IntrusionLabs IntrusionLabs
← Back to feed

173.212.245.93

TAGGED SUSPICIOUS how we decide →
Why: Scanned our network, then came back as a credential harvester · certainty: inferred
vmi3222361.contaboserver.net (contaboserver.net) ✓ FCrDNS
Threat Confidence
41%
Assessment
SSH password brute-forcer
  • Logged in with 8 different credentials across 9 logins.
  • Ran 9 commands on the host.
  • Active for 24 days, 2026-09-18 to 2026-10-12.
  • Runs the same SSH client fingerprint (HASSH) as 67 other IPs.
Generated from the counts on this page by fixed rules; each line cites the number it rests on.
Location
🇫🇷 FR / Lauterbourg
ASN
AS51167 · Contabo GmbH
Cloud Provider
—
Total Events
337
Top 10% by volume
Agent Count
1
First / Last Seen
2026-09-18 09:55 — 2026-10-12 16:12
Attack Types
ssh:bruteforce ssh:intrusion
MITRE ATT&CK Techniques
Reconnaissance
T1595.002
Initial Access
T1078
Execution
T1059.004
Credential Access
T1110 T1110.001
Discovery
T1016 T1082
External Corroboration
Not flagged by any external feeds
Campaigns
HASSH 16443846184e… — SSH-2.0-Go (68 IPs, 20 countries) HASSH Active high 🇺🇸 US
68 IPs 133038 events
ftp:bruteforcemysql:bruteforcessh:bruteforcessh:connectionssh:intrusionssh:malwaretelnet:bruteforcetelnet:connectiontelnet:intrusiontelnet:malware
2026-02-22 — ongoing · 68 IPs are running an identical SSH client (HASSH fingerprint 16443846184e…). Top network: DigitalOcean, LLC (AS14061). Geographic and …
AS51167 Contabo GmbH ASN Active medium 🇫🇷 FR
5 IPs 632 events
http:scanssh:bruteforcessh:connectionssh:intrusionssh:malwaretelnet:bruteforcetelnet:intrusion
2026-02-18 — ongoing · 5 IPs from the same network (Contabo GmbH, AS51167) were active during overlapping time periods. Temporal correlation across …
Session Forensics
reconnaissance ×9 credential_probe ×53
Sessions
62 (9 with login)
Avg Depth Score
0.26
Commands Executed
9
Files Downloaded
0
Notable Commands
  • hostname
Fingerprints
1 SSH client banner · 1 HASSH fingerprint
HASSH
16443846184eafde36765c9bab2f4397
SSH Client
SSH-2.0-Go
Evidence Timeline
Credential Probe c66b8287af9d newark_01 · 2026-10-12 16:12
1 20%
Loading events...
Credential Probe 7b0703750241 newark_01 · 2026-09-29 13:23
1 20%
Loading events...
Credential Probe ca3995f06b7e newark_01 · 2026-09-25 06:16
1 20%
Loading events...
Credential Probe 647d3b376f95 newark_01 · 2026-09-25 03:08
1 20%
Loading events...
Credential Probe 836983a3f6a0 newark_01 · 2026-09-25 02:42
1 20%
Loading events...
Credential Probe 81ea58f18fb2 newark_01 · 2026-09-25 01:35
1 20%
Loading events...
Credential Probe b14325513391 newark_01 · 2026-09-24 22:03
1 20%
Loading events...
Credential Probe c027fecb7456 newark_01 · 2026-09-23 18:39
1 20%
Loading events...
Credential Probe c2547a8904a8 newark_01 · 2026-09-22 23:19
1 20%
Loading events...
Reconnaissance 12dfa55dc745 newark_01 · 2026-09-22 22:32
1 1 60%
Loading events...
Credential Probe 452a62f54c3f newark_01 · 2026-09-22 16:46
1 20%
Loading events...
Credential Probe 25843317dc40 newark_01 · 2026-09-22 14:54
1 20%
Loading events...
Credential Probe 1ee25fc1d629 newark_01 · 2026-09-22 02:57
1 20%
Loading events...
Credential Probe a30921ca8ad7 newark_01 · 2026-09-22 02:09
1 20%
Loading events...
