IOC Radar
IPMediumSignal 59/100

80.26.116.5

Location
SpainSpain
Playa de las Américas, CN
ASN
AS3352
TDENET (Red de servicios IP)
First Seen
Aug 26, 2020
Last Seen
Apr 18, 2026
Aug 26
First Seen
2125d ago
Apr 18
Last Seen
64d ago
6
Reports
source reports
59%
Confidence
medium
Found in 6 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
59%
Signal Score
59 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

4 techniques

Network Information

CountryESSpain
RegionPlaya de las Américas, CN
ASNAS3352
OrganizationTDENET (Red de servicios IP)

Feed Intelligence Summary

6 reports59% confidence
6
Source reports
59%
Confidence score
Category tags
aaaaaheadbotnet activitydns attackdoctype htmleliteeuropeglobalgooglebotgooglebot indexhrefhttpsindicatoripv6 spflayer protocolmetamitre attackmotherlessnetworknetwork infonextoverview zenboxperforms dnsphishingprocesses extraransomwareresearchedrta descriptionscriptspaint1055t1055 processt1071t1095t1573titletrackertxt vdmarc1verdictz233

Activity Timeline

1 total obs
Apr 18Apr 18

Threat Activity Heatmap

· Peak: 2026-04-18
Less
More
Mon
Wed
Fri
Jun
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Threat ScoreMedium Risk
59
SIGNAL
Signal Score
59%
Confidence
6
Reports
First seenAug 26, 2020
Last seenApr 18, 2026
GeolocationES
CountrySpain
LocationPlaya de las Américas, CN
ASNAS3352
OrgTDENET (Red de servicios IP)
Coords28.1315, -16.7407

VirusTotal

Not checked

WHOIS

description
The full text of the RMA-tde.net report has been published, and the results are expected to be published in the next few days, as well as the full set of words.
raw
NetRange: 80.0.0.0 - 80.255.255.255 CIDR: 80.0.0.0/8 NetName: 80-RIPE NetHandle: NET-80-0-0-0-1 Parent: () NetType: Allocated to RIPE NCC OriginAS: Organization: RIPE Network Coordination Centre (RIPE) RegDate: Updated: 2009-03-25 Comment: These addresses have been further assigned to users in Comment: the RIPE NCC region. Contact information can be found in Comment: the RIPE database at http://www.ripe.net/whois Ref: https://rdap.arin.net/registry/ip/80.0.0.0 ResourceLink: https://apps.db.ripe.net/search/query.html ResourceLink: whois.ripe.net OrgName: RIPE Network Coordination Centre OrgId: RIPE Address: P.O. Box 10096 City: Amsterdam StateProv: PostalCode: 1001EB Country: NL RegDate: Updated: 2013-07-29 Ref: https://rdap.arin.net/registry/entity/RIPE ReferralServer: whois://whois.ripe.net ResourceLink: https://apps.db.ripe.net/search/query.html OrgAbuseHandle: ABUSE3850-ARIN OrgAbuseName: Abuse Contact OrgAbusePhone: +31205354444 OrgAbuseEmail: [email protected] OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE3850-ARIN OrgTechHandle: RNO29-ARIN OrgTechName: RIPE NCC Operations OrgTechPhone: +31 20 535 4444 OrgTechEmail: [email protected] OrgTechRef: https://rdap.arin.net/registry/entity/RNO29-ARIN inetnum: 80.26.0.0 - 80.26.127.255 netname: RIMA descr: Red de servicios IP country: ES admin-c: ATdE1-RIPE tech-c: TTdE1-RIPE status: ASSIGNED PA mnt-by: MAINT-AS3352 created: 2003-09-23T12:38:29Z last-modified: 2016-04-22T09:32:08Z source: RIPE # Filtered role: Administradores Telefonica de Espana address: Ronda de la Comunicacion s/n address: Edificio Norte 1, planta 6 address: 28050 Madrid address: SPAIN org: ORG-TDE1-RIPE admin-c: KIX1-RIPE tech-c: TTDE1-RIPE nic-hdl: ATDE1-RIPE mnt-by: MAINT-AS3352 abuse-mailbox: [email protected] created: 2006-01-18T12:24:41Z last-modified: 2018-09-18T10:36:42Z source: RIPE # Filtered role: Tecnicos Telefonica de Espana address: Ronda de la Comunicacion S/N address: 28050-MADRID address: SPAIN org: ORG-TDE1-RIPE admin-c: TTE2-RIPE tech-c: TTE2-RIPE nic-hdl: TTdE1-RIPE mnt-by: MAINT-AS3352 abuse-mailbox: [email protected] created: 2006-01-18T12:39:59Z last-modified: 2018-09-18T12:08:51Z source: RIPE # Filtered route: 80.26.0.0/16 descr: TDENET (Red de servicios IP) origin: AS3352 mnt-by: MAINT-AS3352 mnt-routes: MAINT-AS3352 mnt-lower: MAINT-AS3352 created: 2011-03-10T10:22:10Z last-modified: 2011-03-10T10:22:10Z source: RIPE
references
https://vtbehaviour.commondatastorage.googleapis.com/22e702fc31752b1ff0ca59efb58d943282dff34b9e8ce61867d8c831b0d8de35_CAPE%20Sandbox.html?GoogleAccessId=758681729565-rc7fgq07icj8c9dm2gi34a4cckv235v1@developer.gserviceaccount.com&Expires=1776480788&Signature=GKnoamXxZLyFfntMDXBWi2gnSzHRWJJRZPaofPOvzgQF6ygdQKEJpX4eJ2AASUeDQ3L4AO7Os%2FgNOl0CeG5%2FN9aVgljvd3WBiA8ZTwba5tFflRJKWcwOA5l4osDG6BDtNNiE8hqlOPhwMa4lIHfx8LNSu8B%2Fbm0n7Y28iDLdwSs9GCpFCVriebOwI1VNCU3BxzR0lKHa1DH6ijmLa6nxX4TOwNTZ47Os2KLel2k0E0K7sedhXKjWD1rz, https://vtbehaviour.commondatastorage.googleapis.com/22e702fc31752b1ff0ca59efb58d943282dff34b9e8ce61867d8c831b0d8de35_Zenbox.html?GoogleAccessId=758681729565-rc7fgq07icj8c9dm2gi34a4cckv235v1@developer.gserviceaccount.com&Expires=1776480900&Signature=juTMRwWs%2FTJqrDMvBJfYmPzSfXx4a%2F31AjChMKGg%2FigOb2ayCytmhgn%2FfGStvobwbbyL9t1dHYxFX0QZz%2F4zM3vebhPQPBm0BElUabRpjfY6q01wMlTu3q5T5uw1sSchvwR7n0H4t%2FnoMPiFRXns84ZWvQeTTNJYKtg5P29B6CE%2BbXfGQ%2FTKhS9ZR8bI09EyLS2y3Ob3boKLMZ4MNvq6nLIHO2373XOpgfJhsBQej6xZ8%2BlIe0T4

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 5 years ago · Last seen 2 months ago
Appeared in 6 threat reports