← Back to feed

AS213035 Des Capital B.V.

ASN Ended medium
Why this campaign was detected
5 IPs from the same network (Des Capital B.V., AS213035) were active during overlapping time periods. Temporal correlation across a shared autonomous system suggests infrastructure controlled by the same entity.
Primary ASN
AS213035 · Des Capital B.V.
Subnet
Country
🇳🇱 NL
Cloud Provider
Member Count
5 IPs
Below average
Total Events
5116
Below average by volume
Started / Ended
2026-05-03 18:01 — 2026-08-29 15:30
Attack Types
ssh:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
Credential Access
Discovery
Member Actors
IP Address Behavior Confidence Flags Events Agents Attack Types Hostname Last Seen
212.192.240.126 credential_harvester 37% DROP 1400 2 ssh:bruteforce 2026-07-10 03:07 evidence →
87.121.69.138 credential_harvester 37% DROP 1252 2 ssh:bruteforce 2026-07-13 16:49 evidence →
212.192.240.10 credential_harvester 37% DROP 1138 2 ssh:bruteforce 2026-07-20 23:11 evidence →
212.192.216.2 credential_harvester 36% DROP 810 2 ssh:bruteforce 2026-07-23 14:44 evidence →
185.28.37.194 credential_harvester 36% DROP 614 2 ssh:bruteforce 2026-07-10 02:29 evidence →
VPN Known VPN or proxy provider
DROP ASN on Spamhaus DROP list
Nx OSINT Corroborated by N external threat feeds
{# Cloudflare Web Analytics — cookieless, public pages only. The context processor withholds the token from authenticated requests. #}