# enrichment_results

indicator: 91.103.253.180
indicator_type: ipv4
source: otx
country: RU
reverse_dns: yachtchief.ru,www.yachtchief.ru
queried_at: 2026-05-24T18:20:39.190907
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS51765 oy crea nova hosting solution ltd", "indicator": "91.103.253.180", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["yachtchief.ru", "www.yachtchief.ru"]}


indicator: 91.103.253.188
indicator_type: ipv4
source: otx
country: RU
reverse_dns: a.checka.ru,surf-vpn.online
queried_at: 2026-05-24T18:20:41.797424
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS51765 oy crea nova hosting solution ltd", "indicator": "91.103.253.188", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["a.checka.ru", "surf-vpn.online"]}


indicator: 91.103.253.189
indicator_type: ipv4
source: otx
country: RU
reverse_dns: educacion-continua.info
queried_at: 2026-05-24T18:20:44.204440
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS51765 oy crea nova hosting solution ltd", "indicator": "91.103.253.189", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["educacion-continua.info"]}


indicator: 91.103.253.191
indicator_type: ipv4
source: otx
country: RU
reverse_dns: proaitest.ru,magerov.pro,magerov.site
queried_at: 2026-05-24T18:20:46.914544
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS51765 oy crea nova hosting solution ltd", "indicator": "91.103.253.191", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["proaitest.ru", "magerov.pro", "magerov.site"]}


indicator: 91.103.253.192
indicator_type: ipv4
source: otx
country: RU
reverse_dns: www.91.103.253.192.sslip.io,91.103.253.192.sslip.io
queried_at: 2026-05-24T18:20:49.571947
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS51765 oy crea nova hosting solution ltd", "indicator": "91.103.253.192", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["www.91.103.253.192.sslip.io", "91.103.253.192.sslip.io"]}


indicator: 91.103.253.197
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-24T18:20:52.152836
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS51765 oy crea nova hosting solution ltd", "indicator": "91.103.253.197", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.103.253.199
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-24T18:21:09.236837
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS51765 oy crea nova hosting solution ltd", "indicator": "91.103.253.199", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 91.103.253.201
indicator_type: ipv4
source: otx
country: RU
reverse_dns: prime-items.com
queried_at: 2026-05-24T18:21:11.527499
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS51765 oy crea nova hosting solution ltd", "indicator": "91.103.253.201", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["prime-items.com"]}


indicator: 91.103.253.203
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-24T18:21:13.767728
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS51765 oy crea nova hosting solution ltd", "indicator": "91.103.253.203", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.103.253.205
indicator_type: ipv4
source: otx
country: RU
reverse_dns: xn----8sbnpkdppfdfgu.xn--p1ai,dns.tav.ru.net
queried_at: 2026-05-24T18:21:15.954751
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS51765 oy crea nova hosting solution ltd", "indicator": "91.103.253.205", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["xn----8sbnpkdppfdfgu.xn--p1ai", "dns.tav.ru.net"]}


indicator: 91.103.253.208
indicator_type: ipv4
source: otx
country: RU
reverse_dns: sc.softportaltop.su,gambling-withus.com
queried_at: 2026-05-24T18:21:18.216381
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS51765 oy crea nova hosting solution ltd", "indicator": "91.103.253.208", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["sc.softportaltop.su", "gambling-withus.com"]}


indicator: 91.103.253.209
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-24T18:21:20.690657
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS51765 oy crea nova hosting solution ltd", "indicator": "91.103.253.209", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.103.253.212
indicator_type: ipv4
source: otx
country: RU
reverse_dns: vegaslive.xyz
queried_at: 2026-05-24T18:21:24.430528
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS51765 oy crea nova hosting solution ltd", "indicator": "91.103.253.212", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["vegaslive.xyz"]}


indicator: 91.103.253.22
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-24T18:21:41.344478
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS51765 oy crea nova hosting solution ltd", "indicator": "91.103.253.22", "tags": [], "pulses": ["Cobalt Strike C2 IPs"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 91.103.253.220
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-24T18:21:43.946173
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS51765 oy crea nova hosting solution ltd", "indicator": "91.103.253.220", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.103.253.226
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-24T18:22:00.834910
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS51765 oy crea nova hosting solution ltd", "indicator": "91.103.253.226", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 91.103.253.227
indicator_type: ipv4
source: otx
country: RU
reverse_dns: auroraridgetef.com
queried_at: 2026-05-24T18:22:02.981110
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS51765 oy crea nova hosting solution ltd", "indicator": "91.103.253.227", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["auroraridgetef.com"]}


indicator: 91.103.253.23
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-24T18:22:05.297515
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS51765 oy crea nova hosting solution ltd", "indicator": "91.103.253.23", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 12, "malware_samples": [], "passive_dns": ["barc-iportal.com", "15ultra.info", "turvallisuus028642-op-fi.info", "turvatoimet-fi.info", "turvatoimet-suomi.info", "stata-agressor.com", "host-host-file8.com", "galandskiyher1.com", "privacy-tools-for

reverse_dns:
  barc-iportal.com,15ultra.info,turvallisuus028642-op-fi.info,turvatoimet-fi.info,turvatoimet-suomi.info,stata-agressor.com,host-host-file8.com,galandskiyher1.com,privacy-tools-for-you-453.com,host-file-host6.com


indicator: 91.103.253.240
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-24T18:22:10.885767
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS51765 oy crea nova hosting solution ltd", "indicator": "91.103.253.240", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.103.253.241
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-24T18:22:13.327918
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS51765 oy crea nova hosting solution ltd", "indicator": "91.103.253.241", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.103.253.244
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-24T18:22:18.465094
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS51765 oy crea nova hosting solution ltd", "indicator": "91.103.253.244", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.103.253.28
indicator_type: ipv4
source: otx
country: RU
reverse_dns: xkpy.filthyuhappy.shop
queried_at: 2026-05-24T18:22:21.053945
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS51765 oy crea nova hosting solution ltd", "indicator": "91.103.253.28", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["xkpy.filthyuhappy.shop"]}


indicator: 91.103.253.3
indicator_type: ipv4
source: otx
country: RU
reverse_dns: angryai.kenxmv.ru,krgd43t4yy3wrfe.info,rogloyalrwrd.top,gigadat-canada.info,guv48755pe.co
queried_at: 2026-05-24T18:22:23.290571
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS51765 oy crea nova hosting solution ltd", "indicator": "91.103.253.3", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 5, "malware_samples": [], "passive_dns": ["angryai.kenxmv.ru", "krgd43t4yy3wrfe.info", "rogloyalrwrd.top", "gigadat-canada.info", "guv48755pe.co"]}


indicator: 91.103.253.30
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-24T18:22:33.433863
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS51765 oy crea nova hosting solution ltd", "indicator": "91.103.253.30", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.103.253.31
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-24T18:22:37.223563
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS51765 oy crea nova hosting solution ltd", "indicator": "91.103.253.31", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 17, "malware_samples": [], "passive_dns": ["www.mail.hitmotop.me", "ficbook.fun", "www.ficbook.fun", "www.ficbook.online", "ficbook.space", "ficbook.su", "fanfici.ru", "ficbook.online", "promodj.me", "www.promodj.me", "www.ficbook.life", "ficbook

reverse_dns:
  www.mail.hitmotop.me,ficbook.fun,www.ficbook.fun,www.ficbook.online,ficbook.space,ficbook.su,fanfici.ru,ficbook.online,promodj.me,www.promodj.me


indicator: 91.103.253.32
indicator_type: ipv4
source: otx
country: RU
reverse_dns: femdomcouple.vip,ildar.cfd,godsgifts1.vip,reinroot.top,adriaenclaeys.top,unlikeget.top
queried_at: 2026-05-24T18:22:39.749593
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS51765 oy crea nova hosting solution ltd", "indicator": "91.103.253.32", "tags": [], "pulses": ["adriaenclaeys 2023"], "malware_count": 0, "passive_dns_count": 6, "malware_samples": [], "passive_dns": ["femdomcouple.vip", "ildar.cfd", "godsgifts1.vip", "reinroot.top", "adriaenclaeys.top", "unlikeget.top"]}


indicator: 91.103.253.37
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-24T18:22:42.245487
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS51765 oy crea nova hosting solution ltd", "indicator": "91.103.253.37", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.103.253.38
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-24T18:22:44.408779
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS51765 oy crea nova hosting solution ltd", "indicator": "91.103.253.38", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.103.253.40
indicator_type: ipv4
source: otx
country: RU
reverse_dns: e-nabiz.online
queried_at: 2026-05-24T18:22:46.658925
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS51765 oy crea nova hosting solution ltd", "indicator": "91.103.253.40", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["e-nabiz.online"]}


indicator: 91.103.253.42
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-24T18:22:52.183255
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS51765 oy crea nova hosting solution ltd", "indicator": "91.103.253.42", "tags": [], "pulses": ["AS210644 Aeza International Ltd"], "malware_count": 0, "passive_dns_count": 500, "malware_samples": [], "passive_dns": ["www.theoffshorejobs.com", "theoffshorejobs.com", "www.kotijobs.com", "www.speedyquip.com", "speedyquip.com", "www.oneelevenforsythe.com", "oneelevenforsythe.com", "clou

reverse_dns:
  www.theoffshorejobs.com,theoffshorejobs.com,www.kotijobs.com,www.speedyquip.com,speedyquip.com,www.oneelevenforsythe.com,oneelevenforsythe.com,cloudiste.com,www.punck.net,punck.net


indicator: 91.103.253.56
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-24T18:22:54.829178
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS51765 oy crea nova hosting solution ltd", "indicator": "91.103.253.56", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 7, "malware_samples": [], "passive_dns": ["bigbangsina.online", "ir-hamster.site", "hamster-ir.site", "irhamsterkombat.site", "samanesahm.online", "weibdoo.com", "vnhuv.icu"]}

reverse_dns:
  bigbangsina.online,ir-hamster.site,hamster-ir.site,irhamsterkombat.site,samanesahm.online,weibdoo.com,vnhuv.icu


indicator: 91.103.253.57
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-24T18:22:57.078235
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS51765 oy crea nova hosting solution ltd", "indicator": "91.103.253.57", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.103.253.59
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-24T18:22:59.346016
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS51765 oy crea nova hosting solution ltd", "indicator": "91.103.253.59", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.103.253.6
indicator_type: ipv4
source: otx
country: RU
reverse_dns: lordfilml.top,lordfilmls.top
hosting_provider: c2
queried_at: 2026-05-24T18:23:03.691193
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS51765 oy crea nova hosting solution ltd", "indicator": "91.103.253.6", "tags": ["c2"], "pulses": ["SarlackLab C2 Tracking"], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["lordfilml.top", "lordfilmls.top"]}


indicator: 91.103.253.61
indicator_type: ipv4
source: otx
country: RU
reverse_dns: chvxr.top
queried_at: 2026-05-24T18:23:05.899596
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS51765 oy crea nova hosting solution ltd", "indicator": "91.103.253.61", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["chvxr.top"]}


indicator: 91.103.253.64
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-24T18:23:08.642481
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS51765 oy crea nova hosting solution ltd", "indicator": "91.103.253.64", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.103.253.66
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-24T18:23:10.990747
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS51765 oy crea nova hosting solution ltd", "indicator": "91.103.253.66", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.103.253.70
indicator_type: ipv4
source: otx
country: RU
reverse_dns: deportanec.com,creativesoftsolutions.com,dalendar.website
queried_at: 2026-05-24T18:23:13.583563
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS51765 oy crea nova hosting solution ltd", "indicator": "91.103.253.70", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["deportanec.com", "creativesoftsolutions.com", "dalendar.website"]}


indicator: 91.103.253.72
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-24T18:23:16.262019
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS51765 oy crea nova hosting solution ltd", "indicator": "91.103.253.72", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.103.253.73
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-24T18:23:18.581115
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS51765 oy crea nova hosting solution ltd", "indicator": "91.103.253.73", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 5, "malware_samples": [], "passive_dns": ["oc.91-103-253-73.sslip.io", "np.91-103-253-73.sslip.io", "91-103-253-73.sslip.io", "neznayka.net", "mdspayment.online"]}

reverse_dns:
  oc.91-103-253-73.sslip.io,np.91-103-253-73.sslip.io,91-103-253-73.sslip.io,neznayka.net,mdspayment.online


indicator: 91.103.253.74
indicator_type: ipv4
source: otx
country: RU
reverse_dns: k0rk.xyz,n0kk.xyz,s22.google.n0kk.xyz,www.bk-info.top
queried_at: 2026-05-24T18:23:20.998662
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS51765 oy crea nova hosting solution ltd", "indicator": "91.103.253.74", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 4, "malware_samples": [], "passive_dns": ["k0rk.xyz", "n0kk.xyz", "s22.google.n0kk.xyz", "www.bk-info.top"]}


indicator: 91.103.253.75
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-24T18:23:23.170385
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS51765 oy crea nova hosting solution ltd", "indicator": "91.103.253.75", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.103.253.79
indicator_type: ipv4
source: otx
country: RU
reverse_dns: jomteashop.com
queried_at: 2026-05-24T18:23:25.422322
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS51765 oy crea nova hosting solution ltd", "indicator": "91.103.253.79", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["jomteashop.com"]}


indicator: 91.103.253.81
indicator_type: ipv4
source: otx
country: RU
reverse_dns: ams.celebjared.pk
queried_at: 2026-05-24T18:23:27.610040
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS51765 oy crea nova hosting solution ltd", "indicator": "91.103.253.81", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["ams.celebjared.pk"]}


indicator: 91.103.253.83
indicator_type: ipv4
source: otx
country: RU
reverse_dns: 91-103-253-83.cprapid.com,chat.zernj.ru,chat.zernj.tech,keapps.shop
queried_at: 2026-05-24T18:23:29.948495
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS51765 oy crea nova hosting solution ltd", "indicator": "91.103.253.83", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 4, "malware_samples": [], "passive_dns": ["91-103-253-83.cprapid.com", "chat.zernj.ru", "chat.zernj.tech", "keapps.shop"]}


indicator: 91.103.253.84
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-24T18:23:32.111857
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS51765 oy crea nova hosting solution ltd", "indicator": "91.103.253.84", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.103.253.91
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-24T18:23:34.482601
raw_data:
  {"pulse_count": 22, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS51765 oy crea nova hosting solution ltd", "indicator": "91.103.253.91", "tags": [], "pulses": ["IOCs - 202312212139 - ANIA Threat Feeds - IP Segment 6", "ETIC Cybersecurity 2024-01-11 Port Scan", "ETIC Cybersecurity 2024-01-10 Port Scan", "ETIC Cybersecurity 2024-01-09 Port Scan", "ETIC Cybersecurity 2024-01-08 Port Scan", "ETIC Cybersecurity 2024-01-07 Port Scan", "ETIC Cybersecur


indicator: 91.103.253.92
indicator_type: ipv4
source: otx
country: RU
reverse_dns: games.sillencer.net
queried_at: 2026-05-24T18:23:38.627845
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS51765 oy crea nova hosting solution ltd", "indicator": "91.103.253.92", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["games.sillencer.net"]}


indicator: 91.103.253.95
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-24T18:23:40.745524
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS51765 oy crea nova hosting solution ltd", "indicator": "91.103.253.95", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.103.253.96
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-24T18:23:42.860721
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS51765 oy crea nova hosting solution ltd", "indicator": "91.103.253.96", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.103.253.97
indicator_type: ipv4
source: otx
country: RU
reverse_dns: softlibrary.site,softlibrary.net
queried_at: 2026-05-24T18:23:51.043602
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS51765 oy crea nova hosting solution ltd", "indicator": "91.103.253.97", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["softlibrary.site", "softlibrary.net"]}


indicator: 91.103.253.99
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-24T18:23:53.134592
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS51765 oy crea nova hosting solution ltd", "indicator": "91.103.253.99", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.108.240.10
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-24T18:23:55.289952
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.10", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.108.240.108
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-24T18:23:57.747090
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.108", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.108.240.114
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-24T18:24:02.787954
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.114", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.108.240.115
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-24T18:24:04.882887
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.115", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.108.240.116
indicator_type: ipv4
source: otx
country: AU
city: Sydney
reverse_dns: tomhetfrainsiden.com
queried_at: 2026-05-24T18:24:07.778032
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.116", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["tomhetfrainsiden.com"]}


indicator: 91.108.240.120
indicator_type: ipv4
source: otx
country: AU
city: Sydney
reverse_dns: gg.jpmns5521.ru,pop.h844.ru
queried_at: 2026-05-24T18:24:10.130819
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.120", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["gg.jpmns5521.ru", "pop.h844.ru"]}


indicator: 91.108.240.128
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-24T18:24:12.205043
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.128", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.108.240.13
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-24T18:24:26.508069
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.13", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.108.240.132
indicator_type: ipv4
source: otx
country: AU
city: Sydney
reverse_dns: transacciones.info
queried_at: 2026-05-24T18:24:28.893968
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.132", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["transacciones.info"]}


indicator: 91.108.240.136
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-24T18:24:31.454031
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.136", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.108.240.138
indicator_type: ipv4
source: otx
country: AU
city: Sydney
reverse_dns: server1.hexkick.site
queried_at: 2026-05-24T18:24:33.772395
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.138", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["server1.hexkick.site"]}


indicator: 91.108.240.14
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-24T18:24:36.451156
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.14", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 4, "malware_samples": [], "passive_dns": ["tairo-dict.ru", "nlogn.coinb.avenue-park.com", "logn.coinbase.avenue-park.com", "www.logn.coinbase.avenue-park.com"]}

reverse_dns:
  tairo-dict.ru,nlogn.coinb.avenue-park.com,logn.coinbase.avenue-park.com,www.logn.coinbase.avenue-park.com


indicator: 91.108.240.140
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-24T18:24:38.651376
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.140", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.108.240.145
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-24T18:24:40.827343
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.145", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.108.240.146
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-24T18:24:58.028398
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.146", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 91.108.240.149
indicator_type: ipv4
source: otx
country: AU
city: Sydney
reverse_dns: c37d7e7a.qclck.net
queried_at: 2026-05-24T18:25:00.328807
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.149", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["c37d7e7a.qclck.net"]}


indicator: 91.108.240.154
indicator_type: ipv4
source: otx
country: AU
city: Sydney
reverse_dns: phez-e.world
queried_at: 2026-05-24T18:25:02.571961
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.154", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["phez-e.world"]}


indicator: 91.108.240.165
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-24T18:25:05.390884
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.165", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.108.240.169
indicator_type: ipv4
source: otx
country: AU
city: Sydney
reverse_dns: shuriken.pro
queried_at: 2026-05-24T18:25:14.769284
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.169", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["shuriken.pro"]}


indicator: 91.108.240.17
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-24T18:25:16.899782
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.17", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.108.240.170
indicator_type: ipv4
source: otx
country: AU
city: Sydney
reverse_dns: pizza.junkies.shop
queried_at: 2026-05-24T18:25:22.327995
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.170", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["pizza.junkies.shop"]}


indicator: 91.108.240.177
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-24T18:25:39.338097
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.177", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 91.108.240.18
indicator_type: ipv4
source: otx
country: AU
city: Sydney
reverse_dns: energyfapulse.com
queried_at: 2026-05-24T18:25:41.613671
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.18", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["energyfapulse.com"]}


indicator: 91.108.240.180
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-24T18:25:43.867797
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.180", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.108.240.182
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-24T18:25:46.002769
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.182", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.108.240.183
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-24T18:26:02.968374
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.183", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 91.108.240.184
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-24T18:26:11.268423
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.184", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 9, "malware_samples": [], "passive_dns": ["b001.evilginx2.ru", "company.evilginx2.ru", "tdep.evilginx2.ru", "www.evilginx2.ru", "evilginx2.ru", "recommerce-static.evilginx2.ru", "help.evilginx2.ru", "uno.evilginx2.ru", "light.slouchednomoi.store"]}

reverse_dns:
  b001.evilginx2.ru,company.evilginx2.ru,tdep.evilginx2.ru,www.evilginx2.ru,evilginx2.ru,recommerce-static.evilginx2.ru,help.evilginx2.ru,uno.evilginx2.ru,light.slouchednomoi.store


indicator: 91.108.240.187
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-24T18:26:28.219389
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.187", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 91.108.240.190
indicator_type: ipv4
source: otx
country: AU
city: Sydney
reverse_dns: bllrave.com,yguiyv.com
queried_at: 2026-05-24T18:26:31.665768
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.190", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["bllrave.com", "yguiyv.com"]}


indicator: 91.108.240.195
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-24T18:26:48.571833
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.195", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 91.108.240.2
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-24T18:26:50.733081
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.2", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.108.240.202
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-24T18:27:07.922443
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.202", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 91.108.240.210
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-24T18:27:24.871961
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.210", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 91.108.240.215
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-24T18:27:28.348379
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.215", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.108.240.22
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-24T18:27:45.273513
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.22", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 91.108.240.220
indicator_type: ipv4
source: otx
country: AU
city: Sydney
reverse_dns: d.csgonline.ir,skinsmanekey.com,jet4.vipgsmin.lol
queried_at: 2026-05-24T18:27:58.367911
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.220", "tags": [], "pulses": ["AS210644 Aeza"], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["d.csgonline.ir", "skinsmanekey.com", "jet4.vipgsmin.lol"]}


indicator: 91.108.240.226
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-24T18:28:15.579057
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.226", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 91.108.240.230
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-24T18:28:33.154737
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.230", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 91.108.240.232
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-24T18:28:50.240405
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.232", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 91.108.240.235
indicator_type: ipv4
source: otx
country: AU
city: Sydney
reverse_dns: vimelixon.com,www.qmunty.com,qmunty.com
queried_at: 2026-05-24T18:29:05.118737
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.235", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["vimelixon.com", "www.qmunty.com", "qmunty.com"]}


indicator: 91.108.240.236
indicator_type: ipv4
source: otx
country: AU
city: Sydney
reverse_dns: glowingsunshine.info
queried_at: 2026-05-24T18:29:09.433893
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.236", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["glowingsunshine.info"]}


