IOC Radar
IPHighVerifiedSignal 86/100

104.238.60.108

Location
United StatesUnited States
Miami, Florida
ASN
AS8100
CrownCloud via Quadranet
First Seen
Jun 2, 2026
Last Seen
Jun 5, 2026
Jun 2
First Seen
18d ago
Jun 5
Last Seen
16d ago
49
Reports
source reports
95%
Confidence
high
Found in 49 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
95%
Signal Score
86 / 100
IDS Rule
Yes

Network Information

CountryUSUnited States
RegionMiami, Florida
ASNAS8100
OrganizationCrownCloud via Quadranet

IP Category

Hosting
Hosting provider

Feed Intelligence Summary

49 reports95% confidence
AT
Abuse.ch ThreatFox
Jun 5, 2026
2974 IOCs in report
AT
Abuse.ch ThreatFox
Jun 5, 2026
2961 IOCs in report
AT
Abuse.ch ThreatFox
Jun 5, 2026
2948 IOCs in report
AT
Abuse.ch ThreatFox
Jun 4, 2026
2942 IOCs in report
AT
Abuse.ch ThreatFox
Jun 4, 2026
2931 IOCs in report
AT
Abuse.ch ThreatFox
Jun 4, 2026
2924 IOCs in report
AT
Abuse.ch ThreatFox
Jun 4, 2026
2925 IOCs in report
AT
Abuse.ch ThreatFox
Jun 4, 2026
2948 IOCs in report
AT
Abuse.ch ThreatFox
Jun 4, 2026
2938 IOCs in report
AT
Abuse.ch ThreatFox
Jun 4, 2026
2903 IOCs in report

Activity Timeline

49 total obs
Jun 5Jun 2

Threat Activity Heatmap

· Peak: 2026-06-04
Less
More
Mon
Wed
Fri
Jun
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
24h
0
Dormant
7d
0
Dormant
30d
49
Critical
3mo
49
Critical
Threat ScoreHigh Risk
86
SIGNAL
Signal Score
95%
Confidence
49
Reports
First seenJun 2, 2026
Last seenJun 5, 2026
Verified IOC
GeolocationUS
CountryUnited States
LocationMiami, Florida
ASNAS8100
OrgCrownCloud via Quadranet
Coords25.7700, -80.1679
Hosting

VirusTotal

Not checked

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

high
First detected 18 days ago · Last seen 16 days ago
Appeared in 49 threat reports from 10 sources
Associated with: Sandworm
Used by malware: XorDDoS, Nanocore, DarkComet, XWorm, Lumma, Pegasus, NetWire, AsyncRAT, SocGholish, XMRig, Remcos, Rhysida, Stealc, Mirai, Vidar, Metasploit, Sliver, Havoc