← Back to feed
AS8452 IDDQD-AS
ASN Active mediumWhy this campaign was detected
8 IPs from the same network (IDDQD-AS, AS8452) were active during overlapping time periods. Temporal correlation across a shared autonomous system suggests infrastructure controlled by the same entity.
Primary ASN
AS8452 · IDDQD-AS
Subnet
—
Country
🇪🇬 EG
Cloud Provider
—
Member Count
8 IPs
Below average
Total Events
354
Below average by volume
Started / Ended
2026-07-13 16:09 — ongoing
Attack Types
MITRE ATT&CK Techniques
Initial Access
Discovery
Member Actors
| IP Address | Behavior | Confidence | Flags | Events | Agents | Attack Types | Hostname | Last Seen | |
|---|---|---|---|---|---|---|---|---|---|
| 197.50.68.109 | opportunistic_bruter | 44% | 140 | 2 | ssh:bruteforce | — | 2026-07-15 16:48 | evidence → | |
| 196.218.23.60 | opportunistic_bruter | 43% | 70 | 2 | ssh:bruteforce | — | 2026-07-15 14:04 | evidence → | |
| 41.38.8.56 | opportunistic_bruter | 41% | 19 | 2 | ssh:bruteforce | — | 2026-07-15 14:09 | evidence → | |
| 197.50.67.247 | opportunistic_bruter | 40% | 75 | 2 | ssh:bruteforce | — | 2026-07-14 03:44 | evidence → | |
| 197.60.23.130 | opportunistic_bruter | 38% | 20 | 2 | ssh:bruteforce | — | 2026-07-14 06:52 | evidence → | |
| 102.40.60.74 | opportunistic_bruter | 30% | 10 | 1 | ssh:bruteforce | — | 2026-07-15 04:06 | evidence → | |
| 41.32.147.114 | opportunistic_bruter | 30% | 10 | 1 | ssh:bruteforce | — | 2026-07-15 00:27 | evidence → | |
| 196.202.65.19 | opportunistic_bruter | 27% | 10 | 1 | ssh:bruteforce | — | 2026-07-13 17:12 | evidence → |
VPN Known VPN or proxy provider
DROP ASN on Spamhaus DROP list
Nx OSINT Corroborated by N external threat feeds