← Back to feed

Subnet 151.243.11.0/24

SUBNET Ended high

Why this campaign was detected

3 IPs from the same /24 subnet (151.243.11.0/24) were observed attacking our sensors within the same time window. All belong to LLC Vash Kredit Bank (AS209630). Concentrated activity from adjacent IPs is a strong indicator of a single operator or coordinated botnet.

Primary ASN

AS209630 · LLC Vash Kredit Bank

Subnet

151.243.11.0/24

Country

🇦🇪 AE

Cloud Provider

—

Member Count

3 IPs

Below average

Total Events

Below average by volume

Started / Ended

2026-07-12 02:26 — ongoing

Attack Types

http:scan ssh:connection telnet:connection

MITRE ATT&CK Techniques

Reconnaissance

T1595 T1595.001 T1595.002

Initial Access

T1190

Discovery

T1046

Member Actors

IP Address	Behavior	Confidence	Flags	Events	Agents	Attack Types	Hostname	Last Seen
151.243.11.140	web_probe	18%	1x OSINT	1	1	http:scan	—	2026-09-30 20:12	evidence →
151.243.11.171	scanner	16%	1x OSINT	2	1	telnet:connection	—	2026-09-30 17:13	evidence →
151.243.11.180	scanner	13%		6	1	ssh:connection	—	2026-09-30 02:15	evidence →

VPN Known VPN or proxy provider

DROP ASN on Spamhaus DROP list

Nx OSINT Corroborated by N external threat feeds