← Back to feed
152.53.199.246
Location
🇩🇪 DE / Nuremberg
ASN
AS197540 · netcup GmbH
Cloud Provider
—
Total Events
50
Above average by volume
Agent Count
1
First / Last Seen
2026-08-06 11:02 — 2026-08-08 18:20
Attack Types
MITRE ATT&CK Techniques
Initial Access
External Corroboration
Blocklist.de
blocklist_de:reported
Campaigns
HASSH a4bb6308c6d3… — SSH-2.0-Go (74 IPs, 22 countries)
HASSH
Ended
high
🇩🇪 DE
74 IPs
2741 events
ssh:bruteforce
2026-08-03 — ongoing · 74 IPs are running an identical SSH client (HASSH fingerprint a4bb6308c6d3…). Top network: netcup GmbH (AS197540). Geographic and …
HASSH 80d9e1d7a4fa… — SSH-2.0-Go (54 IPs, 18 countries)
HASSH
Ended
high
🇩🇪 DE
54 IPs
1968 events
ssh:bruteforce
2026-05-23 — ongoing · 54 IPs are running an identical SSH client (HASSH fingerprint 80d9e1d7a4fa…). Top network: netcup GmbH (AS197540). Geographic and …
Session Forensics
Sessions
10 (4 with login)
Avg Depth Score
0.34
Commands Executed
4
Files Downloaded
0
Notable Commands
- uname -a
Fingerprints
HASSH
SSH Client
Evidence Timeline
Reconnaissance
6cc0f66dc296
LOGIN
1
1
60%
Loading events...
Scanner
fcdfda5924d7
15%
Loading events...
Reconnaissance
999bddd4686b
LOGIN
1
1
60%
Loading events...
Scanner
a04ba11c9722
15%
Loading events...
Reconnaissance
44e753b34677
LOGIN
1
1
60%
Loading events...
Scanner
26b50f98cef1
15%
Loading events...
Reconnaissance
2a7c3daef314
LOGIN
1
1
60%
Loading events...
Scanner
7228b19c6dbc
15%
Loading events...