← Back to feed
159.195.48.180
Location
🇩🇪 DE / Nuremberg
ASN
AS197540 · netcup GmbH
Cloud Provider
—
Total Events
16
Average by volume
Agent Count
1
First / Last Seen
2026-08-15 11:35 — 2026-08-16 05:34
Attack Types
MITRE ATT&CK Techniques
External Corroboration
Not flagged by any external feeds
Campaigns
AS197540 netcup GmbH
ASN
Ended
medium
🇩🇪 DE
5 IPs
2918 events
http:scanssh:bruteforce
2026-05-31 — ongoing · 5 IPs from the same network (netcup GmbH, AS197540) were active during overlapping time periods. Temporal correlation across …
HASSH 98ddc5604ef6… — SSH-2.0-Go (52 IPs, 15 countries)
HASSH
Active
high
🇨🇳 CN
52 IPs
3923 events
ftp:bruteforcemysql:bruteforcessh:bruteforce
2026-03-14 — ongoing · 52 IPs are running an identical SSH client (HASSH fingerprint 98ddc5604ef6…). Top network: Chinanet (AS4134). Geographic and ASN …
Session Forensics
Sessions
2 (2 with login)
Avg Depth Score
0.6
Commands Executed
2
Files Downloaded
0
Notable Commands
- hostname
Fingerprints
HASSH
SSH Client
Evidence Timeline
Reconnaissance
c4e0c3ce16b3
LOGIN
1
1
60%
Loading events...
Reconnaissance
ea3a86835eb5
LOGIN
1
1
60%
Loading events...