IOC Radar
IPMediumSignal 100/100

46.119.141.13

Location
UkraineUkraine
Lutsk, 07
ASN
AS15895
Kyivstar LLC
First Seen
Aug 27, 2024
Last Seen
Feb 19, 2026
Aug 27
First Seen
655d ago
Feb 19
Last Seen
113d ago
11
Reports
source reports
99%
Confidence
medium
1/91
VirusTotal
detections
Found in 11 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
99%
Signal Score
100 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

33 techniques

Network Information

CountryUAUkraine
RegionLutsk, 07
ASNAS15895
OrganizationKyivstar LLC

Feed Intelligence Summary

11 reports99% confidence
11
Source reports
99%
Confidence score
Category tags
abuseaccess controlactive scanningattackbotnetbrute forcebrute force attackbrute force attemptcommand and controlcommunication protocolcowrie honeypotcredential accesscredential harvestingcredential stuffingdata exfiltrationddos attacksdecoy systemdistributed attackseuropeindicatorinfrastructure acquisitionreconnaissanceinternet of thingsintrusion detectioniociot botnetiot/ics attackmalicious activitymalicious network activitymalicious softwaremalwaremanualmirai botnetnetworknetwork attacksnetwork intrusionnetwork probingnetwork reconnaissancenetwork scanningnetwork securitynetwork service scanningpassword attacksphishing attackprocess injectionprotocol exploitationreconnaissanceresearchedscanscannersecurity policysftp attacksocial engineeringssh attackssh monitoringt1021.002t1021.004t1040t1041t1046t1055t1056.001t1059.001t1068t1071.001t1078t1110t1110.001t1110.002t1110.003t1110.004t1133t1190t1486t1496t1499.001t1499.002t1499.003t1565t1566.001t1566.002t1566.003t1587.001t1590.001t1595t1595.001t1595.002t1595.003tcp protocoltcp/23telecommunicationstelnet threatthreat actorthreat intelligencethreat preventionukraineunauthorized access

Activity Timeline

1 total obs
Feb 19Feb 19

Threat Activity Heatmap

· Peak: 2026-02-19
Less
More
Mon
Wed
Fri
Jun
·
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Threat ScoreHigh Risk
100
SIGNAL
Signal Score
99%
Confidence
11
Reports
First seenAug 27, 2024
Last seenFeb 19, 2026
GeolocationUA
CountryUkraine
LocationLutsk, 07
ASNAS15895
OrgKyivstar LLC
Coords50.7614, 25.3310

VirusTotal

1/ 91vendors flagged
1% detection rateJun 8, 2026

WHOIS

description
Logged 1 visit on 1 honeypot. Duration: 12.94s, did not supply credentials
raw
inetnum: 46.118.0.0 - 46.119.255.255 netname: UA-KYIVSTAR-20100517 org: ORG-KG8-RIPE country: UA admin-c: KSUA-RIPE tech-c: KSUA-RIPE status: ALLOCATED PA mnt-by: RIPE-NCC-HM-MNT mnt-by: KYIVSTAR-MNT mnt-lower: KYIVSTAR-MNT mnt-routes: KYIVSTAR-MNT mnt-domains: KYIVSTAR-MNT created: 2010-05-17T08:47:45Z last-modified: 2022-11-24T13:51:16Z source: RIPE organisation: ORG-KG8-RIPE org-name: "Kyivstar" PJSC country: UA org-type: LIR address: Degtyarevskaya 53 address: 03113 address: Kiev address: UKRAINE phone: +380 67 2090070 fax-no: +380 67 2219251 abuse-c: AR17437-RIPE admin-c: AEL17-RIPE admin-c: EB14332-RIPE admin-c: KSUA-RIPE admin-c: NP1533-RIPE mnt-ref: RIPE-NCC-HM-MNT mnt-by: KYIVSTAR-MNT mnt-ref: KYIVSTAR-MNT mnt-by: RIPE-NCC-HM-MNT created: 2006-01-19T11:31:37Z last-modified: 2023-02-23T14:03:21Z source: RIPE # Filtered role: Kyivstar PJSC address: Degtyarevskaya, 53 address: Kiev, Ukraine admin-c: AEL17-RIPE admin-c: EB14332-RIPE tech-c: NP1533-RIPE tech-c: EB14332-RIPE tech-c: AEL17-RIPE nic-hdl: KSUA-RIPE remarks: Please send all abuse reports here: abuse-mailbox: [email protected] mnt-by: KYIVSTAR-MNT created: 2003-05-19T14:48:31Z last-modified: 2023-02-23T14:09:33Z source: RIPE # Filtered route: 46.119.128.0/17 descr: Kyivstar GSM, Kiev, Ukraine origin: AS15895 mnt-by: GTUA-MNT created: 2011-11-14T09:05:47Z last-modified: 2011-11-14T09:05:47Z source: RIPE
references
https://raw.githubusercontent.com/ahamed-rizvan/IOCs/refs/heads/main/Malicous%20IP%20Address.txt, https://github.com/telekom-security/tpotce

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 1 year ago · Last seen 3 months ago
Appeared in 11 threat reports