IntrusionLabs IntrusionLabs
← Back to feed

178.104.145.109

static.109.145.104.178.clients.your-server.de (your-server.de) ✓ FCrDNS
Threat Confidence
23%
Assessment
  • Part of a 8-IP campaign from the same network, active in the same window.
Generated from the counts on this page by fixed rules; each line cites the number it rests on.
Location
🇩🇪 DE
ASN
AS24940 · Hetzner Online GmbH
Cloud Provider
—
Total Events
10
Average by volume
Agent Count
1
First / Last Seen
2026-10-15 17:55 — 2026-10-15 17:55
Attack Types
http:scan
MITRE ATT&CK Techniques
Reconnaissance
T1595.002
Initial Access
T1190
External Corroboration
Not flagged by any external feeds
Campaigns
AS24940 Hetzner Online GmbH ASN Active medium 🇩🇪 DE
8 IPs 317 events
http:scanssh:bruteforcessh:intrusionssh:malware
2026-02-18 — 2026-04-11 · 8 IPs from the same network (Hetzner Online GmbH, AS24940) were active during overlapping time periods. Temporal correlation …
Session Forensics
web_probe ×10
Sessions
10
Avg Depth Score
0.25
Commands Executed
0
Files Downloaded
0
Evidence Timeline
Web Probe 9a475b0d1f718bfe newark_01 · 2026-10-15 17:55
25%
Loading events...
Web Probe 06b9c1501fca70d8 newark_01 · 2026-10-15 17:55
25%
Loading events...
Web Probe 4e09b020b779142c newark_01 · 2026-10-15 17:55
25%
Loading events...
Web Probe 852c118a42880630 newark_01 · 2026-10-15 17:55
25%
Loading events...
Web Probe 49b93d21fd07c7fc newark_01 · 2026-10-15 17:55
25%
Loading events...
Web Probe 9342a260178ca78b newark_01 · 2026-10-15 17:55
25%
Loading events...
Web Probe 2edc00b3fdf9200c newark_01 · 2026-10-15 17:55
25%
Loading events...
Web Probe f6848be824793006 newark_01 · 2026-10-15 17:55
25%
Loading events...
Web Probe ccbc4080911fe722 newark_01 · 2026-10-15 17:55
25%
Loading events...
Web Probe 596fb7c9d92e3617 newark_01 · 2026-10-15 17:55
25%
Loading events...
Non-Session Events
Timestamp Port Proto Event Source Location
2026-10-15 17:55:17 :80 http HTTP GET request opencanary ewr
2026-10-15 17:55:17 :80 http HTTP GET request opencanary ewr
2026-10-15 17:55:16 :80 http HTTP GET request opencanary ewr
2026-10-15 17:55:16 :80 http HTTP GET request opencanary ewr
2026-10-15 17:55:16 :80 http HTTP GET request opencanary ewr
2026-10-15 17:55:16 :80 http HTTP GET request opencanary ewr
2026-10-15 17:55:16 :80 http HTTP GET request opencanary ewr
2026-10-15 17:55:16 :80 http HTTP GET request opencanary ewr
2026-10-15 17:55:16 :80 http HTTP GET request opencanary ewr
2026-10-15 17:55:16 :80 http HTTP GET request opencanary ewr