indicator: 91.108.240.242
indicator_type: ipv4
source: otx
country: AU
city: Sydney
reverse_dns: plwayin-en.com
queried_at: 2026-05-24T18:29:18.854527
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.242", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["plwayin-en.com"]}


indicator: 91.108.240.26
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-24T18:29:21.418898
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.26", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.108.240.27
indicator_type: ipv4
source: otx
country: AU
city: Sydney
reverse_dns: instaqua.org
queried_at: 2026-05-24T18:29:23.809701
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.27", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["instaqua.org"]}


indicator: 91.108.240.35
indicator_type: ipv4
source: otx
country: AU
city: Sydney
reverse_dns: tigratime.win
queried_at: 2026-05-24T18:29:26.101090
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.35", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["tigratime.win"]}


indicator: 91.108.240.38
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-24T18:29:43.092451
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.38", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 91.108.240.4
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-24T18:30:04.680693
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.4", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 91.108.240.50
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-24T18:30:22.121926
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.50", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 91.108.240.51
indicator_type: ipv4
source: otx
country: AU
city: Sydney
reverse_dns: n8n.xn--b1ab5acc.space,prometheus.xn--b1ab5acc.space
queried_at: 2026-05-24T18:30:24.677555
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.51", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["n8n.xn--b1ab5acc.space", "prometheus.xn--b1ab5acc.space"]}


indicator: 91.108.240.56
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-24T18:30:27.008627
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.56", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.108.240.59
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-24T18:30:34.966340
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.59", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.108.240.6
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-24T18:30:52.407374
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.6", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 91.108.240.67
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-24T18:31:11.015213
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.67", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.108.240.71
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-24T18:31:15.420599
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.71", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 7, "malware_samples": [], "passive_dns": ["albaik.ae.delivery-50.shop", "teatime.qa.good-deals.shop", "tickets.ae.in-dubai.shop", "emiratesdraw7.com", "cryptomybot.com", "sextoys-uae.com", "rasasi-perfumes.com"]}

reverse_dns:
  albaik.ae.delivery-50.shop,teatime.qa.good-deals.shop,tickets.ae.in-dubai.shop,emiratesdraw7.com,cryptomybot.com,sextoys-uae.com,rasasi-perfumes.com


indicator: 196.251.71.71
indicator_type: ipv4
source: otx
country: GH
reverse_dns: 196-251-71-71.plesk.page,www.196-251-71-71.plesk.page,alisverisimdi.xyz
queried_at: 2026-05-25T00:05:19.453408
raw_data:
  {"pulse_count": 3, "reputation": 0, "country": "Ghana", "country_code": "GH", "city": null, "asn": "ASNone ", "indicator": "196.251.71.71", "tags": [], "pulses": ["Phishing &  scam domain names", "\"AS401120 cheapy_host LLC\" clone credit skocherhan", "AS401120 cheapy_host LLC"], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["196-251-71-71.plesk.page", "www.196-251-71-71.plesk.page", "alisverisimdi.xyz"]}


indicator: 91.108.240.8
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:05:24.293186
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.8", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.108.240.88
indicator_type: ipv4
source: otx
country: AU
city: Sydney
reverse_dns: sadeqi.ru,teams-meetings.com,yourlovers.space,datemeup.fun,womencheck.space,fastmeetings.fun
queried_at: 2026-05-25T00:05:39.802656
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.88", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 6, "malware_samples": [], "passive_dns": ["sadeqi.ru", "teams-meetings.com", "yourlovers.space", "datemeup.fun", "womencheck.space", "fastmeetings.fun"]}


indicator: 91.108.240.93
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:05:56.988430
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.93", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 91.108.240.97
indicator_type: ipv4
source: otx
country: AU
city: Sydney
reverse_dns: vpn.killymon.ru,killymon.ru
queried_at: 2026-05-25T00:05:59.216015
raw_data:
  {"pulse_count": 5, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.240.97", "tags": [], "pulses": ["ETIC Cybersecurity  2024-08-07  Port Scan", "ETIC Cybersecurity  2024-08-07  Port Scan", "ETIC Cybersecurity  2024-08-06  Port Scan", "ETIC Cybersecurity  2024-08-03  Port Scan", "ETIC Cybersecurity  2024-08-02  Port Scan"], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dn


indicator: 91.108.241.0
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:06:16.163525
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.0", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 91.108.241.100
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:06:19.757332
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.100", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.108.241.107
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:06:37.117211
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.107", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 91.108.241.108
indicator_type: ipv4
source: otx
country: AU
city: Sydney
reverse_dns: api.surpriseservice.store,surpriseservice.store,vlaeza.trv78.ru
queried_at: 2026-05-25T00:06:39.427368
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.108", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["api.surpriseservice.store", "surpriseservice.store", "vlaeza.trv78.ru"]}


indicator: 91.108.241.113
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:06:56.392960
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.113", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 91.108.241.119
indicator_type: ipv4
source: otx
country: AU
city: Sydney
reverse_dns: akday2.mooo.com,akday1.mooo.com
queried_at: 2026-05-25T00:06:58.812152
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.119", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["akday2.mooo.com", "akday1.mooo.com"]}


indicator: 91.108.241.12
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:07:12.923162
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.12", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.108.241.128
indicator_type: ipv4
source: otx
country: AU
city: Sydney
reverse_dns: www.asura.life,cockpit.asura.life,asura.life
queried_at: 2026-05-25T00:07:17.629335
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.128", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["www.asura.life", "cockpit.asura.life", "asura.life"]}


indicator: 91.108.241.13
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:07:34.815332
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.13", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 91.108.241.132
indicator_type: ipv4
source: otx
country: AU
city: Sydney
reverse_dns: c.svyaz.space,qq.svyaz.space
queried_at: 2026-05-25T00:07:37.284585
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.132", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["c.svyaz.space", "qq.svyaz.space"]}


indicator: 91.108.241.136
indicator_type: ipv4
source: otx
country: AU
city: Sydney
reverse_dns: garrytopor.freemyip.com
queried_at: 2026-05-25T00:07:39.525902
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.136", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["garrytopor.freemyip.com"]}


indicator: 91.108.241.137
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:07:57.079549
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.137", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 91.108.241.140
indicator_type: ipv4
source: otx
country: AU
city: Sydney
reverse_dns: cheesedns.site,p.borisenkonikolay.ru,borisenkonikolay.ru
queried_at: 2026-05-25T00:08:14.824757
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.140", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 3, "passive_dns": ["cheesedns.site", "p.borisenkonikolay.ru", "borisenkonikolay.ru"]}


indicator: 91.108.241.146
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:08:32.009579
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.146", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 91.108.241.147
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:08:49.532290
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.147", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 91.108.241.149
indicator_type: ipv4
source: otx
country: AU
city: Sydney
reverse_dns: shpakkk.duckdns.org
queried_at: 2026-05-25T00:08:51.989787
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.149", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["shpakkk.duckdns.org"]}


indicator: 91.108.241.15
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:09:09.037479
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.15", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 91.108.241.151
indicator_type: ipv4
source: otx
country: AU
city: Sydney
reverse_dns: sansetsafe.ru,sansetsafe.online
queried_at: 2026-05-25T00:09:22.584948
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.151", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["sansetsafe.ru", "sansetsafe.online"]}


indicator: 91.108.241.153
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:09:39.812016
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.153", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 91.108.241.154
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:09:56.741119
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.154", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 91.108.241.156
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:10:18.246222
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.156", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 91.108.241.159
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:10:35.383277
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.159", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 91.108.241.161
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:10:53.753570
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.161", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 91.108.241.170
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:11:10.988657
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.170", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 91.108.241.172
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:11:35.029517
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.172", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 91.108.241.176
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:11:37.568854
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.176", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 14, "malware_samples": [], "passive_dns": ["terra-calm-us.com", "extremefasttradingcomputers.com", "ymjgolf.com", "egardengadgets.com", "amandamanopo.com", "orilliaconcrete.com", "gesundheitdealer.com", "parmjiat.com", "studiossiat.com", "viking-kingdom.com",

reverse_dns:
  terra-calm-us.com,extremefasttradingcomputers.com,ymjgolf.com,egardengadgets.com,amandamanopo.com,orilliaconcrete.com,gesundheitdealer.com,parmjiat.com,studiossiat.com,viking-kingdom.com


indicator: 91.108.241.188
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:11:41.934786
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.188", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.108.241.189
indicator_type: ipv4
source: otx
country: AU
city: Sydney
hosting_provider: Bruteforce,Brute-Force,Honeypot,SSH
queried_at: 2026-05-25T00:11:48.531483
raw_data:
  {"pulse_count": 23, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.189", "tags": ["Bruteforce", "Brute-Force", "Honeypot", "SSH"], "pulses": ["SSH Brute-Force Honeypot Live", "Cloned SSH Brute-Force Honeypot Live", "Cloned SSH Brute-Force Honeypot Live", "Cloned SSH Brute-Force Honeypot Live", "Cloned SSH Brute-Force Honeypot Live", "SSH Brute-Force Honeypot Live", "SSH Brute-Force Honeypot Live


indicator: 91.108.241.194
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:12:14.233779
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.194", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.108.241.197
indicator_type: ipv4
source: otx
country: AU
city: Sydney
reverse_dns: lksdhjjldan.online,mushylair.space
queried_at: 2026-05-25T00:12:16.823194
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.197", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["lksdhjjldan.online", "mushylair.space"]}


indicator: 91.108.241.204
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:12:50.412880
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.204", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 91.108.241.207
indicator_type: ipv4
source: otx
country: AU
city: Sydney
reverse_dns: dusha-vnutrennego-sgoraniya.pro
queried_at: 2026-05-25T00:12:52.557779
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.207", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["dusha-vnutrennego-sgoraniya.pro"]}


indicator: 91.108.241.208
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:13:09.500785
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.208", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 91.108.241.210
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:13:26.665853
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.210", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 91.108.241.212
indicator_type: ipv4
source: otx
country: AU
city: Sydney
reverse_dns: hamraz.weenet.xyz
queried_at: 2026-05-25T00:13:30.755712
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.212", "tags": [], "pulses": [], "malware_count": 1, "passive_dns_count": 1, "malware_samples": ["e4d08a0cade9a968887ba039a0a51feef89d847fe74b6745e50a62864a26d490"], "passive_dns": ["hamraz.weenet.xyz"]}


indicator: 91.108.241.216
indicator_type: ipv4
source: otx
country: AU
city: Sydney
reverse_dns: nas1.getit.su,nauda.su
queried_at: 2026-05-25T00:13:34.996560
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.216", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["nas1.getit.su", "nauda.su"]}


indicator: 91.108.241.217
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:13:41.139806
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.217", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.108.241.221
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:13:45.660930
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.221", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.108.241.222
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:13:51.334457
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.222", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.108.241.23
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:13:55.572179
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.23", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.108.241.24
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:14:12.468164
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.24", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 91.108.241.241
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:14:14.643807
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.241", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.108.241.253
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:14:21.178207
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.253", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.108.241.3
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:14:38.094644
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.3", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 91.108.241.31
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:14:40.262189
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.31", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.108.241.34
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:15:02.755459
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.34", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 91.108.241.36
indicator_type: ipv4
source: otx
country: AU
city: Sydney
reverse_dns: blp.beetroot.finance
queried_at: 2026-05-25T00:15:05.640489
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.36", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["blp.beetroot.finance"]}


indicator: 91.108.241.39
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:15:22.613800
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.39", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 91.108.241.42
indicator_type: ipv4
source: otx
country: AU
city: Sydney
reverse_dns: sattarov.uz
queried_at: 2026-05-25T00:15:25.413098
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.42", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["sattarov.uz"]}


indicator: 91.108.241.44
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:15:28.277009
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.44", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.108.241.45
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:15:34.701722
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.45", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.108.241.46
indicator_type: ipv4
source: otx
country: AU
city: Sydney
reverse_dns: godocoo.duckdns.org
queried_at: 2026-05-25T00:15:44.557356
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.46", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["godocoo.duckdns.org"]}


indicator: 91.108.241.47
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:16:00.570185
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.47", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.108.241.49
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:16:06.569933
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.49", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.108.241.5
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:16:09.295937
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.5", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.108.241.52
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:16:22.452601
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.52", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.108.241.53
indicator_type: ipv4
source: otx
country: AU
city: Sydney
reverse_dns: free.ivannikoff.ru
queried_at: 2026-05-25T00:16:37.408943
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.53", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["free.ivannikoff.ru"]}


indicator: 91.108.241.54
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:16:39.897061
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.54", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.108.241.56
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:16:42.432968
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.56", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.108.241.57
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:16:44.658053
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.57", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.108.241.58
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:16:46.913728
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.58", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 6, "malware_samples": [], "passive_dns": ["www.elephant.turleo.space", "elephant.turleo.space", "wakapi.turleo.me", "mail.turleo.me", "umami.turleo.me", "xn--80abchcf5dh9aj.xn--p1ai"]}

reverse_dns:
  www.elephant.turleo.space,elephant.turleo.space,wakapi.turleo.me,mail.turleo.me,umami.turleo.me,xn--80abchcf5dh9aj.xn--p1ai


indicator: 91.108.241.62
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:16:49.142759
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.62", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.108.241.65
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:16:51.740269
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.65", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.108.241.68
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:17:08.637138
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.68", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 91.108.241.73
indicator_type: ipv4
source: otx
country: AU
city: Sydney
reverse_dns: portainer.romabutenko.ru
queried_at: 2026-05-25T00:17:13.010605
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.73", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["portainer.romabutenko.ru"]}


indicator: 91.108.241.74
indicator_type: ipv4
source: otx
country: AU
city: Sydney
reverse_dns: pushak2025.top,kavir.fastlyspeed.cfd,shalvarcordi22.sbs,0ta665.click,fastlyspeed.cfd
queried_at: 2026-05-25T00:17:16.038418
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.74", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 5, "malware_samples": [], "passive_dns": ["pushak2025.top", "kavir.fastlyspeed.cfd", "shalvarcordi22.sbs", "0ta665.click", "fastlyspeed.cfd"]}


indicator: 91.108.241.77
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:17:21.645469
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.77", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 6, "malware_samples": [], "passive_dns": ["iloveyoulittlebigbob.ru", "xcasino.homes", "sellmyapache.com", "selemarketing.com", "www.selemarketing.com", "seguromotorista.com"]}

reverse_dns:
  iloveyoulittlebigbob.ru,xcasino.homes,sellmyapache.com,selemarketing.com,www.selemarketing.com,seguromotorista.com


indicator: 91.108.241.83
indicator_type: ipv4
source: otx
country: AU
city: Sydney
reverse_dns: tenchat.pro
queried_at: 2026-05-25T00:17:24.291824
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.83", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["tenchat.pro"]}


indicator: 91.108.241.88
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:17:41.173277
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.88", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 91.108.241.89
indicator_type: ipv4
source: otx
country: AU
city: Sydney
reverse_dns: ssl.hajali.online
queried_at: 2026-05-25T00:17:58.103087
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.89", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["ssl.hajali.online"]}


indicator: 91.108.241.90
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:18:00.187403
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.90", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.108.241.95
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:18:02.886663
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.95", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.108.241.96
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:18:05.313129
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.96", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.108.241.99
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:18:29.795493
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.99", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 91.108.242.102
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-05-25T00:18:32.166489
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.242.102", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 87.121.85.141
indicator_type: ipv4
source: abuseipdb
country: HU
city: 0
hosting_provider: HostingBazis Bt.
queried_at: 2026-05-25T00:18:33.219652
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "HU", "isp": "HostingBazis Bt.", "domain": "hostingbazis.hu", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 37.221.65.141
indicator_type: ipv4
source: abuseipdb
country: MD
city: 0
hosting_provider: ALEXHOST SRL
queried_at: 2026-05-25T00:18:36.940323
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "MD", "isp": "ALEXHOST SRL", "domain": "alexhost.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2021-08-16T07:55:42+00:00", "categories": []}


indicator: 37.221.65.153
indicator_type: ipv4
source: abuseipdb
country: MD
city: 0
hosting_provider: ALEXHOST SRL
queried_at: 2026-05-25T00:18:38.783274
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "MD", "isp": "ALEXHOST SRL", "domain": "alexhost.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-10-23T15:05:19+00:00", "categories": []}


indicator: 37.221.65.115
indicator_type: ipv4
source: abuseipdb
country: MD
city: 1
hosting_provider: ALEXHOST SRL
queried_at: 2026-05-25T00:18:40.660392
raw_data:
  {"abuse_confidence": 0, "total_reports": 1, "is_public": true, "is_tor": false, "country": "MD", "isp": "ALEXHOST SRL", "domain": "alexhost.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-03-30T04:49:55+00:00", "categories": [18, 11, 15]}


indicator: 37.221.65.149
indicator_type: ipv4
source: abuseipdb
country: MD
city: 0
hosting_provider: ALEXHOST SRL
queried_at: 2026-05-25T00:18:44.368167
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "MD", "isp": "ALEXHOST SRL", "domain": "alexhost.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-11-27T00:04:11+00:00", "categories": []}


indicator: 37.221.65.161
indicator_type: ipv4
source: abuseipdb
country: MD
city: 0
hosting_provider: ALEXHOST SRL
queried_at: 2026-05-25T00:18:46.232749
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "MD", "isp": "ALEXHOST SRL", "domain": "alexhost.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2021-10-14T19:51:27+00:00", "categories": []}


indicator: 37.221.65.187
indicator_type: ipv4
source: abuseipdb
country: MD
city: 0
hosting_provider: ALEXHOST SRL
queried_at: 2026-05-25T00:18:48.099836
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "MD", "isp": "ALEXHOST SRL", "domain": "alexhost.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-09-04T04:34:21+00:00", "categories": []}


indicator: 37.221.65.191
indicator_type: ipv4
source: abuseipdb
country: MD
city: 0
hosting_provider: ALEXHOST SRL
queried_at: 2026-05-25T00:18:49.956389
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "MD", "isp": "ALEXHOST SRL", "domain": "alexhost.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-02-04T18:12:58+00:00", "categories": []}


indicator: 37.221.65.192
indicator_type: ipv4
source: abuseipdb
country: MD
city: 0
hosting_provider: ALEXHOST SRL
queried_at: 2026-05-25T00:18:51.823267
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "MD", "isp": "ALEXHOST SRL", "domain": "alexhost.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-10-31T16:37:32+00:00", "categories": []}


indicator: 37.221.65.195
indicator_type: ipv4
source: abuseipdb
country: MD
city: 0
hosting_provider: ALEXHOST SRL
queried_at: 2026-05-25T00:18:53.691706
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "MD", "isp": "ALEXHOST SRL", "domain": "alexhost.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-04-15T14:49:00+00:00", "categories": []}


indicator: 37.221.65.228
indicator_type: ipv4
source: abuseipdb
country: MD
city: 0
hosting_provider: ALEXHOST SRL
queried_at: 2026-05-25T00:18:57.432125
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "MD", "isp": "ALEXHOST SRL", "domain": "alexhost.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-01-09T19:12:41+00:00", "categories": []}


indicator: 37.221.65.77
indicator_type: ipv4
source: abuseipdb
country: MD
city: 0
hosting_provider: ALEXHOST SRL
queried_at: 2026-05-25T00:18:59.291561
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "MD", "isp": "ALEXHOST SRL", "domain": "alexhost.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-01-12T07:02:56+00:00", "categories": []}


indicator: 37.221.65.15
indicator_type: ipv4
source: abuseipdb
country: MD
city: 0
hosting_provider: ALEXHOST SRL
queried_at: 2026-05-25T00:19:04.881081
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "MD", "isp": "ALEXHOST SRL", "domain": "alexhost.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-02-03T14:59:06+00:00", "categories": []}


indicator: 37.221.65.178
indicator_type: ipv4
source: abuseipdb
country: MD
city: 0
hosting_provider: ALEXHOST SRL
queried_at: 2026-05-25T00:19:06.783907
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "MD", "isp": "ALEXHOST SRL", "domain": "alexhost.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-05-08T10:05:35+00:00", "categories": []}


indicator: 37.221.65.7
indicator_type: ipv4
source: abuseipdb
country: MD
city: 0
hosting_provider: ALEXHOST SRL
queried_at: 2026-05-25T00:19:10.542691
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "MD", "isp": "ALEXHOST SRL", "domain": "alexhost.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-07-08T16:47:41+00:00", "categories": []}


indicator: 37.221.65.19
indicator_type: ipv4
source: abuseipdb
country: MD
city: 0
hosting_provider: ALEXHOST SRL
queried_at: 2026-05-25T00:19:12.403841
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "MD", "isp": "ALEXHOST SRL", "domain": "alexhost.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2023-08-04T14:51:20+00:00", "categories": []}


indicator: 37.221.65.23
indicator_type: ipv4
source: abuseipdb
country: MD
city: 2
hosting_provider: ALEXHOST SRL
queried_at: 2026-05-25T00:19:14.255754
raw_data:
  {"abuse_confidence": 0, "total_reports": 2, "is_public": true, "is_tor": false, "country": "MD", "isp": "ALEXHOST SRL", "domain": "alexhost.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-03-23T14:11:51+00:00", "categories": [18, 11, 15]}


indicator: 37.221.65.26
indicator_type: ipv4
source: abuseipdb
country: MD
city: 0
hosting_provider: ALEXHOST SRL
queried_at: 2026-05-25T00:19:16.119374
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "MD", "isp": "ALEXHOST SRL", "domain": "alexhost.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-10-15T18:26:40+00:00", "categories": []}


indicator: 37.221.65.33
indicator_type: ipv4
source: abuseipdb
country: MD
city: 0
hosting_provider: ALEXHOST SRL
queried_at: 2026-05-25T00:19:19.845685
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "MD", "isp": "ALEXHOST SRL", "domain": "alexhost.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-02-07T10:04:25+00:00", "categories": []}


indicator: 37.221.65.34
indicator_type: ipv4
source: abuseipdb
country: MD
city: 0
hosting_provider: ALEXHOST SRL
queried_at: 2026-05-25T00:19:21.721258
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "MD", "isp": "ALEXHOST SRL", "domain": "alexhost.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2022-07-19T20:33:25+00:00", "categories": []}


