← Back to feed

40.81.23.49

TAGGED SUSPICIOUS how we decide →

Threat Confidence

33%

Location

🇭🇰 HK / Hong Kong

ASN

AS8075 · Microsoft Corporation

Cloud Provider

Microsoft Azure

Total Events

Above average by volume

Agent Count

First / Last Seen

2026-08-07 14:13 — 2026-08-24 07:34

Attack Types

ssh:bruteforce

MITRE ATT&CK Techniques

Reconnaissance

T1595 T1595.002

Initial Access

T1078

Credential Access

T1110 T1110.001

Discovery

T1016 T1046 T1082

External Corroboration

Blocklist.de

Reported 2026-09-01 10:01

blocklist_de:reported

Campaigns

HASSH 80d9e1d7a4fa… — SSH-2.0-Go (54 IPs, 18 countries) HASSH Ended high 🇩🇪 DE

54 IPs 1968 events

ssh:bruteforce

2026-05-23 — ongoing · 54 IPs are running an identical SSH client (HASSH fingerprint 80d9e1d7a4fa…). Top network: netcup GmbH (AS197540). Geographic and …

Session Forensics

scanner ×4 reconnaissance ×1 credential_probe ×5 opportunistic_bruter ×3

Sessions

13 (4 with login)

Avg Depth Score

0.28

Commands Executed

Files Downloaded

Notable Commands

uname -a

Fingerprints

HASSH

29a8301aead86891dd1ea1113328cf2b 80d9e1d7a4faebe9cda3e69e3a839c6c a13f429300ea92809d09902345540cde aa0b2b0f2838420d945c787da17bfb34 b769b2bc40d5f7fcf4ed5d51bcd694b6 c37911009092bf8d11043acb83be1a6c f6f5b49590610876a048f2e723d96203

SSH Client

SSH-2.0-Go

Evidence Timeline

Opportunistic Bruter d2dcccf8c4ef newark_01 · 2026-08-24 07:34

1 50%

Loading events...

Credential Probe dcd0f73772a5 newark_01 · 2026-08-24 03:48

1 20%

Loading events...

Credential Probe 43e45c1091df newark_01 · 2026-08-24 02:37

1 20%

Loading events...

Opportunistic Bruter afdfc77fc6de newark_01 · 2026-08-23 22:54

1 50%

Loading events...

Opportunistic Bruter 5678cf6c7adf newark_01 · 2026-08-23 21:38

1 50%

Loading events...

Credential Probe 84181616dc87 newark_01 · 2026-08-12 08:08

1 20%

Loading events...

Scanner 4eb43507c8a5 newark_01 · 2026-08-08 17:44

15%

Loading events...

Credential Probe 8ba2b91223f6 newark_01 · 2026-08-08 04:02

1 20%

Loading events...

Scanner 9768177b942c newark_01 · 2026-08-08 04:02

15%

Loading events...

Reconnaissance 86e9038eab97 newark_01 · 2026-08-07 20:52

1 1 60%

Loading events...

Scanner 55107eb4e5f3 newark_01 · 2026-08-07 20:52

15%

Loading events...

Credential Probe 9a5fb7c2ab56 newark_01 · 2026-08-07 14:13

1 20%

Loading events...

Scanner da0750045fa9 newark_01 · 2026-08-07 14:13

15%

Loading events...