IOC Radar
IPMediumSignal 67/100

54.36.148.43

Location
FranceFrance
Roubaix, Hauts-de-France
ASN
AS16276
OVH
First Seen
Aug 28, 2020
Last Seen
Feb 23, 2026
Aug 28
First Seen
2127d ago
Feb 23
Last Seen
122d ago
12
Reports
source reports
67%
Confidence
medium
Found in 12 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
67%
Signal Score
67 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

30 techniques

Network Information

CountryFRFrance
RegionRoubaix, Hauts-de-France
ASNAS16276
OrganizationOVH

Feed Intelligence Summary

12 reports67% confidence
12
Source reports
67%
Confidence score
Category tags
active scanningahrefs-benignattackauto-generated securitybad web botbeningbening scannerbotnetbrute forcecommand and controlcommunication protocolcompromised credentialscowrie honeypotcowrie ssh attackscredential accesscredential harvestingcredential stuffingdata exfiltrationdecoy systemdenial of servicedistributed attackseuropeexploit probingfrfranceftp brute forcehackingindicatormailoney email attacksmailoney honeypotmalicious activitymalicious python scriptsmalicious softwaremalwaremalware hostingnetworknetwork intrusion attemptsnetwork scanningnetwork securityphishingphishing attackphishing trapprocess injectionreconnaissanceresearchedresource hijackingscannersentrypeer attackssentrypeer botnetsftp access attemptsftp attacksip attackssip brute forcesocial engineeringssh attackssh monitoringt1021t1040t1041t1053t1055t1059t1068t1071.001t1078t1083t1110t1110.002t1190t1203t1486t1496t1499.001t1499.002t1499.003t1565t1566.001t1566.002t1566.003t1566.004t1589t1590t1595t1595.001t1595.002t1595.003tannertelecommunicationsthreat actorverified-benignvoipvoip attackweb application attackweb exploitation

Activity Timeline

1 total obs
Feb 23Feb 23

Threat Activity Heatmap

· Peak: 2026-02-23
Less
More
Mon
Wed
Fri
Jun
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Threat ScoreMedium Risk
67
SIGNAL
Signal Score
67%
Confidence
12
Reports
First seenAug 28, 2020
Last seenFeb 23, 2026
GeolocationFR
CountryFrance
LocationRoubaix, Hauts-de-France
ASNAS16276
OrgOVH
Coords48.8582, 2.3387

VirusTotal

Not checked

WHOIS

description
2025-03-03T11:21:24.521Z Honeypot : Tanner : Source: 54.36.148.43 : Port: 80 Post Data: {'version': '0.6.0', 'response': {'message': {'sess_uuid': '209baad0-745c-4585-8cbe-fc67c74f3811', 'detection': {'version': '0.6.0', 'order': 1, 'name': 'index', 'type': 1}}}}
raw
inetnum: 54.36.148.0 - 54.36.151.255 netname: OVH-DEDICATED-FO country: FR descr: Failover IPs org: ORG-OS3-RIPE admin-c: OTC2-RIPE tech-c: OTC2-RIPE status: LEGACY mnt-by: OVH-MNT created: 2017-09-21T07:52:45Z last-modified: 2017-09-21T07:52:45Z source: RIPE organisation: ORG-OS3-RIPE org-name: OVH SAS country: FR org-type: LIR address: 2 rue Kellermann address: 59100 address: Roubaix address: FRANCE phone: +33972101007 admin-c: OTC2-RIPE admin-c: OK217-RIPE admin-c: GM84-RIPE abuse-c: AR15333-RIPE mnt-ref: OVH-MNT mnt-ref: RIPE-NCC-HM-MNT mnt-by: RIPE-NCC-HM-MNT mnt-by: OVH-MNT created: 2004-04-17T11:23:17Z last-modified: 2020-12-16T10:24:51Z source: RIPE # Filtered role: OVH Technical Contact address: OVH SAS address: 2 rue Kellermann address: 59100 Roubaix address: France admin-c: OK217-RIPE tech-c: GM84-RIPE tech-c: SL10162-RIPE nic-hdl: OTC2-RIPE abuse-mailbox: [email protected] mnt-by: OVH-MNT created: 2004-01-28T17:42:29Z last-modified: 2014-09-05T10:47:15Z source: RIPE # Filtered route: 54.36.0.0/16 origin: AS16276 mnt-by: OVH-MNT created: 2017-10-06T07:57:47Z last-modified: 2017-10-06T07:57:47Z source: RIPE
references
https://github.com/telekom-security/tpotce, counter.txt

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 5 years ago · Last seen 4 months ago
Appeared in 12 threat reports