IPMediumSignal 64/100
142.93.222.16
Location
IndiaBengaluru, Karnataka
ASN
AS14061
DigitalOcean, LLC
First Seen
Sep 28, 2020
Last Seen
Jun 8, 2026
Found in 12 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
64%
Signal Score
64 / 100
IDS Rule
No
Threat Context
Tags
Network Information
CountryIndia
IndiaRegionBengaluru, Karnataka
ASNAS14061
OrganizationDigitalOcean, LLC
Feed Intelligence Summary
12 reports64% confidence
12
Source reports
64%
Confidence score
Category tags
active scanasiabad reputationblocklist_allbrute forcebrute-forcecloud computingcloud migrationcloud securitycloud storagecowrieddosddos attackdionaeaexploitation activityexploited hostfattftp brute-forcehackinginindiaindicatormalicious ipmalwaremulti-cloud managementnetworkp0fresearchedscanscannersensor-taggedsshssh attacktannertcptelnettpotweb app attack
Activity Timeline
Jun 8Jun 8
Threat Activity Heatmap
LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
1
Minimal
30d
1
Minimal
3mo
1
Minimal
Threat ScoreMedium Risk
64
SIGNAL
Signal Score
64%
Confidence
12
Reports
First seenSep 28, 2020
Last seenJun 8, 2026
GeolocationIN
CountryIndia
LocationBengaluru, Karnataka
ASNAS14061
OrgDigitalOcean, LLC
Coords12.8498, 77.6545
VirusTotal
Not checked
WHOIS
- description
- Score: 73/100. Labels: abuseipdb:brute-force, abuseipdb:moderate, abuseipdb:multi-reported, abuseipdb:port-scan, abuseipdb:reported, abuseipdb:ssh. Attacker IP from Bengaluru, India (AS14061, DigitalOcean, LLC) [VPN/hosting provider]. Observed targeting energy sector honeypot petroleum-hp-01 via cowrie. Session included 1 failed login attempt, 1 credential pair tried across 1 unique username. SSH client: SSH-2.0-Go (HASSH: 16443846184e...); duration: 2s; 5 events.
- raw
- inetnum: 142.0.0.0 - 142.255.255.255 netname: ERX-NETBLOCK descr: Early registration addresses remarks: ------------------------------------------------------ remarks: Important: remarks: remarks: Networks in this range were allocated by InterNIC remarks: prior to the formation of Regional Internet remarks: Registries (RIRs): AfriNIC, APNIC, ARIN, LACNIC and RIPE NCC. remarks: remarks: Address ranges from this historical space have now remarks: been transferred to the appropriate RIR database.remarks: remarks: If your search has returned this record, it means the remarks: address range is not administered by APNIC. remarks: remarks: Instead, please search one of the following databases: remarks: remarks: - AfriNIC (Africa) remarks: website: http://www.afrinic.net/ remarks: command line: whois.afrinic.net remarks: remarks: - ARIN (Northern America) remarks: website: http://www.arin.net/ remarks: command line: whois.arin.net remarks: remarks: - LACNIC (Latin America and the Carribean) remarks: website: http://www.lacnic.net/ remarks: command line: whois.lacnic.net remarks: remarks: - RIPE NCC (Europe) remarks: website: http://www.ripe.net/ remarks: command line: whois.ripe.net remarks: remarks: For information on the Early Registration Transfer remarks: (ERX) project, see: remarks: remarks: http://www.apnic.net/db/erx remarks: remarks: ------------------------------------------------------ country: AU admin-c: IANA1-AP tech-c: IANA1-AP mnt-by: APNIC-HM mnt-lower: APNIC-HM status: ALLOCATED PORTABLE last-modified: 2008-09-04T06:51:29Z source: APNIC role: Internet Assigned Numbers Authority address: see http://www.iana.org. admin-c: IANA1-AP tech-c: IANA1-AP nic-hdl: IANA1-AP remarks: For more information on IANA services remarks: go to IANA web site at http://www.iana.org. mnt-by: MAINT-APNIC-AP last-modified: 2018-06-22T22:34:30Z source: APNIC
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
mediumFirst detected 5 years ago · Last seen 3 days ago
Appeared in 12 threat reports