IOC Radar
IPMediumSignal 100/100

15.204.248.93

Location
United StatesUnited States
Reston, Virginia
ASN
AS16276
OVH US LLC
First Seen
Dec 27, 2024
Last Seen
Mar 11, 2026
Dec 27
First Seen
536d ago
Mar 11
Last Seen
97d ago
13
Reports
source reports
99%
Confidence
medium
Found in 13 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
99%
Signal Score
100 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

25 techniques

Network Information

CountryUSUnited States
RegionReston, Virginia
ASNAS16276
OrganizationOVH US LLC

IP Category

Hosting
Hosting provider

Feed Intelligence Summary

13 reports99% confidence
13
Source reports
99%
Confidence score
Category tags
abuseactive scanningattackaustraliaauthenticationauthentication attackauto-generated securitybotnetbrute forcebrute force attackbrute force attemptcommand and controlcowrie honeypotcredential accesscredential stuffingctadata exfiltrationdecoy systemdistributed attacksindicatormalicious activitymalicious softwaremalwarenetworknetwork intrusionnetwork securitynorth americaoceaniapassword attackpassword attacksprocess injectionreconnaissanceremote accessremote servicesresearchedscannersecurity operationsself-signedssh attackssh monitoringt1021.004t1055t1071.001t1078t1078.002t1078.004t1110t1110.001t1110.002t1110.003t1110.004t1486t1496t1499.002t1499.003t1555t1555.003t1565t1588.004t1589t1589.002t1595t1595.001t1595.002t1595.003threat actorthreat intelligenceunited states

Activity Timeline

1 total obs
Mar 11Mar 11

Threat Activity Heatmap

· Peak: 2026-03-11
Less
More
Mon
Wed
Fri
Jun
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Threat ScoreHigh Risk
100
SIGNAL
Signal Score
99%
Confidence
13
Reports
First seenDec 27, 2024
Last seenMar 11, 2026
GeolocationUS
CountryUnited States
LocationReston, Virginia
ASNAS16276
OrgOVH US LLC
Coords38.9653, -77.3380
Hosting

VirusTotal

Not checked

WHOIS

description
Host bruteforcing SSH
raw
OVH US LLC OUL-16 (NET-15-204-0-0-1) 15.204.0.0 - 15.204.255.255 OVH US LLC VPS-US-EAST-VA-2 (NET-15-204-248-0-1) 15.204.248.0 - 15.204.249.255
references
https://blog.edie.io/2020/04/30/diy-ip-threat-feed/, https://github.com/tankmek/threatfeed, https://redpiranha.net

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 1 year ago · Last seen 3 months ago
Appeared in 13 threat reports