IOC Radar
IPMediumSignal 69/100

51.15.122.236

Location
NetherlandsNetherlands
Haarlem, North Holland
ASN
AS12876
SCALEWAY
First Seen
Apr 14, 2026
Last Seen
May 30, 2026
Apr 14
First Seen
59d ago
May 30
Last Seen
14d ago
13
Reports
source reports
69%
Confidence
medium
Found in 13 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
69%
Signal Score
69 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

7 techniques

Network Information

CountryNLNetherlands
RegionHaarlem, North Holland
ASNAS12876
OrganizationSCALEWAY

Feed Intelligence Summary

13 reports69% confidence
13
Source reports
69%
Confidence score
Category tags
abuseaccess controlactive scanactive scanningattackbad reputationbrute forcebrute force attackbrute force attackerbrute-forcebruteforcecredential accesscredential stuffingdigital oceaneuropeexploitation activityhackingidentity & access exploitationindicatormalicious activitymalwarenetherlandsnetworknlpassword attacksportscanreconnaissanceresearchedscannerscannerssecurity policyservice scansshssh attackt1110.001t1110.002t1110.003t1110.004t1595.001t1595.002t1595.003threat actorthreat preventiontor nodevultr

Activity Timeline

1 total obs
May 30May 30

Threat Activity Heatmap

· Peak: 2026-05-30
Less
More
Mon
Wed
Fri
Jun
·
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Threat ScoreMedium Risk
69
SIGNAL
Signal Score
69%
Confidence
13
Reports
First seenApr 14, 2026
Last seenMay 30, 2026
GeolocationNL
CountryNetherlands
LocationHaarlem, North Holland
ASNAS12876
OrgSCALEWAY
Coords52.3874, 4.6462

VirusTotal

Not checked

WHOIS

description
IPv4 hosts detected attempting to brute force SSH on Perth (Australia) honeypot
raw
inetnum: 51.15.0.0 - 51.15.127.255 netname: SCALEWAY-AMS descr: Scaleway - Amsterdam, Netherlands status: LEGACY remarks: Abuse reports : https://abuse.online.net/ country: NL org: ORG-ONLI1-RIPE admin-c: TTFR1-RIPE tech-c: TTFR1-RIPE mnt-by: ONLINE-NET-MNT created: 2019-05-06T11:54:05Z last-modified: 2022-05-04T17:24:57Z source: RIPE organisation: ORG-ONLI1-RIPE mnt-ref: MNT-TISCALIFR-B2B org-name: Scaleway org-type: OTHER address: 8 rue de la ville l'eveque 75008 PARIS abuse-c: AR32851-RIPE mnt-ref: ONLINE-NET-MNT mnt-ref: PROXAD-MNT mnt-by: ONLINE-NET-MNT created: 2015-07-10T15:20:41Z last-modified: 2026-03-06T10:49:57Z source: RIPE # Filtered role: SCALEWAY remarks: known as Online S.A.S. / Iliad-Entreprises address: 8 rue de la ville l'�v�que address: 75008 Paris address: France abuse-mailbox: [email protected] admin-c: IENT-RIPE tech-c: IENT-RIPE nic-hdl: TTFR1-RIPE mnt-by: MNT-TISCALIFR mnt-by: ONLINE-NET-MNT created: 2002-09-24T14:16:42Z last-modified: 2024-07-04T08:07:45Z source: RIPE # Filtered route: 51.15.0.0/17 descr: SCALEWAY descr: Amsterdam, Netherlands origin: AS12876 mnt-by: MNT-TISCALIFR mnt-by: ONLINE-NET-MNT created: 2019-10-03T15:11:06Z last-modified: 2022-05-03T10:05:58Z source: RIPE

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 1 month ago · Last seen 14 days ago
Appeared in 13 threat reports