IOC Radar
IPMediumSignal 68/100

2.4.130.229

Location
FranceFrance
Bagnols-sur-Cèze, Occitanie
ASN
AS3215
France Telecom Orange
First Seen
May 29, 2025
Last Seen
Feb 15, 2026
May 29
First Seen
377d ago
Feb 15
Last Seen
115d ago
9
Reports
source reports
68%
Confidence
medium
4/91
VirusTotal
detections
Found in 9 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
68%
Signal Score
68 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

46 techniques

Network Information

CountryFRFrance
RegionBagnols-sur-Cèze, Occitanie
ASNAS3215
OrganizationFrance Telecom Orange

Feed Intelligence Summary

9 reports68% confidence
9
Source reports
68%
Confidence score
Category tags
active scanningaptasiaasyncratasyncrat cattackbackdoorbackdoor implantbotnetbrute force attackc2c2 communicationchinacommand and controlcredential accesscredential stuffingdata exfiltrationddos attacksdistributed attackseuropefrancegermanyindicatorinternet of thingsintrusion detectioniot botnetiot/ics attackmalicious activitymalicious ipsmalicious linksmalicious softwaremalicious urlsmalwaremirai botnetnetherlandsnetworknetwork securitynjratnorth americapassword attacksphishingprocess injectionratreconnaissanceremcos trojanremote accessremote access trojanremote servicesresearchedscannershellshell uploadsingaporesouth americat1003t1005t1016t1016.001t1016.002t1020t1021.001t1027t1040t1041t1055t1059t1059.003t1071t1071.001t1071.004t1083t1102t1102.001t1102.002t1105t1110.001t1110.002t1110.003t1110.004t1133t1189t1190t1204t1204.001t1204.002t1210t1486t1496t1499.001t1499.002t1499.003t1565t1566t1566.003t1573t1588t1588.002t1595.001t1595.002t1595.003threat actorthreat intelligenceunited statesvietnamweb security

Activity Timeline

1 total obs
Feb 15Feb 15

Threat Activity Heatmap

· Peak: 2026-02-15
Less
More
Mon
Wed
Fri
Jun
·
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Threat ScoreMedium Risk
68
SIGNAL
Signal Score
68%
Confidence
9
Reports
First seenMay 29, 2025
Last seenFeb 15, 2026
GeolocationFR
CountryFrance
LocationBagnols-sur-Cèze, Occitanie
ASNAS3215
OrgFrance Telecom Orange
Coords43.8348, 4.3624

VirusTotal

4/ 91vendors flagged
4% detection rateJun 8, 2026

WHOIS

description
CC=FR ASN=AS3215 orange s.a.
raw
inetnum: 2.4.128.0 - 2.4.135.255 netname: IP2000-ADSL-BAS descr: POP MON country: FR admin-c: WITR1-RIPE tech-c: WITR1-RIPE status: ASSIGNED PA remarks: for hacking, spamming or security problems send mail to remarks: [email protected] mnt-by: FT-BRX created: 2017-03-09T09:38:55Z last-modified: 2017-03-09T09:38:55Z source: RIPE role: Wanadoo France Technical Role address: FRANCE TELECOM/SCR address: 48 rue Camille Desmoulins address: 92791 ISSY LES MOULINEAUX CEDEX 9 address: FR phone: +33 1 58 88 50 00 abuse-mailbox: [email protected] admin-c: BRX1-RIPE tech-c: BRX1-RIPE nic-hdl: WITR1-RIPE mnt-by: FT-BRX created: 2001-12-04T17:57:08Z last-modified: 2013-07-16T14:09:50Z source: RIPE # Filtered route: 2.4.0.0/16 descr: France Telecom Orange origin: AS3215 mnt-by: RAIN-TRANSPAC mnt-by: FT-BRX created: 2012-11-22T09:32:06Z last-modified: 2012-11-22T09:32:06Z source: RIPE
references
https://www.4hou.com/index.php/posts/2XlN, https://mp.weixin.qq.com/s/TKUioTqn57gs3fXBuj5UYg

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 1 year ago · Last seen 3 months ago
Appeared in 9 threat reports