indicator: 37.221.65.41
indicator_type: ipv4
source: abuseipdb
country: MD
city: 0
hosting_provider: ALEXHOST SRL
queried_at: 2026-05-25T00:19:25.441012
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "MD", "isp": "ALEXHOST SRL", "domain": "alexhost.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2022-07-19T09:44:04+00:00", "categories": []}


indicator: 37.221.65.45
indicator_type: ipv4
source: abuseipdb
country: MD
city: 0
hosting_provider: ALEXHOST SRL
queried_at: 2026-05-25T00:19:27.315726
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "MD", "isp": "ALEXHOST SRL", "domain": "alexhost.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-03-05T19:42:26+00:00", "categories": []}


indicator: 37.221.65.52
indicator_type: ipv4
source: abuseipdb
country: MD
city: 0
hosting_provider: ALEXHOST SRL
queried_at: 2026-05-25T00:19:31.045591
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "MD", "isp": "ALEXHOST SRL", "domain": "alexhost.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2022-02-04T01:03:19+00:00", "categories": []}


indicator: 37.221.65.57
indicator_type: ipv4
source: abuseipdb
country: MD
city: 0
hosting_provider: ALEXHOST SRL
queried_at: 2026-05-25T00:19:36.634757
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "MD", "isp": "ALEXHOST SRL", "domain": "alexhost.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-04-03T12:03:47+00:00", "categories": []}


indicator: 37.221.65.60
indicator_type: ipv4
source: abuseipdb
country: MD
city: 0
hosting_provider: ALEXHOST SRL
queried_at: 2026-05-25T00:19:38.505288
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "MD", "isp": "ALEXHOST SRL", "domain": "alexhost.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-12-01T20:53:48+00:00", "categories": []}


indicator: 37.221.65.69
indicator_type: ipv4
source: abuseipdb
country: MD
city: 0
hosting_provider: ALEXHOST SRL
queried_at: 2026-05-25T00:19:40.403722
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "MD", "isp": "ALEXHOST SRL", "domain": "alexhost.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-11-04T07:10:10+00:00", "categories": []}


indicator: 37.221.65.83
indicator_type: ipv4
source: abuseipdb
country: MD
city: 0
hosting_provider: ALEXHOST SRL
queried_at: 2026-05-25T00:19:45.995449
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "MD", "isp": "ALEXHOST SRL", "domain": "alexhost.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-11-28T01:11:58+00:00", "categories": []}


indicator: 37.221.65.92
indicator_type: ipv4
source: abuseipdb
country: MD
city: 0
hosting_provider: ALEXHOST SRL
queried_at: 2026-05-25T00:19:53.422720
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "MD", "isp": "ALEXHOST SRL", "domain": "alexhost.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-03-23T06:30:14+00:00", "categories": []}


indicator: 37.221.65.94
indicator_type: ipv4
source: abuseipdb
country: MD
city: 0
hosting_provider: ALEXHOST SRL
queried_at: 2026-05-25T00:19:55.262851
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "MD", "isp": "ALEXHOST SRL", "domain": "alexhost.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-12-16T18:59:10+00:00", "categories": []}


indicator: 37.221.65.102
indicator_type: ipv4
source: abuseipdb
country: MD
city: 3
hosting_provider: ALEXHOST SRL
queried_at: 2026-05-25T00:19:58.982703
raw_data:
  {"abuse_confidence": 14, "total_reports": 3, "is_public": true, "is_tor": false, "country": "MD", "isp": "ALEXHOST SRL", "domain": "alexhost.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-04-26T13:35:01+00:00", "categories": [17, 11, 15]}


indicator: 37.221.65.103
indicator_type: ipv4
source: abuseipdb
country: MD
city: 0
hosting_provider: ALEXHOST SRL
queried_at: 2026-05-25T00:20:00.694592
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "MD", "isp": "ALEXHOST SRL", "domain": "alexhost.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-07-26T08:20:44+00:00", "categories": []}


indicator: 37.221.65.105
indicator_type: ipv4
source: abuseipdb
country: MD
city: 0
hosting_provider: ALEXHOST SRL
queried_at: 2026-05-25T00:20:02.768068
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "MD", "isp": "ALEXHOST SRL", "domain": "alexhost.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2023-08-30T00:02:02+00:00", "categories": []}


indicator: 37.221.65.110
indicator_type: ipv4
source: abuseipdb
country: MD
city: 0
hosting_provider: ALEXHOST SRL
queried_at: 2026-05-25T00:20:06.871111
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "MD", "isp": "ALEXHOST SRL", "domain": "alexhost.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-01-30T21:00:15+00:00", "categories": []}


indicator: 37.221.65.117
indicator_type: ipv4
source: abuseipdb
country: MD
city: 0
hosting_provider: ALEXHOST SRL
queried_at: 2026-05-25T00:20:10.628500
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "MD", "isp": "ALEXHOST SRL", "domain": "alexhost.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-10-22T16:55:27+00:00", "categories": []}


indicator: 37.221.65.122
indicator_type: ipv4
source: abuseipdb
country: MD
city: 0
hosting_provider: ALEXHOST SRL
queried_at: 2026-05-25T00:20:12.426046
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "MD", "isp": "ALEXHOST SRL", "domain": "alexhost.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-08-14T05:55:06+00:00", "categories": []}


indicator: 37.221.65.124
indicator_type: ipv4
source: abuseipdb
country: MD
city: 0
hosting_provider: ALEXHOST SRL
queried_at: 2026-05-25T00:20:14.370971
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "MD", "isp": "ALEXHOST SRL", "domain": "alexhost.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-01-30T02:15:31+00:00", "categories": []}


indicator: 37.221.65.126
indicator_type: ipv4
source: abuseipdb
country: MD
city: 0
hosting_provider: ALEXHOST SRL
queried_at: 2026-05-25T00:20:16.306009
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "MD", "isp": "ALEXHOST SRL", "domain": "alexhost.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-07-03T07:02:47+00:00", "categories": []}


indicator: 37.221.65.142
indicator_type: ipv4
source: abuseipdb
country: MD
city: 0
hosting_provider: ALEXHOST SRL
queried_at: 2026-05-25T00:20:18.187221
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "MD", "isp": "ALEXHOST SRL", "domain": "alexhost.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-07-27T08:40:49+00:00", "categories": []}


indicator: 37.221.65.143
indicator_type: ipv4
source: abuseipdb
country: MD
city: 0
hosting_provider: ALEXHOST SRL
queried_at: 2026-05-25T00:20:20.130992
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "MD", "isp": "ALEXHOST SRL", "domain": "alexhost.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-07-04T07:05:05+00:00", "categories": []}


indicator: 37.221.65.150
indicator_type: ipv4
source: abuseipdb
country: MD
city: 0
hosting_provider: ALEXHOST SRL
queried_at: 2026-05-25T00:20:22.102044
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "MD", "isp": "ALEXHOST SRL", "domain": "alexhost.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-09-04T04:33:13+00:00", "categories": []}


indicator: 37.221.65.182
indicator_type: ipv4
source: abuseipdb
country: MD
city: 0
hosting_provider: ALEXHOST SRL
queried_at: 2026-05-25T00:20:29.970942
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "MD", "isp": "ALEXHOST SRL", "domain": "alexhost.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-09-23T16:31:06+00:00", "categories": []}


indicator: 37.221.65.184
indicator_type: ipv4
source: abuseipdb
country: MD
city: 2
hosting_provider: ALEXHOST SRL
queried_at: 2026-05-25T00:20:31.877535
raw_data:
  {"abuse_confidence": 12, "total_reports": 2, "is_public": true, "is_tor": false, "country": "MD", "isp": "ALEXHOST SRL", "domain": "alexhost.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-05-13T08:02:23+00:00", "categories": [18, 22]}


indicator: 37.221.65.185
indicator_type: ipv4
source: abuseipdb
country: MD
city: 0
hosting_provider: ALEXHOST SRL
queried_at: 2026-05-25T00:20:33.817105
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "MD", "isp": "ALEXHOST SRL", "domain": "alexhost.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2023-01-21T19:59:31+00:00", "categories": []}


indicator: 37.221.65.188
indicator_type: ipv4
source: abuseipdb
country: MD
city: 0
hosting_provider: ALEXHOST SRL
queried_at: 2026-05-25T00:20:35.743279
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "MD", "isp": "ALEXHOST SRL", "domain": "alexhost.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-07-15T19:05:28+00:00", "categories": []}


indicator: 37.221.65.193
indicator_type: ipv4
source: abuseipdb
country: MD
city: 0
hosting_provider: ALEXHOST SRL
queried_at: 2026-05-25T00:20:39.509444
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "MD", "isp": "ALEXHOST SRL", "domain": "alexhost.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2021-06-07T13:03:17+00:00", "categories": []}


indicator: 37.221.65.223
indicator_type: ipv4
source: abuseipdb
country: MD
city: 0
hosting_provider: ALEXHOST SRL
queried_at: 2026-05-25T00:20:45.233088
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "MD", "isp": "ALEXHOST SRL", "domain": "alexhost.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-09-16T20:55:13+00:00", "categories": []}


indicator: 37.221.65.235
indicator_type: ipv4
source: abuseipdb
country: MD
city: 0
hosting_provider: ALEXHOST SRL
queried_at: 2026-05-25T00:20:52.848864
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "MD", "isp": "ALEXHOST SRL", "domain": "alexhost.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-02-09T23:13:06+00:00", "categories": []}


indicator: 37.221.65.252
indicator_type: ipv4
source: abuseipdb
country: MD
city: 0
hosting_provider: ALEXHOST SRL
queried_at: 2026-05-25T00:20:58.614821
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "MD", "isp": "ALEXHOST SRL", "domain": "alexhost.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-11-13T13:05:22+00:00", "categories": []}


indicator: 87.121.85.55
indicator_type: ipv4
source: abuseipdb
country: HU
city: 0
hosting_provider: HostingBazis Bt.
queried_at: 2026-05-25T00:21:45.420410
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "HU", "isp": "HostingBazis Bt.", "domain": "hostingbazis.hu", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-03-02T11:41:52+00:00", "categories": []}


indicator: 87.121.84.117
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: Dedicated Servers and VPS Hosting by VPSVAULT.HOST
queried_at: 2026-05-25T00:24:01.978273
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "Dedicated Servers and VPS Hosting by VPSVAULT.HOST", "domain": "vpsvault.host", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-01-05T19:37:32+00:00", "categories": []}


indicator: 87.121.84.127
indicator_type: ipv4
source: abuseipdb
country: NL
city: 94
hosting_provider: Dedicated Servers and VPS Hosting by VPSVAULT.HOST
queried_at: 2026-05-25T00:24:03.836527
raw_data:
  {"abuse_confidence": 50, "total_reports": 94, "is_public": true, "is_tor": false, "country": "NL", "isp": "Dedicated Servers and VPS Hosting by VPSVAULT.HOST", "domain": "vpsvault.host", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-05-01T23:24:51+00:00", "categories": [18, 22, 14]}


indicator: 87.121.84.166
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: Dedicated Servers and VPS Hosting by VPSVAULT.HOST
queried_at: 2026-05-25T00:24:05.594714
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "Dedicated Servers and VPS Hosting by VPSVAULT.HOST", "domain": "vpsvault.host", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-05-06T14:05:46+00:00", "categories": []}


indicator: 87.121.84.18
indicator_type: ipv4
source: abuseipdb
country: NL
city: 954
hosting_provider: Dedicated Servers and VPS Hosting by VPSVAULT.HOST
queried_at: 2026-05-25T00:24:07.473830
raw_data:
  {"abuse_confidence": 100, "total_reports": 954, "is_public": true, "is_tor": false, "country": "NL", "isp": "Dedicated Servers and VPS Hosting by VPSVAULT.HOST", "domain": "vpsvault.host", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-05-24T13:25:22+00:00", "categories": [14, 15, 18, 19, 20, 21, 22]}


indicator: 87.121.84.23
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: Dedicated Servers and VPS Hosting by VPSVAULT.HOST
queried_at: 2026-05-25T00:24:09.281041
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "Dedicated Servers and VPS Hosting by VPSVAULT.HOST", "domain": "vpsvault.host", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-11-09T00:29:02+00:00", "categories": []}


indicator: 87.121.84.253
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: Dedicated Servers and VPS Hosting by VPSVAULT.HOST
queried_at: 2026-05-25T00:24:11.042350
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "Dedicated Servers and VPS Hosting by VPSVAULT.HOST", "domain": "vpsvault.host", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 87.121.84.26
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: Dedicated Servers and VPS Hosting by VPSVAULT.HOST
queried_at: 2026-05-25T00:24:12.788752
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "Dedicated Servers and VPS Hosting by VPSVAULT.HOST", "domain": "vpsvault.host", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-07-15T02:00:18+00:00", "categories": []}


indicator: 87.121.84.29
indicator_type: ipv4
source: abuseipdb
country: NL
city: 5
hosting_provider: Dedicated Servers and VPS Hosting by VPSVAULT.HOST
queried_at: 2026-05-25T00:24:14.501212
raw_data:
  {"abuse_confidence": 0, "total_reports": 5, "is_public": true, "is_tor": false, "country": "NL", "isp": "Dedicated Servers and VPS Hosting by VPSVAULT.HOST", "domain": "vpsvault.host", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-05-05T02:05:10+00:00", "categories": [18, 22]}


indicator: 87.121.84.38
indicator_type: ipv4
source: abuseipdb
country: NL
city: 16
hosting_provider: Dedicated Servers and VPS Hosting by VPSVAULT.HOST
queried_at: 2026-05-25T00:24:16.227158
raw_data:
  {"abuse_confidence": 43, "total_reports": 16, "is_public": true, "is_tor": false, "country": "NL", "isp": "Dedicated Servers and VPS Hosting by VPSVAULT.HOST", "domain": "vpsvault.host", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-05-12T11:33:29+00:00", "categories": [18, 14, 22]}


indicator: 87.121.84.47
indicator_type: ipv4
source: abuseipdb
country: NL
city: 396
hosting_provider: Dedicated Servers and VPS Hosting by VPSVAULT.HOST
queried_at: 2026-05-25T00:24:18.044887
raw_data:
  {"abuse_confidence": 79, "total_reports": 396, "is_public": true, "is_tor": false, "country": "NL", "isp": "Dedicated Servers and VPS Hosting by VPSVAULT.HOST", "domain": "vpsvault.host", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-05-20T12:32:13+00:00", "categories": [4, 6, 11, 14, 15, 18, 21, 22]}


indicator: 87.121.84.83
indicator_type: ipv4
source: abuseipdb
country: NL
city: 135
hosting_provider: Dedicated Servers and VPS Hosting by VPSVAULT.HOST
queried_at: 2026-05-25T00:24:19.882960
raw_data:
  {"abuse_confidence": 50, "total_reports": 135, "is_public": true, "is_tor": false, "country": "NL", "isp": "Dedicated Servers and VPS Hosting by VPSVAULT.HOST", "domain": "vpsvault.host", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-05-01T10:45:06+00:00", "categories": [14, 15, 18, 19, 21, 22]}


indicator: 87.121.84.84
indicator_type: ipv4
source: abuseipdb
country: NL
city: 137
hosting_provider: Dedicated Servers and VPS Hosting by VPSVAULT.HOST
queried_at: 2026-05-25T00:24:21.836274
raw_data:
  {"abuse_confidence": 46, "total_reports": 137, "is_public": true, "is_tor": false, "country": "NL", "isp": "Dedicated Servers and VPS Hosting by VPSVAULT.HOST", "domain": "vpsvault.host", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-05-21T06:08:27+00:00", "categories": [9, 14, 15, 20, 21, 22]}


indicator: 87.121.84.86
indicator_type: ipv4
source: abuseipdb
country: NL
city: 1427
hosting_provider: Dedicated Servers and VPS Hosting by VPSVAULT.HOST
queried_at: 2026-05-25T00:24:23.676051
raw_data:
  {"abuse_confidence": 100, "total_reports": 1427, "is_public": true, "is_tor": false, "country": "NL", "isp": "Dedicated Servers and VPS Hosting by VPSVAULT.HOST", "domain": "vpsvault.host", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-05-22T14:06:08+00:00", "categories": [4, 6, 14, 15, 18, 20, 21, 22]}


indicator: 87.121.84.150
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: Dedicated Servers and VPS Hosting by VPSVAULT.HOST
queried_at: 2026-05-25T00:24:25.425061
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "Dedicated Servers and VPS Hosting by VPSVAULT.HOST", "domain": "vpsvault.host", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-11-10T04:23:19+00:00", "categories": []}


indicator: 87.121.84.62
indicator_type: ipv4
source: abuseipdb
country: NL
city: 468
hosting_provider: Dedicated Servers and VPS Hosting by VPSVAULT.HOST
queried_at: 2026-05-25T00:24:27.255581
raw_data:
  {"abuse_confidence": 100, "total_reports": 468, "is_public": true, "is_tor": false, "country": "NL", "isp": "Dedicated Servers and VPS Hosting by VPSVAULT.HOST", "domain": "vpsvault.host", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-04-26T09:17:44+00:00", "categories": [4, 10, 12, 14, 15, 18, 19, 20, 21, 22]}


indicator: 87.121.84.8
indicator_type: ipv4
source: abuseipdb
country: NL
city: 1012
hosting_provider: Dedicated Servers and VPS Hosting by VPSVAULT.HOST
queried_at: 2026-05-25T00:24:29.159021
raw_data:
  {"abuse_confidence": 100, "total_reports": 1012, "is_public": true, "is_tor": false, "country": "NL", "isp": "Dedicated Servers and VPS Hosting by VPSVAULT.HOST", "domain": "vpsvault.host", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-05-24T01:27:48+00:00", "categories": [14, 15, 18, 19, 20, 21, 22]}


indicator: 87.121.84.53
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: Dedicated Servers and VPS Hosting by VPSVAULT.HOST
queried_at: 2026-05-25T00:24:30.945905
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "Dedicated Servers and VPS Hosting by VPSVAULT.HOST", "domain": "vpsvault.host", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-08-29T03:02:47+00:00", "categories": []}


indicator: 185.220.100.141
indicator_type: ipv4
source: abuseipdb
country: DE
city: 0
hosting_provider: F3 Netze e.V.
queried_at: 2026-05-25T00:24:32.819812
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "DE", "isp": "F3 Netze e.V.", "domain": "f3netze.de", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 87.121.83.30
indicator_type: ipv4
source: abuseipdb
country: BG
city: 0
hosting_provider: Neterra Rousse PoP infra
queried_at: 2026-05-25T00:24:34.686240
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "BG", "isp": "Neterra Rousse PoP infra", "domain": "neterra.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 87.121.83.81
indicator_type: ipv4
source: abuseipdb
country: BG
city: 0
hosting_provider: Neterra Ltd.
queried_at: 2026-05-25T00:24:36.558033
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "BG", "isp": "Neterra Ltd.", "domain": "neterra.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 196.251.71.71
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: internet-security-cheapyhost
queried_at: 2026-05-25T00:24:38.300800
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "internet-security-cheapyhost", "domain": "cheapy.host", "usage_type": null, "last_reported": null, "categories": []}


indicator: 91.103.140.107
indicator_type: ipv4
source: abuseipdb
country: DE
city: 0
hosting_provider: AEZA GROUP LLC
queried_at: 2026-05-25T00:24:43.549192
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "DE", "isp": "AEZA GROUP LLC", "domain": "aeza.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-08-16T04:10:08+00:00", "categories": []}


indicator: 91.103.140.203
indicator_type: ipv4
source: abuseipdb
country: FI
city: 0
hosting_provider: AEZA GROUP LLC
queried_at: 2026-05-25T00:25:53.622959
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "FI", "isp": "AEZA GROUP LLC", "domain": "aeza.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 91.103.140.204
indicator_type: ipv4
source: abuseipdb
country: DE
city: 0
hosting_provider: AEZA GROUP LLC
queried_at: 2026-05-25T00:25:55.375145
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "DE", "isp": "AEZA GROUP LLC", "domain": "aeza.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-08-26T13:16:41+00:00", "categories": []}


indicator: 87.121.85.141
indicator_type: ipv4
source: virustotal
country: HU
hosting_provider: HostingBazis Beteti Tarsasag
queried_at: 2026-05-25T00:26:13.409393
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "HU", "as_owner": "HostingBazis Beteti Tarsasag", "asn": 215904, "network": "87.121.85.0/24", "last_analysis_date": 1767743331}


indicator: 87.121.85.73
indicator_type: ipv4
source: virustotal
country: HU
hosting_provider: HostingBazis Beteti Tarsasag
queried_at: 2026-05-25T00:26:34.237214
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "HU", "as_owner": "HostingBazis Beteti Tarsasag", "asn": 215904, "network": "87.121.85.0/24", "last_analysis_date": 1775899583}


indicator: 37.221.65.141
indicator_type: ipv4
source: virustotal
country: MD
hosting_provider: Alexhost Srl
queried_at: 2026-05-25T00:26:59.724468
raw_data:
  {"malicious": 1, "suspicious": 0, "harmless": 55, "undetected": 35, "reputation": 0, "country": "MD", "as_owner": "Alexhost Srl", "asn": 200019, "network": "37.221.64.0/23", "last_analysis_date": 1778608662}


indicator: 37.221.65.153
indicator_type: ipv4
source: virustotal
country: MD
hosting_provider: Alexhost Srl
queried_at: 2026-05-25T00:27:20.189405
raw_data:
  {"malicious": 0, "suspicious": 1, "harmless": 54, "undetected": 36, "reputation": 0, "country": "MD", "as_owner": "Alexhost Srl", "asn": 200019, "network": "37.221.64.0/23", "last_analysis_date": 1773989888}


indicator: 37.221.65.115
indicator_type: ipv4
source: virustotal
country: MD
hosting_provider: Alexhost Srl
queried_at: 2026-05-25T00:27:40.775645
raw_data:
  {"malicious": 2, "suspicious": 0, "harmless": 53, "undetected": 36, "reputation": 0, "country": "MD", "as_owner": "Alexhost Srl", "asn": 200019, "network": "37.221.64.0/23", "last_analysis_date": 1775347061}


