IOC Radar
IPMediumSignal 42/100

90.79.238.45

Location
FranceFrance
Paris, IDF
ASN
AS3215
Orange
First Seen
Mar 12, 2025
Last Seen
Jun 3, 2026
Mar 12
First Seen
466d ago
Jun 3
Last Seen
17d ago
17
Reports
source reports
42%
Confidence
medium
Found in 17 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
42%
Signal Score
42 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

24 techniques

Network Information

CountryFRFrance
RegionParis, IDF
ASNAS3215
OrganizationOrange

Feed Intelligence Summary

17 reports42% confidence
17
Source reports
42%
Confidence score
Category tags
abuseaccess controlactive scanactive scanningattackauthentication attackauthentication failuresbad reputationbotnetbotnet activitybrute forcebrute force attackcommand and controlcowrie honeypotcredential accesscredential stuffingdata exfiltrationdata store exposuredecoy systemdistributed attackseuropeexploitation activityfail2ban triggeredfrfranceftp brute forceidentity & access exploitationimapimap attackindicatorinjection activitylogin attemptmalicious activitymalicious softwaremalwarenetworknetwork reconnaissancenetwork scanningpassword attacksphishingpotential intrusion attemptprocess injectionreconnaissanceresearchedscannersecurity policyservice scansftp attacksmtpsmtp attackerssh attackssh monitoringt1021t1021.001t1021.002t1041t1046t1055t1059t1059.004t1071.001t1110t1110.001t1110.002t1110.003t1110.004t1190t1486t1496t1499.002t1499.003t1565t1595t1595.001t1595.002t1595.003threat actorthreat preventiontor nodeudp port scanunauthorized accessunited kingdom

Activity Timeline

1 total obs
Jun 3Jun 3

Threat Activity Heatmap

· Peak: 2026-06-03
Less
More
Mon
Wed
Fri
Jun
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Threat ScoreMedium Risk
42
SIGNAL
Signal Score
42%
Confidence
17
Reports
First seenMar 12, 2025
Last seenJun 3, 2026
GeolocationFR
CountryFrance
LocationParis, IDF
ASNAS3215
OrgOrange
Coords48.8323, 2.4075

VirusTotal

Not checked

WHOIS

description
Banned by Fail2Ban [sshd]
raw
inetnum: 90.79.232.0 - 90.79.239.255 netname: IP2000-ADSL-BAS descr: POP Puteaux country: FR admin-c: WITR1-RIPE tech-c: WITR1-RIPE status: ASSIGNED PA remarks: for hacking, spamming or security problems send mail to remarks: [email protected] mnt-by: FT-BRX created: 2015-12-10T10:18:33Z last-modified: 2015-12-10T10:18:33Z source: RIPE role: Wanadoo France Technical Role address: FRANCE TELECOM/SCR address: 48 rue Camille Desmoulins address: 92791 ISSY LES MOULINEAUX CEDEX 9 address: FR phone: +33 1 58 88 50 00 abuse-mailbox: [email protected] admin-c: BRX1-RIPE tech-c: BRX1-RIPE nic-hdl: WITR1-RIPE mnt-by: FT-BRX created: 2001-12-04T17:57:08Z last-modified: 2013-07-16T14:09:50Z source: RIPE # Filtered route: 90.79.0.0/16 descr: France Telecom IP2000-ADSL-BAS origin: AS3215 mnt-by: FT-BRX created: 2018-08-16T14:22:19Z last-modified: 2018-08-16T14:22:19Z source: RIPE
references
https://github.com/telekom-security/tpotce

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 1 year ago · Last seen 17 days ago
Appeared in 17 threat reports