IOC Radar
IPMediumSignal 49/100

172.98.32.209

Location
United StatesUnited States
Washington, Virginia
ASN
AS206092
Prefixx, Inc
First Seen
Oct 26, 2023
Last Seen
Jun 6, 2026
Oct 26
First Seen
972d ago
Jun 6
Last Seen
18d ago
13
Reports
source reports
49%
Confidence
medium
Found in 13 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
49%
Signal Score
49 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

23 techniques

Network Information

CountryUSUnited States
RegionWashington, Virginia
ASNAS206092
OrganizationPrefixx, Inc

IP Category

VPN
VPN exit node

Feed Intelligence Summary

13 reports49% confidence
13
Source reports
49%
Confidence score
Category tags
abuseaccess controlactive scanactive scanningantispamapacheapache attackerapplication layer protocolbad reputationbad web botbotnet activitybrute forcebrute force attackc2 communicationcommand & controlcredential accesscredential harvestingcredential stuffingddosdenial of serviceexploitation activityexploited hostftp brute forcehackinghttp brute forceidentity & access exploitationlog4jmalwaremalware distributionnetworknetwork reconnaissancenetwork scanningnetwork securitynorth americapassword attacksphishingphishing attackprotocol exploitationproxyransomwarereconnaissanceremote accessremote servicesresearchedscannersecurity policysmtp brute forcesocial engineeringsocradar honeypotspamsql brute forcessh attackt1021t1021.001t1040t1046t1059t1076t1078t1110t1110.001t1110.002t1110.003t1110.004t1190t1203t1499.001t1563t1566.001t1566.002t1566.003t1571t1595.001t1595.002t1595.003telnet threatthreat preventiontraffic signalingunited statesusvpnvpn ipweb app attackweb application attackweb exploitationweb spam

Activity Timeline

1 total obs
Jun 6Jun 6

Threat Activity Heatmap

· Peak: 2026-06-06
Less
More
Mon
Wed
Fri
Jun
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Threat ScoreMedium Risk
49
SIGNAL
Signal Score
49%
Confidence
13
Reports
First seenOct 26, 2023
Last seenJun 6, 2026
GeolocationUS
CountryUnited States
LocationWashington, Virginia
ASNAS206092
OrgPrefixx, Inc
Coords38.8954, -77.0395
VPN

VirusTotal

Not checked

WHOIS

raw
LayerSwitch, Inc LAYERSWITCH (NET-172-98-32-0-1) 172.98.32.0 - 172.98.35.255 Prefixx, Inc. PFX-EXPRESSVPN (NET-172-98-32-0-2) 172.98.32.0 - 172.98.33.255

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 2 years ago · Last seen 18 days ago
Appeared in 13 threat reports