IOC Radar
IPMediumSignal 79/100

178.104.130.179

Location
GermanyGermany
Nuremberg, Bavaria
ASN
AS24940
Hetzner Online GmbH
First Seen
Apr 15, 2026
Last Seen
May 29, 2026
Apr 15
First Seen
61d ago
May 29
Last Seen
16d ago
14
Reports
source reports
79%
Confidence
medium
Found in 14 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
79%
Signal Score
79 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

4 techniques

Network Information

CountryDEGermany
RegionNuremberg, Bavaria
ASNAS24940
OrganizationHetzner Online GmbH

Feed Intelligence Summary

14 reports79% confidence
14
Source reports
79%
Confidence score
Category tags
abuseactive scanactive scanningaptbad reputationbad web botbotnet activitybrute forcebrute force attackerbrute-forcecredential accesscredential stuffingdeeuropeexploitation activitygermanyhackingidentity & access exploitationindicatornetworkreconnaissanceresearchedscannersshssh attackt1110.002t1595.001t1595.002t1595.003threat actortor nodeweb app attack

Activity Timeline

1 total obs
May 29May 29

Threat Activity Heatmap

· Peak: 2026-05-29
Less
More
Mon
Wed
Fri
Jun
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Threat ScoreHigh Risk
79
SIGNAL
Signal Score
79%
Confidence
14
Reports
First seenApr 15, 2026
Last seenMay 29, 2026
GeolocationDE
CountryGermany
LocationNuremberg, Bavaria
ASNAS24940
OrgHetzner Online GmbH
Coords49.4543, 11.0746

VirusTotal

Not checked

WHOIS

description
The following is the full list of names given to Vye32GsS2g38eKhmaKrLdDjgrnf2YBT4/FGx8SNCa4txePA
raw
inetnum: 178.104.128.0 - 178.104.143.255 netname: CLOUD-NBG1 country: DE remarks: INFRA-AW admin-c: HOAC1-RIPE tech-c: HOAC1-RIPE status: ASSIGNED PA created: 2026-03-31T15:46:22Z last-modified: 2026-03-31T15:46:22Z source: RIPE mnt-by: HOS-GUN role: Hetzner Online GmbH - Contact Role address: Hetzner Online GmbH address: Industriestrasse 25 address: D-91710 Gunzenhausen address: Germany phone: +49 9831 505-0 fax-no: +49 9831 505-3 abuse-mailbox: [email protected] remarks: ************************************************* remarks: * For spam/abuse/security issues please contact * remarks: * [email protected], or fill out the form at * remarks: * abuse.hetzner.com, thank you. * remarks: ************************************************* remarks: remarks: ************************************************* remarks: * Any questions on Peering please send to * remarks: * [email protected] * remarks: ************************************************* org: ORG-HOA1-RIPE admin-c: MH375-RIPE tech-c: GM834-RIPE tech-c: SK2374-RIPE tech-c: MF1400-RIPE tech-c: SK8441-RIPE tech-c: DD15478-RIPE nic-hdl: HOAC1-RIPE mnt-by: HOS-GUN created: 2004-08-12T09:40:20Z last-modified: 2022-11-22T18:33:55Z source: RIPE # Filtered route: 178.104.0.0/15 descr: HETZNER-DC origin: AS24940 org: ORG-HOA1-RIPE mnt-by: HOS-GUN created: 2026-02-18T10:38:45Z last-modified: 2026-02-18T10:38:45Z source: RIPE organisation: ORG-HOA1-RIPE org-name: Hetzner Online GmbH country: DE org-type: LIR address: Industriestrasse 25 address: D-91710 address: Gunzenhausen address: GERMANY phone: +49 9831 5050 fax-no: +49 9831 5053 admin-c: MF1400-RIPE admin-c: GM834-RIPE admin-c: HOAC1-RIPE admin-c: MH375-RIPE admin-c: SK2374-RIPE admin-c: SK8441-RIPE abuse-c: HOAC1-RIPE mnt-ref: RIPE-NCC-HM-MNT mnt-ref: HOS-GUN mnt-by: RIPE-NCC-HM-MNT mnt-by: HOS-GUN created: 2004-04-17T11:07:58Z last-modified: 2022-11-22T18:32:44Z source: RIPE # Filtered

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 2 months ago · Last seen 16 days ago
Appeared in 14 threat reports