IOC Radar
IPMediumSignal 100/100

128.14.209.46

Location
United StatesUnited States
Dallas, Texas
ASN
AS21859
ZENLA
First Seen
Jul 14, 2022
Last Seen
Jan 28, 2026
Jul 14
First Seen
1444d ago
Jan 28
Last Seen
150d ago
20
Reports
source reports
99%
Confidence
medium
Found in 20 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
99%
Signal Score
100 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

32 techniques

Network Information

CountryUSUnited States
RegionDallas, Texas
ASNAS21859
OrganizationZENLA

IP Category

⬢
Hosting
Hosting provider

Feed Intelligence Summary

20 reports99% confidence
20
Source reports
99%
Confidence score
Category tags
abuseactive scanningapacheapache attackerattackbotnetbrute forcebrute force attackc2certcommand and controlcredential accesscredential harvestingcredential stuffingdata exfiltrationdecoy systemdenial of servicedistributed attacksfin scanftp brute forcehttp brute forceindicatorinformation gatheringinternetcensus-benignlateral movementmalicious activitymalicious softwaremalwaremass port scannetworknetwork attacksnetwork discoverynetwork enumerationnetwork intrusion detectionnetwork mappingnetwork probingnetwork protocolnetwork scanningnetwork securitynull scanopen port detectionpassword attackpassword attacksphishing attackpotential botnet activitypotential threatprocess injectionprotocol exploitationreconnaissanceremote accessremote servicesresearchedscannerservice enumerationsmb brute forcesocial engineeringsocradarssh attacksyn scant1018t1021t1021.001t1040t1046t1055t1059t1071.001t1076t1078t1110t1110.001t1110.002t1110.003t1110.004t1133t1190t1486t1496t1499.002t1499.003t1563t1565t1566.001t1566.002t1566.003t1589t1592t1595t1595.001t1595.002t1595.003tcp scanningtelnet threatthreat actorthreat intelligencetsecudp port scanunauthorized accessverified-benignxmas scan

Activity Timeline

1 total obs
Jan 28Jan 28

Threat Activity Heatmap

· Peak: 2026-01-28
Less
More
Mon
Wed
Fri
Jun
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Threat ScoreHigh Risk
100
SIGNAL
Signal Score
99%
Confidence
20
Reports
First seenJul 14, 2022
Last seenJan 28, 2026
GeolocationUS
CountryUnited States
LocationDallas, Texas
ASNAS21859
OrgZENLA
Coords32.7797, -96.8022
Hosting

VirusTotal

Not checked

WHOIS

description
HoneyNet Event: 128.14.209.46 connected: 1 times over ports: 5938 Tags: Suricata,5938

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 4 years ago · Last seen 5 months ago
Appeared in 20 threat reports