indicator: 37.221.65.134
indicator_type: ipv4
source: virustotal
country: MD
hosting_provider: Alexhost Srl
queried_at: 2026-05-25T00:28:01.224626
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "MD", "as_owner": "Alexhost Srl", "asn": 200019, "network": "37.221.64.0/23", "last_analysis_date": 1740617929}


indicator: 37.221.65.149
indicator_type: ipv4
source: virustotal
country: MD
hosting_provider: Alexhost Srl
queried_at: 2026-05-25T00:28:21.675407
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "MD", "as_owner": "Alexhost Srl", "asn": 200019, "network": "37.221.64.0/23", "last_analysis_date": 1668966469}


indicator: 37.221.65.161
indicator_type: ipv4
source: virustotal
country: MD
hosting_provider: Alexhost Srl
queried_at: 2026-05-25T00:28:42.376520
raw_data:
  {"malicious": 4, "suspicious": 0, "harmless": 52, "undetected": 35, "reputation": 0, "country": "MD", "as_owner": "Alexhost Srl", "asn": 200019, "network": "37.221.64.0/23", "last_analysis_date": 1779181114}


indicator: 37.221.65.187
indicator_type: ipv4
source: virustotal
country: MD
hosting_provider: Alexhost Srl
queried_at: 2026-05-25T00:29:03.302936
raw_data:
  {"malicious": 3, "suspicious": 0, "harmless": 54, "undetected": 34, "reputation": 0, "country": "MD", "as_owner": "Alexhost Srl", "asn": 200019, "network": "37.221.64.0/23", "last_analysis_date": 1759444398}


indicator: 37.221.65.191
indicator_type: ipv4
source: virustotal
country: MD
hosting_provider: Alexhost Srl
queried_at: 2026-05-25T00:29:24.024548
raw_data:
  {"malicious": 0, "suspicious": 2, "harmless": 52, "undetected": 37, "reputation": 0, "country": "MD", "as_owner": "Alexhost Srl", "asn": 200019, "network": "37.221.64.0/23", "last_analysis_date": 1770220798}


indicator: 37.221.65.192
indicator_type: ipv4
source: virustotal
country: MD
hosting_provider: Alexhost Srl
queried_at: 2026-05-25T00:29:44.482202
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "MD", "as_owner": "Alexhost Srl", "asn": 200019, "network": "37.221.64.0/23", "last_analysis_date": 1726396306}


indicator: 37.221.65.195
indicator_type: ipv4
source: virustotal
country: MD
hosting_provider: Alexhost Srl
queried_at: 2026-05-25T00:30:05.209501
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "MD", "as_owner": "Alexhost Srl", "asn": 200019, "network": "37.221.64.0/23", "last_analysis_date": 1744796204}


indicator: 37.221.65.198
indicator_type: ipv4
source: virustotal
country: MD
hosting_provider: Alexhost Srl
queried_at: 2026-05-25T00:30:25.767847
raw_data:
  {"malicious": 0, "suspicious": 2, "harmless": 54, "undetected": 35, "reputation": 0, "country": "MD", "as_owner": "Alexhost Srl", "asn": 200019, "network": "37.221.64.0/23", "last_analysis_date": 1775635646}


indicator: 37.221.65.228
indicator_type: ipv4
source: virustotal
country: MD
hosting_provider: Alexhost Srl
queried_at: 2026-05-25T00:30:46.410539
raw_data:
  {"malicious": 11, "suspicious": 0, "harmless": 44, "undetected": 36, "reputation": 0, "country": "MD", "as_owner": "Alexhost Srl", "asn": 200019, "network": "37.221.64.0/23", "last_analysis_date": 1773777515}


indicator: 37.221.65.77
indicator_type: ipv4
source: virustotal
country: MD
hosting_provider: Alexhost Srl
queried_at: 2026-05-25T00:31:07.077231
raw_data:
  {"malicious": 10, "suspicious": 0, "harmless": 44, "undetected": 37, "reputation": 0, "country": "MD", "as_owner": "Alexhost Srl", "asn": 200019, "network": "37.221.64.0/23", "last_analysis_date": 1772373528}


indicator: 37.221.65.84
indicator_type: ipv4
source: virustotal
country: MD
hosting_provider: Alexhost Srl
queried_at: 2026-05-25T00:31:27.583480
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 53, "undetected": 38, "reputation": 0, "country": "MD", "as_owner": "Alexhost Srl", "asn": 200019, "network": "37.221.64.0/23", "last_analysis_date": 1773872499}


indicator: 37.221.65.128
indicator_type: ipv4
source: virustotal
country: MD
hosting_provider: Alexhost Srl
queried_at: 2026-05-25T00:31:48.228357
raw_data:
  {"malicious": 8, "suspicious": 0, "harmless": 49, "undetected": 34, "reputation": 0, "country": "MD", "as_owner": "Alexhost Srl", "asn": 200019, "network": "37.221.64.0/23", "last_analysis_date": 1778230701}


indicator: 37.221.65.15
indicator_type: ipv4
source: virustotal
country: MD
hosting_provider: Alexhost Srl
queried_at: 2026-05-25T00:32:08.831439
raw_data:
  {"malicious": 2, "suspicious": 0, "harmless": 53, "undetected": 36, "reputation": 0, "country": "MD", "as_owner": "Alexhost Srl", "asn": 200019, "network": "37.221.64.0/23", "last_analysis_date": 1774511918}


indicator: 37.221.65.178
indicator_type: ipv4
source: virustotal
country: MD
hosting_provider: Alexhost Srl
queried_at: 2026-05-25T00:32:29.584700
raw_data:
  {"malicious": 8, "suspicious": 0, "harmless": 46, "undetected": 37, "reputation": 0, "country": "MD", "as_owner": "Alexhost Srl", "asn": 200019, "network": "37.221.64.0/23", "last_analysis_date": 1778980537}


indicator: 37.221.65.6
indicator_type: ipv4
source: virustotal
country: MD
hosting_provider: Alexhost Srl
queried_at: 2026-05-25T00:32:50.095519
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 47, "undetected": 44, "reputation": 0, "country": "MD", "as_owner": "Alexhost Srl", "asn": 200019, "network": "37.221.64.0/23", "last_analysis_date": ""}


indicator: 37.221.65.7
indicator_type: ipv4
source: virustotal
country: MD
hosting_provider: Alexhost Srl
queried_at: 2026-05-25T00:33:10.658449
raw_data:
  {"malicious": 2, "suspicious": 1, "harmless": 53, "undetected": 35, "reputation": 0, "country": "MD", "as_owner": "Alexhost Srl", "asn": 200019, "network": "37.221.64.0/23", "last_analysis_date": 1778443069}


indicator: 37.221.65.19
indicator_type: ipv4
source: virustotal
country: MD
hosting_provider: Alexhost Srl
queried_at: 2026-05-25T00:33:31.131495
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 53, "undetected": 38, "reputation": -1, "country": "MD", "as_owner": "Alexhost Srl", "asn": 200019, "network": "37.221.64.0/23", "last_analysis_date": 1770314286}


indicator: 37.221.65.23
indicator_type: ipv4
source: virustotal
country: MD
hosting_provider: Alexhost Srl
queried_at: 2026-05-25T00:33:51.621951
raw_data:
  {"malicious": 8, "suspicious": 1, "harmless": 47, "undetected": 35, "reputation": 0, "country": "MD", "as_owner": "Alexhost Srl", "asn": 200019, "network": "37.221.64.0/23", "last_analysis_date": 1778954621}


indicator: 37.221.65.26
indicator_type: ipv4
source: virustotal
country: MD
hosting_provider: Alexhost Srl
queried_at: 2026-05-25T00:34:12.144881
raw_data:
  {"malicious": 0, "suspicious": 1, "harmless": 54, "undetected": 36, "reputation": 0, "country": "MD", "as_owner": "Alexhost Srl", "asn": 200019, "network": "37.221.64.0/23", "last_analysis_date": 1777877477}


indicator: 37.221.65.31
indicator_type: ipv4
source: virustotal
country: MD
hosting_provider: Alexhost Srl
queried_at: 2026-05-25T00:34:32.579413
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "MD", "as_owner": "Alexhost Srl", "asn": 200019, "network": "37.221.64.0/23", "last_analysis_date": 1778384972}


indicator: 91.108.241.20
indicator_type: ipv4
source: otx
country: AU
city: Sydney
reverse_dns: ashford-core.top,odinsv.shop
queried_at: 2026-05-25T06:01:10.212647
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS213296 sia singularity telecom", "indicator": "91.108.241.20", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["ashford-core.top", "odinsv.shop"]}


indicator: 91.103.140.231
indicator_type: ipv4
source: abuseipdb
country: DE
city: 0
hosting_provider: AEZA GROUP LLC
queried_at: 2026-05-25T06:01:17.852798
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "DE", "isp": "AEZA GROUP LLC", "domain": "aeza.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-02-05T05:11:35+00:00", "categories": []}


indicator: 91.103.140.42
indicator_type: ipv4
source: abuseipdb
country: DE
city: 0
hosting_provider: AEZA GROUP LLC
queried_at: 2026-05-25T06:01:48.546980
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "DE", "isp": "AEZA GROUP LLC", "domain": "aeza.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-10-23T06:35:54+00:00", "categories": []}


indicator: 91.103.140.228
indicator_type: ipv4
source: virustotal
country: FI
hosting_provider: Aeza Group LLC
queried_at: 2026-05-25T06:09:08.962806
raw_data:
  {"malicious": 0, "suspicious": 1, "harmless": 54, "undetected": 36, "reputation": 0, "country": "FI", "as_owner": "Aeza Group LLC", "asn": 210644, "network": "91.103.140.0/24", "last_analysis_date": 1778756529}


indicator: 91.103.140.229
indicator_type: ipv4
source: virustotal
country: FI
hosting_provider: Aeza Group LLC
queried_at: 2026-05-25T06:09:29.574758
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "FI", "as_owner": "Aeza Group LLC", "asn": 210644, "network": "91.103.140.0/24", "last_analysis_date": 1777395749}


indicator: 91.103.140.23
indicator_type: ipv4
source: virustotal
country: FI
hosting_provider: Aeza Group LLC
queried_at: 2026-05-25T06:09:50.020762
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "FI", "as_owner": "Aeza Group LLC", "asn": 210644, "network": "91.103.140.0/24", "last_analysis_date": 1731758829}


indicator: 91.103.140.231
indicator_type: ipv4
source: virustotal
country: FI
hosting_provider: Aeza Group LLC
queried_at: 2026-05-25T06:10:10.803055
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "FI", "as_owner": "Aeza Group LLC", "asn": 210644, "network": "91.103.140.0/24", "last_analysis_date": 1759238984}


indicator: 91.103.140.233
indicator_type: ipv4
source: virustotal
country: FI
hosting_provider: Aeza Group LLC
queried_at: 2026-05-25T06:10:31.366127
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "FI", "as_owner": "Aeza Group LLC", "asn": 210644, "network": "91.103.140.0/24", "last_analysis_date": 1777750505}


indicator: 91.103.140.237
indicator_type: ipv4
source: virustotal
country: FI
hosting_provider: Aeza Group LLC
queried_at: 2026-05-25T06:10:51.963572
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "FI", "as_owner": "Aeza Group LLC", "asn": 210644, "network": "91.103.140.0/24", "last_analysis_date": 1679701855}


indicator: 91.103.140.24
indicator_type: ipv4
source: virustotal
country: FI
hosting_provider: Aeza Group LLC
queried_at: 2026-05-25T06:11:12.493544
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 54, "undetected": 37, "reputation": 0, "country": "FI", "as_owner": "Aeza Group LLC", "asn": 210644, "network": "91.103.140.0/24", "last_analysis_date": 1731908874}


indicator: 91.103.140.240
indicator_type: ipv4
source: virustotal
country: FI
hosting_provider: Aeza Group LLC
queried_at: 2026-05-25T06:11:32.984370
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "FI", "as_owner": "Aeza Group LLC", "asn": 210644, "network": "91.103.140.0/24", "last_analysis_date": 1777549715}


indicator: 91.103.140.249
indicator_type: ipv4
source: virustotal
country: FI
hosting_provider: Aeza Group LLC
queried_at: 2026-05-25T06:11:53.405176
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "FI", "as_owner": "Aeza Group LLC", "asn": 210644, "network": "91.103.140.0/24", "last_analysis_date": 1742944819}


indicator: 91.103.140.250
indicator_type: ipv4
source: virustotal
country: FI
hosting_provider: Aeza Group LLC
queried_at: 2026-05-25T06:12:13.865864
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "FI", "as_owner": "Aeza Group LLC", "asn": 210644, "network": "91.103.140.0/24", "last_analysis_date": 1771839218}


indicator: 91.103.140.252
indicator_type: ipv4
source: virustotal
country: FI
hosting_provider: Aeza Group LLC
queried_at: 2026-05-25T06:12:34.332084
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "FI", "as_owner": "Aeza Group LLC", "asn": 210644, "network": "91.103.140.0/24", "last_analysis_date": 1768363538}


indicator: 91.103.140.254
indicator_type: ipv4
source: virustotal
country: FI
hosting_provider: Aeza Group LLC
queried_at: 2026-05-25T06:12:54.774028
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "FI", "as_owner": "Aeza Group LLC", "asn": 210644, "network": "91.103.140.0/24", "last_analysis_date": 1724991966}


indicator: 91.103.140.27
indicator_type: ipv4
source: virustotal
country: FI
hosting_provider: Aeza Group LLC
queried_at: 2026-05-25T06:13:15.263507
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "FI", "as_owner": "Aeza Group LLC", "asn": 210644, "network": "91.103.140.0/24", "last_analysis_date": 1754512989}


indicator: 91.103.140.3
indicator_type: ipv4
source: virustotal
country: FI
hosting_provider: Aeza Group LLC
queried_at: 2026-05-25T06:13:35.754747
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "FI", "as_owner": "Aeza Group LLC", "asn": 210644, "network": "91.103.140.0/24", "last_analysis_date": 1777467954}


indicator: 91.103.140.31
indicator_type: ipv4
source: virustotal
country: FI
hosting_provider: Aeza Group LLC
queried_at: 2026-05-25T06:13:56.267805
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "FI", "as_owner": "Aeza Group LLC", "asn": 210644, "network": "91.103.140.0/24", "last_analysis_date": ""}


indicator: 91.103.140.32
indicator_type: ipv4
source: virustotal
country: FI
hosting_provider: Aeza Group LLC
queried_at: 2026-05-25T06:14:16.775571
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "FI", "as_owner": "Aeza Group LLC", "asn": 210644, "network": "91.103.140.0/24", "last_analysis_date": 1779069007}


indicator: 91.103.140.34
indicator_type: ipv4
source: virustotal
country: FI
hosting_provider: Aeza Group LLC
queried_at: 2026-05-25T06:14:37.316375
raw_data:
  {"malicious": 1, "suspicious": 0, "harmless": 53, "undetected": 37, "reputation": 0, "country": "FI", "as_owner": "Aeza Group LLC", "asn": 210644, "network": "91.103.140.0/24", "last_analysis_date": 1775675127}


indicator: 91.103.140.36
indicator_type: ipv4
source: virustotal
country: FI
hosting_provider: Aeza Group LLC
queried_at: 2026-05-25T06:14:57.853312
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "FI", "as_owner": "Aeza Group LLC", "asn": 210644, "network": "91.103.140.0/24", "last_analysis_date": 1779508685}


indicator: 91.103.140.39
indicator_type: ipv4
source: virustotal
country: FI
hosting_provider: Aeza Group LLC
queried_at: 2026-05-25T06:15:18.367770
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "FI", "as_owner": "Aeza Group LLC", "asn": 210644, "network": "91.103.140.0/24", "last_analysis_date": 1774298037}


indicator: 91.103.140.40
indicator_type: ipv4
source: virustotal
country: FI
hosting_provider: Aeza Group LLC
queried_at: 2026-05-25T06:15:38.932279
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "FI", "as_owner": "Aeza Group LLC", "asn": 210644, "network": "91.103.140.0/24", "last_analysis_date": 1760334302}


indicator: 91.103.140.42
indicator_type: ipv4
source: virustotal
country: FI
hosting_provider: Aeza Group LLC
queried_at: 2026-05-25T06:15:59.489198
raw_data:
  {"malicious": 3, "suspicious": 0, "harmless": 53, "undetected": 35, "reputation": -3, "country": "FI", "as_owner": "Aeza Group LLC", "asn": 210644, "network": "91.103.140.0/24", "last_analysis_date": 1774364432}


indicator: 91.103.140.44
indicator_type: ipv4
source: virustotal
country: FI
hosting_provider: Aeza Group LLC
queried_at: 2026-05-25T06:16:19.984237
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 54, "undetected": 37, "reputation": 0, "country": "FI", "as_owner": "Aeza Group LLC", "asn": 210644, "network": "91.103.140.0/24", "last_analysis_date": 1775318026}


indicator: 91.103.140.49
indicator_type: ipv4
source: virustotal
country: FI
hosting_provider: Aeza Group LLC
queried_at: 2026-05-25T06:16:40.535970
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "FI", "as_owner": "Aeza Group LLC", "asn": 210644, "network": "91.103.140.0/24", "last_analysis_date": 1761135237}


indicator: 91.103.140.5
indicator_type: ipv4
source: virustotal
country: FI
hosting_provider: Aeza Group LLC
queried_at: 2026-05-25T06:17:01.059108
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "FI", "as_owner": "Aeza Group LLC", "asn": 210644, "network": "91.103.140.0/24", "last_analysis_date": 1768220368}


indicator: 91.103.140.50
indicator_type: ipv4
source: virustotal
country: FI
hosting_provider: Aeza Group LLC
queried_at: 2026-05-25T06:17:21.684951
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "FI", "as_owner": "Aeza Group LLC", "asn": 210644, "network": "91.103.140.0/24", "last_analysis_date": 1776489669}


indicator: 91.103.140.52
indicator_type: ipv4
source: virustotal
country: FI
hosting_provider: Aeza Group LLC
queried_at: 2026-05-25T06:17:42.411354
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "FI", "as_owner": "Aeza Group LLC", "asn": 210644, "network": "91.103.140.0/24", "last_analysis_date": 1760890638}


indicator: 91.103.140.57
indicator_type: ipv4
source: virustotal
country: FI
hosting_provider: Aeza Group LLC
queried_at: 2026-05-25T06:18:02.957690
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "FI", "as_owner": "Aeza Group LLC", "asn": 210644, "network": "91.103.140.0/24", "last_analysis_date": 1723816737}


indicator: 91.103.140.6
indicator_type: ipv4
source: virustotal
country: FI
hosting_provider: Aeza Group LLC
queried_at: 2026-05-25T06:18:23.763159
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "FI", "as_owner": "Aeza Group LLC", "asn": 210644, "network": "91.103.140.0/24", "last_analysis_date": 1777470134}


indicator: 91.103.140.61
indicator_type: ipv4
source: virustotal
country: FI
hosting_provider: Aeza Group LLC
queried_at: 2026-05-25T06:18:44.270001
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "FI", "as_owner": "Aeza Group LLC", "asn": 210644, "network": "91.103.140.0/24", "last_analysis_date": 1764587929}


indicator: 91.103.140.63
indicator_type: ipv4
source: virustotal
country: FI
hosting_provider: Aeza Group LLC
queried_at: 2026-05-25T06:19:04.825595
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "FI", "as_owner": "Aeza Group LLC", "asn": 210644, "network": "91.103.140.0/24", "last_analysis_date": 1777367202}


indicator: 91.103.140.67
indicator_type: ipv4
source: virustotal
country: FI
hosting_provider: Aeza Group LLC
queried_at: 2026-05-25T06:19:45.844610
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "FI", "as_owner": "Aeza Group LLC", "asn": 210644, "network": "91.103.140.0/24", "last_analysis_date": 1748254556}


indicator: 91.103.140.7
indicator_type: ipv4
source: virustotal
country: FI
hosting_provider: Aeza Group LLC
queried_at: 2026-05-25T06:20:06.591398
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "FI", "as_owner": "Aeza Group LLC", "asn": 210644, "network": "91.103.140.0/24", "last_analysis_date": 1775042551}


indicator: 91.103.140.71
indicator_type: ipv4
source: virustotal
country: FI
hosting_provider: Aeza Group LLC
queried_at: 2026-05-25T06:20:47.957811
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "FI", "as_owner": "Aeza Group LLC", "asn": 210644, "network": "91.103.140.0/24", "last_analysis_date": 1755971239}


indicator: 91.103.140.75
indicator_type: ipv4
source: virustotal
country: FI
hosting_provider: Aeza Group LLC
queried_at: 2026-05-25T06:21:08.423236
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "FI", "as_owner": "Aeza Group LLC", "asn": 210644, "network": "91.103.140.0/24", "last_analysis_date": 1755154818}


indicator: 91.103.140.77
indicator_type: ipv4
source: virustotal
country: FI
hosting_provider: Aeza Group LLC
queried_at: 2026-05-25T06:21:28.924883
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "FI", "as_owner": "Aeza Group LLC", "asn": 210644, "network": "91.103.140.0/24", "last_analysis_date": 1760395968}


indicator: 91.103.140.78
indicator_type: ipv4
source: virustotal
country: FI
hosting_provider: Aeza Group LLC
queried_at: 2026-05-25T06:21:49.447956
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "FI", "as_owner": "Aeza Group LLC", "asn": 210644, "network": "91.103.140.0/24", "last_analysis_date": 1724011382}


indicator: 91.103.140.8
indicator_type: ipv4
source: virustotal
country: FI
hosting_provider: Aeza Group LLC
queried_at: 2026-05-25T06:22:10.076979
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "FI", "as_owner": "Aeza Group LLC", "asn": 210644, "network": "91.103.140.0/24", "last_analysis_date": 1765405792}


