IOC Radar
IPHighVerifiedSignal 50/100

213.139.221.139

Location
KazakhstanKazakhstan
Astana, Almaty
ASN
AS39238
Internet technologies LLC
First Seen
Dec 23, 2025
Last Seen
Jun 5, 2026
Dec 23
First Seen
181d ago
Jun 5
Last Seen
17d ago
5
Reports
source reports
50%
Confidence
high
Found in 5 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
50%
Signal Score
50 / 100
IDS Rule
No
Threat Context
Tags

Network Information

CountryKZKazakhstan
RegionAstana, Almaty
ASNAS39238
OrganizationInternet technologies LLC

Feed Intelligence Summary

5 reports50% confidence
5
Source reports
50%
Confidence score
Category tags
active scanasiabrute forcebrute-forceeurope/asiaexploitation activitykazakhstanmonthlynetworkproxyresearchedrurussiascannerspamtpotweb app attack

Activity Timeline

1 total obs
Jun 5Jun 5

Threat Activity Heatmap

· Peak: 2026-06-05
Less
More
Mon
Wed
Fri
Jun
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Threat ScoreMedium Risk
50
SIGNAL
Signal Score
50%
Confidence
5
Reports
First seenDec 23, 2025
Last seenJun 5, 2026
Verified IOC
GeolocationKZ
CountryKazakhstan
LocationAstana, Almaty
ASNAS39238
OrgInternet technologies LLC
Coords43.2318, 76.9454

VirusTotal

Not checked

WHOIS

description
Seen in CiscoASA honeypot logs within the configured window. request: GET /+CSCOE+/logon.html?fcadbadd=1 HTTP/1.1" 200 - geo: KZ; ASN 39238 (Okb Progress LLC)
raw
inetnum: 213.139.220.0 - 213.139.221.255 netname: KZ-INETTECH-NET country: KZ admin-c: FN2781-RIPE tech-c: FN2781-RIPE abuse-c: FN2781-RIPE status: ASSIGNED PA mnt-by: IP-RIPE mnt-routes: INETTECH-MNT mnt-domains: INETTECH-MNT created: 2018-12-03T17:03:49Z last-modified: 2021-05-30T18:18:41Z source: RIPE role: Internet Technologies NOC address: Internet technologies LLC address: 144002, Moscow region, Elektrostal, Russian Federation address: Gorkogo St., 14-105 phone: +7 495 5434485 abuse-mailbox: [email protected] nic-hdl: FN2781-RIPE mnt-by: ru-fe-ru-1-mnt created: 2016-07-21T17:02:51Z last-modified: 2023-07-31T10:43:01Z source: RIPE # Filtered route: 213.139.220.0/22 origin: AS39238 mnt-by: INETTECH-MNT created: 2023-08-27T10:24:22Z last-modified: 2023-08-27T10:24:22Z source: RIPE

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

high
First detected 6 months ago · Last seen 17 days ago
Appeared in 5 threat reports