← Back to feed

AS215224 NovoServe B.V.

ASN Ended medium
Why this campaign was detected
5 IPs from the same network (NovoServe B.V., AS215224) were active during overlapping time periods. Temporal correlation across a shared autonomous system suggests infrastructure controlled by the same entity.
Primary ASN
AS215224 · NovoServe B.V.
Subnet
Country
🇻🇬 VG
Cloud Provider
Member Count
5 IPs
Below average
Total Events
506
Below average by volume
Started / Ended
2026-05-03 17:13 — 2026-07-12 10:02
Attack Types
ssh:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
Credential Access
Member Actors
IP Address Behavior Confidence Flags Events Agents Attack Types Hostname Last Seen
45.148.147.191 credential_harvester 36% 688 2 ssh:bruteforce 2026-06-05 09:58 evidence →
45.142.3.73 credential_harvester 35% 348 2 ssh:bruteforce 2026-06-02 07:59 evidence →
45.142.0.5 credential_harvester 33% 100 2 ssh:bruteforce 2026-05-12 20:26 evidence →
45.139.211.68 credential_harvester 32% 70 2 ssh:bruteforce 2026-05-11 06:35 evidence →
45.12.33.23 credential_harvester 32% 56 2 ssh:bruteforce 2026-05-10 15:34 evidence →
VPN Known VPN or proxy provider
DROP ASN on Spamhaus DROP list
Nx OSINT Corroborated by N external threat feeds
{# Cloudflare Web Analytics — cookieless, public pages only. The context processor withholds the token from authenticated requests. #}