indicator: 91.103.140.80
indicator_type: ipv4
source: virustotal
country: FI
hosting_provider: Aeza Group LLC
queried_at: 2026-05-25T06:22:30.580976
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "FI", "as_owner": "Aeza Group LLC", "asn": 210644, "network": "91.103.140.0/24", "last_analysis_date": 1779389678}


indicator: 91.103.140.87
indicator_type: ipv4
source: virustotal
country: FI
hosting_provider: Aeza Group LLC
queried_at: 2026-05-25T06:22:51.116799
raw_data:
  {"malicious": 4, "suspicious": 1, "harmless": 51, "undetected": 35, "reputation": 0, "country": "FI", "as_owner": "Aeza Group LLC", "asn": 210644, "network": "91.103.140.0/24", "last_analysis_date": 1775026686}


indicator: 91.103.140.89
indicator_type: ipv4
source: virustotal
country: FI
hosting_provider: Aeza Group LLC
queried_at: 2026-05-25T06:23:11.638595
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 55, "undetected": 36, "reputation": 0, "country": "FI", "as_owner": "Aeza Group LLC", "asn": 210644, "network": "91.103.140.0/24", "last_analysis_date": 1756983673}


indicator: 91.103.140.9
indicator_type: ipv4
source: virustotal
country: FI
hosting_provider: Aeza Group LLC
queried_at: 2026-05-25T06:23:32.161568
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "FI", "as_owner": "Aeza Group LLC", "asn": 210644, "network": "91.103.140.0/24", "last_analysis_date": 1760708605}


indicator: 91.103.140.90
indicator_type: ipv4
source: virustotal
country: FI
hosting_provider: Aeza Group LLC
queried_at: 2026-05-25T06:23:52.645010
raw_data:
  {"malicious": 6, "suspicious": 5, "harmless": 49, "undetected": 31, "reputation": 0, "country": "FI", "as_owner": "Aeza Group LLC", "asn": 210644, "network": "91.103.140.0/24", "last_analysis_date": 1775597132}


indicator: 91.103.140.91
indicator_type: ipv4
source: virustotal
country: FI
hosting_provider: Aeza Group LLC
queried_at: 2026-05-25T06:24:13.143250
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "FI", "as_owner": "Aeza Group LLC", "asn": 210644, "network": "91.103.140.0/24", "last_analysis_date": 1778949311}


indicator: 91.103.140.94
indicator_type: ipv4
source: virustotal
country: FI
hosting_provider: Aeza Group LLC
queried_at: 2026-05-25T06:24:33.639847
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "FI", "as_owner": "Aeza Group LLC", "asn": 210644, "network": "91.103.140.0/24", "last_analysis_date": 1725489442}


indicator: 91.103.140.95
indicator_type: ipv4
source: virustotal
country: FI
hosting_provider: Aeza Group LLC
queried_at: 2026-05-25T06:24:54.161753
raw_data:
  {"malicious": 0, "suspicious": 1, "harmless": 54, "undetected": 36, "reputation": 0, "country": "FI", "as_owner": "Aeza Group LLC", "asn": 210644, "network": "91.103.140.0/24", "last_analysis_date": 1778824023}


indicator: 91.103.252.101
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T06:25:35.268856
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": ""}


indicator: 91.103.252.108
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T06:25:55.796267
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1730011937}


indicator: 91.103.252.111
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T06:26:16.425120
raw_data:
  {"malicious": 1, "suspicious": 0, "harmless": 54, "undetected": 36, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1773421224}


indicator: 91.103.252.114
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T06:26:36.987295
raw_data:
  {"malicious": 13, "suspicious": 0, "harmless": 45, "undetected": 33, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1778652244}


indicator: 91.103.252.115
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T06:26:57.553135
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1728775973}


indicator: 91.103.252.116
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T06:27:18.059956
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1728795967}


indicator: 91.103.252.117
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T06:27:38.558762
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1754107719}


indicator: 91.103.252.120
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T06:27:59.210497
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1741807925}


indicator: 91.103.252.129
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T06:29:00.777249
raw_data:
  {"malicious": 1, "suspicious": 1, "harmless": 54, "undetected": 35, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1779008500}


indicator: 91.103.252.131
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T06:29:21.296444
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1749461990}


indicator: 91.103.252.134
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T06:29:41.894067
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1756122328}


indicator: 91.103.252.143
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T06:30:23.110605
raw_data:
  {"malicious": 4, "suspicious": 1, "harmless": 51, "undetected": 35, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1774095066}


indicator: 91.103.252.148
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:04:07.769641
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2022-04-25T11:30:02+00:00", "categories": []}


indicator: 91.103.252.153
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:04:09.544479
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 91.103.252.157
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:04:11.292380
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2022-05-06T00:25:01+00:00", "categories": []}


indicator: 91.103.252.160
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:04:13.004927
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2022-04-23T00:25:01+00:00", "categories": []}


indicator: 91.103.252.166
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:04:14.746244
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-10-06T21:22:05+00:00", "categories": []}


indicator: 91.103.252.177
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:04:18.298539
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2022-05-09T00:25:01+00:00", "categories": []}


indicator: 91.103.252.179
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:04:21.801764
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2022-05-05T09:26:01+00:00", "categories": []}


indicator: 91.103.252.182
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:04:25.384009
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2022-05-07T00:25:01+00:00", "categories": []}


indicator: 91.103.252.185
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:04:28.863848
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-01-18T05:06:56+00:00", "categories": []}


indicator: 91.103.252.189
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:04:30.600608
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-07-04T07:11:42+00:00", "categories": []}


indicator: 91.103.252.19
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:04:32.355090
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2022-05-09T22:48:25+00:00", "categories": []}


indicator: 91.103.252.193
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:04:34.134864
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-12-19T09:12:00+00:00", "categories": []}


indicator: 91.103.252.198
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:04:35.925557
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-11-14T10:56:48+00:00", "categories": []}


indicator: 91.103.252.203
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:04:42.932092
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2022-07-21T07:37:33+00:00", "categories": []}


indicator: 91.103.252.204
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:04:44.651805
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2023-08-11T01:01:09+00:00", "categories": []}


indicator: 91.103.252.209
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:04:46.408557
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2023-09-20T17:30:28+00:00", "categories": []}


indicator: 91.103.252.21
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:04:48.154407
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-07-01T10:57:42+00:00", "categories": []}


indicator: 91.103.252.220
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:04:55.094954
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2023-09-26T17:32:04+00:00", "categories": []}


indicator: 91.103.252.222
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:04:56.818423
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2022-01-10T19:14:54+00:00", "categories": []}


indicator: 91.103.252.227
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:04:58.528469
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2022-11-26T20:03:39+00:00", "categories": []}


indicator: 91.103.252.232
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:05:03.841263
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2022-04-16T23:06:01+00:00", "categories": []}


indicator: 91.103.252.237
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:05:05.641913
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2022-07-21T00:18:54+00:00", "categories": []}


indicator: 91.103.252.238
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:05:07.390618
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2022-03-20T02:46:36+00:00", "categories": []}


indicator: 91.103.252.243
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:05:10.870387
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2023-11-23T18:46:48+00:00", "categories": []}


indicator: 91.103.252.247
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:05:12.678176
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2022-04-13T19:28:06+00:00", "categories": []}


indicator: 91.103.252.248
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:05:14.527799
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2023-05-23T21:17:01+00:00", "categories": []}


indicator: 91.103.252.250
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:05:16.335280
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2022-12-30T11:40:19+00:00", "categories": []}


indicator: 91.103.252.252
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:05:18.080615
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2022-04-19T18:30:26+00:00", "categories": []}


indicator: 91.103.252.253
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:05:19.790306
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2022-04-18T23:54:02+00:00", "categories": []}


indicator: 91.103.252.26
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:05:21.501460
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-10-23T14:31:19+00:00", "categories": []}


indicator: 91.103.252.28
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:05:23.231656
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2023-06-26T10:30:45+00:00", "categories": []}


indicator: 91.103.252.32
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:05:26.728486
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2023-07-06T06:01:03+00:00", "categories": []}


indicator: 91.103.252.38
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:05:32.017434
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-03-11T16:00:11+00:00", "categories": []}


indicator: 91.103.252.47
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:05:35.507538
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-10-05T14:05:08+00:00", "categories": []}


indicator: 91.103.252.59
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:05:42.400474
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2022-10-07T15:26:40+00:00", "categories": []}


indicator: 91.103.252.61
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:05:44.166727
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-06-04T16:33:31+00:00", "categories": []}


indicator: 91.103.252.62
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:05:45.880337
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2022-10-21T00:01:54+00:00", "categories": []}


indicator: 91.103.252.64
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:05:47.739651
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-08-19T12:50:36+00:00", "categories": []}


indicator: 91.103.252.69
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:05:51.188736
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2022-10-27T07:40:55+00:00", "categories": []}


indicator: 91.103.252.71
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:05:52.947024
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2023-03-13T04:59:09+00:00", "categories": []}


indicator: 91.103.252.81
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:05:56.482687
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2022-05-13T04:47:33+00:00", "categories": []}


indicator: 91.103.252.97
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:06:01.724252
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-11-06T12:29:57+00:00", "categories": []}


indicator: 91.103.253.1
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:06:05.272498
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2023-12-09T00:50:19+00:00", "categories": []}


indicator: 91.103.253.105
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:06:08.739538
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-07-04T16:58:04+00:00", "categories": []}


indicator: 91.103.253.120
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:06:19.227298
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-09-01T21:11:20+00:00", "categories": []}


indicator: 91.103.253.128
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:06:24.370281
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-05-02T05:00:08+00:00", "categories": []}


indicator: 91.103.253.146
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:06:34.632767
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-05-04T07:35:35+00:00", "categories": []}


indicator: 91.103.253.157
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:06:39.808030
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-07-04T07:11:43+00:00", "categories": []}


indicator: 91.103.253.169
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:06:50.143726
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2023-11-06T11:20:40+00:00", "categories": []}


indicator: 91.103.253.18
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:06:57.227361
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-09-11T17:03:40+00:00", "categories": []}


indicator: 91.103.253.188
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:07:00.720297
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2023-12-07T20:41:17+00:00", "categories": []}


indicator: 91.103.253.23
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:07:31.511257
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-01-14T04:02:23+00:00", "categories": []}


indicator: 91.103.253.240
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:07:33.295764
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-11-16T17:39:50+00:00", "categories": []}


indicator: 91.103.253.32
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:07:45.630157
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-11-23T07:43:46+00:00", "categories": []}


indicator: 91.103.253.6
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:07:59.363058
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-07-09T13:51:56+00:00", "categories": []}


indicator: 91.103.253.74
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:08:09.799105
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-01-13T01:32:32+00:00", "categories": []}


indicator: 91.103.253.75
indicator_type: ipv4
source: abuseipdb
country: NL
city: 1
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:08:11.534171
raw_data:
  {"abuse_confidence": 0, "total_reports": 1, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-03-27T00:56:46+00:00", "categories": [4, 18, 19, 20, 21, 22]}


indicator: 91.103.253.84
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:08:16.806126
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2023-12-04T17:16:34+00:00", "categories": []}


indicator: 91.103.253.91
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: FIRST SERVER, SOCIEDAD LIMITADA
queried_at: 2026-05-25T12:08:18.624145
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "FIRST SERVER, SOCIEDAD LIMITADA", "domain": "first-server.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-01-22T17:34:32+00:00", "categories": []}


indicator: 91.108.240.114
indicator_type: ipv4
source: abuseipdb
country: DE
city: 0
hosting_provider: AEZA GROUP LLC
queried_at: 2026-05-25T12:08:32.664176
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "DE", "isp": "AEZA GROUP LLC", "domain": "aeza.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-08-04T21:46:50+00:00", "categories": []}


indicator: 91.108.240.138
indicator_type: ipv4
source: abuseipdb
country: DE
city: 0
hosting_provider: AEZA GROUP LLC
queried_at: 2026-05-25T12:08:46.850843
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "DE", "isp": "AEZA GROUP LLC", "domain": "aeza.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-05-21T19:44:26+00:00", "categories": []}


indicator: 91.108.240.184
indicator_type: ipv4
source: abuseipdb
country: DE
city: 0
hosting_provider: AEZA GROUP LLC
queried_at: 2026-05-25T12:09:12.988061
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "DE", "isp": "AEZA GROUP LLC", "domain": "aeza.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-10-03T06:20:00+00:00", "categories": []}


indicator: 91.108.240.190
indicator_type: ipv4
source: abuseipdb
country: DE
city: 0
hosting_provider: AEZA GROUP LLC
queried_at: 2026-05-25T12:09:16.470416
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "DE", "isp": "AEZA GROUP LLC", "domain": "aeza.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-07-18T20:04:40+00:00", "categories": []}


indicator: 91.108.240.232
indicator_type: ipv4
source: abuseipdb
country: DE
city: 0
hosting_provider: AEZA GROUP LLC
queried_at: 2026-05-25T12:09:33.897891
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "DE", "isp": "AEZA GROUP LLC", "domain": "aeza.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-11-11T18:01:40+00:00", "categories": []}


indicator: 91.108.240.27
indicator_type: ipv4
source: abuseipdb
country: DE
city: 0
hosting_provider: AEZA GROUP LLC
queried_at: 2026-05-25T12:09:46.959421
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "DE", "isp": "AEZA GROUP LLC", "domain": "aeza.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-01-17T13:23:01+00:00", "categories": []}


indicator: 91.108.240.35
indicator_type: ipv4
source: abuseipdb
country: DE
city: 0
hosting_provider: AEZA GROUP LLC
queried_at: 2026-05-25T12:09:48.798318
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "DE", "isp": "AEZA GROUP LLC", "domain": "aeza.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-09-12T10:04:16+00:00", "categories": []}


indicator: 91.103.252.153
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:10:13.553543
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1691816319}


indicator: 91.103.252.157
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:10:34.117340
raw_data:
  {"malicious": 2, "suspicious": 0, "harmless": 53, "undetected": 36, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1773385020}


indicator: 91.103.252.160
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:10:54.878981
raw_data:
  {"malicious": 1, "suspicious": 0, "harmless": 53, "undetected": 37, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1777186150}


indicator: 91.103.252.166
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:11:15.376747
raw_data:
  {"malicious": 8, "suspicious": 0, "harmless": 47, "undetected": 36, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1774019118}


indicator: 91.103.252.173
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:11:36.032598
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1772281314}


indicator: 91.103.252.177
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:11:56.565610
raw_data:
  {"malicious": 1, "suspicious": 1, "harmless": 53, "undetected": 36, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1772042239}


indicator: 91.103.252.178
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:12:17.032617
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1774444054}


indicator: 91.103.252.179
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:12:37.575863
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1775232820}


indicator: 91.103.252.18
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:12:58.080303
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1752412395}


indicator: 91.103.252.182
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:13:18.521627
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1695634929}


indicator: 91.103.252.185
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:13:59.578439
raw_data:
  {"malicious": 7, "suspicious": 0, "harmless": 49, "undetected": 35, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1773385065}


indicator: 91.103.252.189
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:14:20.124594
raw_data:
  {"malicious": 14, "suspicious": 1, "harmless": 42, "undetected": 34, "reputation": -19, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1775393612}


indicator: 91.103.252.19
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:14:40.629862
raw_data:
  {"malicious": 2, "suspicious": 0, "harmless": 53, "undetected": 36, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1753004617}


indicator: 91.103.252.193
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:15:01.117778
raw_data:
  {"malicious": 7, "suspicious": 2, "harmless": 48, "undetected": 34, "reputation": -1, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1777372919}


indicator: 91.103.252.198
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:15:21.937417
raw_data:
  {"malicious": 1, "suspicious": 1, "harmless": 53, "undetected": 36, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1777651960}


indicator: 91.103.252.20
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:15:42.436180
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1774957098}


indicator: 91.103.252.200
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:16:03.178686
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1704863630}


indicator: 91.103.252.203
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:16:44.231794
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1771970992}


indicator: 91.103.252.204
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:17:05.109258
raw_data:
  {"malicious": 7, "suspicious": 0, "harmless": 47, "undetected": 37, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1773076799}


indicator: 91.103.252.209
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:17:25.615112
raw_data:
  {"malicious": 7, "suspicious": 1, "harmless": 46, "undetected": 37, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1773676737}


indicator: 91.103.252.21
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:17:46.412809
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1730226516}


indicator: 91.103.252.214
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:18:06.876776
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 45, "undetected": 46, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1778023763}


indicator: 91.103.252.216
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:18:27.408818
raw_data:
  {"malicious": 8, "suspicious": 1, "harmless": 47, "undetected": 35, "reputation": -19, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1775287940}


indicator: 91.103.252.219
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:18:48.028999
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1772295512}


indicator: 91.103.252.220
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:19:08.491814
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1730252353}


indicator: 91.103.252.222
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:19:29.012914
raw_data:
  {"malicious": 1, "suspicious": 0, "harmless": 53, "undetected": 37, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1777387713}


indicator: 91.103.252.227
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:19:49.515614
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1772390989}


indicator: 91.103.252.229
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:20:10.111464
raw_data:
  {"malicious": 2, "suspicious": 0, "harmless": 54, "undetected": 35, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1779264029}


indicator: 91.103.252.231
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:20:30.753482
raw_data:
  {"malicious": 11, "suspicious": 1, "harmless": 46, "undetected": 33, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1779457597}


indicator: 91.103.252.232
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:20:51.363836
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1772208995}


indicator: 91.103.252.237
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:21:12.001806
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1730032987}


indicator: 91.103.252.238
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:21:32.441132
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 57, "undetected": 34, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1693853632}


indicator: 91.103.252.243
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:22:14.287075
raw_data:
  {"malicious": 1, "suspicious": 1, "harmless": 53, "undetected": 36, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1761909455}


indicator: 91.103.252.247
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:22:34.874280
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1759355282}


indicator: 91.103.252.248
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:22:55.457011
raw_data:
  {"malicious": 9, "suspicious": 0, "harmless": 47, "undetected": 35, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1774436702}


indicator: 91.103.252.250
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:23:15.941620
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1754731754}


indicator: 91.103.252.252
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:23:36.425423
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 1, "undetected": 90, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1772152453}


indicator: 91.103.252.253
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:23:57.041911
raw_data:
  {"malicious": 2, "suspicious": 0, "harmless": 53, "undetected": 36, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1773403140}


indicator: 91.103.252.26
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:24:17.536472
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 52, "undetected": 39, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1726954954}


indicator: 91.103.252.28
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:24:38.127554
raw_data:
  {"malicious": 4, "suspicious": 1, "harmless": 50, "undetected": 36, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1777381030}


indicator: 91.103.252.31
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:24:58.629442
raw_data:
  {"malicious": 11, "suspicious": 1, "harmless": 45, "undetected": 34, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1773341788}


indicator: 91.103.252.32
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:25:19.168412
raw_data:
  {"malicious": 12, "suspicious": 0, "harmless": 46, "undetected": 33, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1774645153}


indicator: 91.103.252.33
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:25:39.679781
raw_data:
  {"malicious": 2, "suspicious": 0, "harmless": 52, "undetected": 37, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1774018967}


indicator: 91.103.252.34
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:26:00.128527
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1763553178}


indicator: 91.103.252.38
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:26:20.761656
raw_data:
  {"malicious": 5, "suspicious": 0, "harmless": 50, "undetected": 36, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1771843657}


indicator: 91.103.252.4
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:26:41.219444
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1725126267}


indicator: 91.103.252.47
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:27:01.837815
raw_data:
  {"malicious": 3, "suspicious": 0, "harmless": 53, "undetected": 35, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1772158496}


indicator: 91.103.252.48
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:27:22.883390
raw_data:
  {"malicious": 11, "suspicious": 0, "harmless": 46, "undetected": 34, "reputation": -1, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1773828234}


indicator: 91.103.252.49
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:27:43.615320
raw_data:
  {"malicious": 1, "suspicious": 0, "harmless": 54, "undetected": 36, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1774609109}


indicator: 91.103.252.52
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:28:04.188379
raw_data:
  {"malicious": 9, "suspicious": 0, "harmless": 46, "undetected": 36, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1772179070}


indicator: 91.103.252.59
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:28:24.699313
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1775059439}


indicator: 91.103.252.61
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:28:45.248962
raw_data:
  {"malicious": 3, "suspicious": 0, "harmless": 53, "undetected": 35, "reputation": -19, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1779015895}


indicator: 91.103.252.62
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:29:05.883442
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1775727232}


indicator: 91.103.252.64
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:29:26.453679
raw_data:
  {"malicious": 5, "suspicious": 1, "harmless": 48, "undetected": 37, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1772963954}


indicator: 91.103.252.65
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:29:46.979864
raw_data:
  {"malicious": 17, "suspicious": 0, "harmless": 43, "undetected": 31, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1776384624}


indicator: 91.103.252.69
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:30:07.541011
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1776760913}


indicator: 91.103.252.71
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:30:28.164373
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1727687284}


indicator: 91.103.252.77
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:30:48.731696
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1717604829}


indicator: 91.103.252.81
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:31:09.296282
raw_data:
  {"malicious": 1, "suspicious": 0, "harmless": 54, "undetected": 36, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1769176402}


indicator: 91.103.252.88
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:31:29.794155
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1691453628}


indicator: 91.103.252.90
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:31:50.275244
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1772817153}


indicator: 91.103.252.97
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:32:10.912388
raw_data:
  {"malicious": 9, "suspicious": 1, "harmless": 48, "undetected": 33, "reputation": -1, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1770364219}


indicator: 91.103.252.99
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:32:31.503992
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1772385209}


indicator: 91.103.253.1
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:32:51.992497
raw_data:
  {"malicious": 2, "suspicious": 0, "harmless": 54, "undetected": 35, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1774015476}


indicator: 91.103.253.105
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:33:33.688669
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1730165687}


indicator: 91.103.253.106
indicator_type: ipv4
source: virustotal
country: VG
hosting_provider: First Server Limited
queried_at: 2026-05-25T12:33:54.143690
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "VG", "as_owner": "First Server Limited", "asn": 200740, "network": "91.103.252.0/23", "last_analysis_date": 1728609168}


