

1 1 60%

Loading events...

Scanner 60644c9c64dd newark_01 · 2026-08-08 04:10

15%

Loading events...

Reconnaissance 75507a2dd33e newark_01 · 2026-08-07 20:23

1 1 60%

Loading events...

Scanner 93c32be2cfbf newark_01 · 2026-08-07 20:23

15%

Loading events...