IOC Radar
IPMediumSignal 27/100

91.80.139.78

Location
ItalyItaly
Ivrea, 52
ASN
AS30722
VODAFONE-IT into
First Seen
Dec 29, 2024
Last Seen
Apr 4, 2026
Dec 29
First Seen
531d ago
Apr 4
Last Seen
69d ago
9
Reports
source reports
27%
Confidence
medium
Found in 9 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
27%
Signal Score
27 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

20 techniques

Network Information

CountryITItaly
RegionIvrea, 52
ASNAS30722
OrganizationVODAFONE-IT into

Feed Intelligence Summary

9 reports27% confidence
9
Source reports
27%
Confidence score
Category tags
abuseactive scanaustraliaauthenticationauto-generated securitybad reputationbotnetbotnet activitybrute forcebrute force attackbrute force attemptcommand and controlcredential accesscredential stuffingctadata exfiltrationdata store exposuredecoy systemdistributed attackseuropeexploitation activityidentity & access exploitationindicatorinjection activityitalymalicious activitymalicious softwaremalwarenetworknetwork intrusionnetwork securityoceaniapassword attackpassword attacksprocess injectionremote accessremote servicesresearchedssh attackt1021.004t1055t1071.001t1078t1078.002t1078.004t1110t1110.001t1110.002t1110.003t1110.004t1486t1496t1499.002t1499.003t1555t1565t1588.004t1589t1589.002threat actorthreat intelligencetor node

Activity Timeline

1 total obs
Apr 4Apr 4

Threat Activity Heatmap

· Peak: 2026-04-04
Less
More
Mon
Wed
Fri
Jun
·
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Threat ScoreLow Risk
27
SIGNAL
Signal Score
27%
Confidence
9
Reports
First seenDec 29, 2024
Last seenApr 4, 2026
GeolocationIT
CountryItaly
LocationIvrea, 52
ASNAS30722
OrgVODAFONE-IT into
Coords43.5490, 11.7037

VirusTotal

Not checked

WHOIS

description
Host bruteforcing SSH
raw
inetnum: 91.80.128.0 - 91.80.255.255 netname: VODAFONE-IT-21 descr: IP addresses assigned to VF customers country: IT admin-c: VI745-RIPE tech-c: VI745-RIPE status: ASSIGNED PA mnt-by: VODAFONE-IT-MNT created: 2011-03-10T17:21:45Z last-modified: 2011-11-22T14:33:18Z source: RIPE role: Vodafone Italy address: Via Jervis, 13 address: Ivrea (TO) address: ITALY remarks: **************************************************************** remarks: For any abuse or spamming issue, remarks: please send an email to: remarks: [email protected] abuse-mailbox: [email protected] remarks: **************************************************************** remarks: For any communication about RIPE objects registration remarks: please send an email to: remarks: [email protected] remarks: ***************************************************************** admin-c: VIIA1-RIPE tech-c: VIIA1-RIPE nic-hdl: VI745-RIPE mnt-by: VODAFONE-IT-MNT created: 2011-10-27T12:50:34Z last-modified: 2014-01-07T13:24:38Z source: RIPE # Filtered route: 91.80.128.0/17 descr: VODAFONE-IT More specific route into 91.80/15 origin: AS30722 org: ORG-VON1-RIPE mnt-lower: VODAFONE-IT-MNT mnt-routes: VODAFONE-IT-MNT mnt-by: VODAFONE-IT-MNT created: 2007-11-06T18:05:06Z last-modified: 2007-11-06T18:05:06Z source: RIPE organisation: ORG-VON1-RIPE org-name: Vodafone Italia S.p.A. country: IT org-type: LIR address: Via Guglielmo Jervis nr.13 address: 10015 address: Ivrea (Tourin) address: ITALY phone: +39 02 4143 1122 fax-no: +39 0125 625747 admin-c: VI745-RIPE mnt-ref: VODAFONE-IT-MNT mnt-ref: RIPE-NCC-HM-MNT mnt-by: RIPE-NCC-HM-MNT mnt-by: VODAFONE-IT-MNT abuse-c: VI745-RIPE created: 2004-04-17T11:35:10Z last-modified: 2020-12-16T12:22:12Z source: RIPE # Filtered
references
https://redpiranha.net

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 1 year ago · Last seen 2 months ago
Appeared in 9 threat reports