← Back to feed

AS25369 Hydra Communications Ltd

ASN Active medium
Why this campaign was detected
6 IPs from the same network (Hydra Communications Ltd, AS25369) were active during overlapping time periods. Temporal correlation across a shared autonomous system suggests infrastructure controlled by the same entity.
Primary ASN
AS25369 · Hydra Communications Ltd
Subnet
—
Country
🇬🇧 GB
Cloud Provider
—
Member Count
6 IPs
Below average
Total Events
36
Below average by volume
Started / Ended
2026-04-10 18:08 — ongoing
Attack Types
http:scan ssh:connection telnet:connection
MITRE ATT&CK Techniques
Reconnaissance
Initial Access
Discovery
Member Actors
IP Address Behavior Confidence Flags Events Agents Attack Types Hostname Last Seen
89.37.172.158 web_probe 58% 1x OSINT 6 3 http:scanssh:connection 89-37-172-158.infrawat.ch 2026-10-15 07:08 evidence →
195.140.214.24 scanner 55% 1x OSINT 8 3 ssh:connection 195-140-214-24.infrawat.ch 2026-10-19 01:58 evidence →
185.216.145.183 web_probe 44% 1x OSINT 5 2 http:scanssh:connection 185-216-145-183.infrawat.ch 2026-10-16 11:30 evidence →
195.206.182.215 ssh:connection 44% 1x OSINT 5 2 ssh:connectiontelnet:connection 195-206-182-215.infrawat.ch 2026-10-18 10:43 evidence →
195.206.182.201 scanner 43% 1x OSINT 6 2 ssh:connectiontelnet:connection 195-206-182-201.infrawat.ch 2026-10-17 02:10 evidence →
194.50.235.158 scanner 42% 1x OSINT 6 2 ssh:connectiontelnet:connection 194-50-235-158.infrawat.ch 2026-10-16 06:06 evidence →
VPN Known VPN or proxy provider
DROP ASN on Spamhaus DROP list
Nx OSINT Corroborated by N external threat feeds