IOC Radar
IPMediumSignal 86/100

166.62.41.26

Location
United StatesUnited States
Tempe, Arizona
ASN
AS398101
GoDaddy.com, LLC
First Seen
May 16, 2026
Last Seen
Jun 6, 2026
May 16
First Seen
28d ago
Jun 6
Last Seen
7d ago
18
Reports
source reports
86%
Confidence
medium
Found in 18 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
86%
Signal Score
86 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

3 techniques

Network Information

CountryUSUnited States
RegionTempe, Arizona
ASNAS398101
OrganizationGoDaddy.com, LLC

Feed Intelligence Summary

18 reports86% confidence
18
Source reports
86%
Confidence score
Category tags
abuseactive scanaggressive-detectionattackaustraliabad reputationbad web botbebelgiumblocklistblocklist_allbotnet activitybrute forcebrute force attackerbrute-forcebruteforceconnection-resetcowrieddosddos attackdionaeaeuropeexploitexploitation activityexploited hostfattftpftp brute-forcehackingindicatorinjection activityiot securityiot targetedkill-chain exploitationkill-chain reconnaissancelow-risknetworknorth americaoceaniaosintp0fphishingportscanprotocol-probingresearchresearchedscannerscannerssensor-taggedservice scansql injectionsshssh attackssh-brutet-pott1110t1110.001t1595.001tannertargeting databasetelnetthreat actortpotunited statesusvulnerability scanvulnerability-exploitationvultrweb app attack

Activity Timeline

1 total obs
Jun 6Jun 6

Threat Activity Heatmap

· Peak: 2026-06-06
Less
More
Mon
Wed
Fri
Jun
·
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Threat ScoreHigh Risk
86
SIGNAL
Signal Score
86%
Confidence
18
Reports
First seenMay 16, 2026
Last seenJun 6, 2026
GeolocationUS
CountryUnited States
LocationTempe, Arizona
ASNAS398101
OrgGoDaddy.com, LLC
Coords33.3359, -111.8940

VirusTotal

Not checked

WHOIS

description
Banned by Fail2Ban [sshd]
raw
NetRange: 166.62.0.0 - 166.62.127.255 CIDR: 166.62.0.0/17 NetName: GO-DADDY-COM-LLC NetHandle: NET-166-62-0-0-1 Parent: NET166 (NET-166-0-0-0-0) NetType: Direct Allocation OriginAS: Organization: GoDaddy.com, LLC (GODAD) RegDate: 2012-11-14 Updated: 2014-02-25 Comment: Please send abuse complaints to [email protected] Ref: https://rdap.arin.net/registry/ip/166.62.0.0 OrgName: GoDaddy.com, LLC OrgId: GODAD Address: 2155 E GoDaddy Way City: Tempe StateProv: AZ PostalCode: 85284 Country: US RegDate: 2007-06-01 Updated: 2024-11-25 Comment: Please send abuse complaints to [email protected] Ref: https://rdap.arin.net/registry/entity/GODAD OrgNOCHandle: NOC124-ARIN OrgNOCName: Network Operations Center OrgNOCPhone: +1-480-505-8809 OrgNOCEmail: [email protected] OrgNOCRef: https://rdap.arin.net/registry/entity/NOC124-ARIN OrgTechHandle: NOC124-ARIN OrgTechName: Network Operations Center OrgTechPhone: +1-480-505-8809 OrgTechEmail: [email protected] OrgTechRef: https://rdap.arin.net/registry/entity/NOC124-ARIN OrgAbuseHandle: ABUSE51-ARIN OrgAbuseName: Abuse Department OrgAbusePhone: +1-480-624-2505 OrgAbuseEmail: [email protected] OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE51-ARIN RAbuseHandle: ABUSE51-ARIN RAbuseName: Abuse Department RAbusePhone: +1-480-624-2505 RAbuseEmail: [email protected] RAbuseRef: https://rdap.arin.net/registry/entity/ABUSE51-ARIN RTechHandle: NOC124-ARIN RTechName: Network Operations Center RTechPhone: +1-480-505-8809 RTechEmail: [email protected] RTechRef: https://rdap.arin.net/registry/entity/NOC124-ARIN RNOCHandle: NOC124-ARIN RNOCName: Network Operations Center RNOCPhone: +1-480-505-8809 RNOCEmail: [email protected] RNOCRef: https://rdap.arin.net/registry/entity/NOC124-ARIN

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 28 days ago · Last seen 7 days ago
Appeared in 18 threat reports