← Back to feed

20.221.64.163

Threat Confidence

18%

Location

🇺🇸 US / Des Moines

ASN

AS8075 · Microsoft Corporation

Cloud Provider

Microsoft Azure

Total Events

Below average by volume

Agent Count

First / Last Seen

2026-09-08 00:21 — 2026-09-08 00:21

Attack Types

ssh:bruteforce

MITRE ATT&CK Techniques

Reconnaissance

T1595

Credential Access

T1110 T1110.001

Discovery

T1046

External Corroboration

DShield Top Attackers

Reported 2026-09-15 06:01

dshield:top_attacker

Campaigns

HASSH e54ef3ec27fe… — SSH-2.0-Go (50 IPs, 12 countries) HASSH Active high 🇺🇸 US

50 IPs 42456 events

http:scanssh:bruteforce

2026-02-22 — ongoing · 50 IPs are running an identical SSH client (HASSH fingerprint e54ef3ec27fe…). Top network: The Constant Company, LLC (AS20473). …

Session Forensics

scanner ×2

Sessions

Avg Depth Score

0.15

Commands Executed

Files Downloaded

Fingerprints

HASSH

e54ef3ec27fe1fea7ab64d3fa05359fd

SSH Client

MGLNDD_5.223.73.96_22SSH-2.0-Go

Evidence Timeline

Scanner a2d0d065ce5b w4m_singapore_01 · 2026-09-08 00:21

15%

Loading events...

Scanner 116a85f7dc3b w4m_singapore_01 · 2026-09-08 00:21

15%

Loading events...