← Back to feed

Subnet 45.148.10.0/24

SUBNET Active high
Why this campaign was detected
9 IPs from the same /24 subnet (45.148.10.0/24) were observed attacking our sensors within the same time window. All belong to Techoff Srv Limited (AS48090). Concentrated activity from adjacent IPs is a strong indicator of a single operator or coordinated botnet.
Primary ASN
AS48090 · Techoff Srv Limited
Subnet
45.148.10.0/24
Country
🇳🇱 NL
Cloud Provider
Member Count
9 IPs
Below average
Total Events
16743
Below average by volume
Started / Ended
2026-02-22 16:58 — ongoing
Attack Types
http:scan ssh:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
Initial Access
Credential Access
Discovery
Command and Control
Member Actors
IP Address Behavior Confidence Flags Events Agents Attack Types Hostname Last Seen
45.148.10.121 credential_harvester 80% DROP1x OSINT 12474 3 ssh:bruteforce 2026-05-11 13:24 evidence →
45.148.10.151 opportunistic_bruter 68% DROP1x OSINT 180 3 ssh:bruteforce 2026-05-11 07:02 evidence →
45.148.10.141 opportunistic_bruter 64% DROP1x OSINT 144 3 ssh:bruteforce 2026-05-09 16:03 evidence →
45.148.10.157 opportunistic_bruter 63% DROP1x OSINT 177 3 ssh:bruteforce 2026-05-08 22:02 evidence →
45.148.10.183 credential_harvester 62% DROP1x OSINT 3292 3 ssh:bruteforce 2026-05-05 12:05 evidence →
45.148.10.152 opportunistic_bruter 62% DROP1x OSINT 145 3 ssh:bruteforce 2026-05-08 10:02 evidence →
45.148.10.67 web_probe 57% DROP 170 3 http:scan 2026-05-11 17:21 evidence →
45.148.10.147 opportunistic_bruter 54% DROP1x OSINT 155 2 ssh:bruteforce 2026-05-11 22:04 evidence →
45.148.10.5 web_probe 33% DROP1x OSINT 6 2 http:scan 2026-05-07 05:52 evidence →
VPN Known VPN or proxy provider
DROP ASN on Spamhaus DROP list
Nx OSINT Corroborated by N external threat feeds