IOC Radar
IPMediumSignal 54/100

191.96.106.40

Location
United StatesUnited States
Los Angeles, California
ASN
AS174
Ipxo
First Seen
Oct 24, 2021
Last Seen
Apr 11, 2026
Oct 24
First Seen
1703d ago
Apr 11
Last Seen
74d ago
16
Reports
source reports
54%
Confidence
medium
Found in 16 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
54%
Signal Score
54 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

48 techniques

Network Information

CountryUSUnited States
RegionLos Angeles, California
ASNAS174
OrganizationIpxo

IP Category

⊕
VPN
VPN exit node

Feed Intelligence Summary

16 reports54% confidence
16
Source reports
54%
Confidence score
Category tags
abuseaccess vectoractive scanactive scanningagencybad reputationbotnet activitybrute forcebrute force attackcisacommand executioncomspeccredential accesscredential harvestingcredential stuffingddosddos attacksencryptioneuropeexploitation activityfinlandfortios sslvpnfranceftp brute forcegermanyhivehoneynet connecthttp brute forceidentity & access exploitationinfrastructure acquisitionreconnaissanceinternet of thingsiocsiocs httpsiot botnetiot securityiot/ics attacklateral movementlockbitlogin attemptlsassmalicious powershell activitymalwaremanualmetasploitmeterpreterminermirai botnetmitre attmobile threatmonitornetworknetwork enumerationnetwork intrusionnetwork scanningnetwork securityngroknorth americaosintpassword attackpassword attacksphishingphishing attackpluspolandprotocol exploitationproxypsexecransomwarereconnaissanceremote accessremote servicesresearchedscannerscanning activityscripting attackssecurity operationsservicesmb brute forcesmtp brute forcesocial engineeringspamssh attackt1012t1018t1021t1021.001t1021.002t1021.003t1021.004t1021.005t1040t1046t1059t1059.001t1059.003t1059.004t1068t1071t1071.001t1076t1078t1078.003t1086t1110t1110.001t1110.002t1110.003t1110.004t1133t1204.002t1219t1496t1499.002t1505t1543t1543.003t1563t1564.001t1566.001t1566.002t1566.003t1572t1587.001t1588t1590.001t1592t1595t1595.001t1595.002t1595.003tcp scantelnet threatthreat actorthreat intelligencetor nodetwitterudp scanunauthorized access attemptunited statesusvoicevpnzoho

Activity Timeline

1 total obs
Apr 11Apr 11

Threat Activity Heatmap

· Peak: 2026-04-11
Less
More
Mon
Wed
Fri
Jun
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Threat ScoreMedium Risk
54
SIGNAL
Signal Score
54%
Confidence
16
Reports
First seenOct 24, 2021
Last seenApr 11, 2026
GeolocationUS
CountryUnited States
LocationLos Angeles, California
ASNAS174
OrgIpxo
Coords34.0544, -118.2440
VPN

VirusTotal

Not checked

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 4 years ago · Last seen 2 months ago
Appeared in 16 threat reports