IOC Radar
IPMediumSignal 100/100

144.172.93.3

Location
United StatesUnited States
Ogden, Utah
ASN
AS14956
FranTech Solutions
First Seen
Feb 8, 2025
Last Seen
Feb 15, 2026
Feb 8
First Seen
498d ago
Feb 15
Last Seen
126d ago
14
Reports
source reports
99%
Confidence
medium
Found in 14 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
99%
Signal Score
100 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

36 techniques

Network Information

CountryUSUnited States
RegionOgden, Utah
ASNAS14956
OrganizationFranTech Solutions

Feed Intelligence Summary

14 reports99% confidence
14
Source reports
99%
Confidence score
Category tags
abuseaccessaccess controlaccount compromiseactive scanningalienvault_ransomwareattackblacklist candidatebotnetbotnet activitybrute forcebrute force attackcommand and controlcommunication protocolcommunication securityconnectcowriecowrie honeypotcredential accesscredential harvestingcredential stuffingctadata exfiltrationddos attacksdecoy systemdionaeadionaea honeypotdistributed attacksemailftp brute forcegroupshoneytrap honeypothttp brute forceindicatorinternet of thingsintrusion detectioniot botnetiot/ics attacklamplamp exploitation attemptsmailoney honeypotmalicious activitymalicious softwaremalwaremalware behaviourmalware capturemirai botnetnetworknetwork attacksnetwork reconnaissancenetwork scanningnetwork securitynorth americapassword attackpassword attacksphishingphishing attackphishing trappotential malware distributionprocess injectionprotocol exploitationreconnaissanceremote accessremote servicesresearchedresource hijackingscanscannerscriptsecurity operationssecurity policysentrypeer botnetsftpsftp attacksipsip brute forcesip scanningslugsmtp brute forcesocial engineeringsshssh attackssh monitoringsurface websyn scant1016t1018t1021t1021.001t1040t1041t1046t1053t1055t1059t1071.001t1076t1078t1110t1110.001t1110.002t1110.003t1110.004t1190t1486t1496t1499.001t1499.002t1499.003t1563t1565t1566.001t1566.002t1566.003t1566.004t1583t1588t1595t1595.001t1595.002t1595.003tcptcp protocoltcp scantelecommunicationstelnet threatthreat actorthreat detectionthreat intelligencethreat preventionudp scanunited statesunited states of americausvoipvoip attack

Activity Timeline

1 total obs
Feb 15Feb 15

Threat Activity Heatmap

· Peak: 2026-02-15
Less
More
Mon
Wed
Fri
Jun
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Threat ScoreHigh Risk
100
SIGNAL
Signal Score
99%
Confidence
14
Reports
First seenFeb 8, 2025
Last seenFeb 15, 2026
GeolocationUS
CountryUnited States
LocationOgden, Utah
ASNAS14956
OrgFranTech Solutions
Coords37.7510, -97.8220

VirusTotal

Not checked

WHOIS

description
2025-02-12T07:07:45.708Z Honeypot : Dionaea : Source: 144.172.93.3 : Port: 81 Connection: {'protocol': 'httpd', 'type': 'accept', 'transport': 'tcp'}
raw
FranTech Solutions PONYNET-12 (NET-144-172-64-0-1) 144.172.64.0 - 144.172.127.255 RouterHosting LLC ROUTERHOSTING (NET-144-172-92-0-1) 144.172.92.0 - 144.172.95.255
references
https://github.com/telekom-security/tpotce, https://example.com

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 1 year ago · Last seen 4 months ago
Appeared in 14 threat reports