← Back to feed
209.99.191.217
TAGGED SUSPICIOUS how we decide →
Why: Network is on the Spamhaus ASN-DROP list, with 12 events seen by our sensors · certainty: inferred
Assessment
Port and service scanner
- Active for 13 days, 2026-09-16 to 2026-09-30.
Generated from the counts on this page by fixed rules; each line cites the number it rests on.
Location
🇨🇭 CH / Zurich
ASN
AS402253 · SKN Subnet & Telecom Ltd
Cloud Provider
—
Total Events
12
Average by volume
Agent Count
2
First / Last Seen
2026-09-16 05:15 — 2026-09-30 03:47
Attack Types
MITRE ATT&CK Techniques
External Corroboration
Blocklist.de
blocklist_de:reported
Campaigns
Not associated with any campaigns
Session Forensics
Sessions
4
Avg Depth Score
0.15
Commands Executed
0
Files Downloaded
0
Fingerprints
1 SSH client banner · 1 HASSH fingerprint
HASSH
SSH Client
Evidence Timeline
Scanner
16bbbdafae6d
15%
Loading events...
Scanner
015939344815
15%
Loading events...