IOC Radar
IPMediumSignal 64/100

104.223.21.20

Location
United StatesUnited States
Los Angeles, New York
ASN
AS36352
HostPapa
First Seen
Jun 16, 2026
Last Seen
Jun 18, 2026
Jun 16
First Seen
7d ago
Jun 18
Last Seen
6d ago
11
Reports
source reports
64%
Confidence
medium
Found in 11 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
64%
Signal Score
64 / 100
IDS Rule
No
Threat Context
Tags

Network Information

CountryUSUnited States
RegionLos Angeles, New York
ASNAS36352
OrganizationHostPapa

Feed Intelligence Summary

11 reports64% confidence
11
Source reports
64%
Confidence score
Category tags
abuseactive scanbad reputationbotnetbotnet activitybrute forcebruteforcedigital oceanindicatormalicious ipmirainetworknorth americaportscanransomwareresearchedscanscannerscannersservice scansocradar honeypottcptelnetunited statesusvultr

Activity Timeline

1 total obs
Jun 18Jun 18

Threat Activity Heatmap

· Peak: 2026-06-18
Less
More
Mon
Wed
Fri
Jun
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
24h
0
Dormant
7d
1
Minimal
30d
1
Minimal
3mo
1
Minimal
Threat ScoreMedium Risk
64
SIGNAL
Signal Score
64%
Confidence
11
Reports
First seenJun 16, 2026
Last seenJun 18, 2026
GeolocationUS
CountryUnited States
LocationLos Angeles, New York
ASNAS36352
OrgHostPapa
Coords42.8868, -78.8787

VirusTotal

Not checked

WHOIS

description
Scans hitting the server at TCP port 23 Telnet. The same IP address may appear more than once a day. S3#
raw
NetRange: 104.223.0.0 - 104.223.31.255 CIDR: 104.223.0.0/19 NetName: HOSTP-7 NetHandle: NET-104-223-0-0-1 Parent: NET104 (NET-104-0-0-0-0) NetType: Direct Allocation OriginAS: Organization: HostPapa (HOSTP-7) RegDate: 2024-12-13 Updated: 2024-12-13 Ref: https://rdap.arin.net/registry/ip/104.223.0.0 OrgName: HostPapa OrgId: HOSTP-7 Address: 325 Delaware Avenue Address: Suite 300 City: Buffalo StateProv: NY PostalCode: 14202 Country: US RegDate: 2016-06-06 Updated: 2025-10-05 Ref: https://rdap.arin.net/registry/entity/HOSTP-7 OrgAbuseHandle: NETAB23-ARIN OrgAbuseName: NETABUSE OrgAbusePhone: +1-905-315-3455 OrgAbuseEmail: [email protected] OrgAbuseRef: https://rdap.arin.net/registry/entity/NETAB23-ARIN OrgTechHandle: NETTE9-ARIN OrgTechName: NETTECH OrgTechPhone: +1-905-315-3455 OrgTechEmail: [email protected] OrgTechRef: https://rdap.arin.net/registry/entity/NETTE9-ARIN

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 7 days ago · Last seen 6 days ago
Appeared in 11 threat reports