IPMediumSignal 80/100
107.173.122.15
Location
United StatesDallas, California
ASN
AS36352
RackNerd LLC
First Seen
Apr 29, 2026
Last Seen
Jun 3, 2026
Found in 12 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
80%
Signal Score
80 / 100
IDS Rule
No
Threat Context
Tags
Network Information
CountryUnited States
United StatesRegionDallas, California
ASNAS36352
OrganizationRackNerd LLC
Feed Intelligence Summary
12 reports80% confidence
12
Source reports
80%
Confidence score
Category tags
abuseactive scanasiabad reputationbrute forcebrute force attackerbrute-forcebruteforcecowriecredential stuffingcredential-harvestingdionaeaenv-huntingexploitation activityfatthackingidentity & access exploitationindicatormalaysianetworknginxnorth americap0fportscanransomwareresearchedscannerscannersself-signedsensor-taggedservice scansocradar honeypotsshssh attacktannertelnettpotunited statesusvultrweb app attack
Activity Timeline
Jun 3Jun 3
Threat Activity Heatmap
· Peak: 2026-06-03LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Threat ScoreHigh Risk
80
SIGNAL
Signal Score
80%
Confidence
12
Reports
First seenApr 29, 2026
Last seenJun 3, 2026
GeolocationUS
CountryUnited States
LocationDallas, California
ASNAS36352
OrgRackNerd LLC
Coords34.1065, -117.5931
VirusTotal
Not checked
WHOIS
- description
- Observed authentication attempts via ssh against Cowrie/Heralding honeypots in Australia. Total events observed: 5. Sensors involved: Cowrie, Fatt. Target ports: 22. Source country: US. ASN(s): 36352. Organisation(s): HostPapa.
- raw
- HostPapa CC-17 (NET-107-172-0-0-1) 107.172.0.0 - 107.175.255.255 RackNerd LLC CC-107-173-122-0-24 (NET-107-173-122-0-1) 107.173.122.0 - 107.173.122.255
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
mediumFirst detected 1 month ago · Last seen 12 days ago
Appeared in 12 threat reports