IOC Radar
IPMediumSignal 67/100

51.15.46.174

Location
NetherlandsNetherlands
Haarlem, NH
ASN
AS12876
Online SAS NL
First Seen
Aug 26, 2020
Last Seen
May 29, 2026
Aug 26
First Seen
2130d ago
May 29
Last Seen
28d ago
8
Reports
source reports
67%
Confidence
medium
Found in 8 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
67%
Signal Score
67 / 100
IDS Rule
No
Threat Context
Tags

Network Information

CountryNLNetherlands
RegionHaarlem, NH
ASNAS12876
OrganizationOnline SAS NL

Feed Intelligence Summary

8 reports67% confidence
8
Source reports
67%
Confidence score
Category tags
abuseactive scanbad reputationbrute forcebrute force attackercowriecyber securitydefensedigital oceandionaeaeuropefattindicatoriocnetherlandsnetworknextraynlp0fphishingportscanresearchedscannerscannerssensor-taggedservice scantannertpotvultr

Activity Timeline

1 total obs
May 29May 29

Threat Activity Heatmap

· Peak: 2026-05-29
Less
More
Mon
Wed
Fri
Jun
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Threat ScoreMedium Risk
67
SIGNAL
Signal Score
67%
Confidence
8
Reports
First seenAug 26, 2020
Last seenMay 29, 2026
GeolocationNL
CountryNetherlands
LocationHaarlem, NH
ASNAS12876
OrgOnline SAS NL
Coords52.3803, 4.6422

VirusTotal

Not checked

WHOIS

description
IPv4 hosts detected port scanning DigitalOcean London (UK) honeypot
raw
inetnum: 51.15.0.0 - 51.15.63.255 org: ORG-ONLI2-RIPE netname: ONLINE_NET_DEDICATED_SERVERS_NL country: NL admin-c: MM42047-RIPE tech-c: MM42047-RIPE status: LEGACY mnt-by: ONLINESAS-MNT created: 2016-10-28T11:18:17Z last-modified: 2016-10-28T11:19:00Z source: RIPE organisation: ORG-ONLI2-RIPE org-name: ONLINE SAS NL org-type: OTHER address: ONLINE SAS NL, EvoSwitch AMS1, J.W. Lucasweg 35 2031 BE Haarlem abuse-c: AR32851-RIPE mnt-ref: ONLINESAS-MNT mnt-by: ONLINESAS-MNT created: 2016-05-13T10:41:40Z last-modified: 2016-05-13T10:41:40Z source: RIPE # Filtered person: Mickael Marchand address: 8 rue de la ville l'eveque 75008 PARIS phone: +33173502000 nic-hdl: MM42047-RIPE mnt-by: MMA-MNT created: 2015-07-10T15:02:32Z last-modified: 2016-02-23T12:43:25Z source: RIPE # Filtered route: 51.15.0.0/17 descr: SCALEWAY descr: Amsterdam, Netherlands origin: AS12876 mnt-by: MNT-TISCALIFR mnt-by: ONLINE-NET-MNT created: 2019-10-03T15:11:06Z last-modified: 2022-05-03T10:05:58Z source: RIPE
references
https://jamesbrine.com.au/digitaloceanlondon-portscan-bruteforce-ip-list-2026-04-16/, https://jamesbrine.com.au, https://jamesbrine.com.au/vultrparis-portscan-bruteforce-ip-list-2026-04-16/

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 5 years ago · Last seen 28 days ago
Appeared in 8 threat reports