IOC Radar
IPHighVerifiedSignal 61/100

212.241.25.246

Location
KyrgyzstanKyrgyzstan
Bishkek, GB
ASN
AS12997
Kyrgyztelecom Adsl Pppoe
First Seen
Apr 17, 2026
Last Seen
Apr 23, 2026
Apr 17
First Seen
71d ago
Apr 23
Last Seen
65d ago
4
Reports
source reports
61%
Confidence
high
Found in 4 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
61%
Signal Score
61 / 100
IDS Rule
No
Threat Context
Tags

Network Information

CountryKGKyrgyzstan
RegionBishkek, GB
ASNAS12997
OrganizationKyrgyztelecom Adsl Pppoe

Feed Intelligence Summary

4 reports61% confidence
4
Source reports
61%
Confidence score
Category tags
active scanbrute forcebrute force attackerdigital oceanindicatorkyrgyzstannetworkportscanresearchedscannersservice scan

Activity Timeline

1 total obs
Apr 23Apr 23

Threat Activity Heatmap

· Peak: 2026-04-23
Less
More
Mon
Wed
Fri
Jun
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Threat ScoreMedium Risk
61
SIGNAL
Signal Score
61%
Confidence
4
Reports
First seenApr 17, 2026
Last seenApr 23, 2026
Verified IOC
GeolocationKG
CountryKyrgyzstan
LocationBishkek, GB
ASNAS12997
OrgKyrgyztelecom Adsl Pppoe
Coords42.8690, 74.5939

VirusTotal

Not checked

WHOIS

description
IPv4 hosts detected port scanning DigitalOcean London (UK) honeypot
raw
inetnum: 212.241.25.0 - 212.241.25.255 netname: KYRGYZTELECOM_ADSL_PPPOE descr: KYRGYZTELECOM_ADSL_PPPOE country: KG remarks: INFRA-AW admin-c: TEDY1-RIPE tech-c: MF11865-RIPE status: ASSIGNED PA mnt-by: KTNET-MNT created: 2010-03-29T05:46:19Z last-modified: 2014-08-11T10:46:23Z source: RIPE person: Alex Z address: 96 Chui avenue, Bishkek, Kyrgyzstan phone: +996 312 620042 nic-hdl: MF11865-RIPE mnt-by: KTNET-MNT created: 2012-03-28T09:21:25Z last-modified: 2020-09-28T05:13:21Z source: RIPE # Filtered person: Admin Admin address: Kyrgyztelecom JSC address: 96, Chuy avenue address: Bishkek, Kyrgyzstan, 720000 phone: +996 312 501147 fax-no: +996 312 620044 nic-hdl: TEDY1-RIPE remarks: Telecommunication company, ISP created: 2004-12-24T06:08:22Z last-modified: 2019-04-16T07:50:20Z source: RIPE # Filtered mnt-by: KTNET-MNT route: 212.241.25.0/24 descr: KTNET origin: AS12997 mnt-by: KTNET-MNT created: 2010-03-29T05:46:36Z last-modified: 2012-03-09T08:10:36Z source: RIPE
references
https://jamesbrine.com.au/digitaloceanlondon-portscan-bruteforce-ip-list-2026-04-16/, https://jamesbrine.com.au

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

high
First detected 2 months ago · Last seen 2 months ago
Appeared in 4 threat reports