IOC Radar
IPHighVerifiedSignal 29/100

49.12.57.148

Location
GermanyGermany
Nuremberg, Bavaria
ASN
AS24940
The Tor Project
First Seen
Nov 2, 2024
Last Seen
Nov 2, 2024
Nov 2
First Seen
586d ago
Nov 2
Last Seen
586d ago
3
Reports
source reports
29%
Confidence
high
Found in 3 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
29%
Signal Score
29 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

3 techniques

Network Information

CountryDEGermany
RegionNuremberg, Bavaria
ASNAS24940
OrganizationThe Tor Project

Feed Intelligence Summary

3 reports29% confidence
3
Source reports
29%
Confidence score
Category tags
active scanactive scanningdeeuropegermanyindicatornetworkreconnaissanceresearchedscannert1595.001t1595.002t1595.003

Activity Timeline

1 total obs
Nov 2Nov 2

Threat Activity Heatmap

Less
More
Mon
Wed
Fri
Jun
·
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Threat ScoreLow Risk
29
SIGNAL
Signal Score
29%
Confidence
3
Reports
First seenNov 2, 2024
Last seenNov 2, 2024
Verified IOC
GeolocationDE
CountryGermany
LocationNuremberg, Bavaria
ASNAS24940
OrgThe Tor Project
Coords49.4543, 11.0746

VirusTotal

Not checked

WHOIS

raw
inetnum: 49.12.57.128 - 49.12.57.159 netname: THE-TOR-PROJECT descr: The Tor Project country: DE admin-c: TTP5-RIPE tech-c: TTP5-RIPE status: ASSIGNED PA mnt-by: HOS-GUN created: 2020-03-28T02:14:46Z last-modified: 2020-03-28T02:14:46Z source: RIPE # Filtered person: The Tor Project address: The Tor Project address: 969 Main Street, Suite 206 address: 02081-2972 Walpole address: UNITED STATES phone: +17819481982 nic-hdl: TTP5-RIPE mnt-by: HOS-GUN created: 2012-08-23T01:45:24Z last-modified: 2019-02-28T13:33:16Z source: RIPE # Filtered route: 49.12.0.0/16 org: ORG-HOA1-RIPE descr: HETZNER-DC origin: AS24940 mnt-by: HOS-GUN created: 2019-09-19T11:52:01Z last-modified: 2019-09-19T11:52:01Z source: RIPE organisation: ORG-HOA1-RIPE org-name: Hetzner Online GmbH country: DE org-type: LIR address: Industriestrasse 25 address: D-91710 address: Gunzenhausen address: GERMANY phone: +49 9831 5050 fax-no: +49 9831 5053 reg-nr: District court Ansbach HRB 6089 admin-c: MF1400-RIPE admin-c: GM834-RIPE admin-c: HOAC1-RIPE admin-c: MH375-RIPE admin-c: SK2374-RIPE admin-c: SK8441-RIPE abuse-c: HOAC1-RIPE mnt-ref: RIPE-NCC-HM-MNT mnt-ref: HOS-GUN mnt-by: RIPE-NCC-HM-MNT mnt-by: HOS-GUN created: 2004-04-17T11:07:58Z last-modified: 2026-04-29T05:24:41Z source: RIPE # Filtered

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

high
First detected 1 year ago · Last seen 1 year ago
Appeared in 3 threat reports