IOC Radar
IPMediumSignal 64/100

87.106.88.229

Location
GermanyGermany
Berlin, Ile-de-France
ASN
AS8560
IONOS SE ber.de
First Seen
Jan 23, 2026
Last Seen
May 22, 2026
Jan 23
First Seen
142d ago
May 22
Last Seen
22d ago
9
Reports
source reports
64%
Confidence
medium
Found in 9 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
64%
Signal Score
64 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

31 techniques

Network Information

CountryDEGermany
RegionBerlin, Ile-de-France
ASNAS8560
OrganizationIONOS SE ber.de

Feed Intelligence Summary

9 reports64% confidence
9
Source reports
64%
Confidence score
Category tags
abuseaccount compromiseactive scanactive scanningattackbad reputationbad web botbotnetbotnet activitybrute forcebrute force attackcivil servicescloud infrastructurecloud infrastructure attackcloud servicescommand and controlcredential accesscredential stuffingdata exfiltrationdata store exposuredatabase securityddosddos attackdedecoy systemdenial of servicedistributed attackseuropeexploitexploitation activityexploited hostfrfranceftpftp brute-forceftp scanninggermanygovernment technologyhackingidentity & access exploitationindicatorindicators of compromiseinformation technologyinfrastructure acquisitionreconnaissanceinjection activityinjection attacksiot botnetiot securityit infrastructuremalicious activitymalicious infrastructuremalicious ip listmalicious softwaremalwarenetworknetwork reconnaissancenetwork scanningpassword attacksportscanprocess injectionpublic administrationpublic infrastructurepublic policyreconnaissanceregulatory agenciesremote accessremote servicesresearchedresource hijackingscannerscannersscanning activityservice scansoftware developmentspamsql injectionssh attackt1021.001t1046t1055t1059.003t1071t1071.001t1076t1078t1090t1110t1110.001t1110.002t1110.003t1110.004t1190t1203t1486t1496t1499.001t1499.002t1499.003t1563t1565t1566t1587.001t1590.001t1592t1595t1595.001t1595.002t1595.003targeting databasethreat actorthreat intelligencetor nodetpotvulnerability scanvulnerability-exploitationvultrvultr infrastructureweb app attackweb application attackweb exploitationweb spam

Activity Timeline

1 total obs
May 22May 22

Threat Activity Heatmap

· Peak: 2026-05-22
Less
More
Mon
Wed
Fri
Jun
·
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Threat ScoreMedium Risk
64
SIGNAL
Signal Score
64%
Confidence
9
Reports
First seenJan 23, 2026
Last seenMay 22, 2026
GeolocationDE
CountryGermany
LocationBerlin, Ile-de-France
ASNAS8560
OrgIONOS SE ber.de
Coords51.2993, 9.4910

VirusTotal

Not checked

WHOIS

description
Score: 70/100. Labels: abuseipdb:brute-force, abuseipdb:critical, abuseipdb:ddos, abuseipdb:exploited-host, abuseipdb:ftp-brute, abuseipdb:hacking. 87.106.88.229 classified as automated brute-force attacker targeting SSH/Telnet credentials (medium confidence). Origin: enriched. Listed on: AbuseIPDB (brute-force, critical, ddos).
raw
inetnum: 87.106.88.0 - 87.106.89.255 netname: de-ber-ionos-cloud-txl descr: IONOS SE country: DE admin-c: IPAD-RIPE tech-c: IPOP-RIPE status: ASSIGNED PA mnt-by: AS8560-MNT created: 2025-12-16T12:46:54Z last-modified: 2025-12-16T12:46:54Z source: RIPE role: IP Administration address: IONOS SE admin-c: SH15342-RIPE tech-c: SH15342-RIPE mnt-ref: AS8560-MNT nic-hdl: IPAD-RIPE abuse-mailbox: [email protected] mnt-by: AS8560-MNT created: 2009-05-20T17:24:09Z last-modified: 2025-09-26T12:26:46Z source: RIPE # Filtered role: IP Operations address: IONOS SE admin-c: SH15342-RIPE tech-c: SH15342-RIPE mnt-ref: AS8560-MNT nic-hdl: IPOP-RIPE abuse-mailbox: [email protected] mnt-by: AS8560-MNT created: 2009-05-28T16:25:04Z last-modified: 2025-09-26T12:26:44Z source: RIPE # Filtered route: 87.106.88.0/23 descr: IONOS SE ber.de origin: AS8560 created: 2025-12-16T12:43:44Z last-modified: 2025-12-16T12:43:44Z source: RIPE mnt-by: AS8560-MNT
references
https://jamesbrine.com.au/vultrmelbournetest-portscan-bruteforce-ip-list-2026-03-04/, https://jamesbrine.com.au, https://malware-filter.gitlab.io/malware-filter/botnet-filter.txt

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 4 months ago · Last seen 22 days ago
Appeared in 9 threat reports