IPMediumSignal 100/100
81.56.9.13
Location
ItalyMilano, 25
ASN
AS29447
Broadband Pool Iliad Italia
First Seen
Feb 11, 2025
Last Seen
Apr 6, 2026
Found in 16 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
99%
Signal Score
100 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Network Information
CountryItaly
ItalyRegionMilano, 25
ASNAS29447
OrganizationBroadband Pool Iliad Italia
Feed Intelligence Summary
16 reports99% confidence
16
Source reports
99%
Confidence score
Category tags
abuseactive scanactive scanningattackauthentication failuresautomated blockingbad reputationbotnetbotnet activitybrute forcebrute force attackbrute-forccommand and controlcowrie honeypotcredential accesscredential stuffingcredential stuffing attemptsctadata exfiltrationdata store exposureddosdecoy systemdenial of servicedistributed attackseuropeexploitation activityfail2ban eventftp brute forcehttp brute forceidentity & access exploitationindicatorinfoinitial accessinjection activityintrusion detectionititalylogin attemptsmalicious activitymalicious softwaremalwarenetworknetwork probingnetwork scanningnetwork securitynoticepassword attackspassword cracking attemptsphishingprocess injectionreconnaissanceresearchedscannersecurity operationsssh attackssh monitoringt1021t1021.001t1021.002t1040t1055t1059t1059.004t1071.001t1078t1110t1110.001t1110.002t1110.003t1110.004t1133t1190t1486t1496t1499.001t1499.002t1499.003t1565t1595t1595.001t1595.002t1595.003threat actorthreat intelligencetor nodeunauthorized accessunauthorized access attemptunited kingdom
Activity Timeline
Apr 6Apr 6
Threat Activity Heatmap
· Peak: 2026-04-06LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Threat ScoreHigh Risk
100
SIGNAL
Signal Score
99%
Confidence
16
Reports
First seenFeb 11, 2025
Last seenApr 6, 2026
GeolocationIT
CountryItaly
LocationMilano, 25
ASNAS29447
OrgBroadband Pool Iliad Italia
Coords45.4467, 9.2665
VirusTotal
Not checked
WHOIS
- description
- Banned by Fail2Ban [sshd]
- raw
- inetnum: 81.56.0.0 - 81.56.255.255 netname: IT-ILIAD-FTTH descr: Iliad / Free SAS descr: V4 pool (Freebox) country: IT admin-c: ACP23-RIPE tech-c: TCP8-RIPE status: ASSIGNED PA remarks: Spam/Abuse requests: mailto:[email protected] mnt-by: PROXAD-MNT created: 2021-09-23T14:23:37Z last-modified: 2021-09-23T14:23:37Z source: RIPE role: Administrative Contact for ProXad address: Free SAS / ProXad address: 8, rue de la Ville L'Eveque address: 75008 Paris phone: +33 1 73 50 20 00 fax-no: +33 1 73 92 25 69 remarks: trouble: Information: http://www.proxad.net/ remarks: trouble: Spam/Abuse requests: mailto:[email protected] admin-c: APfP1-RIPE tech-c: TPfP1-RIPE nic-hdl: ACP23-RIPE mnt-by: PROXAD-MNT abuse-mailbox: [email protected] created: 2002-06-26T12:46:56Z last-modified: 2013-08-01T12:16:00Z source: RIPE # Filtered role: Technical Contact for ProXad address: Free SAS / ProXad address: 8, rue de la Ville L'Eveque address: 75008 Paris phone: +33 1 73 50 20 00 fax-no: +33 1 73 92 25 69 remarks: trouble: Information: http://www.proxad.net/ remarks: trouble: Spam/Abuse requests: mailto:[email protected] admin-c: APfP1-RIPE tech-c: TPfP1-RIPE nic-hdl: TCP8-RIPE mnt-by: PROXAD-MNT created: 2002-06-26T12:29:10Z last-modified: 2011-06-14T09:03:07Z source: RIPE # Filtered abuse-mailbox: [email protected] route: 81.56.0.0/16 descr: Broadband Pool Iliad Italia origin: AS29447 mnt-by: PROXAD-MNT created: 2024-02-14T15:54:27Z last-modified: 2024-02-14T15:54:27Z source: RIPE
- references
- https://blog.edie.io/2020/04/30/diy-ip-threat-feed/, https://github.com/tankmek/threatfeed, https://redpiranha.net, https://raw.githubusercontent.com/ahamed-rizvan/IOCs/refs/heads/main/Malicous%20IP%20Address.txt
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
mediumFirst detected 1 year ago · Last seen 2 months ago
Appeared in 16 threat reports