IPMediumSignal 77/100
104.248.164.226
Location
United KingdomSlough, ENG
ASN
AS14061
DigitalOcean, LLC
First Seen
Mar 4, 2025
Last Seen
Jun 4, 2026
Found in 14 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
77%
Signal Score
77 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Network Information
CountryUnited Kingdom
United KingdomRegionSlough, ENG
ASNAS14061
OrganizationDigitalOcean, LLC
Feed Intelligence Summary
14 reports77% confidence
14
Source reports
77%
Confidence score
Category tags
abuseactive scanactive scanningaggressive-detectionattackauthentication failuresbad reputationbad web botblocklistblog spambotnetbotnet activitybrute forcebrute force attackbrute force attackerbrute-forcebruteforcecloud computingcloud migrationcloud securitycloud storagecommand and controlconnection-resetcredential accesscredential stuffingcredential-harvestingdata exfiltrationdata store exposureddosddos attackdenial of servicedigital oceandistributed attacksenv-huntingeuropeexploitation activityexploited hostftp brute forceftp brute-forcegbhackingidentity & access exploitationindicatorinjection activityintrusion detectioniot securityiot targetedkill-chain exploitationkill-chain reconnaissancelow-riskmalicious softwaremalwaremulti-cloud managementnetworknetwork scanningnetwork securitynginxosintpassword attacksphishingping of deathportscanprocess injectionproject_gifted1protocol-probingreconnaissanceresearchedscannerscannersservice scanspamsql injectionsshssh attackt1040t1046t1055t1071.001t1110t1110.001t1110.002t1110.003t1110.004t1133t1190t1203t1486t1496t1499.001t1499.002t1499.003t1565t1595t1595.001t1595.002t1595.003targeting databasethreat intelligenceunited kingdomweb app attackweb application attackweb exploitationweb spamworker_strike
Activity Timeline
Jun 4Jun 4
Threat Activity Heatmap
· Peak: 2026-06-04LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Threat ScoreHigh Risk
77
SIGNAL
Signal Score
77%
Confidence
14
Reports
First seenMar 4, 2025
Last seenJun 4, 2026
GeolocationGB
CountryUnited Kingdom
LocationSlough, ENG
ASNAS14061
OrgDigitalOcean, LLC
Coords51.5177, -0.6215
VirusTotal
Not checked
WHOIS
- description
- The following is the full list of names given to Vye32GsS2g38eKhmaKrLdDjgrnf2YBT4/FGx8SNCa4txePA
- raw
- NetRange: 104.248.0.0 - 104.248.255.255 CIDR: 104.248.0.0/16 NetName: DIGITALOCEAN-104-248-0-0 NetHandle: NET-104-248-0-0-1 Parent: NET104 (NET-104-0-0-0-0) NetType: Direct Allocation OriginAS: Organization: DigitalOcean, LLC (DO-13) RegDate: 2018-08-06 Updated: 2020-04-03 Comment: Routing and Peering Policy can be found at https://www.as14061.net Comment: Comment: Please submit abuse reports at https://www.digitalocean.com/company/contact/#abuse Ref: https://rdap.arin.net/registry/ip/104.248.0.0 OrgName: DigitalOcean, LLC OrgId: DO-13 Address: 105 Edgeview Drive, Suite 425 City: Broomfield StateProv: CO PostalCode: 80021 Country: US RegDate: 2012-05-14 Updated: 2025-04-11 Ref: https://rdap.arin.net/registry/entity/DO-13 OrgTechHandle: NOC32014-ARIN OrgTechName: Network Operations Center OrgTechPhone: +1-646-827-4366 OrgTechEmail: [email protected] OrgTechRef: https://rdap.arin.net/registry/entity/NOC32014-ARIN OrgAbuseHandle: DIGIT19-ARIN OrgAbuseName: DigitalOcean Abuse OrgAbusePhone: +1-646-827-4366 OrgAbuseEmail: [email protected] OrgAbuseRef: https://rdap.arin.net/registry/entity/DIGIT19-ARIN OrgNOCHandle: NOC32014-ARIN OrgNOCName: Network Operations Center OrgNOCPhone: +1-646-827-4366 OrgNOCEmail: [email protected] OrgNOCRef: https://rdap.arin.net/registry/entity/NOC32014-ARIN
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
mediumFirst detected 1 year ago · Last seen 10 days ago
Appeared in 14 threat reports