IOC Radar
IPMediumSignal 69/100

23.239.9.223

Location
United StatesUnited States
Cedar Knolls, NJ
ASN
AS63949
Linode
First Seen
Apr 10, 2026
Last Seen
May 10, 2026
Apr 10
First Seen
64d ago
May 10
Last Seen
34d ago
6
Reports
source reports
69%
Confidence
medium
Found in 6 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
69%
Signal Score
69 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

3 techniques

Network Information

CountryUSUnited States
RegionCedar Knolls, NJ
ASNAS63949
OrganizationLinode

Feed Intelligence Summary

6 reports69% confidence
6
Source reports
69%
Confidence score
Category tags
active scanactive scanningbrute forcebrute force attackerdigital oceanindicatornetworknorth americaportscanreconnaissanceresearchedscannerscannersservice scant1595.001t1595.002t1595.003united statesus

Activity Timeline

1 total obs
May 10May 10

Threat Activity Heatmap

· Peak: 2026-05-10
Less
More
Mon
Wed
Fri
Jun
·
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Threat ScoreMedium Risk
69
SIGNAL
Signal Score
69%
Confidence
6
Reports
First seenApr 10, 2026
Last seenMay 10, 2026
GeolocationUS
CountryUnited States
LocationCedar Knolls, NJ
ASNAS63949
OrgLinode
Coords40.8229, -74.4592

VirusTotal

Not checked

WHOIS

description
IPv4 hosts detected port scanning DigitalOcean London (UK) honeypot
raw
Akamai Technologies, Inc. LINODE-US (NET-23-239-0-0-1) 23.239.0.0 - 23.239.31.255 Linode LINODE (NET-23-239-0-0-2) 23.239.0.0 - 23.239.31.255
references
https://jamesbrine.com.au/digitaloceanlondon-portscan-bruteforce-ip-list-2026-04-16/, https://jamesbrine.com.au

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 2 months ago · Last seen 1 month ago
Appeared in 6 threat reports