IOC Radar
IPMediumSignal 57/100

181.214.206.154

Location
NetherlandsNetherlands
Grou, North Holland
ASN
AS3257
Ipxo
First Seen
Jan 15, 2022
Last Seen
Mar 25, 2026
Jan 15
First Seen
1608d ago
Mar 25
Last Seen
78d ago
8
Reports
source reports
57%
Confidence
medium
Found in 8 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
57%
Signal Score
57 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

29 techniques

Network Information

CountryNLNetherlands
RegionGrou, North Holland
ASNAS3257
OrganizationIpxo

IP Category

⊕
VPN
VPN exit node

Feed Intelligence Summary

8 reports57% confidence
8
Source reports
57%
Confidence score
Category tags
abuseactive scanningbrute forcebrute force attackcredential accesscredential stuffingdenial of serviceeuropefinlandfranceftp brute forcegermanyhoneynet connecthttp brute forcelateral movementlogin attemptnetherlandsnetworknetwork enumerationnetwork intrusionnetwork scanningnetwork securitynlnorth americapassword attackpassword attackspolandprotocol exploitationproxyreconnaissanceremote accessremote servicesresearchedscannerscanning activitysmb brute forcesmtp brute forcessh attackt1021t1021.001t1021.002t1021.003t1021.004t1021.005t1040t1046t1059t1059.001t1059.003t1059.004t1068t1076t1078t1110t1110.001t1110.002t1110.003t1110.004t1190t1203t1499.001t1563t1592t1595t1595.001t1595.002t1595.003tcp scantelnet threatudp scanunauthorized access attemptunited statesvpnweb application attackweb exploitation

Activity Timeline

1 total obs
Mar 25Mar 25

Threat Activity Heatmap

· Peak: 2026-03-25
Less
More
Mon
Wed
Fri
Jun
·
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Threat ScoreMedium Risk
57
SIGNAL
Signal Score
57%
Confidence
8
Reports
First seenJan 15, 2022
Last seenMar 25, 2026
GeolocationNL
CountryNetherlands
LocationGrou, North Holland
ASNAS3257
OrgIpxo
Coords52.3713, 4.5331
VPN

VirusTotal

Not checked

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 4 years ago · Last seen 2 months ago
Appeared in 8 threat reports