IntrusionLabs IntrusionLabs
← Back to feed

45.55.185.228

TAGGED SUSPICIOUS how we decide →
Threat Confidence
41%
Location
🇺🇸 US / Clifton
ASN
AS14061 · DigitalOcean, LLC
Cloud Provider
DigitalOcean
Total Events
64
Average by volume
Agent Count
1
First / Last Seen
2026-05-08 21:44 — 2026-05-14 20:00
Attack Types
ssh:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
T1595.002
Credential Access
T1110 T1110.001
External Corroboration
Blocklist.de
Reported 2026-05-14 21:02
blocklist_de:reported
Campaigns
HASSH 14b2ddda386a… — SSH-2.0-libssh2_1.11.0 (662 IPs, 55 countries) HASSH Active high 🇺🇸 US
662 IPs 44024 events
ssh:bruteforce
2026-04-22 — ongoing · 662 IPs are running an identical SSH client (HASSH fingerprint 14b2ddda386a…). Top network: OVH SAS (AS16276). Geographic and …
Session Forensics
credential_probe ×1 credential_harvester ×4
Sessions
5
Avg Depth Score
0.37
Commands Executed
0
Files Downloaded
0
Fingerprints
HASSH
14b2ddda386a4d1006108ccd231b42fc
SSH Client
SSH-2.0-libssh2_1.11.0
Evidence Timeline
Credential Harvester 72d50a050eb5 w4m_seattle_01 · 2026-05-14 20:00
5 40%
Loading events...
Credential Harvester eecdafb23c86 w4m_seattle_01 · 2026-05-14 14:42
5 40%
Loading events...
Credential Harvester ca7beb11bfe0 w4m_seattle_01 · 2026-05-14 14:11
5 40%
Loading events...
Credential Harvester 10c9d090a7c8 w4m_seattle_01 · 2026-05-10 10:35
5 40%
Loading events...
Credential Probe 0ef05ba61bbb w4m_seattle_01 · 2026-05-08 21:44
2 25%
Loading events...