IOC Radar
IPMediumSignal 72/100

104.168.115.123

Location
United StatesUnited States
Buffalo, New York
ASN
AS36352
HostPapa
First Seen
Jun 3, 2026
Last Seen
Jun 7, 2026
Jun 3
First Seen
16d ago
Jun 7
Last Seen
12d ago
8
Reports
source reports
72%
Confidence
medium
Found in 8 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
72%
Signal Score
72 / 100
IDS Rule
No
Threat Context
Tags

Network Information

CountryUSUnited States
RegionBuffalo, New York
ASNAS36352
OrganizationHostPapa

Feed Intelligence Summary

8 reports72% confidence
8
Source reports
72%
Confidence score
Category tags
abusech-urlhaus-c2cbad reputationc2command & controlexecutable filehtaindicatormalwarenetworknorth americaopendirphishingratremcosratresearchedself-signedunited statesus

Activity Timeline

1 total obs
Jun 7Jun 7

Threat Activity Heatmap

· Peak: 2026-06-07
Less
More
Mon
Wed
Fri
Jun
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Threat ScoreHigh Risk
72
SIGNAL
Signal Score
72%
Confidence
8
Reports
First seenJun 3, 2026
Last seenJun 7, 2026
GeolocationUS
CountryUnited States
LocationBuffalo, New York
ASNAS36352
OrgHostPapa
Coords42.8930, -78.8753

VirusTotal

Not checked

WHOIS

description
Hundreds of thousands of people have signed a petition calling for an end to the term "bespoke" on Facebook, Twitter, Instagram and other social media sites, including the name "prosport".
raw
NetRange: 104.168.0.0 - 104.168.127.255 CIDR: 104.168.0.0/17 NetName: CC-18 NetHandle: NET-104-168-0-0-1 Parent: NET104 (NET-104-0-0-0-0) NetType: Direct Allocation OriginAS: Organization: HostPapa (HOSTP-7) RegDate: 2014-08-27 Updated: 2024-02-02 Comment: Geofeed https://geofeeds.oniaas.io/geofeeds.csv Ref: https://rdap.arin.net/registry/ip/104.168.0.0 OrgName: HostPapa OrgId: HOSTP-7 Address: 325 Delaware Avenue Address: Suite 300 City: Buffalo StateProv: NY PostalCode: 14202 Country: US RegDate: 2016-06-06 Updated: 2025-10-05 Ref: https://rdap.arin.net/registry/entity/HOSTP-7 OrgAbuseHandle: NETAB23-ARIN OrgAbuseName: NETABUSE OrgAbusePhone: +1-905-315-3455 OrgAbuseEmail: [email protected] OrgAbuseRef: https://rdap.arin.net/registry/entity/NETAB23-ARIN OrgTechHandle: NETTE9-ARIN OrgTechName: NETTECH OrgTechPhone: +1-905-315-3455 OrgTechEmail: [email protected] OrgTechRef: https://rdap.arin.net/registry/entity/NETTE9-ARIN RAbuseHandle: NETAB27-ARIN RAbuseName: NETABUSE-COLOCROSSING RAbusePhone: +1-800-518-9716 RAbuseEmail: [email protected] RAbuseRef: https://rdap.arin.net/registry/entity/NETAB27-ARIN RTechHandle: NETTE11-ARIN RTechName: NETTECH-COLOCROSSING RTechPhone: +1-800-518-9716 RTechEmail: [email protected] RTechRef: https://rdap.arin.net/registry/entity/NETTE11-ARIN

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 16 days ago · Last seen 12 days ago
Appeared in 8 threat reports