IOC Radar
IPMediumSignal 95/100

74.211.103.212

Location
United StatesUnited States
Los Angeles, California
ASN
AS25820
Cluster Logic Inc
First Seen
Dec 20, 2024
Last Seen
Jan 25, 2026
Dec 20
First Seen
540d ago
Jan 25
Last Seen
140d ago
14
Reports
source reports
95%
Confidence
medium
Found in 14 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
95%
Signal Score
95 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

22 techniques

Network Information

CountryUSUnited States
RegionLos Angeles, California
ASNAS25820
OrganizationCluster Logic Inc

Feed Intelligence Summary

14 reports95% confidence
14
Source reports
95%
Confidence score
Category tags
abuseactive scanningattackaustraliaauthenticationauthentication attackauto-generated securityautomated attackbotnetbrute forcebrute force attackbrute force attemptcommand and controlcredential accesscredential stuffingctadata exfiltrationdecoy systemdistributed attacksmalicious activitymalicious softwaremalwarenetworknetwork intrusionnetwork securitynorth americaoceaniapassword attacksprocess injectionproxyreconnaissanceremote accessremote servicesresearchedscannerssh attackt1021.004t1055t1071.001t1078t1078.002t1078.004t1110t1110.001t1110.002t1110.003t1110.004t1486t1496t1499.002t1499.003t1555t1565t1589t1589.002t1595.001t1595.002t1595.003threat actorthreat intelligenceunited states

Activity Timeline

1 total obs
Jan 25Jan 25

Threat Activity Heatmap

· Peak: 2026-01-25
Less
More
Mon
Wed
Fri
Jun
·
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Threat ScoreHigh Risk
95
SIGNAL
Signal Score
95%
Confidence
14
Reports
First seenDec 20, 2024
Last seenJan 25, 2026
GeolocationUS
CountryUnited States
LocationLos Angeles, California
ASNAS25820
OrgCluster Logic Inc
Coords34.0584, -118.2780

VirusTotal

Not checked

WHOIS

description
Host bruteforcing SSH
raw
Cluster Logic Inc CL-1210 (NET-74-211-96-0-1) 74.211.96.0 - 74.211.127.255 IT7 Networks Inc CL-74-211-96-0-19 (NET-74-211-96-0-2) 74.211.96.0 - 74.211.127.255
references
https://redpiranha.net

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 1 year ago · Last seen 4 months ago
Appeared in 14 threat reports