← Back to feed
94.16.17.138
Location
🇩🇪 DE / Frankfurt am Main
ASN
AS42473 · Anexia Cloud Solutions GmbH
Cloud Provider
—
Total Events
49
Above average by volume
Agent Count
1
First / Last Seen
2026-08-04 01:59 — 2026-08-08 18:02
Attack Types
MITRE ATT&CK Techniques
Initial Access
External Corroboration
Not flagged by any external feeds
Campaigns
HASSH a4bb6308c6d3… — SSH-2.0-Go (74 IPs, 22 countries)
HASSH
Ended
high
🇩🇪 DE
74 IPs
2741 events
ssh:bruteforce
2026-08-03 — ongoing · 74 IPs are running an identical SSH client (HASSH fingerprint a4bb6308c6d3…). Top network: netcup GmbH (AS197540). Geographic and …
Subnet 94.16.17.0/24
SUBNET
Ended
high
🇩🇪 DE
3 IPs
135 events
ssh:bruteforce
2026-08-03 — ongoing · 3 IPs from the same /24 subnet (94.16.17.0/24) were observed attacking our sensors within the same time window. …
HASSH 80d9e1d7a4fa… — SSH-2.0-Go (54 IPs, 18 countries)
HASSH
Ended
high
🇩🇪 DE
54 IPs
1968 events
ssh:bruteforce
2026-05-23 — ongoing · 54 IPs are running an identical SSH client (HASSH fingerprint 80d9e1d7a4fa…). Top network: netcup GmbH (AS197540). Geographic and …
Session Forensics
Sessions
11 (3 with login)
Avg Depth Score
0.29
Commands Executed
3
Files Downloaded
0
Notable Commands
- uname -a
Fingerprints
HASSH
SSH Client
Evidence Timeline
Reconnaissance
52e67cf3e113
LOGIN
1
1
60%
Loading events...
Scanner
544238ee6fac
15%
Loading events...
Scanner
d70a44f39957
15%
Loading events...
Reconnaissance
40e1378c6b08
LOGIN
1
1
60%
Loading events...
Scanner
9dee3e3f6766
15%
Loading events...
Scanner
3ffb9e204205
15%
Loading events...
Reconnaissance
b48d9f5448eb
LOGIN
1
1
60%
Loading events...
Scanner
d7a4ae60bf2a
15%
Loading events...