IOC Radar
IPMediumSignal 68/100

196.26.217.216

Location
South AfricaSouth Africa
Bloemfontein, GP
ASN
AS3741
Dimension Data
First Seen
Oct 8, 2023
Last Seen
Apr 19, 2026
Oct 8
First Seen
979d ago
Apr 19
Last Seen
56d ago
7
Reports
source reports
68%
Confidence
medium
Found in 7 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
68%
Signal Score
68 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

6 techniques

Network Information

CountryZASouth Africa
RegionBloemfontein, GP
ASNAS3741
OrganizationDimension Data

Feed Intelligence Summary

7 reports68% confidence
7
Source reports
68%
Confidence score
Category tags
active scanactive scanningafricabrute forcebrute force attackerbrute-forcebruteforceddosdenial of servicedigital oceanexploitation activitynetworkproxyreconnaissanceresearchedscannersouth africat1190t1203t1499.001t1595.001t1595.002t1595.003telnetweb application attackweb exploitation

Activity Timeline

1 total obs
Apr 19Apr 19

Threat Activity Heatmap

· Peak: 2026-04-19
Less
More
Mon
Wed
Fri
Jun
·
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Threat ScoreMedium Risk
68
SIGNAL
Signal Score
68%
Confidence
7
Reports
First seenOct 8, 2023
Last seenApr 19, 2026
GeolocationZA
CountrySouth Africa
LocationBloemfontein, GP
ASNAS3741
OrgDimension Data
Coords-26.2637, 27.8690

