IOC Radar
IPMediumSignal 81/100

181.23.108.95

Location
ArgentinaArgentina
La Plata, Buenos Aires
ASN
AS22927
Telefonica de Argentina
First Seen
Apr 15, 2026
Last Seen
Apr 24, 2026
Apr 15
First Seen
67d ago
Apr 24
Last Seen
58d ago
9
Reports
source reports
81%
Confidence
medium
Found in 9 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
81%
Signal Score
81 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

1 techniques

Network Information

CountryARArgentina
RegionLa Plata, Buenos Aires
ASNAS22927
OrganizationTelefonica de Argentina

IP Category

⟲
Proxy
Proxy server

Feed Intelligence Summary

9 reports81% confidence
9
Source reports
81%
Confidence score
Category tags
active scanaptargentinabrute forcebrute-forcecredential accesscredential stuffingexploitation activityidentity & access exploitationindicatornetworkproxyresearchedscannersouth americasshssh attackt1110.002threat actortor node

Activity Timeline

1 total obs
Apr 24Apr 24

Threat Activity Heatmap

· Peak: 2026-04-24
Less
More
Mon
Wed
Fri
Jun
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Threat ScoreHigh Risk
81
SIGNAL
Signal Score
81%
Confidence
9
Reports
First seenApr 15, 2026
Last seenApr 24, 2026
GeolocationAR
CountryArgentina
LocationLa Plata, Buenos Aires
ASNAS22927
OrgTelefonica de Argentina
Coords-34.9213, -57.9544
Proxy

VirusTotal

Not checked

WHOIS

raw
inetnum: 181.20.0.0/14 status: allocated aut-num: N/A owner: Telefonica de Argentina ownerid: AR-TEAR7-LACNIC responsible: Luis Francisco Pérez Sánchez address: Av. Independencia, 169, PB address: 1099 - Buenos Aires - CF country: AR phone: +54 8102220102 [0000] owner-c: TEA tech-c: TEA abuse-c: TEA inetrev: 181.20.0.0/14 nserver: DNS1.MRSE.COM.AR nsstat: 20260415 AA nslastaa: 20260415 nserver: DNS2.MRSE.COM.AR nsstat: 20260415 AA nslastaa: 20260415 nserver: DNS3.MRSE.COM.AR nsstat: 20260415 AA nslastaa: 20260415 nserver: DNS4.MRSE.COM.AR [lame - not published] nsstat: 20260415 NOT SYNC ZONE nslastaa: 20260330 created: 20110113 changed: 20110113 nic-hdl: TEA person: Telefonica de Argentina e-mail: [email protected] address: AV. ING. HUERGO, 723, address: 1065 - Capital Federal - BA country: AR phone: +54 11 43335000 created: 20030618 changed: 20250828

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 2 months ago · Last seen 1 month ago
Appeared in 9 threat reports