IOC Radar
IPMediumSignal 78/100

98.22.47.85

Location
United StatesUnited States
Covington, AR
ASN
AS7029
Windstream Communications LLC
First Seen
Apr 15, 2026
Last Seen
May 30, 2026
Apr 15
First Seen
60d ago
May 30
Last Seen
14d ago
13
Reports
source reports
78%
Confidence
medium
Found in 13 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
78%
Signal Score
78 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

7 techniques

Network Information

CountryUSUnited States
RegionCovington, AR
ASNAS7029
OrganizationWindstream Communications LLC

Feed Intelligence Summary

13 reports78% confidence
13
Source reports
78%
Confidence score
Category tags
abuseactive scanactive scanningaptasiabad reputationblocklistbrute forcebrute force attackbrute-forcecredential accesscredential stuffingexploitation activityhackingidentity & access exploitationindicatormalaysianetworknorth americapassword attacksreconnaissanceresearchedscannerscannerssshssh attackt1110.001t1110.002t1110.003t1110.004t1595.001t1595.002t1595.003threat actortor nodeunited statesus

Activity Timeline

1 total obs
May 30May 30

Threat Activity Heatmap

· Peak: 2026-05-30
Less
More
Mon
Wed
Fri
Jun
·
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Threat ScoreHigh Risk
78
SIGNAL
Signal Score
78%
Confidence
13
Reports
First seenApr 15, 2026
Last seenMay 30, 2026
GeolocationUS
CountryUnited States
LocationCovington, AR
ASNAS7029
OrgWindstream Communications LLC
Coords35.0701, -92.1790

VirusTotal

Not checked

WHOIS

description
The following is the full list of names given to Vye32GsS2g38eKhmaKrLdDjgrnf2YBT4/FGx8SNCa4txePA
raw
Windstream Communications LLC WINDSTREAM (NET-98-16-0-0-1) 98.16.0.0 - 98.23.255.255 WINDSTREAM COMMUNICATIONS LLC 98-22-46-0 (NET-98-22-46-0-1) 98.22.46.0 - 98.22.47.255
references
https://malware-filter.gitlab.io/malware-filter/botnet-filter.txt

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 2 months ago · Last seen 14 days ago
Appeared in 13 threat reports