indicator: 37.221.66.5
indicator_type: ipv4
source: shodan
reverse_dns: sonyawaifu.info,www.sonyawaifu.info
hosting_provider: cpe:/a:f5:nginx,cpe:/o:canonical:ubuntu_linux,cpe:/a:openbsd:openssh:9.6p1
queried_at: 2026-05-25T18:00:19.365540
raw_data:
  {"ports": [22, 80, 443], "vulns": [], "hostnames": ["sonyawaifu.info", "www.sonyawaifu.info"], "tags": [], "cpes": ["cpe:/a:f5:nginx", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:openbsd:openssh:9.6p1"]}


indicator: 37.221.66.8
indicator_type: ipv4
source: shodan
city: open-dir,self-signed
hosting_provider: cpe:/a:apache:http_server
queried_at: 2026-05-25T18:00:23.011873
raw_data:
  {"ports": [443], "vulns": [], "hostnames": ["parcelows.com", "autodiscover.downet.net", "cpcalendars.downet.net", "www.downet.net", "downet.net", "webdisk.downet.net", "cpcontacts.downet.net", "mail.downet.net", "cpanel.downet.net", "webmail.downet.net"], "tags": ["open-dir", "self-signed"], "cpes": ["cpe:/a:apache:http_server"]}

reverse_dns:
  parcelows.com,autodiscover.downet.net,cpcalendars.downet.net,www.downet.net,downet.net,webdisk.downet.net,cpcontacts.downet.net,mail.downet.net,cpanel.downet.net,webmail.downet.net


indicator: 37.221.66.10
indicator_type: ipv4
source: shodan
reverse_dns: beuleflery.biz,mail0.polytechtrade-ru.com
hosting_provider: cpe:/a:apache:http_server:2.4.67,cpe:/o:debian:debian_linux
queried_at: 2026-05-25T18:00:24.877791
raw_data:
  {"ports": [80, 443, 10050], "vulns": [], "hostnames": ["beuleflery.biz", "mail0.polytechtrade-ru.com"], "tags": [], "cpes": ["cpe:/a:apache:http_server:2.4.67", "cpe:/o:debian:debian_linux"]}


indicator: 37.221.66.11
indicator_type: ipv4
source: shodan
city: starttls
reverse_dns: nuallkic.gamblerunity.com,napawapa.com
hosting_provider: cpe:/a:openbsd:openssh:7.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-25T18:00:26.669201
raw_data:
  {"ports": [22, 53, 587], "vulns": [], "hostnames": ["nuallkic.gamblerunity.com", "napawapa.com"], "tags": ["starttls"], "cpes": ["cpe:/a:openbsd:openssh:7.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 37.221.66.12
indicator_type: ipv4
source: shodan
reverse_dns: server.mailboxserveradmin.shop
hosting_provider: cpe:/a:f5:nginx
queried_at: 2026-05-25T18:00:28.479438
raw_data:
  {"ports": [443], "vulns": [], "hostnames": ["server.mailboxserveradmin.shop"], "tags": [], "cpes": ["cpe:/a:f5:nginx"]}


indicator: 37.221.67.2
indicator_type: ipv4
source: shodan
city: self-signed,starttls
reverse_dns: domaceserije.online
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/a:f5:nginx
queried_at: 2026-05-25T18:00:35.893290
raw_data:
  {"ports": [21, 22, 25, 110, 143, 465, 587, 993, 8083], "vulns": [], "hostnames": ["domaceserije.online"], "tags": ["self-signed", "starttls"], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/a:f5:nginx"]}


indicator: 37.221.67.4
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: komikdewasa.vip
hosting_provider: cpe:/o:linux:linux_kernel,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx:1.24.0
queried_at: 2026-05-25T18:00:39.674263
raw_data:
  {"ports": [80], "vulns": ["CVE-2025-23419", "CVE-2023-44487"], "hostnames": ["komikdewasa.vip"], "tags": ["eol-product"], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx:1.24.0"]}


indicator: 37.221.67.13
indicator_type: ipv4
source: shodan
reverse_dns: xcdfscxc
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-25T18:00:48.875036
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["xcdfscxc"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 37.221.67.14
indicator_type: ipv4
source: shodan
city: starttls,self-signed
reverse_dns: vps-ig23.com
queried_at: 2026-05-25T18:00:50.787464
raw_data:
  {"ports": [22, 25, 123, 443, 587], "vulns": ["CVE-2025-67896", "CVE-2023-42117", "CVE-2026-40687", "CVE-2024-39929", "CVE-2023-51766", "CVE-2022-37451", "CVE-2023-42119", "CVE-2023-42115", "CVE-2022-3559", "CVE-2026-40685", "CVE-2023-42114", "CVE-2026-40686", "CVE-2026-40684", "CVE-2022-3620", "CVE-2023-42116"], "hostnames": ["vps-ig23.com"], "tags": ["starttls", "self-signed"], "cpes": ["cpe:/a:f5:nginx", "cpe:/a:ntp:ntp:3", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:openbsd:openssh:8.9p1", "cpe:

hosting_provider:
  cpe:/a:f5:nginx,cpe:/a:ntp:ntp:3,cpe:/o:canonical:ubuntu_linux,cpe:/a:openbsd:openssh:8.9p1,cpe:/a:exim:exim:4.95


indicator: 37.221.67.16
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: 2611251
hosting_provider: cpe:/o:microsoft:windows,cpe:/a:microsoft:internet_information_services:10.0
queried_at: 2026-05-25T18:00:54.553765
raw_data:
  {"ports": [80, 135, 445, 3389, 5985, 47001], "vulns": [], "hostnames": ["2611251"], "tags": ["self-signed"], "cpes": ["cpe:/o:microsoft:windows", "cpe:/a:microsoft:internet_information_services:10.0"]}


indicator: 37.221.67.24
indicator_type: ipv4
source: shodan
city: starttls,self-signed
reverse_dns: lordfilmbu.icu
hosting_provider: cpe:/a:f5:nginx,cpe:/a:f5:nginx:1.28.2
queried_at: 2026-05-25T18:00:56.448533
raw_data:
  {"ports": [21, 80, 143, 993, 995, 7777, 8888], "vulns": [], "hostnames": ["lordfilmbu.icu"], "tags": ["starttls", "self-signed"], "cpes": ["cpe:/a:f5:nginx", "cpe:/a:f5:nginx:1.28.2"]}


indicator: 196.251.69.82
indicator_type: ipv4
source: shodan
city: eol-product,database
hosting_provider: cpe:/a:apache:http_server:2.4.37,cpe:/a:oracle:mysql,cpe:/a:php:php:5.6.40,cpe:/a:openbsd:openssh
queried_at: 2026-05-25T18:01:07.523646
raw_data:
  {"ports": [22, 80, 3306], "vulns": ["CVE-2009-2299", "CVE-2022-31629", "CVE-2012-3526", "CVE-2024-47252", "CVE-2025-58098", "CVE-2024-38477", "CVE-2009-0796", "CVE-2021-40438", "CVE-2026-34032", "CVE-2025-65082", "CVE-2019-9517", "CVE-2020-1927", "CVE-2011-1176", "CVE-2012-4001", "CVE-2021-26690", "CVE-2021-33193", "CVE-2019-0190", "CVE-2022-28330", "CVE-2019-10092", "CVE-2025-66200", "CVE-2013-2220", "CVE-2022-30556", "CVE-2018-17189", "CVE-2023-38709", "CVE-2022-22719", "CVE-2022-22720", "CVE-


indicator: 196.251.69.112
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/a:openbsd:openssh:8.0
queried_at: 2026-05-25T18:01:12.993444
raw_data:
  {"ports": [22], "vulns": ["CVE-2021-41617", "CVE-2020-15778", "CVE-2026-35388", "CVE-2025-32728", "CVE-2023-51767", "CVE-2007-2768", "CVE-2021-36368", "CVE-2020-14145", "CVE-2023-38408", "CVE-2008-3844", "CVE-2019-16905", "CVE-2023-51385", "CVE-2026-35385", "CVE-2023-48795", "CVE-2025-26465", "CVE-2016-20012", "CVE-2026-35386", "CVE-2026-35387", "CVE-2026-35414"], "hostnames": [], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.0"]}


indicator: 196.251.69.212
indicator_type: ipv4
source: shodan
city: eol-product
hosting_provider: cpe:/a:php:php:5.6.40,cpe:/a:apache:http_server:2.4.37,cpe:/a:openbsd:openssh:8.0
queried_at: 2026-05-25T18:01:26.699967
raw_data:
  {"ports": [22, 80], "vulns": ["CVE-2020-35452", "CVE-2021-39275", "CVE-2023-45802", "CVE-2024-38472", "CVE-2022-30556", "CVE-2022-4900", "CVE-2022-23943", "CVE-2009-2299", "CVE-2012-4360", "CVE-2020-15778", "CVE-2009-0796", "CVE-2007-2768", "CVE-2024-3566", "CVE-2020-1934", "CVE-2023-38408", "CVE-2020-14145", "CVE-2021-32785", "CVE-2013-4365", "CVE-2007-4723", "CVE-2019-9637", "CVE-2019-0196", "CVE-2025-49812", "CVE-2025-59775", "CVE-2017-7963", "CVE-2022-31628", "CVE-2022-31629", "CVE-2025-2646


indicator: 196.251.70.182
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/a:openbsd:openssh:8.0
queried_at: 2026-05-25T18:01:53.533464
raw_data:
  {"ports": [22], "vulns": ["CVE-2025-26465", "CVE-2008-3844", "CVE-2020-15778", "CVE-2007-2768", "CVE-2026-35386", "CVE-2023-48795", "CVE-2021-41617", "CVE-2023-38408", "CVE-2026-35387", "CVE-2020-14145", "CVE-2025-32728", "CVE-2023-51385", "CVE-2021-36368", "CVE-2016-20012", "CVE-2026-35414", "CVE-2026-35388", "CVE-2023-51767", "CVE-2026-35385", "CVE-2019-16905"], "hostnames": [], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.0"]}


indicator: 34.70.205.211
indicator_type: ipv4
source: shodan
city: cloud
reverse_dns: 211.205.70.34.bc.googleusercontent.com
hosting_provider: cpe:/o:linux:linux_kernel,cpe:/a:openbsd:openssh:9.2p1,cpe:/o:debian:debian_linux
queried_at: 2026-05-25T18:02:02.404975
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["211.205.70.34.bc.googleusercontent.com"], "tags": ["cloud"], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:9.2p1", "cpe:/o:debian:debian_linux"]}


indicator: 80.76.49.1
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/a:openbsd:openssh:7.5
queried_at: 2026-05-25T18:02:05.960605
raw_data:
  {"ports": [161, 179, 830], "vulns": ["CVE-2025-26465", "CVE-2019-6111", "CVE-2017-15906", "CVE-2018-15473", "CVE-2008-3844", "CVE-2020-15778", "CVE-2007-2768", "CVE-2023-48795", "CVE-2021-41617", "CVE-2023-38408", "CVE-2020-14145", "CVE-2025-32728", "CVE-2023-51385", "CVE-2021-36368", "CVE-2018-20685", "CVE-2016-20012", "CVE-2026-35414", "CVE-2023-51767", "CVE-2019-6109", "CVE-2018-15919", "CVE-2019-6110"], "hostnames": [], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:7.5"]}


indicator: 80.76.49.8
indicator_type: ipv4
source: shodan
reverse_dns: support.ssaconn3ct.info
queried_at: 2026-05-25T18:02:11.315192
raw_data:
  {"ports": [137, 443, 3389, 5985], "vulns": [], "hostnames": ["support.ssaconn3ct.info"], "tags": [], "cpes": []}


indicator: 80.76.49.16
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: becomeaprofessionalorganizer.click
queried_at: 2026-05-25T18:02:13.074503
raw_data:
  {"ports": [135, 443, 445, 3389, 5985, 47001], "vulns": ["CVE-2020-0796"], "hostnames": ["becomeaprofessionalorganizer.click"], "tags": ["self-signed"], "cpes": []}


indicator: 80.76.49.19
indicator_type: ipv4
source: shodan
city: database,self-signed
queried_at: 2026-05-25T18:02:16.944298
raw_data:
  {"ports": [21, 80, 135, 137, 443, 445, 3306, 3389, 5985], "vulns": ["CVE-2024-38475", "CVE-2023-5678", "CVE-2009-2299", "CVE-2023-6129", "CVE-2007-3205", "CVE-2025-59775", "CVE-2012-3526", "CVE-2024-47252", "CVE-2026-33523", "CVE-2026-34059", "CVE-2009-3765", "CVE-2025-58098", "CVE-2013-0941", "CVE-2024-38477", "CVE-2009-0796", "CVE-2025-55753", "CVE-2025-49630", "CVE-2026-33007", "CVE-2024-36387", "CVE-2024-40898", "CVE-2024-43204", "CVE-2026-34032", "CVE-2025-65082", "CVE-2024-24795", "CVE-202

hosting_provider:
  cpe:/a:mariadb:mariadb,cpe:/a:php:php:8.0.30,cpe:/a:openssl:openssl:3.1.3,cpe:/a:apache:http_server:2.4.58


indicator: 80.76.49.30
indicator_type: ipv4
source: shodan
city: self-signed
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-25T18:02:20.499743
raw_data:
  {"ports": [22, 135, 445, 3389, 5985], "vulns": ["CVE-2020-0796"], "hostnames": [], "tags": ["self-signed"], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 80.76.49.43
indicator_type: ipv4
source: shodan
queried_at: 2026-05-25T18:02:29.328364
raw_data:
  {"ports": [135, 137, 445, 3389, 5985, 10101, 60001, 60010], "vulns": [], "hostnames": [], "tags": [], "cpes": []}


indicator: 80.76.49.45
indicator_type: ipv4
source: shodan
city: database
queried_at: 2026-05-25T18:02:31.143813
raw_data:
  {"ports": [22, 3306], "vulns": [], "hostnames": [], "tags": ["database"], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:9.2p1", "cpe:/a:mariadb:mariadb:10.11.14-MariaDB-0%2bdeb12u2", "cpe:/o:debian:debian_linux"]}

hosting_provider:
  cpe:/o:linux:linux_kernel,cpe:/a:openbsd:openssh:9.2p1,cpe:/a:mariadb:mariadb:10.11.14-MariaDB-0%2bdeb12u2,cpe:/o:debian:debian_linux


indicator: 80.76.49.57
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/a:openbsd:openssh:10.0p2,cpe:/o:linux:linux_kernel,cpe:/o:debian:debian_linux
queried_at: 2026-05-25T18:02:34.674195
raw_data:
  {"ports": [22, 80, 443], "vulns": [], "hostnames": [], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:10.0p2", "cpe:/o:linux:linux_kernel", "cpe:/o:debian:debian_linux"]}


indicator: 80.76.49.67
indicator_type: ipv4
source: shodan
city: self-signed
hosting_provider: cpe:/o:canonical:ubuntu_linux,cpe:/a:openbsd:openssh:8.2p1
queried_at: 2026-05-25T18:02:38.207218
raw_data:
  {"ports": [22, 135, 445, 3389, 5985, 8040], "vulns": ["CVE-2020-0796"], "hostnames": [], "tags": ["self-signed"], "cpes": ["cpe:/o:canonical:ubuntu_linux", "cpe:/a:openbsd:openssh:8.2p1"]}


indicator: 80.76.49.73
indicator_type: ipv4
source: shodan
city: self-signed
queried_at: 2026-05-25T18:02:39.966746
raw_data:
  {"ports": [135, 445, 3389, 5985, 8040], "vulns": ["CVE-2020-0796"], "hostnames": [], "tags": ["self-signed"], "cpes": []}


indicator: 80.76.49.86
indicator_type: ipv4
source: shodan
queried_at: 2026-05-25T18:02:43.498957
raw_data:
  {"ports": [135, 445, 5357, 5985, 8000], "vulns": ["CVE-2020-0796"], "hostnames": [], "tags": [], "cpes": []}


indicator: 80.76.49.87
indicator_type: ipv4
source: shodan
city: self-signed
queried_at: 2026-05-25T18:02:45.300287
raw_data:
  {"ports": [22, 80, 443, 3000], "vulns": [], "hostnames": [], "tags": ["self-signed"], "cpes": ["cpe:/a:openresty:openresty:1.27.1.2", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx", "cpe:/a:openresty:lua-nginx-module:1.27.1.2", "cpe:/a:openbsd:openssh:8.9p1"]}

hosting_provider:
  cpe:/a:openresty:openresty:1.27.1.2,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx,cpe:/a:openresty:lua-nginx-module:1.27.1.2,cpe:/a:openbsd:openssh:8.9p1


indicator: 80.76.49.96
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: login.qwertifactran.com
queried_at: 2026-05-25T18:02:50.623019
raw_data:
  {"ports": [135, 443, 445, 3389, 5985], "vulns": ["CVE-2020-0796"], "hostnames": ["login.qwertifactran.com"], "tags": ["self-signed"], "cpes": []}


indicator: 80.76.49.97
indicator_type: ipv4
source: shodan
city: self-signed,eol-os
queried_at: 2026-05-25T18:02:52.426455
raw_data:
  {"ports": [53, 80, 135, 443, 445, 515, 593, 3389, 5985, 5986], "vulns": ["CVE-2014-4078"], "hostnames": [], "tags": ["self-signed", "eol-os"], "cpes": ["cpe:/a:microsoft:asp.net", "cpe:/a:microsoft:internet_information_services:8.5", "cpe:/a:microsoft:internet_information_services", "cpe:/o:microsoft:windows"]}

hosting_provider:
  cpe:/a:microsoft:asp.net,cpe:/a:microsoft:internet_information_services:8.5,cpe:/a:microsoft:internet_information_services,cpe:/o:microsoft:windows


indicator: 80.76.49.100
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: tr-connect.shop
queried_at: 2026-05-25T18:02:54.254097
raw_data:
  {"ports": [135, 443, 445, 3389, 5985], "vulns": ["CVE-2020-0796"], "hostnames": ["tr-connect.shop"], "tags": ["self-signed"], "cpes": []}


indicator: 80.76.49.122
indicator_type: ipv4
source: shodan
queried_at: 2026-05-25T18:03:03.204952
raw_data:
  {"ports": [135, 137, 445, 3389, 5985, 8040, 47001], "vulns": [], "hostnames": [], "tags": [], "cpes": []}


indicator: 80.76.49.135
indicator_type: ipv4
source: shodan
reverse_dns: smartsheetsapp.com
queried_at: 2026-05-25T18:03:06.820378
raw_data:
  {"ports": [135, 137, 443, 445, 3389, 5985], "vulns": [], "hostnames": ["smartsheetsapp.com"], "tags": [], "cpes": []}


indicator: 80.76.49.140
indicator_type: ipv4
source: shodan
city: eol-product
queried_at: 2026-05-25T18:03:08.608775
raw_data:
  {"ports": [22, 80, 8001, 8002, 8080], "vulns": ["CVE-2025-23419", "CVE-2023-44487"], "hostnames": [], "tags": ["eol-product"], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/a:encode:uvicorn", "cpe:/a:f5:nginx:1.24.0", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:python:python", "cpe:/o:linux:linux_kernel"]}

hosting_provider:
  cpe:/a:openbsd:openssh:9.6p1,cpe:/a:encode:uvicorn,cpe:/a:f5:nginx:1.24.0,cpe:/o:canonical:ubuntu_linux,cpe:/a:python:python,cpe:/o:linux:linux_kernel


indicator: 80.76.49.155
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: lightofhealingeducation.cyou
queried_at: 2026-05-25T18:03:17.424745
raw_data:
  {"ports": [135, 443, 445, 3389, 5357, 5985, 10101], "vulns": ["CVE-2020-0796"], "hostnames": ["lightofhealingeducation.cyou"], "tags": ["self-signed"], "cpes": []}


indicator: 80.76.49.159
indicator_type: ipv4
source: shodan
city: self-signed,database,eol-os
queried_at: 2026-05-25T18:03:21.024711
raw_data:
  {"ports": [22, 80, 135, 445, 3001, 3389, 4321, 5357, 5432, 5985, 6379, 8080], "vulns": ["CVE-2013-0942", "CVE-2026-29169", "CVE-2026-24072", "CVE-2026-33857", "CVE-2026-34059", "CVE-2026-33006", "CVE-2026-33523", "CVE-2011-1176", "CVE-2009-2299", "CVE-2012-4360", "CVE-2026-34032", "CVE-2009-0796", "CVE-2013-2765", "CVE-2012-3526", "CVE-2013-0941", "CVE-2026-23918", "CVE-2011-2688", "CVE-2026-33007", "CVE-2013-4365", "CVE-2007-4723", "CVE-2012-4001", "CVE-2020-0796"], "hostnames": [], "tags": ["s

hosting_provider:
  cpe:/a:golang:go,cpe:/a:postgresql:postgresql,cpe:/a:caddyserver:caddy,cpe:/o:debian:debian_linux,cpe:/a:php:php:8.3.30,cpe:/o:canonical:ubuntu_linux,cpe:/a:apache:http_server:2.4.66,cpe:/a:openbsd:openssh:9.6p1,cpe:/a:redislabs:redis:7.4.8


indicator: 80.76.49.170
indicator_type: ipv4
source: shodan
city: ai
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-25T18:03:24.677045
raw_data:
  {"ports": [22, 18789], "vulns": [], "hostnames": [], "tags": ["ai"], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 80.76.49.171
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux,cpe:/a:python:python:3.12.3
queried_at: 2026-05-25T18:03:26.504510
raw_data:
  {"ports": [22, 8080], "vulns": ["CVE-2025-12084", "CVE-2021-32052", "CVE-2020-29396", "CVE-2024-7592", "CVE-2024-6232", "CVE-2025-13836", "CVE-2025-13837", "CVE-2024-9287", "CVE-2026-4519", "CVE-2009-3720", "CVE-2025-12781", "CVE-2009-2940", "CVE-2023-27043"], "hostnames": [], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:python:python:3.12.3"]}


