IOC Radar
IPMediumSignal 74/100

105.209.160.96

Location
South AfricaSouth Africa
Kempton Park, Gauteng
ASN
AS16637
MTN SA
First Seen
Apr 6, 2026
Last Seen
May 27, 2026
Apr 6
First Seen
69d ago
May 27
Last Seen
17d ago
10
Reports
source reports
74%
Confidence
medium
Found in 10 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
74%
Signal Score
74 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

13 techniques

Network Information

CountryZASouth Africa
RegionKempton Park, Gauteng
ASNAS16637
OrganizationMTN SA

Feed Intelligence Summary

10 reports74% confidence
10
Source reports
74%
Confidence score
Category tags
abuseactive scanactive scanningafricabad reputationbrute forcebrute force attackbrute-forcecredential accesscredential stuffingdata exfiltrationdata store exposuredatabase securityddosddos attackdenial of serviceexploitation activityhackingidentity & access exploitationindicatorinjection activityinjection attacksiot securityiot targetedmalwarenetworkpassword attacksreconnaissanceresearchedscannersouth africat1059.003t1110.001t1110.002t1110.003t1110.004t1190t1203t1486t1499.001t1499.002t1595.001t1595.002t1595.003web application attackweb exploitationza

Activity Timeline

1 total obs
May 27May 27

Threat Activity Heatmap

· Peak: 2026-05-27
Less
More
Mon
Wed
Fri
Jun
·
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Threat ScoreHigh Risk
74
SIGNAL
Signal Score
74%
Confidence
10
Reports
First seenApr 6, 2026
Last seenMay 27, 2026
GeolocationZA
CountrySouth Africa
LocationKempton Park, Gauteng
ASNAS16637
OrgMTN SA
Coords-25.9964, 28.2268

VirusTotal

Not checked

WHOIS

raw
inetnum: 105.208.0.0 - 105.223.255.255 netname: MTN-SA descr: MTN SA country: ZA org: ORG-VSA1-AFRINIC admin-c: DM117-AFRINIC admin-c: AT32-AFRINIC admin-c: AM158-AFRINIC admin-c: MS161-AFRINIC tech-c: DM117-AFRINIC tech-c: AT32-AFRINIC tech-c: AM158-AFRINIC status: ALLOCATED PA mnt-by: AFRINIC-HM-MNT mnt-lower: MTNSA-MNT mnt-domains: MTNSA-MNT source: AFRINIC # Filtered parent: 105.0.0.0 - 105.255.255.255 organisation: ORG-VSA1-AFRINIC org-name: MTN SA org-type: LIR country: ZA address: 216 14th Avenue address: Fairland address: Johannesburg 2196 phone: tel:+27-11-912-3000 admin-c: DM117-AFRINIC admin-c: AT32-AFRINIC admin-c: AM158-AFRINIC admin-c: MS161-AFRINIC tech-c: DM117-AFRINIC tech-c: AT32-AFRINIC tech-c: AM158-AFRINIC mnt-ref: AFRINIC-HM-MNT mnt-ref: MTNSA-MNT mnt-by: AFRINIC-HM-MNT source: AFRINIC # Filtered person: Alan McKinnon nic-hdl: AM158-AFRINIC address: 216 14th Avenue address: Fairland address: Johannesburg 2196 address: South Africa phone: tel:+27-11-912-3000 mnt-by: GENERATED-UT5UMLTTEHMTSJAQCJWBQJCTVQ9AI6BE-MNT source: AFRINIC # Filtered person: Antonio Teixeira nic-hdl: AT32-AFRINIC address: 216 14th Avenue, Fairland address: Roodepoort, 2195. address: Roodepoort address: South Africa phone: tel:+27-11-912-3000 mnt-by: GENERATED-U9MUUZCT6LZSJ6CZU7EJCT62JKCIEW3M-MNT source: AFRINIC # Filtered person: Dijon Mannie nic-hdl: DM117-AFRINIC address: 216 14th Avenue address: MTN Innovation Centre address: Fairland address: Roodepoort address: 2195 address: Johannesburg address: South Africa address: South Africa address: Other phone: tel:+27-83-912-3000 mnt-by: GENERATED-C8SUDYYLB1HFQ4IWUKAD8NC3ZGJ4ZYPJ-MNT source: AFRINIC # Filtered person: Mike Silber address: MTN Group address: 216 14th Ave address: Fairlands address: Roodepoort address: South Africa phone: tel:+27-11-912-4000 nic-hdl: MS161-AFRINIC source: AFRINIC # Filtered mnt-by: GENERATED-K1GUDID9VRZ0H0BVXEMJ1SVX7GYGQHX2-MNT

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 2 months ago · Last seen 17 days ago
Appeared in 10 threat reports