IOC Radar
IPMediumSignal 81/100

103.93.145.33

Location
New ZealandNew Zealand
Auckland, Auckland
ASN
AS136595
Excellent Software Limited
First Seen
Mar 14, 2025
Last Seen
Jun 14, 2026
Mar 14
First Seen
466d ago
Jun 14
Last Seen
10d ago
17
Reports
source reports
81%
Confidence
medium
Found in 17 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
81%
Signal Score
81 / 100
IDS Rule
No
Threat Context
Tags

Network Information

CountryNZNew Zealand
RegionAuckland, Auckland
ASNAS136595
OrganizationExcellent Software Limited

IP Category

VPN
VPN exit node

Feed Intelligence Summary

17 reports81% confidence
17
Source reports
81%
Confidence score
Category tags
abuseactive scanaptbad reputationbad web botblocklist_allbotnet activitybrute forcebrute-forcebruteforceddosddos attackexploitation activityexploited hosthackingindicatorinformation technologyit infrastructuremalwarenetworknew zealandnzoceaniaresearchedscannersoftware developmentsshssh attackthreat actortpotvpnvpn ipweb app attack

Activity Timeline

1 total obs
Jun 14Jun 14

Threat Activity Heatmap

· Peak: 2026-06-14
Less
More
Mon
Wed
Fri
Jun
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Threat ScoreHigh Risk
81
SIGNAL
Signal Score
81%
Confidence
17
Reports
First seenMar 14, 2025
Last seenJun 14, 2026
GeolocationNZ
CountryNew Zealand
LocationAuckland, Auckland
ASNAS136595
OrgExcellent Software Limited
Coords-36.9130, 174.8460
VPN

VirusTotal

Not checked

WHOIS

description
Malware delivery. healthcare-sector honeypot. attacker:command-executed; attacker:download-attempt; attacker:enumeration. confidence 100/100. source: TSEC T-Pot honeypot network
raw
inetnum: 103.93.144.0 - 103.93.147.255 netname: EXCELLENT-NZ descr: EXCELLENT SOFTWARE LIMITED descr: Carbine Business Centre, 31 Carbine Road, Mt Wellington, Auckland North Island 1010 country: NZ org: ORG-ESL2-AP admin-c: ESLA6-AP tech-c: ESLA6-AP abuse-c: AE203-AP status: ALLOCATED PORTABLE remarks: -------------------------------------------------------- remarks: To report network abuse, please contact mnt-irt remarks: For troubleshooting, please contact tech-c and admin-c remarks: Report invalid contact via www.apnic.net/invalidcontact remarks: -------------------------------------------------------- mnt-by: APNIC-HM mnt-lower: MAINT-EXCELLENT-NZ mnt-routes: MAINT-EXCELLENT-NZ mnt-irt: IRT-EXCELLENT-NZ last-modified: 2020-06-17T13:05:00Z source: APNIC irt: IRT-EXCELLENT-NZ address: Carbine Business Centre, 31 Carbine Road, Mt Wellington, Auckland North Island 1010 e-mail: [email protected] abuse-mailbox: [email protected] admin-c: ESLA6-AP tech-c: ESLA6-AP auth: # Filtered remarks: [email protected] was validated on 2025-12-09 mnt-by: MAINT-EXCELLENT-NZ last-modified: 2025-12-09T20:26:37Z source: APNIC organisation: ORG-ESL2-AP org-name: EXCELLENT SOFTWARE LIMITED org-type: LIR country: NZ address: 31-35 Carbine Road address: Mt Wellington phone: +6495745508 fax-no: +6495745509 e-mail: [email protected] mnt-ref: APNIC-HM mnt-by: APNIC-HM last-modified: 2023-09-05T02:17:13Z source: APNIC role: ABUSE EXCELLENTNZ country: ZZ address: Carbine Business Centre, 31 Carbine Road, Mt Wellington, Auckland North Island 1010 phone: +000000000 e-mail: [email protected] admin-c: ESLA6-AP tech-c: ESLA6-AP nic-hdl: AE203-AP remarks: Generated from irt object IRT-EXCELLENT-NZ remarks: [email protected] was validated on 2025-12-09 abuse-mailbox: [email protected] mnt-by: APNIC-ABUSE last-modified: 2025-12-09T20:27:12Z source: APNIC role: EXCELLENT SOFTWARE LIMITED administrator address: Carbine Business Centre, 31 Carbine Road, Mt Wellington, Auckland North Island 1010 country: NZ phone: +6495745508 fax-no: +6495745508 e-mail: [email protected] admin-c: ESLA6-AP tech-c: ESLA6-AP nic-hdl: ESLA6-AP mnt-by: MAINT-EXCELLENT-NZ last-modified: 2017-05-21T23:32:53Z source: APNIC

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 1 year ago · Last seen 10 days ago
Appeared in 17 threat reports