IPMediumSignal 77/100
193.124.20.249
Location
Frankfurt am Main, Hesse
ASN
AS25369
Hydra Communications Ltd
First Seen
Apr 11, 2026
Last Seen
Jun 5, 2026
Found in 14 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
77%
Signal Score
77 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Network Information
Country
Germany
RegionFrankfurt am Main, Hesse
ASNAS25369
OrganizationHydra Communications Ltd
Feed Intelligence Summary
14 reports77% confidence
14
Source reports
77%
Confidence score
Category tags
abuseactive scanactive scanningaptasiaattackbad reputationbad web botbotnetbotnet activitybrute forcebrute force attackbrute force attackerbrute-forcebulgariacloudcogentcredential accesscredential stuffingctrlsddosddos attackdeeuropeexploitation activityexploited hostfraud voipftp brute-forcegalahgermanyhackinghttphydraidentity & access exploitationinbound scanindiainjection activityiot securityiot targetedmalicious activitymalicious ipmalwaremirainetworkpanamapassword attacksphishingping of deathportscanproxyransomwarereconnaissanceresearchedscams & fraudscanscannerscannersserviceservice scansmbsocradar honeypotspamsql injectionsshssh attackt1110.001t1110.002t1110.003t1110.004t1595t1595.001t1595.002t1595.003tamatiya eoodtargeting databasetcpthreat actortor nodeunitedunited kingdomvultrweb app attackweb spam
Activity Timeline
Jun 5Jun 5
Threat Activity Heatmap
· Peak: 2026-06-05LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Threat ScoreHigh Risk
77
SIGNAL
Signal Score
77%
Confidence
14
Reports
First seenApr 11, 2026
Last seenJun 5, 2026
GeolocationDE
CountryGermany
LocationFrankfurt am Main, Hesse
ASNAS25369
OrgHydra Communications Ltd
Coords50.1109, 8.6821
VirusTotal
Not checked
WHOIS
- raw
- inetnum: 193.124.20.240 - 193.124.20.255 netname: INFRAWATCH remarks: ----------------------------------------------------- remarks: Real time internet intelligence data remarks: infrawat.ch remarks: ----------------------------------------------------- country: DE geoloc: 50.11832714403014 8.732284870631922 org: ORG-IL948-RIPE admin-c: LD7399-RIPE tech-c: LD7399-RIPE status: ASSIGNED PA created: 2026-04-08T00:35:32Z last-modified: 2026-04-08T00:35:32Z source: RIPE mnt-by: HYDRA-MNT organisation: ORG-IL948-RIPE org-name: Infrawatch Limited org-type: OTHER address: 128 City Road address: London address: EC1V 2NX country: GB abuse-c: ACRO64026-RIPE mnt-ref: HYDRA-MNT created: 2026-03-26T04:32:13Z last-modified: 2026-03-26T04:32:13Z source: RIPE # Filtered mnt-by: HYDRA-MNT person: Lloyd Davies address: 128 City Road address: London address: EC1V 2NX address: United Kingdom phone: +448000803330 nic-hdl: LD7399-RIPE created: 2026-03-26T04:34:31Z last-modified: 2026-03-26T04:34:31Z source: RIPE # Filtered mnt-by: HYDRA-MNT route: 193.124.20.0/23 origin: AS25369 mnt-by: HYDRA-MNT created: 2024-11-04T18:36:32Z last-modified: 2024-11-04T18:36:32Z source: RIPE
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
mediumFirst detected 2 months ago · Last seen 10 days ago
Appeared in 14 threat reports