IOC Radar
IPMediumSignal 67/100

78.135.73.218

Location
TurkeyTurkey
Yakuplu, Istanbul
ASN
AS51722
Pixoof Teknoloji Anonim Sirketi
First Seen
Sep 21, 2024
Last Seen
Apr 23, 2026
Sep 21
First Seen
636d ago
Apr 23
Last Seen
57d ago
5
Reports
source reports
67%
Confidence
medium
Found in 5 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
67%
Signal Score
67 / 100
IDS Rule
No
Threat Context
Tags

Network Information

CountryTRTurkey
RegionYakuplu, Istanbul
ASNAS51722
OrganizationPixoof Teknoloji Anonim Sirketi

Feed Intelligence Summary

5 reports67% confidence
5
Source reports
67%
Confidence score
Category tags
abuseactive scanbad reputationbrute forcebrute force attackereurope/asiaindicatornetworkportscanresearchedscannersservice scanturkeyvultr

Activity Timeline

1 total obs
Apr 23Apr 23

Threat Activity Heatmap

· Peak: 2026-04-23
Less
More
Mon
Wed
Fri
Jun
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Intelligence SummaryAI Generated

This report details a critical Indicator of Compromise (IOC) identified as the IPv4 address 78.135.73.218, which carries a high risk score of 67.24. This IP address is strongly associated with hostile network reconnaissance and brute-force attack activities, posing a direct and immediate threat to organizational assets. Evidence suggests its involvement in extensive port scanning campaigns originating from infrastructure like Vultr, indicating an active attempt to discover vulnerable services an…

Threat ScoreMedium Risk
67
SIGNAL
Signal Score
67%
Confidence
5
Reports
First seenSep 21, 2024
Last seenApr 23, 2026
GeolocationTR
CountryTurkey
LocationYakuplu, Istanbul
ASNAS51722
OrgPixoof Teknoloji Anonim Sirketi
Coords41.0214, 28.9948

VirusTotal

Not checked

WHOIS

description
IPv4 hosts detected port scanning Vultr Melbourne (Australia) honeypot
raw
inetnum: 78.135.73.0 - 78.135.73.255 netname: TR-GEOIPA-PIXOOF-20220718 descr: PIXOOF TEKNOLOJI ANONIM SIRKETI country: TR org: ORG-PTAS2-RIPE admin-c: UAS32-RIPE tech-c: UAS32-RIPE status: ASSIGNED PA mnt-by: GEO-MNT created: 2022-07-18T10:51:05Z last-modified: 2025-12-07T22:52:36Z source: RIPE organisation: ORG-PTAS2-RIPE org-name: PIXOOF TEKNOLOJI ANONIM SIRKETI country: TR org-type: OTHER address: BEYLIKDUZU OSB BIRLIK SANAYI SITESI 3. CADDESI NO :5 Ic Kapi No :130 BEYLIKDUZU/ISTANBUL abuse-c: ACRO62006-RIPE mnt-ref: MERIC-MNT mnt-ref: NETWORK-MANAGEMENT-MNT mnt-ref: GOLD-MNT mnt-ref: GEO-MNT mnt-ref: lir-tr-teknosos-1-MNT mnt-by: ulasatakan created: 2025-04-21T19:35:59Z last-modified: 2026-01-01T20:27:25Z source: RIPE # Filtered person: Ulas Atakan SAHIN address: Baris Mahallesi Egitim Vadisi Bulvari NO29/7 Beylikduzu/Istanbul phone: +905317154327 nic-hdl: UAS32-RIPE created: 2025-09-04T21:17:01Z last-modified: 2025-09-04T21:17:01Z source: RIPE mnt-by: ulasatakan route: 78.135.73.0/24 origin: AS51722 mnt-by: GEO-MNT created: 2025-12-07T22:43:15Z last-modified: 2025-12-07T22:43:15Z source: RIPE route: 78.135.73.0/24 origin: AS61135 mnt-by: GEO-MNT created: 2022-07-18T10:50:51Z last-modified: 2022-07-18T10:50:51Z source: RIPE
references
https://jamesbrine.com.au/vultrmelbournetest-portscan-bruteforce-ip-list-2026-04-16/, https://jamesbrine.com.au

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 1 year ago · Last seen 1 month ago
Appeared in 5 threat reports