IOC Radar
IPMediumSignal 55/100

2.57.122.98

Location
NetherlandsNetherlands
Amsterdam, North Holland
ASN
AS47890
Techoff SRV Limited
First Seen
Aug 26, 2020
Last Seen
Jun 18, 2026
Aug 26
First Seen
2130d ago
Jun 18
Last Seen
8d ago
23
Reports
source reports
55%
Confidence
medium
Found in 23 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
55%
Signal Score
55 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

26 techniques

Network Information

CountryNLNetherlands
RegionAmsterdam, North Holland
ASNAS47890
OrganizationTechoff SRV Limited

IP Category

⟲
Proxy
Proxy server

Feed Intelligence Summary

23 reports55% confidence
23
Source reports
55%
Confidence score
Category tags
active scanactive scanningaptattackbad web botblocklist_allblog spambotnet activitybrute forcebrute force attackbrute force attackerbrute-forcebruteforcecompromised credentials attemptcredential accesscredential stuffingcyber securitydata exfiltrationdata store exposuredatabase securityddosddos attackdecoy systemdefensedenial of servicedictionary attackeuropeexploitation activityexploited hostftp brute forcehackinghttp brute forceidentity & access exploitationimapimap attackindicatorinjection activityinjection attacksioclateral movementloginmalwarenetherlandsnetworknetwork attacksnetwork protocolnetwork reconnaissancenetwork scanningnetwork securitynextraynlnorth americaopen proxypassword attacksphishingping of deathprotocol exploitationproxyreconnaissanceremote accessremote servicesresearchedroromaniascannerservice enumerationsmb scanningsmtpsmtp attackerspamsshssh attackt1016t1021t1021.001t1040t1046t1053t1059t1059.003t1076t1078t1110t1110.001t1110.002t1110.003t1110.004t1190t1203t1486t1499.001t1499.002t1499.003t1563t1595t1595.001t1595.002t1595.003tcp scanningtelnettelnet threatthreat actorthreat intelligencetor nodetsecunited statesweb application attackweb exploitationweb spam

Activity Timeline

1 total obs
Jun 18Jun 18

Threat Activity Heatmap

· Peak: 2026-06-18
Less
More
Mon
Wed
Fri
Jun
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Threat ScoreMedium Risk
55
SIGNAL
Signal Score
55%
Confidence
23
Reports
First seenAug 26, 2020
Last seenJun 18, 2026
GeolocationNL
CountryNetherlands
LocationAmsterdam, North Holland
ASNAS47890
OrgTechoff SRV Limited
Coords45.9968, 24.9970
Proxy

VirusTotal

Not checked

WHOIS

raw
inetnum: 2.57.122.0 - 2.57.122.255 netname: DMZHOSTdotco descr: https://dmzhost.co country: NL admin-c: AD18161-RIPE tech-c: AD18161-RIPE org: ORG-TSL73-RIPE status: ASSIGNED PA mnt-by: TECHOFF-MNT created: 2019-03-21T15:15:17Z last-modified: 2024-11-21T09:40:02Z source: RIPE organisation: ORG-TSL73-RIPE org-name: TECHOFF SRV LIMITED country: GB org-type: OTHER address: 35 Firs Avenue, London N11 3NE abuse-c: AD18161-RIPE mnt-ref: TECHOFF-MNT mnt-ref: MNT-NETERRA mnt-by: TECHOFF-MNT created: 2024-11-20T13:01:40Z last-modified: 2024-11-26T15:22:33Z source: RIPE # Filtered role: ABUSE DEP address: 35 Firs Avenue, London N11 3NE abuse-mailbox: [email protected] nic-hdl: AD18161-RIPE mnt-by: TECHOFF-MNT created: 2024-11-20T13:00:28Z last-modified: 2024-11-21T09:45:52Z source: RIPE # Filtered route: 2.57.122.0/24 origin: AS47890 mnt-by: TECHOFF-MNT created: 2022-08-06T20:32:00Z last-modified: 2024-11-21T09:41:43Z source: RIPE route: 2.57.122.0/24 origin: AS48090 mnt-by: TECHOFF-MNT created: 2020-06-30T20:02:53Z last-modified: 2024-11-21T09:41:56Z source: RIPE

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 5 years ago · Last seen 8 days ago
Appeared in 23 threat reports