IOC Radar
IPMediumSignal 94/100

45.154.98.14

Location
NetherlandsNetherlands
Lelystad, North Holland
ASN
AS210558
1337 Services GmbH
First Seen
Jun 2, 2023
Last Seen
Jun 12, 2026
Jun 2
First Seen
1117d ago
Jun 12
Last Seen
11d ago
14
Reports
source reports
94%
Confidence
medium
Found in 14 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
94%
Signal Score
94 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

51 techniques

Network Information

CountryNLNetherlands
RegionLelystad, North Holland
ASNAS210558
Organization1337 Services GmbH

IP Category

⟲
Proxy
Proxy server

Feed Intelligence Summary

14 reports94% confidence
14
Source reports
94%
Confidence score
Category tags
802.11 protocolaaaaabout contactacceptaccessaccount securityactive scanadded activeaddress googleamerica flagapacheapplearmadillov171asiaauthoritybackdoorblackie virusbotnetbotnet activitybrute forcec2cheat servicecheckinchina asnchina unknownck idck matrixclick-based attackcloud backupcode executioncode injectioncode overlapcommandcommand & controlcommand and controlcommand decodecommand executioncommunication protocolcommunication technologiescontactcontent homecontent typecouriercreation datecredential harvestingcredential stuffingcredential theftcrlf linedarkdata exfiltrationdata store exposuredeautherdefense evasiondeletedelete cdelphidenial-of-servicediscovery attdistributed attacksdns attackdockdynamicdynamic apidynamicloadererroret toreuropeevasion attexitexploitation activityfilesfiles ipfoundframe injectionfrance asng2 cgenco labshighhong konghostilehostname addhttp attackhttp scannerhttpsidentity & access exploitationinfrastructure acquisitionreconnaissanceingress tool transferinjection activityinput validation bypassinteliosiot securityipv4ipv4 addknown torlearnlengthlocallowfimainmalicious activitymalicious linksmalicious softwaremalwaremarkusmediummenu closemenu homemetadata analysismisc attackmitre attmobile carriersmobile networksmobile threatmonitored targetmovedmozillamsiename serversname tacticsnetherlandsnetworknetwork disruptionnextnext associatednlnode trafficnorth americaoperating system securitypackedpassive dnspath traversalpe sectionpe32 executablephishingphishing attackportportalportal openpresent aprpresent augpresent decpresent janpresent junpresent marpresent sepprocessprocess injectionproxypythonransomwareread creadsrecord valuerelated pulsesremote accessremote servicesresearchedresponse ipreverse dnssafe browsingsearchself-signedshowingsignal jammingsocial engineeringsocial media securitysoftware exploitationspawnsstatusstringst1012t1021t1027t1040t1041t1045t1047t1053t1055t1057t1059t1060t1063t1067t1071t1071.001t1078t1082t1090t1105t1112t1113t1129t1133t1140t1143t1190t1195t1203t1204.001t1204.002t1205t1480t1480 executiont1486t1496t1499t1499.002t1499.003t1499.004t1555t1561t1561.001t1561.002t1565t1566t1566.001t1566.002t1566.003t1573t1587.001t1590.001telecom servicestelecommunicationsthreat actorthustitletortor exittor nodetotaltrojan malwaretrojandroppertulach typetwittertype indicatorunitedunited statesunknown nsurlsuser executionvirgin islandsweb application attackweb application exploitationweb securityweb trafficwifi deauthentication attackwin32 malwarewindows malwarewindows ntwine emulatorwireless attackwritex appleyarayara detectionsyara signature

Activity Timeline

1 total obs
Jun 12Jun 12

Threat Activity Heatmap

· Peak: 2026-06-12
Less
More
Mon
Wed
Fri
Jun
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Threat ScoreHigh Risk
94
SIGNAL
Signal Score
94%
Confidence
14
Reports
First seenJun 2, 2023
Last seenJun 12, 2026
GeolocationNL
CountryNetherlands
LocationLelystad, North Holland
ASNAS210558
Org1337 Services GmbH
Coords52.3676, 4.9041
Proxy

VirusTotal

Not checked

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 3 years ago · Last seen 11 days ago
Appeared in 14 threat reports