Credential Probe 78306e6e31cf newark_01 · 2026-09-22 01:34
1 20%
Loading events...
Credential Probe 36d9fd4a9c25 newark_01 · 2026-09-22 00:04
1 20%
Loading events...
Credential Probe 796c6a389ea6 newark_01 · 2026-09-22 00:02
1 20%
Loading events...
Credential Probe ebbd90df2624 newark_01 · 2026-09-21 23:45
1 20%
Loading events...
Credential Probe 9a0d39fecfb0 newark_01 · 2026-09-21 21:31
1 20%
Loading events...
Credential Probe 44d08b90c9df newark_01 · 2026-09-21 20:28
1 20%
Loading events...
Credential Probe b665f5a4b67e newark_01 · 2026-09-21 19:58
1 20%
Loading events...
Reconnaissance c881dce57259 newark_01 · 2026-09-21 19:47
1 1 60%
Loading events...
Credential Probe 4908a71f5222 newark_01 · 2026-09-21 19:43
1 20%
Loading events...
Credential Probe 85c66ca83547 newark_01 · 2026-09-21 18:40
1 20%
Loading events...
Credential Probe 834ff95449ce newark_01 · 2026-09-21 10:17
1 20%
Loading events...
Reconnaissance f46423cd1eb5 newark_01 · 2026-09-21 08:12
1 1 60%
Loading events...
Reconnaissance ed7cc7fc1635 newark_01 · 2026-09-21 05:28
1 1 60%
Loading events...
Credential Probe c3119eef9478 newark_01 · 2026-09-21 03:49
1 20%
Loading events...
Credential Probe 4b2cd5c91f45 newark_01 · 2026-09-21 02:08
1 20%
Loading events...
Credential Probe 671eae00c96b newark_01 · 2026-09-21 01:05
1 20%
Loading events...
Reconnaissance 22e2f62b19d0 newark_01 · 2026-09-20 23:41
1 1 60%
Loading events...
Reconnaissance 51a7ccf7593a newark_01 · 2026-09-20 22:46
1 1 60%
Loading events...
Credential Probe 3da6dbe8c8cd newark_01 · 2026-09-20 21:45
1 20%
Loading events...
Credential Probe 7d1e5bf4b105 newark_01 · 2026-09-20 21:25
1 20%
Loading events...
Credential Probe e89060791d79 newark_01 · 2026-09-20 19:54
1 20%
Loading events...
Credential Probe 24de5c4ed9ab newark_01 · 2026-09-20 19:22
1 20%
Loading events...
Reconnaissance c824e7687020 newark_01 · 2026-09-20 17:39
1 1 60%
Loading events...
Credential Probe 2af8ef2f0e9c newark_01 · 2026-09-20 13:12
1 20%
Loading events...
Credential Probe f80382f53378 newark_01 · 2026-09-20 08:22
1 20%
Loading events...
Credential Probe 781e32deb632 newark_01 · 2026-09-20 07:43
1 20%
Loading events...
Credential Probe ad5b339b1c63 newark_01 · 2026-09-20 07:13
1 20%
Loading events...
Credential Probe 6b62bdf83054 newark_01 · 2026-09-20 06:33
1 20%
Loading events...
Credential Probe 2dbd8d59cdd8 newark_01 · 2026-09-20 06:22
1 20%
Loading events...
Reconnaissance 9e4c43fa1830 newark_01 · 2026-09-20 04:49
1 1 60%
Loading events...
Credential Probe a5ac41ec0c5f newark_01 · 2026-09-20 03:54
1 20%
Loading events...
Credential Probe 61c2e875981c newark_01 · 2026-09-20 03:49
1 20%
Loading events...
Credential Probe cdcc315d15ad newark_01 · 2026-09-19 12:38
1 20%
Loading events...
Credential Probe 90740a145936 newark_01 · 2026-09-19 08:52
1 20%
Loading events...
Credential Probe 6ca91f06faa1 newark_01 · 2026-09-19 06:47
1 20%
Loading events...
Credential Probe 9fce2cfcbc79 newark_01 · 2026-09-19 05:43
1 20%
Loading events...