IOC Radar
IPMediumSignal 84/100

193.42.11.108

Location
GermanyGermany
Frankfurt am Main, Hesse
ASN
AS58212
dataforest GmbH
First Seen
Apr 15, 2026
Last Seen
Jun 9, 2026
Apr 15
First Seen
55d ago
Jun 9
Last Seen
yesterday
7
Reports
source reports
84%
Confidence
medium
Found in 7 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
84%
Signal Score
84 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

20 techniques

Network Information

CountryDEGermany
RegionFrankfurt am Main, Hesse
ASNAS58212
Organizationdataforest GmbH

Feed Intelligence Summary

7 reports84% confidence
7
Source reports
84%
Confidence score
Category tags
aptbad reputationcryptocurrencycryptojackingdedll sideloadingdll wssdomaineuropegermanygpu mininghashmd5indicatoripv62a03ipv62a12networkprocess hollowingransomwareresearchedscreenconnect abusesimplerunpesocradart1027t1036.005t1053.005t1055.012t1059.001t1071.001t1082t1105t1112t1140t1189t1218.007t1219t1497.001t1497.003t1547.001t1547.009t1562.001t1573t1574.002threat actor

Activity Timeline

1 total obs
Jun 9Jun 9

Threat Activity Heatmap

Less
More
Mon
Wed
Fri
Jun
·
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
24h
0
Dormant
7d
1
Minimal
30d
1
Minimal
3mo
1
Minimal
Threat ScoreHigh Risk
84
SIGNAL
Signal Score
84%
Confidence
7
Reports
First seenApr 15, 2026
Last seenJun 9, 2026
GeolocationDE
CountryGermany
LocationFrankfurt am Main, Hesse
ASNAS58212
Orgdataforest GmbH
Coords0.0000, 0.0000

VirusTotal

Not checked

WHOIS

description
CC=DE ASN=AS58212 php-friends gmbh
raw
inetnum: 193.42.11.0 - 193.42.12.255 netname: DE-DATAFOREST-20191114 country: DE geofeed: https://raw.githubusercontent.com/dataforestgmbh/geo/main/geofeed.csv org: ORG-HSG23-RIPE admin-c: TS41522-RIPE tech-c: TS41522-RIPE status: ALLOCATED PA mnt-by: lir-de-dataforest-1-MNT mnt-by: RIPE-NCC-HM-MNT created: 2019-11-14T08:31:52Z last-modified: 2025-04-17T17:26:37Z source: RIPE organisation: ORG-HSG23-RIPE org-name: dataforest GmbH country: DE org-type: LIR address: Taunusstra�e 52 address: 65830 address: Kriftel address: GERMANY phone: +49619293992233 reg-nr: District court Frankfurt am Main HRB 126208 admin-c: TS41522-RIPE tech-c: TS41522-RIPE abuse-c: DG13264-RIPE mnt-ref: lir-de-dataforest-1-MNT mnt-by: RIPE-NCC-HM-MNT mnt-by: lir-de-dataforest-1-MNT created: 2021-11-23T09:32:38Z last-modified: 2026-04-29T05:41:40Z source: RIPE # Filtered person: Tim Lauderbach org: ORG-DG236-RIPE address: dataforest GmbH phone: +4961929392233 nic-hdl: TS41522-RIPE mnt-by: dataforest-MNT created: 2023-01-05T18:37:12Z last-modified: 2023-06-02T16:54:24Z source: RIPE route: 193.42.11.0/24 origin: AS58212 mnt-by: dataforest-MNT created: 2020-10-23T18:19:36Z last-modified: 2024-11-15T21:41:46Z source: RIPE

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 1 month ago · Last seen 1 day ago
Appeared in 7 threat reports