indicator: 80.76.49.172
indicator_type: ipv4
source: shodan
city: proxy
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-25T18:03:28.296328
raw_data:
  {"ports": [22, 12001], "vulns": [], "hostnames": [], "tags": ["proxy"], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 80.76.49.173
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: remote.arnessexpressdix.com
queried_at: 2026-05-25T18:03:30.076239
raw_data:
  {"ports": [80, 135, 139, 443, 445, 3389, 5357, 5985], "vulns": ["CVE-2020-0796"], "hostnames": ["remote.arnessexpressdix.com"], "tags": ["self-signed"], "cpes": []}


indicator: 80.76.49.177
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/a:microsoft:internet_information_services:8.5,cpe:/o:microsoft:windows
queried_at: 2026-05-25T18:03:31.878864
raw_data:
  {"ports": [80, 135, 137, 445, 3389, 5985], "vulns": ["CVE-2014-4078", "CVE-2015-1635", "MS15-034"], "hostnames": [], "tags": [], "cpes": ["cpe:/a:microsoft:internet_information_services:8.5", "cpe:/o:microsoft:windows"]}


indicator: 80.76.49.179
indicator_type: ipv4
source: shodan
city: self-signed
hosting_provider: cpe:/o:canonical:ubuntu_linux,cpe:/a:openbsd:openssh:8.2p1
queried_at: 2026-05-25T18:03:35.474335
raw_data:
  {"ports": [22, 135, 445, 3389, 5357, 5985], "vulns": ["CVE-2020-0796"], "hostnames": [], "tags": ["self-signed"], "cpes": ["cpe:/o:canonical:ubuntu_linux", "cpe:/a:openbsd:openssh:8.2p1"]}


indicator: 80.76.49.183
indicator_type: ipv4
source: shodan
reverse_dns: skanestrategies.com,www.skanestrategies.com
hosting_provider: cpe:/a:f5:nginx,cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-25T18:03:37.262637
raw_data:
  {"ports": [22, 80, 443], "vulns": [], "hostnames": ["skanestrategies.com", "www.skanestrategies.com"], "tags": [], "cpes": ["cpe:/a:f5:nginx", "cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 80.76.49.185
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx
queried_at: 2026-05-25T18:03:39.097325
raw_data:
  {"ports": [22, 443, 8080, 9090], "vulns": [], "hostnames": [], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx"]}


indicator: 80.76.49.187
indicator_type: ipv4
source: shodan
city: self-signed
queried_at: 2026-05-25T18:03:42.691726
raw_data:
  {"ports": [135, 445, 3001, 3389, 5985, 10101, 60001], "vulns": ["CVE-2020-0796"], "hostnames": [], "tags": ["self-signed"], "cpes": []}


indicator: 80.76.49.190
indicator_type: ipv4
source: shodan
city: self-signed
hosting_provider: cpe:/o:microsoft:windows
queried_at: 2026-05-25T18:03:44.470039
raw_data:
  {"ports": [135, 445, 3389, 5357, 5985, 8002, 47001], "vulns": ["CVE-2020-0796"], "hostnames": [], "tags": ["self-signed"], "cpes": ["cpe:/o:microsoft:windows"]}


indicator: 80.76.49.196
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: www.zoomjoinmeeting.download
queried_at: 2026-05-25T18:03:46.234303
raw_data:
  {"ports": [22, 80, 443], "vulns": ["CVE-2025-23419", "CVE-2023-44487"], "hostnames": ["www.zoomjoinmeeting.download"], "tags": ["eol-product"], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx:1.24.0"]}

hosting_provider:
[cell repeats an earlier one in this file: 107 characters]


indicator: 80.76.49.203
indicator_type: ipv4
source: shodan
city: self-signed
queried_at: 2026-05-25T18:03:47.993628
raw_data:
  {"ports": [135, 445, 3000, 3389, 5985], "vulns": ["CVE-2020-0796"], "hostnames": [], "tags": ["self-signed"], "cpes": []}


indicator: 80.76.49.218
indicator_type: ipv4
source: shodan
city: self-signed
hosting_provider: cpe:/o:microsoft:windows
queried_at: 2026-05-25T18:03:51.568678
raw_data:
  {"ports": [80, 135, 137, 445, 3389, 5985, 5986], "vulns": ["CVE-2020-0796"], "hostnames": [], "tags": ["self-signed"], "cpes": ["cpe:/o:microsoft:windows"]}


indicator: 80.76.49.221
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: homenmade.top
queried_at: 2026-05-25T18:03:53.340246
raw_data:
  {"ports": [135, 443, 445, 3389, 5357, 5985, 47001], "vulns": ["CVE-2020-0796"], "hostnames": ["homenmade.top"], "tags": ["self-signed"], "cpes": []}


indicator: 80.76.49.228
indicator_type: ipv4
source: shodan
reverse_dns: www.forumhub.net,forumhub.net
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-25T18:03:58.641285
raw_data:
  {"ports": [22, 80, 443], "vulns": [], "hostnames": ["www.forumhub.net", "forumhub.net"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 80.76.49.230
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: localcommonworks.com
hosting_provider: cpe:/o:microsoft:windows,cpe:/a:microsoft:internet_information_services:10.0
queried_at: 2026-05-25T18:04:00.459140
raw_data:
  {"ports": [80, 443, 3389, 5357, 5985], "vulns": [], "hostnames": ["localcommonworks.com"], "tags": ["self-signed"], "cpes": ["cpe:/o:microsoft:windows", "cpe:/a:microsoft:internet_information_services:10.0"]}


indicator: 80.76.49.233
indicator_type: ipv4
source: shodan
city: eol-product,self-signed
hosting_provider: cpe:/a:php:php:7.3.4,cpe:/a:f5:nginx:1.15.11
queried_at: 2026-05-25T18:04:02.288715
raw_data:
  {"ports": [80, 135, 443, 445, 5357, 5985, 8818, 47001], "vulns": ["CVE-2024-25117", "CVE-2019-9511", "CVE-2022-31628", "CVE-2019-11049", "CVE-2017-8923", "CVE-2022-31629", "CVE-2007-3205", "CVE-2021-21704", "CVE-2020-7067", "CVE-2019-13224", "CVE-2019-11046", "CVE-2025-23419", "CVE-2019-11045", "CVE-2020-7069", "CVE-2020-7068", "CVE-2021-21702", "CVE-2020-0796", "CVE-2019-11050", "CVE-2020-7063", "CVE-2020-7059", "CVE-2021-23017", "CVE-2020-7066", "CVE-2019-9513", "CVE-2019-11047", "CVE-2021-361


indicator: 80.76.49.234
indicator_type: ipv4
source: shodan
city: self-signed
queried_at: 2026-05-25T18:04:04.068555
raw_data:
  {"ports": [135, 139, 445, 3389, 5985, 10101, 60001], "vulns": ["CVE-2020-0796"], "hostnames": [], "tags": ["self-signed"], "cpes": []}


indicator: 80.76.49.241
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-25T18:04:09.495703
raw_data:
  {"ports": [22, 111, 631], "vulns": [], "hostnames": [], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 80.76.49.246
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/o:linux:linux_kernel,cpe:/a:openbsd:openssh:9.2p1,cpe:/o:debian:debian_linux
queried_at: 2026-05-25T18:04:11.271342
raw_data:
  {"ports": [22, 161], "vulns": [], "hostnames": [], "tags": [], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:9.2p1", "cpe:/o:debian:debian_linux"]}


indicator: 80.76.49.98
indicator_type: ipv4
source: shodan
city: self-signed
queried_at: 2026-05-25T18:04:14.802386
raw_data:
  {"ports": [135, 445, 3389, 5985, 5986], "vulns": [], "hostnames": [], "tags": ["self-signed"], "cpes": []}


indicator: 80.76.49.247
indicator_type: ipv4
source: shodan
city: self-signed
queried_at: 2026-05-25T18:04:21.919475
raw_data:
  {"ports": [135, 139, 445, 3389, 5985, 5986, 8040, 47001], "vulns": [], "hostnames": [], "tags": ["self-signed"], "cpes": []}


indicator: 80.76.46.4
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: opt4.optimizecareerplans.com
queried_at: 2026-05-25T18:04:27.245637
raw_data:
  {"ports": [443], "vulns": [], "hostnames": ["opt4.optimizecareerplans.com"], "tags": ["self-signed"], "cpes": []}


indicator: 80.76.46.5
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: opt5.optimizecareerplans.com
queried_at: 2026-05-25T18:04:29.003187
raw_data:
  {"ports": [443], "vulns": [], "hostnames": ["opt5.optimizecareerplans.com"], "tags": ["self-signed"], "cpes": []}


indicator: 80.76.46.8
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: onl8.onlygreatjobsloan.com
queried_at: 2026-05-25T18:04:34.315470
raw_data:
  {"ports": [443], "vulns": [], "hostnames": ["onl8.onlygreatjobsloan.com"], "tags": ["self-signed"], "cpes": []}


indicator: 80.76.46.12
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: nl.12.nl.trendingnewssystems.com
queried_at: 2026-05-25T18:04:41.459118
raw_data:
  {"ports": [443], "vulns": [], "hostnames": ["nl.12.nl.trendingnewssystems.com"], "tags": ["self-signed"], "cpes": []}


indicator: 80.76.47.3
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: ins3.instantlythigherincomejobs.com
queried_at: 2026-05-25T18:04:45.067524
raw_data:
  {"ports": [443], "vulns": [], "hostnames": ["ins3.instantlythigherincomejobs.com"], "tags": ["self-signed"], "cpes": []}


indicator: 80.76.47.5
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: vis5.visiondrivepath.com
queried_at: 2026-05-25T18:04:48.719265
raw_data:
  {"ports": [443], "vulns": [], "hostnames": ["vis5.visiondrivepath.com"], "tags": ["self-signed"], "cpes": []}


indicator: 80.76.47.6
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: vis6.visiondrivepath.com
queried_at: 2026-05-25T18:04:50.504799
raw_data:
  {"ports": [443], "vulns": [], "hostnames": ["vis6.visiondrivepath.com"], "tags": ["self-signed"], "cpes": []}


indicator: 80.76.47.11
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: ier11.highearningcareerhub.com
queried_at: 2026-05-25T18:04:59.592346
raw_data:
  {"ports": [443], "vulns": [], "hostnames": ["ier11.highearningcareerhub.com"], "tags": ["self-signed"], "cpes": []}


indicator: 91.108.242.12
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: c.29.rs,29.rs
queried_at: 2026-05-25T18:05:16.123108
raw_data:
  {"ports": [21, 22, 443], "vulns": ["CVE-2025-23419", "CVE-2023-44487"], "hostnames": ["c.29.rs", "29.rs"], "tags": ["eol-product"], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/a:f5:nginx:1.24.0", "cpe:/a:php:php:8.5.3", "cpe:/o:canonical:ubuntu_linux", "cpe:/o:linux:linux_kernel"]}

hosting_provider:
  cpe:/a:openbsd:openssh:9.6p1,cpe:/a:f5:nginx:1.24.0,cpe:/a:php:php:8.5.3,cpe:/o:canonical:ubuntu_linux,cpe:/o:linux:linux_kernel


indicator: 91.108.242.142
indicator_type: ipv4
source: shodan
reverse_dns: api-maps.yandex.com,api-maps.yandex.ru,api-maps.yandex.com.tr,enterprise.api-maps.yandex.ru
queried_at: 2026-05-25T18:05:19.829682
raw_data:
  {"ports": [443, 2222], "vulns": [], "hostnames": ["api-maps.yandex.com", "api-maps.yandex.ru", "api-maps.yandex.com.tr", "enterprise.api-maps.yandex.ru"], "tags": [], "cpes": []}


indicator: 91.108.242.161
indicator_type: ipv4
source: shodan
queried_at: 2026-05-25T18:05:30.533906
raw_data:
  {"ports": [80, 135], "vulns": [], "hostnames": [], "tags": [], "cpes": ["cpe:/a:microsoft:internet_information_services:10.0", "cpe:/a:microsoft:asp.net", "cpe:/a:microsoft:internet_information_services", "cpe:/o:microsoft:windows"]}

hosting_provider:
  cpe:/a:microsoft:internet_information_services:10.0,cpe:/a:microsoft:asp.net,cpe:/a:microsoft:internet_information_services,cpe:/o:microsoft:windows


indicator: 91.108.242.168
indicator_type: ipv4
source: shodan
queried_at: 2026-05-25T18:05:34.112364
raw_data:
  {"ports": [443], "vulns": [], "hostnames": ["pro.radeon.com", "shop-us-en.amd.com", "mars.amd.com", "connect-sit.amd.com", "radeon.com", "shop-eu-fr.amd.com", "download.amd.com", "search.amd.com", "products.amd.com", "shop-eu-de.amd.com", "gpuopen.com", "shop-ca-en.amd.com", "shop.amd.com", "amd.com", "www.amd.com", "instinct.radeon.com", "drivers.amd.com", "creators.radeon.com", "support.amd.com", "connect.amd.com", "shop-eu-en.amd.com", "support-sit.amd.com", "www.gpuopen.com", "explore.amd.co

reverse_dns:
  pro.radeon.com,shop-us-en.amd.com,mars.amd.com,connect-sit.amd.com,radeon.com,shop-eu-fr.amd.com,download.amd.com,search.amd.com,products.amd.com,shop-eu-de.amd.com,gpuopen.com,shop-ca-en.amd.com,shop.amd.com,amd.com,www.amd.com,instinct.radeon.com,drivers.amd.com,creators.radeon.com,support.amd.com,connect.amd.com,shop-eu-en.amd.com,support-sit.amd.com,www.gpuopen.com,explore.amd.com,verification.amd.com,www.radeon.com,account.amd.com,gaming.radeon.com


indicator: 91.108.242.171
indicator_type: ipv4
source: shodan
reverse_dns: cdnjs.cloudflare.com
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux,cpe:/a:cloudflare:cloudflare
queried_at: 2026-05-25T18:05:39.404536
raw_data:
  {"ports": [22, 443, 8080], "vulns": [], "hostnames": ["cdnjs.cloudflare.com"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:cloudflare:cloudflare"]}


indicator: 91.108.242.85
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-25T18:06:39.884620
raw_data:
  {"ports": [22, 8080], "vulns": [], "hostnames": [], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.108.242.87
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-25T18:06:41.664711
raw_data:
  {"ports": [22, 3333], "vulns": [], "hostnames": [], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.108.242.92
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: database.proinvite.ru
queried_at: 2026-05-25T18:06:43.479641
raw_data:
  {"ports": [443], "vulns": ["CVE-2025-23419", "CVE-2021-3618", "CVE-2021-23017", "CVE-2023-44487"], "hostnames": ["database.proinvite.ru"], "tags": ["eol-product"], "cpes": ["cpe:/a:expressjs:express", "cpe:/a:nodejs:node.js", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx:1.18.0", "cpe:/o:linux:linux_kernel"]}

hosting_provider:
  cpe:/a:expressjs:express,cpe:/a:nodejs:node.js,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx:1.18.0,cpe:/o:linux:linux_kernel


indicator: 91.184.240.10
indicator_type: ipv4
source: shodan
reverse_dns: close-rainstorm.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-25T18:06:48.801741
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["close-rainstorm.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.184.240.106
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: fresh-doll.ptr.network
hosting_provider: cpe:/a:f5:nginx:1.18.0,cpe:/o:linux:linux_kernel,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-25T18:06:50.573687
raw_data:
  {"ports": [80], "vulns": ["CVE-2021-23017", "CVE-2025-23419", "CVE-2023-44487", "CVE-2021-3618"], "hostnames": ["fresh-doll.ptr.network"], "tags": ["eol-product"], "cpes": ["cpe:/a:f5:nginx:1.18.0", "cpe:/o:linux:linux_kernel", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.184.240.107
indicator_type: ipv4
source: shodan
reverse_dns: sgxgxn.suness
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-25T18:06:52.335647
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["sgxgxn.suness"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.184.240.113
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: rudewalk.ptr.network,hid.mercanty.dynv6.net
hosting_provider: cpe:/o:linux:linux_kernel,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx:1.24.0
queried_at: 2026-05-25T18:06:57.694192
raw_data:
  {"ports": [80, 443], "vulns": ["CVE-2025-23419", "CVE-2023-44487"], "hostnames": ["rudewalk.ptr.network", "hid.mercanty.dynv6.net"], "tags": ["eol-product"], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx:1.24.0"]}


indicator: 91.184.240.120
indicator_type: ipv4
source: shodan
reverse_dns: reserved-by-avm.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-25T18:07:01.232477
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["reserved-by-avm.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.184.240.133
indicator_type: ipv4
source: shodan
reverse_dns: muddled-error.ptr.network
hosting_provider: cpe:/o:linux:linux_kernel,cpe:/a:openbsd:openssh:9.2p1,cpe:/o:debian:debian_linux
queried_at: 2026-05-25T18:07:04.778037
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["muddled-error.ptr.network"], "tags": [], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:9.2p1", "cpe:/o:debian:debian_linux"]}


indicator: 91.184.240.142
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: reserved-by-avm.ptr.network,addon-plus.cinemix.ir
queried_at: 2026-05-25T18:07:08.483006
raw_data:
  {"ports": [443, 8079], "vulns": ["CVE-2025-23419", "CVE-2023-44487"], "hostnames": ["reserved-by-avm.ptr.network", "addon-plus.cinemix.ir"], "tags": ["eol-product"], "cpes": ["cpe:/a:nodejs:node.js", "cpe:/a:expressjs:express", "cpe:/o:linux:linux_kernel", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx:1.24.0"]}

hosting_provider:
  cpe:/a:nodejs:node.js,cpe:/a:expressjs:express,cpe:/o:linux:linux_kernel,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx:1.24.0


indicator: 91.184.240.145
indicator_type: ipv4
source: shodan
reverse_dns: reserved-by-avm.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-25T18:07:10.309447
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["reserved-by-avm.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.184.240.157
indicator_type: ipv4
source: shodan
reverse_dns: reserved-by-avm.ptr.network
hosting_provider: cpe:/o:linux:linux_kernel,cpe:/a:openbsd:openssh:9.2p1,cpe:/o:debian:debian_linux
queried_at: 2026-05-25T18:07:19.231928
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["reserved-by-avm.ptr.network"], "tags": [], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:9.2p1", "cpe:/o:debian:debian_linux"]}


indicator: 91.184.240.158
indicator_type: ipv4
source: shodan
reverse_dns: harsh-soda.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-25T18:07:21.027736
raw_data:
  {"ports": [22, 8080], "vulns": [], "hostnames": ["harsh-soda.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.184.240.160
indicator_type: ipv4
source: shodan
reverse_dns: reserved-by-avm.ptr.network,se2.ku2.ru
hosting_provider: cpe:/a:f5:nginx:1.28.3
queried_at: 2026-05-25T18:07:24.614573
raw_data:
  {"ports": [443], "vulns": [], "hostnames": ["reserved-by-avm.ptr.network", "se2.ku2.ru"], "tags": [], "cpes": ["cpe:/a:f5:nginx:1.28.3"]}


indicator: 91.184.240.169
indicator_type: ipv4
source: shodan
reverse_dns: reserved-by-avm.ptr.network,ads.x5.ru
hosting_provider: cpe:/a:f5:nginx
queried_at: 2026-05-25T18:07:28.155915
raw_data:
  {"ports": [4190, 7443], "vulns": [], "hostnames": ["reserved-by-avm.ptr.network", "ads.x5.ru"], "tags": [], "cpes": ["cpe:/a:f5:nginx"]}


indicator: 91.184.240.173
indicator_type: ipv4
source: shodan
reverse_dns: fewrainstorm.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-25T18:07:31.797036
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["fewrainstorm.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.184.240.212
indicator_type: ipv4
source: shodan
reverse_dns: perfect-fruit.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-25T18:07:46.056277
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["perfect-fruit.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.184.240.213
indicator_type: ipv4
source: shodan
reverse_dns: golden-face.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-25T18:07:47.847088
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["golden-face.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.184.240.216
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: reserved-by-avm.ptr.network
queried_at: 2026-05-25T18:07:51.388824
raw_data:
  {"ports": [443], "vulns": [], "hostnames": ["reserved-by-avm.ptr.network"], "tags": ["self-signed"], "cpes": []}


indicator: 91.184.240.217
indicator_type: ipv4
source: shodan
reverse_dns: fuck.you
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-25T18:07:53.191227
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["fuck.you"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.184.240.220
indicator_type: ipv4
source: shodan
queried_at: 2026-05-25T18:07:58.577786
raw_data:
  {"ports": [443], "vulns": [], "hostnames": ["staticview.microsoft.com", "wwwqa.microsoft.com", "reserved-by-avm.ptr.network", "microsoft.com", "www.microsoft.com", "c.s-microsoft.com", "privacy.microsoft.com", "i.s-microsoft.com"], "tags": [], "cpes": []}

reverse_dns:
  staticview.microsoft.com,wwwqa.microsoft.com,reserved-by-avm.ptr.network,microsoft.com,www.microsoft.com,c.s-microsoft.com,privacy.microsoft.com,i.s-microsoft.com


indicator: 91.184.240.223
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: reserved-by-avm.ptr.network
hosting_provider: cpe:/a:google:web_server
queried_at: 2026-05-25T18:08:00.342499
raw_data:
  {"ports": [443], "vulns": [], "hostnames": ["reserved-by-avm.ptr.network"], "tags": ["self-signed"], "cpes": ["cpe:/a:google:web_server"]}


indicator: 91.184.240.228
indicator_type: ipv4
source: shodan
reverse_dns: max.ru,dearadvertisement.ptr.network
hosting_provider: cpe:/a:f5:nginx
queried_at: 2026-05-25T18:08:02.104312
raw_data:
  {"ports": [443, 3000], "vulns": [], "hostnames": ["max.ru", "dearadvertisement.ptr.network"], "tags": [], "cpes": ["cpe:/a:f5:nginx"]}


indicator: 91.184.240.229
indicator_type: ipv4
source: shodan
reverse_dns: 00.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-25T18:08:03.868780
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["00.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.184.240.232
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: reserved-by-avm.ptr.network
hosting_provider: cpe:/o:linux:linux_kernel,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx:1.24.0
queried_at: 2026-05-25T18:08:07.383167
raw_data:
  {"ports": [80], "vulns": ["CVE-2025-23419", "CVE-2023-44487"], "hostnames": ["reserved-by-avm.ptr.network"], "tags": ["eol-product"], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx:1.24.0"]}


