IPMediumSignal 0/100
172.206.142.149
Location
KazakhstanSan Antonio, Texas
ASN
AS8075
Microsoft Azure Cloud (southcentralus)
First Seen
Mar 4, 2025
Last Seen
Apr 5, 2025
Found in 1 report. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
0%
Signal Score
0 / 100
IDS Rule
No
Threat Context
Tags
Network Information
CountryKazakhstan
KazakhstanRegionSan Antonio, Texas
ASNAS8075
OrganizationMicrosoft Azure Cloud (southcentralus)
Feed Intelligence Summary
1 report0% confidence
1
Source reports
0%
Confidence score
Category tags
indicatornetworkresearched
Activity Timeline
Apr 5Apr 5
Threat Activity Heatmap
LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Threat ScoreLow Risk
0
SIGNAL
Signal Score
0%
Confidence
1
Reports
First seenMar 4, 2025
Last seenApr 5, 2025
GeolocationKZ
CountryKazakhstan
LocationSan Antonio, Texas
ASNAS8075
OrgMicrosoft Azure Cloud (southcentralus)
Coords29.4167, -98.5000
VirusTotal
Not checked
WHOIS
- description
- [6] Honeypot: Honeytrap : 172.206.142.149:1911 :Malicious Activity: {'protocol': 'tcp', 'payload': {'md5_hash': 'a754864cb72712e23ed0f1f6df7aace0', 'length': 24, 'sha512_hash': '137d521ed236822ddacee0b68f61e5e8a206f0e9727a92e78a41bf78b36cd34297307a8398aaa675e20b6229f7f94663b3f09c4ddfdbe7c8816e5210c1d5d2dd', 'data_hex': '4d474c4e44445f39392e31382e32362e31385f313931310a'}} : {'remote_port': 0, 'local_ip': '0.0.0.0', 'protocol': 'ip', 'payload': {'md5_hash': 'd41d8cd98f00b204e9800998ecf8427e', 'length': 0, 'sha512_hash': 'cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e', 'data_hex': ''}, 'local_port': 0, 'remote_ip': '0.0.0.0'}
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
mediumFirst detected 1 year ago · Last seen 1 year ago
Appeared in 1 threat report