IOC Radar
IPMediumSignal 94/100

139.177.201.105

Location
United StatesUnited States
Atlanta, Georgia
ASN
AS63949
Linode
First Seen
Mar 23, 2025
Last Seen
Feb 16, 2026
Mar 23
First Seen
460d ago
Feb 16
Last Seen
129d ago
19
Reports
source reports
94%
Confidence
medium
Found in 19 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
94%
Signal Score
94 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

34 techniques

Network Information

CountryUSUnited States
RegionAtlanta, Georgia
ASNAS63949
OrganizationLinode

Feed Intelligence Summary

19 reports94% confidence
19
Source reports
94%
Confidence score
Category tags
abuseactive scanningattackbad web botbinaryedge-benignbotnetbrute forcebrute force attackcommand and controlcommunication protocolcowrie honeypotcredential accesscredential harvestingcredential stuffingdata exfiltrationdecoy systemdenial of servicedionaea honeypotdistributed attacksftphackinghoneytrap honeypotindicatorinitial accesslampmalicious activitymalicious softwaremalwaremalware behaviourmalware capturenetworknetwork intrusion attemptsnetwork scanningnetwork securitynorth americapassword attacksphishing attackprocess injectionreconnaissanceresearchedresource hijackingsansscannersentrypeer botnetsftp attacksip attackssmtpsmtp attackersocial engineeringssh attackssh monitoringt1021t1021.004t1040t1041t1046t1055t1059t1059.004t1071.001t1078t1110t1110.001t1110.002t1110.003t1110.004t1190t1203t1204.002t1210t1486t1496t1499.001t1499.002t1499.003t1565t1566.001t1566.002t1566.003t1583t1583.001t1595t1595.001t1595.002t1595.003telecommunicationsthreat actorthreat detectionthreat intelligenceunited statesverified-benignvoipvoip attackweb application attackweb exploitation

Activity Timeline

1 total obs
Feb 16Feb 16

Threat Activity Heatmap

· Peak: 2026-02-16
Less
More
Mon
Wed
Fri
Jun
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Threat ScoreHigh Risk
94
SIGNAL
Signal Score
94%
Confidence
19
Reports
First seenMar 23, 2025
Last seenFeb 16, 2026
GeolocationUS
CountryUnited States
LocationAtlanta, Georgia
ASNAS63949
OrgLinode
Coords33.7485, -84.3871

VirusTotal

Not checked

WHOIS

description
2025-04-21T19:16:23.695Z Honeypot : Dionaea : Source: 139.177.201.105 : Port: 27017 Connection: {'protocol': 'mongod', 'transport': 'tcp', 'type': 'accept'}
raw
Akamai Technologies, Inc. LINODE-US (NET-139-177-176-0-1) 139.177.176.0 - 139.177.207.255 Linode LINODE (NET-139-177-192-0-1) 139.177.192.0 - 139.177.207.255
references
https://github.com/telekom-security/tpotce

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 1 year ago · Last seen 4 months ago
Appeared in 19 threat reports