IOC Radar
IPHighVerifiedSignal 47/100

45.226.17.139

Location
BrazilBrazil
São Borja, RS
ASN
AS262907
BRASIL TECPAR | AMIGO | AVATO
First Seen
Mar 4, 2026
Last Seen
May 26, 2026
Mar 4
First Seen
105d ago
May 26
Last Seen
21d ago
4
Reports
source reports
47%
Confidence
high
Found in 4 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
47%
Signal Score
47 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

7 techniques

Network Information

CountryBRBrazil
RegionSão Borja, RS
ASNAS262907
OrganizationBRASIL TECPAR | AMIGO | AVATO

Feed Intelligence Summary

4 reports47% confidence
4
Source reports
47%
Confidence score
Category tags
active scanactive scanningbrbrazilbrute forcebrute force attackbrute-forcebruteforcecowriecredential accesscredential stuffingdionaeaexploitation activityexploited hostfatthackingidentity & access exploitationindicatornetworkp0fpassword attacksreconnaissanceresearchedscannersensor-taggedsouth americat1110.001t1110.002t1110.003t1110.004t1595.001t1595.002t1595.003tannertpot

Activity Timeline

1 total obs
May 26May 26

Threat Activity Heatmap

· Peak: 2026-05-26
Less
More
Mon
Wed
Fri
Jun
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Threat ScoreMedium Risk
47
SIGNAL
Signal Score
47%
Confidence
4
Reports
First seenMar 4, 2026
Last seenMay 26, 2026
Verified IOC
GeolocationBR
CountryBrazil
LocationSão Borja, RS
ASNAS262907
OrgBRASIL TECPAR | AMIGO | AVATO
Coords-29.9065, -54.7941

VirusTotal

Not checked

WHOIS

description
seen in Dionaea honeypot logs; events=5; services=smbd; ports=445; cc=BR; asn=262907; asn_org=BRASIL TECPAR | AMIGO | AVATO
raw
Socket not responding: [Errno 111] Connection refused

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

high
First detected 3 months ago · Last seen 21 days ago
Appeared in 4 threat reports