IOC Radar
IPHighVerifiedSignal 67/100

105.118.9.237

Location
NigeriaNigeria
Benin City, Edo State
ASN
AS36873
Airtel Networks Limited
First Seen
Apr 15, 2026
Last Seen
Apr 19, 2026
Apr 15
First Seen
60d ago
Apr 19
Last Seen
57d ago
5
Reports
source reports
67%
Confidence
high
Found in 5 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
67%
Signal Score
67 / 100
IDS Rule
No
Threat Context
Tags

Network Information

CountryNGNigeria
RegionBenin City, Edo State
ASNAS36873
OrganizationAirtel Networks Limited

Feed Intelligence Summary

5 reports67% confidence
5
Source reports
67%
Confidence score
Category tags
active scanafricabrute forcebrute force attackerbrute-forceindicatornetworknigeriaportscanresearchedscannerscannersservice scanvultr

Activity Timeline

1 total obs
Apr 19Apr 19

Threat Activity Heatmap

· Peak: 2026-04-19
Less
More
Mon
Wed
Fri
Jun
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Threat ScoreMedium Risk
67
SIGNAL
Signal Score
67%
Confidence
5
Reports
First seenApr 15, 2026
Last seenApr 19, 2026
Verified IOC
GeolocationNG
CountryNigeria
LocationBenin City, Edo State
ASNAS36873
OrgAirtel Networks Limited
Coords10.0000, 8.0000

VirusTotal

Not checked

WHOIS

description
IPv4 hosts detected port scanning Vultr Tokyo (Japan) honeypot
raw
inetnum: 105.112.0.0 - 105.127.255.255 netname: Airtel-Nigeria descr: Airtel Networks Limited country: NG org: ORG-VNL1-AFRINIC admin-c: AJ28-AFRINIC admin-c: OO130-AFRINIC tech-c: AJ28-AFRINIC tech-c: OO131-AFRINIC tech-c: OO130-AFRINIC status: ALLOCATED PA mnt-by: AFRINIC-HM-MNT mnt-lower: AIRTEL-NG-MNT mnt-domains: AIRTEL-NG-MNT source: AFRINIC # Filtered parent: 105.0.0.0 - 105.255.255.255 organisation: ORG-VNL1-AFRINIC org-name: Airtel Networks Limited org-type: LIR country: NG address: Airtel HQ Building address: A-Banana, 5th Floor, Wing B address: Plot L2, Foreshore Estate, Banana Island address: Ikoyi-Lagos. address: Lagos, Nigeria 234-1 phone: tel:+234-802-192-2396 phone: tel:+234-802-192-2396 phone: tel:+234-802-222-0499 phone: tel:+234-802-222-5661 admin-c: OO130-AFRINIC admin-c: AJ28-AFRINIC tech-c: OO130-AFRINIC tech-c: OO131-AFRINIC tech-c: AJ28-AFRINIC mnt-ref: AFRINIC-HM-MNT mnt-ref: AIRTEL-NG-MNT mnt-by: AFRINIC-HM-MNT source: AFRINIC # Filtered person: Adebayo Juba nic-hdl: AJ28-AFRINIC address: Airtel HQ Building address: A-Banana, 5th Floor, Wing B address: Plot L2, Foreshore Estate, Banana Island address: Ikoyi-Lagos. address: Lagos, Nigeria 234-1 address: Nigeria address: Lagos address: Other phone: tel:+234-802-150-0300 mnt-by: GENERATED-8RMUILJADQULH7BYNQAJAGXTMWNZL08P-MNT source: AFRINIC # Filtered person: Olusegun Oyetunji nic-hdl: OO130-AFRINIC address: Airtel HQ Building address: A-Banana, 5th Floor, Wing B address: Plot L2, Foreshore Estate, Banana Island address: Ikoyi-Lagos address: Nigeria address: Lagos address: Nigeria phone: tel:+234-802-150-0300 mnt-by: GENERATED-7VR0LPERZZSHH2A2NXB3BBYYSQ1XZAM4-MNT source: AFRINIC # Filtered person: Olatunde Olajire nic-hdl: OO131-AFRINIC address: Airtel HQ Building address: A-Banana, 5th Floor, Wing B address: Plot L2, Foreshore Estate, Banana Island address: Ikoyi-Lagos address: Nigeria address: Lagos address: Other phone: tel:+234-802-150-0300 mnt-by: AIRTEL-NG-MNT source: AFRINIC # Filtered route: 105.112.0.0/12 origin: AS36873 descr: AIRTEL ROUTE mnt-by: AIRTEL-NG-MNT source: AFRINIC # Filtered
references
https://jamesbrine.com.au/vultrtokyo-portscan-bruteforce-ip-list-2026-04-15/, https://jamesbrine.com.au

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

high
First detected 2 months ago · Last seen 1 month ago
Appeared in 5 threat reports