IPMediumSignal 58/100
196.251.83.134
Location
Victoria, Hesse
First Seen
Mar 12, 2025
Last Seen
Jun 9, 2026
Found in 15 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
58%
Signal Score
58 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Network Information
Country
United States
RegionVictoria, Hesse
OrganizationInternet Secuirty Cheapyhost
Feed Intelligence Summary
15 reports58% confidence
15
Source reports
58%
Confidence score
Category tags
abuseaccess controlactive scanactive scanningattackbad reputationbad web botbotnetbotnet activitybotnet detectionbrute forcebrute force attackc2c2 communicationc2 detectioncommand & controlcommand and controlcompromised hostcompromised hostscredential accesscredential stuffingdata exfiltrationdata store exposureddosdenial of servicedistributed attackseuropeexploitation activityexploited hostgermanyhackingidentity & access exploitationindicatorinjection activitymalicious activitymalicious softwaremalwaremalware distributionmalware filternetherlandsnetworknetwork anomaliesnetwork scanningnetwork traffic analysispassword attacksphishingprocess injectionransomwarereconnaissanceresearchedscannersecurity policyseychellessocradar honeypotssh attackt1003t1021t1021.001t1021.003t1055t1059t1059.004t1071t1071.001t1078t1105t1110.001t1110.002t1110.003t1110.004t1133t1190t1203t1486t1496t1499.001t1499.002t1499.003t1565t1566t1573t1573.001t1595.001t1595.002t1595.003threat actorthreat preventiontor nodevulnerability scanweb application attackweb exploitation
Activity Timeline
Jun 9Jun 9
Threat Activity Heatmap
LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
1
Minimal
30d
1
Minimal
3mo
1
Minimal
Threat ScoreMedium Risk
58
SIGNAL
Signal Score
58%
Confidence
15
Reports
First seenMar 12, 2025
Last seenJun 9, 2026
GeolocationUS
CountryUnited States
LocationVictoria, Hesse
OrgInternet Secuirty Cheapyhost
Coords50.1109, 8.6821
VirusTotal
Not checked
WHOIS
- raw
- inetnum: 196.251.83.0 - 196.251.83.255 netname: internet-secuirty-cheapyhost descr: internet-security-cheapyhost country: SC admin-c: SOV14-AFRINIC tech-c: CHY12-AFRINIC status: ASSIGNED PA remarks: https://geofeed.african.lat/ipv4.csv mnt-by: SIL3-MNT source: AFRINIC # Filtered parent: 196.251.64.0 - 196.251.127.255 role: External Abuse Team cheapy.host address: 4445 Corporation Ln. STE 264 phone: tel:+1-434-202-3662 abuse-mailbox: [email protected] nic-hdl: CHY12-AFRINIC admin-c: QS12-AFRINIC tech-c: QS12-AFRINIC mnt-by: SIL3-MNT source: AFRINIC # Filtered person: Lucas Cunha Oliveira address: 4445 Corporation Ln. STE 264 Virginia Beach, VA 23462 USA phone: tel:+1-938-204-9112 abuse-mailbox: [email protected] nic-hdl: SOV14-AFRINIC source: AFRINIC # Filtered mnt-by: GENERATED-X8GLGVCSKVBKS3ADFG76SMW3PTHVYDJK-MNT route: 196.251.83.0/24 descr: internet-security-cheapyhost origin: AS401120 mnt-by: SIL3-MNT source: AFRINIC # Filtered
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
mediumFirst detected 1 year ago · Last seen 1 day ago
Appeared in 15 threat reports