IOC Radar
IPMediumSignal 22/100

144.76.19.157

Location
GermanyGermany
Falkenstein, Sachsen
ASN
AS24940
Hetzner
First Seen
Nov 4, 2025
Last Seen
May 29, 2026
Nov 4
First Seen
221d ago
May 29
Last Seen
15d ago
7
Reports
source reports
22%
Confidence
medium
Found in 7 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
22%
Signal Score
22 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

33 techniques

Network Information

CountryDEGermany
RegionFalkenstein, Sachsen
ASNAS24940
OrganizationHetzner

Feed Intelligence Summary

7 reports22% confidence
7
Source reports
22%
Confidence score
Category tags
active scanactive scanningaustraliaautomated attacksbad web botbotnetbotnet activitybrute forcebrute force attackbrute force attacksbrute force attemptsbrute-forcecommand injectioncommunication protocolcompromised hostcowrie honeypotcredential accesscredential guessingcredential stuffingdata encryptiondata exfiltrationdata store exposuredatabase securityddosddos attackddos attacksdedecoy systemdenial of servicedionaea honeypotdnsdns attackencryptioneuropeexploitexploitation activityexploited hostfattftpgermanyhackinghoneytrap honeypothttp scannerhttpsidentity & access exploitationinformation technologyinitial accessinjection activityinjection attacksiot securityiot targetedit infrastructurelateral movementmailoney honeypotmalicious activitymalicious hostsmalicious softwaremalwaremalware behaviourmalware capturenetworknetwork intrusion attemptsnetwork probingnetwork protocolnetwork scanningnetwork securityoceaniap0fpassword attacksphishingphishing attackphishing trapprocess injectionprotocol exploitationproxyreconnaissanceremote accessremote servicesresearchedresource hijackingscannerscripting attackssensor-taggedsentrypeer botnetsmtpsoftware developmentspamsql injection attemptssshssh attackssh monitoringt1021.001t1021.002t1040t1046t1055t1059t1059.003t1059.007t1071t1071.001t1076t1077t1078t1110t1110.001t1110.002t1110.003t1110.004t1133t1190t1199t1203t1210t1486t1496t1499.001t1499.002t1563t1565t1595t1595.001t1595.002t1595.003tannertargeting databasetelecommunicationstelnet threatthreat actorthreat detectionthreat intelligencetor nodetpotvoipvoip attackweb app attackweb application attackweb attackweb exploit attemptsweb exploitationweb spamweb traffic

Activity Timeline

1 total obs
May 29May 29

Threat Activity Heatmap

· Peak: 2026-05-29
Less
More
Mon
Wed
Fri
Jun
·
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Threat ScoreLow Risk
22
SIGNAL
Signal Score
22%
Confidence
7
Reports
First seenNov 4, 2025
Last seenMay 29, 2026
GeolocationDE
CountryGermany
LocationFalkenstein, Sachsen
ASNAS24940
OrgHetzner
Coords50.4778, 12.3716

VirusTotal

Not checked

WHOIS

raw
inetnum: 144.76.19.128 - 144.76.19.159 netname: HETZNER-fsn1-dc10 descr: Hetzner Online GmbH descr: Datacenter fsn1-dc10 country: DE admin-c: HOAC1-RIPE tech-c: HOAC1-RIPE status: LEGACY remarks: INFRA-AW mnt-by: HOS-GUN mnt-lower: HOS-GUN mnt-routes: HOS-GUN created: 2018-03-15T13:47:15Z last-modified: 2018-03-15T13:47:15Z source: RIPE role: Hetzner Online GmbH - Contact Role address: Hetzner Online GmbH address: Industriestrasse 25 address: D-91710 Gunzenhausen address: Germany phone: +49 9831 505-0 fax-no: +49 9831 505-3 abuse-mailbox: [email protected] remarks: ************************************************* remarks: * For spam/abuse/security issues please contact * remarks: * [email protected], or fill out the form at * remarks: * abuse.hetzner.com, thank you. * remarks: ************************************************* remarks: remarks: ************************************************* remarks: * Any questions on Peering please send to * remarks: * [email protected] * remarks: ************************************************* org: ORG-HOA1-RIPE admin-c: MH375-RIPE tech-c: GM834-RIPE tech-c: SK2374-RIPE tech-c: MF1400-RIPE tech-c: SK8441-RIPE tech-c: DD15478-RIPE nic-hdl: HOAC1-RIPE mnt-by: HOS-GUN created: 2004-08-12T09:40:20Z last-modified: 2022-11-22T18:33:55Z source: RIPE # Filtered route: 144.76.0.0/16 descr: HETZNER-RZ-BLK-ERX1 origin: AS24940 org: ORG-HOA1-RIPE mnt-by: HOS-GUN created: 2012-12-17T14:21:35Z last-modified: 2012-12-17T14:21:35Z source: RIPE organisation: ORG-HOA1-RIPE org-name: Hetzner Online GmbH country: DE org-type: LIR address: Industriestrasse 25 address: D-91710 address: Gunzenhausen address: GERMANY phone: +49 9831 5050 fax-no: +49 9831 5053 admin-c: MF1400-RIPE admin-c: GM834-RIPE admin-c: HOAC1-RIPE admin-c: MH375-RIPE admin-c: SK2374-RIPE admin-c: SK8441-RIPE abuse-c: HOAC1-RIPE mnt-ref: RIPE-NCC-HM-MNT mnt-ref: HOS-GUN mnt-by: RIPE-NCC-HM-MNT mnt-by: HOS-GUN created: 2004-04-17T11:07:58Z last-modified: 2022-11-22T18:32:44Z source: RIPE # Filtered

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 7 months ago · Last seen 15 days ago
Appeared in 7 threat reports