← Back to feed

AS210558 1337 Services GmbH

ASN Active medium
Why this campaign was detected
5 IPs from the same network (1337 Services GmbH, AS210558) were active during overlapping time periods. Temporal correlation across a shared autonomous system suggests infrastructure controlled by the same entity.
Primary ASN
AS210558 · 1337 Services GmbH
Subnet
—
Country
🇳🇱 NL
Cloud Provider
—
Member Count
5 IPs
Below average
Total Events
74
Below average by volume
Started / Ended
2026-10-02 11:05 — ongoing
Attack Types
http:scan
MITRE ATT&CK Techniques
Reconnaissance
Initial Access
Member Actors
IP Address Behavior Confidence Flags Events Agents Attack Types Hostname Last Seen
185.241.208.20 web_probe 41% DROP 9 4 http:scan 185-241-208-20.powered.by.rdp.vision 2026-10-21 17:50 evidence →
194.26.192.140 web_probe 40% DROP 4 3 http:scan 194-26-192-140.powered.by.rdp.vision 2026-10-22 05:01 evidence →
2.58.56.23 web_probe 39% DROP 20 2 http:scan 2-58-56-23.powered.by.rdp.vision 2026-10-28 01:21 evidence →
147.90.182.77 web_probe 34% DROP 21 2 http:scan — 2026-10-25 10:33 evidence →
2.58.56.52 web_probe 26% DROP 21 2 http:scan 2-58-56-52.powered.by.rdp.vision 2026-10-20 05:56 evidence →
VPN Known VPN or proxy provider
DROP ASN on Spamhaus DROP list
Nx OSINT Corroborated by N external threat feeds