IOC Radar
IPMediumSignal 28/100

128.90.115.104

Location
ColombiaColombia
Bogotá, DC
ASN
AS40861
Unus, Inc.
First Seen
Sep 20, 2022
Last Seen
Apr 30, 2026
Sep 20
First Seen
1369d ago
Apr 30
Last Seen
52d ago
8
Reports
source reports
28%
Confidence
medium
Found in 8 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
28%
Signal Score
28 / 100
IDS Rule
No
Threat Context
Tags

Network Information

CountryCOColombia
RegionBogotá, DC
ASNAS40861
OrganizationUnus, Inc.

Feed Intelligence Summary

8 reports28% confidence
8
Source reports
28%
Confidence score
Category tags
abusealienvault_ransomwarebad reputationheart cryptnetworknorth americaproxyransomwareresearchedsouth americaunited states

Activity Timeline

1 total obs
Apr 30Apr 30

Threat Activity Heatmap

· Peak: 2026-04-30
Less
More
Mon
Wed
Fri
Jun
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Threat ScoreLow Risk
28
SIGNAL
Signal Score
28%
Confidence
8
Reports
First seenSep 20, 2022
Last seenApr 30, 2026
GeolocationCO
CountryColombia
LocationBogotá, DC
ASNAS40861
OrgUnus, Inc.
Coords4.6115, -74.0833

VirusTotal

Not checked

WHOIS

description
pivoting on pulse 675d2e0cd183cf5668a88c46
raw
NetRange: 128.90.0.0 - 128.90.255.255 CIDR: 128.90.0.0/16 NetName: SCRIBE NetHandle: NET-128-90-0-0-1 Parent: NET128 (NET-128-0-0-0-0) NetType: Direct Allocation OriginAS: Organization: Unus, Inc. (SCRIBE) RegDate: 1987-12-03 Updated: 2025-05-07 Comment: For DMCA and copyright notices, email: Comment: [email protected] Comment: Geofeed https://geo.unusinc.com/geofeed.csv Ref: https://rdap.arin.net/registry/ip/128.90.0.0 OrgName: Unus, Inc. OrgId: SCRIBE Address: 835 W. 6th St. Address: Suite 1440 City: Austin StateProv: TX PostalCode: 78703 Country: US RegDate: 1987-12-03 Updated: 2022-05-17 Ref: https://rdap.arin.net/registry/entity/SCRIBE OrgTechHandle: PMA194-ARIN OrgTechName: Powerhouse Management Admin OrgTechPhone: +1-512-225-5000 OrgTechEmail: [email protected] OrgTechRef: https://rdap.arin.net/registry/entity/PMA194-ARIN OrgNOCHandle: NOC32990-ARIN OrgNOCName: NOC OrgNOCPhone: +1-512-225-5000 OrgNOCEmail: [email protected] OrgNOCRef: https://rdap.arin.net/registry/entity/NOC32990-ARIN OrgAbuseHandle: ABUSE7531-ARIN OrgAbuseName: Abuse OrgAbusePhone: +1-512-225-5000 OrgAbuseEmail: [email protected] OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE7531-ARIN OrgTechHandle: NOC32990-ARIN OrgTechName: NOC OrgTechPhone: +1-512-225-5000 OrgTechEmail: [email protected] OrgTechRef: https://rdap.arin.net/registry/entity/NOC32990-ARIN
references
https://otx.alienvault.com/pulse/675d2e0cd183cf5668a88c46

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 3 years ago · Last seen 1 month ago
Appeared in 8 threat reports