IPMediumSignal 43/100
93.123.109.101
Location
NetherlandsAndorra la Vella, Noord-Holland
ASN
AS48090
Techoff SRV Limited
First Seen
Apr 1, 2025
Last Seen
Jun 18, 2026
Found in 21 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
43%
Signal Score
43 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Network Information
CountryNetherlands
NetherlandsRegionAndorra la Vella, Noord-Holland
ASNAS48090
OrganizationTechoff SRV Limited
Feed Intelligence Summary
21 reports43% confidence
21
Source reports
43%
Confidence score
Category tags
abuseactive scanactive scanningandorraantispamapacheapache attackeraptattackautomated attackbad reputationbad web botblocklistblocklist_allblog spambotnetbotnet activitybrute forcebrute force attackbrute force attemptsbrute-forcebulgariac2 servercommand & controlcommand and controlcommunication protocolcompromised hostscowriecowrie activitycowrie honeypotcredential accesscredential harvestingcredential stuffingdata exfiltrationdata store exposuredata theftdatabase securityddosddos attackdecoy systemdenial of servicedionaea activitydionaea honeypotdistributed attackseuropeexploitationexploitation activityexploited hostftp brute forcehackingheralding activityidentity & access exploitationindicatorinitial accessinjection activityinjection attacksioclateral movementlog4jmalicious activitymalicious softwaremalwaremalware behaviourmalware capturemalware distributionnetherlandsnetworknetwork intrusionnetwork probingnetwork scanningnetwork securitynetwork service scanningnetwork traffic analysisnlpassword attacksphishingphishing attackprocess injectionreconnaissanceresearchresearchedresource hijackingscannersentrypeer activitysentrypeer botnetservice scansftp activitysftp attackshell access attemptssip brute forcesocial engineeringspamsql injectionsshssh attackssh monitoringssh-brutet1021t1021.001t1021.004t1021.005t1040t1041t1046t1055t1059t1059.003t1059.004t1071t1071.001t1078t1078.004t1105t1110t1110.001t1110.002t1110.003t1110.004t1133t1190t1203t1204.002t1486t1496t1499.001t1499.002t1499.003t1565t1566.001t1566.002t1566.003t1573t1595t1595.001t1595.002t1595.003tannertargeting databasetelecommunicationsthreat actorthreat intelligencetor nodetpotunauthorized access attemptunited kingdomvoipvoip attackvulnerability scanweb app attackweb application attackweb exploitationweb spam
Activity Timeline
Jun 18Jun 18
Threat Activity Heatmap
· Peak: 2026-06-18LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Threat ScoreMedium Risk
43
SIGNAL
Signal Score
43%
Confidence
21
Reports
First seenApr 1, 2025
Last seenJun 18, 2026
GeolocationNL
CountryNetherlands
LocationAndorra la Vella, Noord-Holland
ASNAS48090
OrgTechoff SRV Limited
Coords52.3785, 4.9000
VirusTotal
Not checked
WHOIS
- description
- Auto-submitted attacker IPs from 6-region honeypot mesh (cowrie/dionaea/heralding/suricata).
- raw
- inetnum: 93.123.109.0 - 93.123.109.255 netname: TECHOFF_SRV_LIMITED descr: TECHOFF_SRV_LIMITED org: ORG-TSL73-RIPE country: AD admin-c: AD18161-RIPE tech-c: AD18161-RIPE mnt-domains: TECHOFF-MNT mnt-routes: TECHOFF-MNT status: ASSIGNED PA mnt-by: MNT-NETERRA created: 2025-02-24T11:41:37Z last-modified: 2025-02-24T11:41:37Z source: RIPE organisation: ORG-TSL73-RIPE org-name: TECHOFF SRV LIMITED country: GB org-type: OTHER address: 35 Firs Avenue, London N11 3NE abuse-c: AD18161-RIPE mnt-ref: TECHOFF-MNT mnt-ref: MNT-NETERRA mnt-by: TECHOFF-MNT created: 2024-11-20T13:01:40Z last-modified: 2024-11-26T15:22:33Z source: RIPE # Filtered role: ABUSE DEP address: 35 Firs Avenue, London N11 3NE abuse-mailbox: [email protected] nic-hdl: AD18161-RIPE mnt-by: TECHOFF-MNT created: 2024-11-20T13:00:28Z last-modified: 2024-11-21T09:45:52Z source: RIPE # Filtered route: 93.123.109.0/24 origin: AS48090 mnt-by: TECHOFF-MNT created: 2025-03-14T18:56:29Z last-modified: 2025-03-14T18:56:29Z source: RIPE
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
mediumFirst detected 1 year ago · Last seen 8 days ago
Appeared in 21 threat reports