← Back to feed

Subnet 45.148.10.0/24

SUBNET Active high
Why this campaign was detected
9 IPs from the same /24 subnet (45.148.10.0/24) were observed attacking our sensors within the same time window. All belong to Techoff Srv Limited (AS48090). Concentrated activity from adjacent IPs is a strong indicator of a single operator or coordinated botnet.
Primary ASN
AS48090 · Techoff Srv Limited
Subnet
45.148.10.0/24
Country
🇳🇱 NL
Cloud Provider
Member Count
9 IPs
Below average
Total Events
16752
Below average by volume
Started / Ended
2026-02-22 16:58 — ongoing
Attack Types
http:scan ssh:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
Initial Access
Credential Access
Discovery
Command and Control
Member Actors
IP Address Behavior Confidence Flags Events Agents Attack Types Hostname Last Seen
45.148.10.121 credential_harvester 80% DROP2x OSINT 12314 3 ssh:bruteforce 2026-05-09 14:19 evidence →
45.148.10.183 credential_harvester 66% DROP2x OSINT 3292 3 ssh:bruteforce 2026-05-05 12:05 evidence →
45.148.10.151 opportunistic_bruter 64% DROP1x OSINT 175 3 ssh:bruteforce 2026-05-09 16:03 evidence →
45.148.10.141 opportunistic_bruter 64% DROP1x OSINT 144 3 ssh:bruteforce 2026-05-09 16:03 evidence →
45.148.10.157 opportunistic_bruter 63% DROP1x OSINT 177 3 ssh:bruteforce 2026-05-08 22:02 evidence →
45.148.10.152 opportunistic_bruter 62% DROP1x OSINT 145 3 ssh:bruteforce 2026-05-08 10:02 evidence →
45.148.10.67 web_probe 59% DROP1x OSINT 155 3 http:scan 2026-05-09 22:41 evidence →
45.148.10.147 opportunistic_bruter 46% DROP1x OSINT 150 2 ssh:bruteforce 2026-05-08 01:02 evidence →
45.148.10.5 web_probe 33% DROP1x OSINT 6 2 http:scan 2026-05-07 05:52 evidence →
VPN Known VPN or proxy provider
DROP ASN on Spamhaus DROP list
Nx OSINT Corroborated by N external threat feeds