IPHighVerifiedSignal 79/100
216.120.201.112
Location
Denver, Colorado
ASN
AS395092
Shock Hosting LLC
First Seen
Oct 13, 2024
Last Seen
Feb 12, 2026
Found in 5 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
79%
Signal Score
79 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Network Information
Country
United States
RegionDenver, Colorado
ASNAS395092
OrganizationShock Hosting LLC
Feed Intelligence Summary
5 reports79% confidence
5
Source reports
79%
Confidence score
Category tags
botnetcertcommand and controlcredential harvestingdata exfiltrationdistributed attacksindicatorinfrastructure acquisitionreconnaissancemalicious softwaremalwaremanualnetworknorth americaphishing attackprocess injectionresearchedsocial engineeringt1055t1071.001t1486t1496t1499.002t1499.003t1565t1566.001t1566.002t1566.003t1587.001t1590.001turkeyunited statesus
Activity Timeline
Feb 12Feb 12
Threat Activity Heatmap
· Peak: 2026-02-12LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Threat ScoreHigh Risk
79
SIGNAL
Signal Score
79%
Confidence
5
Reports
First seenOct 13, 2024
Last seenFeb 12, 2026
Verified IOC
GeolocationUS
CountryUnited States
LocationDenver, Colorado
ASNAS395092
OrgShock Hosting LLC
Coords39.7391, -104.9866
VirusTotal
Not checked
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
highFirst detected 1 year ago · Last seen 4 months ago
Appeared in 5 threat reports