Hetzner Online GmbH

Reported Context (2)

188.245[.]99.156 is a Hetzner dedicated server, not throwaway bulletproof hosting. ASN AS24940 (Hetzner Online GmbH, Nuremberg, Germany), standard your-server.de PTR, no TOR, proxy, or VPN flags. This is a rented Redis Cryptomining Botnet Compromised 3,562 Servers, Revealed by Operator’s Exposed Files
2 prior AttackCapture hits across two months, making it the highest priority. 95.216.111[.]46 (Hetzner Online GmbH, Finland, AS24940) came back with an Active Malware: Sliver flag and reverse DNS resolving to PCPJack Used 230 Cloud Linux Servers in a Hidden SMTP Relay Network

CVE (1)

People (1)

Threat Actors (2)

MITRE ATT&CK (19)

Vendors (3)

Products (8)

Tools (8)

Industries (1)

Countries (6)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.