IPMediumSignal 0/100
172.214.115.17
Location
United StatesBoydton, Virginia
ASN
AS8075
Microsoft Azure Cloud (eastus)
First Seen
Mar 4, 2025
Last Seen
Apr 5, 2025
Found in 1 report. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
0%
Signal Score
0 / 100
IDS Rule
No
Threat Context
Tags
Network Information
CountryUnited States
United StatesRegionBoydton, Virginia
ASNAS8075
OrganizationMicrosoft Azure Cloud (eastus)
Feed Intelligence Summary
1 report0% confidence
1
Source reports
0%
Confidence score
Category tags
indicatornetworkresearched
Activity Timeline
Apr 5Apr 5
Threat Activity Heatmap
LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Threat ScoreLow Risk
0
SIGNAL
Signal Score
0%
Confidence
1
Reports
First seenMar 4, 2025
Last seenApr 5, 2025
GeolocationUS
CountryUnited States
LocationBoydton, Virginia
ASNAS8075
OrgMicrosoft Azure Cloud (eastus)
Coords36.6777, -78.3747
VirusTotal
Not checked
WHOIS
- description
- [6] Honeypot: Honeytrap : 172.214.115.17:8192 :Malicious Activity: {'protocol': 'tcp', 'payload': {'md5_hash': '0d44ec1dbc4ea2ff3d5a6a5b02dc74e3', 'sha512_hash': 'e571918bf05b10532e739069a27a37af842e814edf36d747882a8c2c3565a344881892f8113c36e30e725b97d7412c9e06d6a308e7294c62caf256b3aae4b171', 'length': 24, 'data_hex': '4d474c4e44445f39392e31382e32362e31385f383139320a'}} : {'local_port': 0, 'remote_port': 0, 'remote_ip': '0.0.0.0', 'protocol': 'ip', 'payload': {'md5_hash': 'd41d8cd98f00b204e9800998ecf8427e', 'sha512_hash': 'cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e', 'length': 0, 'data_hex': ''}, 'local_ip': '0.0.0.0'}
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
mediumFirst detected 1 year ago · Last seen 1 year ago
Appeared in 1 threat report