IOC Radar
IPMediumSignal 68/100

130.180.91.158

Location
GermanyGermany
Frankfurt am Main, Baden-Wurttemberg
ASN
AS3209
Vodafone NRW GmbH
First Seen
Jun 18, 2026
Last Seen
Jun 20, 2026
Jun 18
First Seen
4d ago
Jun 20
Last Seen
2d ago
10
Reports
source reports
68%
Confidence
medium
Found in 10 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
68%
Signal Score
68 / 100
IDS Rule
No
Threat Context
Tags

Network Information

CountryDEGermany
RegionFrankfurt am Main, Baden-Wurttemberg
ASNAS3209
OrganizationVodafone NRW GmbH

Feed Intelligence Summary

10 reports68% confidence
10
Source reports
68%
Confidence score
Category tags
active scanaptasiablocklistblocklist_allbrute forcebruteforcechinadeeuropeeurope/asiaexploitation activitygermanyimapimap attackindicatormalicious-ipnetworknorth americaresearchedrussiarussian federationscannersmtpsmtp attackersshthreat actorthreat-intelunited kingdomunited states

Activity Timeline

1 total obs
Jun 20Jun 20

Threat Activity Heatmap

· Peak: 2026-06-20
Less
More
Mon
Wed
Fri
Jun
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
24h
0
Dormant
7d
1
Minimal
30d
1
Minimal
3mo
1
Minimal
Threat ScoreMedium Risk
68
SIGNAL
Signal Score
68%
Confidence
10
Reports
First seenJun 18, 2026
Last seenJun 20, 2026
GeolocationDE
CountryGermany
LocationFrankfurt am Main, Baden-Wurttemberg
ASNAS3209
OrgVodafone NRW GmbH
Coords48.7825, 9.1770

VirusTotal

Not checked

WHOIS

description
Global Threat Feed. 250,000+ Active Network Scanners.
raw
inetnum: 130.180.64.0 - 130.180.127.255 netname: UNITYMEDIA-STATIC-B2B-POOL-NET descr: Unitymedia Static B2B Customer Pool country: DE abuse-c: UMAB-RIPE admin-c: UMAC-RIPE tech-c: UMTC-RIPE status: LIR-PARTITIONED PA mnt-lower: UNITYMEDIA-B2B-MNT mnt-by: UNITYMEDIA-MNT created: 2020-08-26T15:47:32Z last-modified: 2021-03-01T09:36:38Z source: RIPE role: Unitymedia Administration address: Vodafone West GmbH address: Ferdinand-Braun-Platz 1 address: 40549 D�sseldorf address: GERMANY admin-c: MH3982-RIPE admin-c: HZ1532-RIPE tech-c: UMTC-RIPE nic-hdl: UMAC-RIPE mnt-by: UNITYMEDIA-MNT mnt-by: KabelBW-MNT created: 2009-07-10T11:13:10Z last-modified: 2023-01-12T14:56:28Z source: RIPE # Filtered role: Unitymedia Technical Contact address: Vodafone West GmbH address: Ferdinand-Braun-Platz 1 address: 40549 D�sseldorf address: GERMANY admin-c: UMAC-RIPE admin-c: UMAB-RIPE tech-c: MH3982-RIPE tech-c: HZ1532-RIPE nic-hdl: UMTC-RIPE mnt-by: UNITYMEDIA-MNT mnt-by: KabelBW-MNT created: 2009-07-10T11:13:10Z last-modified: 2023-01-12T14:57:31Z source: RIPE # Filtered route: 130.180.64.0/18 descr: Unitymedia origin: AS20825 mnt-by: UNITYMEDIA-MNT created: 2011-11-14T20:40:30Z last-modified: 2011-11-14T20:40:30Z source: RIPE route: 130.180.64.0/18 descr: Vodafone West origin: AS3209 mnt-by: UNITYMEDIA-MNT created: 2021-03-08T23:36:04Z last-modified: 2021-03-08T23:36:04Z source: RIPE

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 4 days ago · Last seen 2 days ago
Appeared in 10 threat reports
1 user flagged this