VirusTotal

Not checked

WHOIS

description
IPv4 hosts detected attempting to brute force TELNET on DigitalOcean Toronto (CA) honeypot
raw
inetnum: 196.26.0.0 - 196.26.255.255 netname: ISNET-03 descr: Dimension Data country: ZA org: ORG-DD1-AFRINIC admin-c: FH9-AFRINIC admin-c: ZT12-AFRINIC admin-c: PD19-AFRINIC admin-c: MDP1-AFRINIC admin-c: DA25-AFRINIC admin-c: ZM11-AFRINIC admin-c: NK18-AFRINIC admin-c: JA50-AFRINIC admin-c: EK43-AFRINIC admin-c: SM144-AFRINIC tech-c: FH9-AFRINIC tech-c: ZT12-AFRINIC tech-c: PD19-AFRINIC tech-c: MDP1-AFRINIC tech-c: DA25-AFRINIC tech-c: ZM11-AFRINIC tech-c: NK18-AFRINIC tech-c: JA50-AFRINIC tech-c: EK43-AFRINIC tech-c: SM144-AFRINIC status: ALLOCATED PA remarks: +-------------------------------------+ remarks: | Further assignment information is | remarks: | available in the Internet Solutions | remarks: | whois database: | remarks: | | remarks: | http://whois.is.co.za | remarks: +-------------------------------------+ mnt-by: AFRINIC-HM-MNT mnt-lower: TF-ISNET-MNT mnt-domains: TF-ISNET-MNT source: AFRINIC # Filtered parent: 196.0.0.0 - 196.255.255.255 organisation: ORG-DD1-AFRINIC org-name: Dimension Data org-type: LIR country: ZA address: The Campus, address: 57 Sloane St, address: Bryanston address: Johannesburg 2021 phone: tel:+27-72-614-3611 phone: tel:+27-11-575-0325 phone: tel:+27-11-575-0969 admin-c: JA50-AFRINIC admin-c: DA25-AFRINIC admin-c: EK43-AFRINIC admin-c: MDP1-AFRINIC admin-c: SM144-AFRINIC admin-c: NK18-AFRINIC admin-c: ZM11-AFRINIC admin-c: PD19-AFRINIC admin-c: FH9-AFRINIC admin-c: ZT12-AFRINIC admin-c: RS62-AFRINIC tech-c: JA50-AFRINIC tech-c: DA25-AFRINIC tech-c: EK43-AFRINIC tech-c: MDP1-AFRINIC tech-c: SM144-AFRINIC tech-c: NK18-AFRINIC tech-c: ZM11-AFRINIC tech-c: PD19-AFRINIC tech-c: FH9-AFRINIC tech-c: ZT12-AFRINIC tech-c: RS62-AFRINIC mnt-ref: AFRINIC-HM-MNT mnt-ref: TF-168-209-0-0-168-210-255-255-MNT mnt-by: AFRINIC-HM-MNT source: AFRINIC # Filtered person: DNS Administration address: PO BOX 3234 address: Parklands, Gauteng 2121 address: ZA phone: tel:+27-11-447-5566 fax-no: tel:+27-11-447-5567 nic-hdl: DA25-AFRINIC mnt-by: GENERATED-5DRIE83KKFOSLY1J26BA6OERWG7UT3KG-MNT source: AFRINIC # Filtered person: Elne Kramer address: The Campus, 57 Sloane Street address: Bryanston, Gauteng address: Johannesburg 2021 address: South Africa phone: tel:+27-11-575-7845 nic-hdl: EK43-AFRINIC mnt-by: GENERATED-MH5BHHWXXJNMX1MQLYAJHIY9HED5QGHA-MNT source: AFRINIC # Filtered person: Faiz Hartley nic-hdl: FH9-AFRINIC address: 100 Fairway Close address: Cape Town 7500 address: South Africa address: Cape Town address: Other phone: tel:+27-21-596-4700 mnt-by: GENERATED-SRDU2OPM7ENJQXAL2K51PPF7CBCIQAGH-MNT source: AFRINIC # Filtered person: Jehad Arnold address: 100 Fairway Close address: Cape Town 7500 address: South Africa phone: +0215964700 nic-hdl: JA50-AFRINIC mnt-by: GENERATED-TVETECITNYRHD1CINUQQA0H9U7STCYUA-MNT source: AFRINIC # Filtered person: Marcel Di Perna nic-hdl: MDP1-AFRINIC address: Mweb Building address: 100 Fairway Close address: Parow address: Cape Town 7500 address: South Africa phone: tel:+27-21-596-4755 org: ORG-MA20-AFRINIC mnt-by: AFRINIC-HM-MNT source: AFRINIC # Filtered person: Niel Kruger nic-hdl: NK18-AFRINIC address: The Campus, 57 Sloane Street address: Bryanston, Gauteng address: Johannesburg 2021 address: South Africa address: JHB address: South Africa phone: tel:+27-87-354-0207 mnt-by: GENERATED-ACXHGWHAPVIDGKL5YZMHPRHOLBXUU0GO-MNT source: AFRINIC # Filtered person: Pawel Dabrowski address: The Campus, 57 Sloane Street address: Bryanston, Gauteng address: Johannesburg 2021 address: South Africa address: Johannesburg address: South Africa phone: tel:+27-83-554-1177 phone: tel:+27-11-575-0044 nic-hdl: PD19-AFRINIC mnt-by: GENERATED-ZWDYJ2VCIBPGR9R7QJRROAVSGRMM4TCU-MNT source: AFRINIC # Filtered person: Sandeep Makan nic-hdl: SM144-AFRINIC address: 57 Sloane street address: The Campus address: Bryanston 2021 address: South Africa address: Johannesburg address: South Africa phone: tel:+27-11-575-0969 mnt-by: GENERATED-NLOHSH0UN9GCE7Y5YXJQLLCRDOFTMOAE-MNT source: AFRINIC # Filtered person: Ziyaad Munshi nic-hdl: ZM11-AFRINIC address: The Campus, 57 Sloane Street address: Bryanston address: Gauteng address: Johannesburg 2021 address: Johannesburg address: Other phone: tel:+27-11-575-0211 mnt-by: GENERATED-CSQQAVAMDFYEN4RG8RLAQ3T44NPRWWIG-MNT source: AFRINIC # Filtered person: IS Hostmaster nic-hdl: ZT12-AFRINIC address: The Internet Solution address: The Campus, 57 Sloane Street address: Bryanston address: Gauteng address: Johannesburg 2021 address: South Africa phone: tel:+27-11-575-1000 org: ORG-TIS1-AFRINIC mnt-by: GENERATED-4THKYWBYLLP54MAK15NBL6CWUURHVN1A-MNT source: AFRINIC # Filtered
references
https://jamesbrine.com.au/digitaloceantoronto-telnet-bruteforce-ip-list-2026-04-16/, https://jamesbrine.com.au

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 2 years ago · Last seen 1 month ago
Appeared in 7 threat reports