indicator: 91.184.240.240
indicator_type: ipv4
source: shodan
reverse_dns: demonic-silver.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-25T18:08:09.135054
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["demonic-silver.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.184.240.37
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: reserved-by-avm.ptr.network
hosting_provider: cpe:/a:google:web_server
queried_at: 2026-05-25T18:08:16.195286
raw_data:
  {"ports": [443, 1080, 3128, 8080, 9000], "vulns": [], "hostnames": ["reserved-by-avm.ptr.network"], "tags": ["self-signed"], "cpes": ["cpe:/a:google:web_server"]}


indicator: 91.184.240.4
indicator_type: ipv4
source: shodan
reverse_dns: jaykifa.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-25T18:08:17.980309
raw_data:
  {"ports": [2222], "vulns": [], "hostnames": ["jaykifa.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.184.240.48
indicator_type: ipv4
source: shodan
reverse_dns: rattymoccasin.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-25T18:08:21.528948
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["rattymoccasin.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.184.240.51
indicator_type: ipv4
source: shodan
reverse_dns: unwieldyfly.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-25T18:08:25.125402
raw_data:
  {"ports": [443], "vulns": [], "hostnames": ["unwieldyfly.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.184.240.52
indicator_type: ipv4
source: shodan
queried_at: 2026-05-25T18:08:26.900604
raw_data:
  {"ports": [443], "vulns": [], "hostnames": ["yandex.com", "yandex.uz", "yandex.co.il", "ya.ru", "yandex.aero", "yandex.ee", "yandex.net", "yandex.ru", "yandex.lv", "yandex.it", "yandex.fr", "yandex.tr", "yandex.tj", "yandex.md", "yandex.com.am", "yandex.com.ge", "yandex.kz", "yandex.com.tr", "yandex.lt", "yandex.org", "xn--d1acpjx3f.xn--p1ai", "yandex.by", "yandex.az", "yandex.tm", "yandex.de", "swedishstronghold.ptr.network", "yandex.jobs"], "tags": [], "cpes": []}

reverse_dns:
  yandex.com,yandex.uz,yandex.co.il,ya.ru,yandex.aero,yandex.ee,yandex.net,yandex.ru,yandex.lv,yandex.it,yandex.fr,yandex.tr,yandex.tj,yandex.md,yandex.com.am,yandex.com.ge,yandex.kz,yandex.com.tr,yandex.lt,yandex.org,xn--d1acpjx3f.xn--p1ai,yandex.by,yandex.az,yandex.tm,yandex.de,swedishstronghold.ptr.network,yandex.jobs


indicator: 91.184.240.67
indicator_type: ipv4
source: shodan
reverse_dns: numerousstretch.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-25T18:08:37.524991
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["numerousstretch.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.184.240.71
indicator_type: ipv4
source: shodan
reverse_dns: nationalazure.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-25T18:08:39.324118
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["nationalazure.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.184.240.72
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: mendon-lite.ptr.network,pma.tonmendon.com,www.pma.tonmendon.com,reserved-by-avm.ptr.network
queried_at: 2026-05-25T18:08:41.112171
raw_data:
  {"ports": [80, 443, 8000, 8080], "vulns": ["CVE-2025-55753", "CVE-2025-66200", "CVE-2013-0942", "CVE-2026-29169", "CVE-2026-24072", "CVE-2025-14178", "CVE-2013-2220", "CVE-2026-33857", "CVE-2026-34059", "CVE-2026-33006", "CVE-2025-14177", "CVE-2026-33523", "CVE-2025-14180", "CVE-2011-1176", "CVE-2009-2299", "CVE-2012-4360", "CVE-2026-34032", "CVE-2009-0796", "CVE-2013-2765", "CVE-2012-3526", "CVE-2025-23419", "CVE-2025-65082", "CVE-2024-3566", "CVE-2007-3205", "CVE-2013-0941", "CVE-2011-2688", "

hosting_provider:
  cpe:/a:apache:http_server:2.4.65,cpe:/a:encode:uvicorn,cpe:/a:php:php:8.3.26,cpe:/a:f5:nginx:1.25.3,cpe:/a:python:python,cpe:/a:jquery:jquery


indicator: 91.184.240.73
indicator_type: ipv4
source: shodan
reverse_dns: straightforwardlime.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-25T18:08:42.966043
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["straightforwardlime.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.184.240.83
indicator_type: ipv4
source: shodan
reverse_dns: JosefGartner.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-25T18:08:48.339284
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["JosefGartner.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.184.240.93
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: dns.sista-masista.ru,dashing-button.ptr.network
hosting_provider: cpe:/a:google:web_server
queried_at: 2026-05-25T18:08:59.379725
raw_data:
  {"ports": [443, 444], "vulns": [], "hostnames": ["dns.sista-masista.ru", "dashing-button.ptr.network"], "tags": ["self-signed"], "cpes": ["cpe:/a:google:web_server"]}


indicator: 91.184.241.103
indicator_type: ipv4
source: shodan
reverse_dns: reserved-by-avm.ptr.network,max.ru
queried_at: 2026-05-25T18:09:04.756499
raw_data:
  {"ports": [443, 2096], "vulns": [], "hostnames": ["reserved-by-avm.ptr.network", "max.ru"], "tags": [], "cpes": []}


indicator: 91.184.241.108
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux,cpe:/a:apache:traffic_server
queried_at: 2026-05-25T18:09:08.315146
raw_data:
  {"ports": [22, 443], "vulns": [], "hostnames": ["s.aolcdn.com", "commsdata.api.yahoo.com", "es-us.vida-estilo.yahoo.com", "next.health.yahoo.com", "s.yimg.com", "zero.ptr.network", "de.nachrichten.yahoo.com", "video-api.sapi.yahoo.com", "ymail.com", "o.aolcdn.com", "cdn.launch3d.com", "gallery.tv.widgets.yahoo.com", "de.kino.yahoo.com", "cdn.js7k.com", "video.media.yql.yahoo.com", "next.tech.yahoo.com", "es-us.noticias.yahoo.com", "fr-ca.rogers.yahoo.com", "api.digitalhomeservices.yahoo.com", "c

reverse_dns:
  s.aolcdn.com,commsdata.api.yahoo.com,es-us.vida-estilo.yahoo.com,next.health.yahoo.com,s.yimg.com,zero.ptr.network,de.nachrichten.yahoo.com,video-api.sapi.yahoo.com,ymail.com,o.aolcdn.com,cdn.launch3d.com,gallery.tv.widgets.yahoo.com,de.kino.yahoo.com,cdn.js7k.com,video.media.yql.yahoo.com,next.tech.yahoo.com,es-us.noticias.yahoo.com,fr-ca.rogers.yahoo.com,api.digitalhomeservices.yahoo.com,ca.rogers.yahoo.com,br.financas.yahoo.com,es-us.finanzas.yahoo.com,admetrics.uadapp.yahoo.com


indicator: 91.184.241.116
indicator_type: ipv4
source: shodan
reverse_dns: cloudypot.ptr.network
hosting_provider: cpe:/o:linux:linux_kernel,cpe:/a:openbsd:openssh:9.2p1,cpe:/o:debian:debian_linux
queried_at: 2026-05-25T18:09:13.629571
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["cloudypot.ptr.network"], "tags": [], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:9.2p1", "cpe:/o:debian:debian_linux"]}


indicator: 91.184.241.118
indicator_type: ipv4
source: shodan
reverse_dns: volatile-exchange.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-25T18:09:15.730321
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["volatile-exchange.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.184.241.13
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: neat-snail.ptr.network,strat.apptovibe.com
queried_at: 2026-05-25T18:09:21.101392
raw_data:
  {"ports": [443, 2222], "vulns": ["CVE-2025-23419", "CVE-2023-44487"], "hostnames": ["neat-snail.ptr.network", "strat.apptovibe.com"], "tags": ["eol-product"], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx:1.24.0"]}

hosting_provider:
[cell repeats an earlier one in this file: 107 characters]


indicator: 91.184.241.147
indicator_type: ipv4
source: shodan
reverse_dns: reserved-by-avm.ptr.network
hosting_provider: cpe:/a:golang:go,cpe:/a:caddyserver:caddy
queried_at: 2026-05-25T18:09:26.397635
raw_data:
  {"ports": [80], "vulns": [], "hostnames": ["reserved-by-avm.ptr.network"], "tags": [], "cpes": ["cpe:/a:golang:go", "cpe:/a:caddyserver:caddy"]}


indicator: 91.184.241.151
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: reserved-by-avm.ptr.network
queried_at: 2026-05-25T18:09:28.179816
raw_data:
  {"ports": [3389], "vulns": [], "hostnames": ["reserved-by-avm.ptr.network"], "tags": ["self-signed"], "cpes": []}


indicator: 91.184.241.163
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: different-sponge.ptr.network,rknserver.ddns.net
hosting_provider: cpe:/a:f5:nginx:1.18.0,cpe:/o:linux:linux_kernel,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-25T18:09:35.255417
raw_data:
  {"ports": [80, 8443], "vulns": ["CVE-2021-23017", "CVE-2025-23419", "CVE-2023-44487", "CVE-2021-3618"], "hostnames": ["different-sponge.ptr.network", "rknserver.ddns.net"], "tags": ["eol-product"], "cpes": ["cpe:/a:f5:nginx:1.18.0", "cpe:/o:linux:linux_kernel", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.184.241.164
indicator_type: ipv4
source: shodan
reverse_dns: pinkrabbit.ptr.network,max.ru
queried_at: 2026-05-25T18:09:37.031799
raw_data:
  {"ports": [443, 20000], "vulns": [], "hostnames": ["pinkrabbit.ptr.network", "max.ru"], "tags": [], "cpes": []}


indicator: 91.184.241.168
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: reserved-by-avm.ptr.network
hosting_provider: cpe:/a:google:web_server
queried_at: 2026-05-25T18:09:40.608608
raw_data:
  {"ports": [443, 5000], "vulns": [], "hostnames": ["reserved-by-avm.ptr.network"], "tags": ["self-signed"], "cpes": ["cpe:/a:google:web_server"]}


indicator: 91.184.241.169
indicator_type: ipv4
source: shodan
reverse_dns: agpwp.ankodo.dev,tealiron.ptr.network
hosting_provider: cpe:/a:wordpress:wordpress,cpe:/a:mysql:mysql,cpe:/a:php:php:8.2.29,cpe:/a:f5:nginx:1.28.3
queried_at: 2026-05-25T18:09:42.373346
raw_data:
  {"ports": [80, 443], "vulns": ["CVE-2025-14178", "CVE-2007-3205", "CVE-2025-14180", "CVE-2025-14177", "CVE-2024-3566", "CVE-2013-2220"], "hostnames": ["agpwp.ankodo.dev", "tealiron.ptr.network"], "tags": [], "cpes": ["cpe:/a:wordpress:wordpress", "cpe:/a:mysql:mysql", "cpe:/a:php:php:8.2.29", "cpe:/a:f5:nginx:1.28.3"]}


indicator: 91.184.241.185
indicator_type: ipv4
source: shodan
reverse_dns: reserved-by-avm.ptr.network
queried_at: 2026-05-25T18:09:49.464897
raw_data:
  {"ports": [2121], "vulns": [], "hostnames": ["reserved-by-avm.ptr.network"], "tags": [], "cpes": []}


indicator: 91.184.241.209
indicator_type: ipv4
source: shodan
reverse_dns: reserved-by-avm.ptr.network,aemidisv.duckdns.org
queried_at: 2026-05-25T18:09:56.541392
raw_data:
  {"ports": [22, 443, 8443], "vulns": [], "hostnames": ["reserved-by-avm.ptr.network", "aemidisv.duckdns.org"], "tags": [], "cpes": []}


indicator: 91.184.241.22
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: reserved-by-avm.ptr.network,brahmakumaris.ru
hosting_provider: cpe:/a:google:web_server,cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-25T18:10:02.014559
raw_data:
  {"ports": [22, 443, 8080, 8443], "vulns": [], "hostnames": ["reserved-by-avm.ptr.network", "brahmakumaris.ru"], "tags": ["self-signed"], "cpes": ["cpe:/a:google:web_server", "cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.184.241.23
indicator_type: ipv4
source: shodan
reverse_dns: www.dreamteam.run,reserved-by-avm.ptr.network,dreamteam.run
hosting_provider: cpe:/a:f5:nginx
queried_at: 2026-05-25T18:10:11.521350
raw_data:
  {"ports": [53, 80, 443], "vulns": [], "hostnames": ["www.dreamteam.run", "reserved-by-avm.ptr.network", "dreamteam.run"], "tags": [], "cpes": ["cpe:/a:f5:nginx"]}


indicator: 91.184.241.233
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: reserved-by-avm.ptr.network
hosting_provider: cpe:/a:google:web_server
queried_at: 2026-05-25T18:10:15.284595
raw_data:
  {"ports": [4433, 8080], "vulns": [], "hostnames": ["reserved-by-avm.ptr.network"], "tags": ["self-signed"], "cpes": ["cpe:/a:google:web_server"]}


indicator: 91.184.241.236
indicator_type: ipv4
source: shodan
reverse_dns: reserved-by-avm.ptr.network
hosting_provider: cpe:/a:caddyserver:caddy,cpe:/a:golang:go,cpe:/a:webmin:webmin,cpe:/a:perl:perl
queried_at: 2026-05-25T18:10:17.162243
raw_data:
  {"ports": [80, 8080], "vulns": [], "hostnames": ["reserved-by-avm.ptr.network"], "tags": [], "cpes": ["cpe:/a:caddyserver:caddy", "cpe:/a:golang:go", "cpe:/a:webmin:webmin", "cpe:/a:perl:perl"]}


indicator: 91.184.241.24
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: abandoned-stop.ptr.network
hosting_provider: cpe:/a:f5:nginx
queried_at: 2026-05-25T18:10:19.057270
raw_data:
  {"ports": [80, 995], "vulns": [], "hostnames": ["abandoned-stop.ptr.network"], "tags": ["self-signed"], "cpes": ["cpe:/a:f5:nginx"]}


indicator: 91.184.241.251
indicator_type: ipv4
source: shodan
reverse_dns: images.apple.com,illowing-weather.ptr.network,www.apple.com,www.apple.com.cn
queried_at: 2026-05-25T18:10:24.849910
raw_data:
  {"ports": [443], "vulns": [], "hostnames": ["images.apple.com", "illowing-weather.ptr.network", "www.apple.com", "www.apple.com.cn"], "tags": [], "cpes": []}


indicator: 91.184.241.253
indicator_type: ipv4
source: shodan
reverse_dns: hangingshow.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux,cpe:/a:ntp:ntp:3
queried_at: 2026-05-25T18:10:26.653488
raw_data:
  {"ports": [22, 123], "vulns": [], "hostnames": ["hangingshow.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:ntp:ntp:3"]}


indicator: 91.184.241.30
indicator_type: ipv4
source: shodan
reverse_dns: reserved-by-avm.ptr.network,gate.legioncloud.ru
queried_at: 2026-05-25T18:10:30.457444
raw_data:
  {"ports": [443], "vulns": [], "hostnames": ["reserved-by-avm.ptr.network", "gate.legioncloud.ru"], "tags": [], "cpes": []}


indicator: 91.184.241.37
indicator_type: ipv4
source: shodan
city: self-signed,starttls
reverse_dns: noiselessvoice.ptr.network
hosting_provider: cpe:/a:postfix:postfix
queried_at: 2026-05-25T18:10:32.359440
raw_data:
  {"ports": [25, 53, 8888], "vulns": [], "hostnames": ["noiselessvoice.ptr.network"], "tags": ["self-signed", "starttls"], "cpes": ["cpe:/a:postfix:postfix"]}


indicator: 91.184.241.39
indicator_type: ipv4
source: shodan
reverse_dns: likeable-picture.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-25T18:10:34.204455
raw_data:
  {"ports": [2222], "vulns": [], "hostnames": ["likeable-picture.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.184.241.59
indicator_type: ipv4
source: shodan
reverse_dns: www.sbrf.ru,www.sberbank.ru,sbrf.ru,barabu.ptr.network,sberbank.ru
hosting_provider: cpe:/a:f5:big-ip_application_security_manager
queried_at: 2026-05-25T18:10:45.278789
raw_data:
  {"ports": [8443], "vulns": [], "hostnames": ["www.sbrf.ru", "www.sberbank.ru", "sbrf.ru", "barabu.ptr.network", "sberbank.ru"], "tags": [], "cpes": ["cpe:/a:f5:big-ip_application_security_manager"]}


indicator: 91.184.241.76
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: reserved-by-avm.ptr.network,91.184.241.76.sslip.io
queried_at: 2026-05-25T18:10:54.485930
raw_data:
  {"ports": [443], "vulns": ["CVE-2025-23419", "CVE-2023-44487"], "hostnames": ["reserved-by-avm.ptr.network", "91.184.241.76.sslip.io"], "tags": ["eol-product"], "cpes": ["cpe:/a:getbootstrap:bootstrap", "cpe:/a:jquery:jquery", "cpe:/o:linux:linux_kernel", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx:1.24.0"]}

hosting_provider:
  cpe:/a:getbootstrap:bootstrap,cpe:/a:jquery:jquery,cpe:/o:linux:linux_kernel,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx:1.24.0


indicator: 91.184.241.85
indicator_type: ipv4
source: shodan
reverse_dns: alfhela-serv.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-25T18:10:59.999486
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["alfhela-serv.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.184.241.92
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: winsixed.ptr.network
hosting_provider: cpe:/a:google:web_server
queried_at: 2026-05-25T18:11:09.221566
raw_data:
  {"ports": [10443], "vulns": [], "hostnames": ["winsixed.ptr.network"], "tags": ["self-signed"], "cpes": ["cpe:/a:google:web_server"]}


indicator: 91.184.241.93
indicator_type: ipv4
source: shodan
reverse_dns: dev.captaingnome.ru,reserved-by-avm.ptr.network
queried_at: 2026-05-25T18:11:11.040400
raw_data:
  {"ports": [443], "vulns": [], "hostnames": ["dev.captaingnome.ru", "reserved-by-avm.ptr.network"], "tags": [], "cpes": []}


indicator: 91.184.241.95
indicator_type: ipv4
source: shodan
reverse_dns: cdnjs.cloudflare.com,reserved-by-avm.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux,cpe:/a:cloudflare:cloudflare
queried_at: 2026-05-25T18:11:12.885341
raw_data:
  {"ports": [22, 443, 8080], "vulns": [], "hostnames": ["cdnjs.cloudflare.com", "reserved-by-avm.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:cloudflare:cloudflare"]}


indicator: 91.184.241.99
indicator_type: ipv4
source: shodan
reverse_dns: prime-elbow.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-25T18:11:14.718413
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["prime-elbow.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.184.242.110
indicator_type: ipv4
source: shodan
reverse_dns: grimblue.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-25T18:11:25.524582
raw_data:
  {"ports": [22, 8081, 9999], "vulns": [], "hostnames": ["grimblue.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.184.242.171
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: literatecause-n2.ptr.network
queried_at: 2026-05-25T18:12:01.314708
raw_data:
  {"ports": [22, 80], "vulns": ["CVE-2025-23419", "CVE-2023-44487"], "hostnames": ["literatecause-n2.ptr.network"], "tags": ["eol-product"], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx:1.24.0"]}

hosting_provider:
[cell repeats an earlier one in this file: 107 characters]


indicator: 91.184.242.182
indicator_type: ipv4
source: shodan
city: database
hosting_provider: cpe:/a:postgresql:postgresql
queried_at: 2026-05-25T18:12:06.696212
raw_data:
  {"ports": [5432], "vulns": [], "hostnames": [], "tags": ["database"], "cpes": ["cpe:/a:postgresql:postgresql"]}


indicator: 91.184.242.189
indicator_type: ipv4
source: shodan
reverse_dns: amahasla.site,max.ru
queried_at: 2026-05-25T18:12:15.591945
raw_data:
  {"ports": [443, 8443], "vulns": [], "hostnames": ["amahasla.site", "max.ru"], "tags": [], "cpes": []}


indicator: 91.184.242.20
indicator_type: ipv4
source: shodan
queried_at: 2026-05-25T18:12:22.790124
raw_data:
  {"ports": [443], "vulns": [], "hostnames": ["yandex.aero", "yandex.ee", "yandex.com.am", "yandex.uz", "yandex.kz", "yandex.net", "xn--d1acpjx3f.xn--p1ai", "yandex.jobs", "ya.ru", "yandex.ru", "unusualmoccasin.ptr.network", "yandex.tm", "yandex.lt", "yandex.de", "yandex.it", "yandex.by", "yandex.tj", "yandex.co.il", "yandex.com", "yandex.az", "yandex.org", "yandex.com.tr", "yandex.tr", "yandex.lv", "yandex.com.ge", "yandex.fr", "yandex.md"], "tags": [], "cpes": []}

reverse_dns:
  yandex.aero,yandex.ee,yandex.com.am,yandex.uz,yandex.kz,yandex.net,xn--d1acpjx3f.xn--p1ai,yandex.jobs,ya.ru,yandex.ru,unusualmoccasin.ptr.network,yandex.tm,yandex.lt,yandex.de,yandex.it,yandex.by,yandex.tj,yandex.co.il,yandex.com,yandex.az,yandex.org,yandex.com.tr,yandex.tr,yandex.lv,yandex.com.ge,yandex.fr,yandex.md


indicator: 91.184.242.200
indicator_type: ipv4
source: shodan
queried_at: 2026-05-25T18:12:24.576706
raw_data:
  {"ports": [443, 16050], "vulns": [], "hostnames": ["myvisualization.oracle.com", "sites.oracle.com", "itweb.oracle.com", "analytics.covid19.oracle.com", "biapps-fusioncrm.oracle.com", "securesites.oracle.com", "elocation.oracle.com", "m.oracle.com", "scm-fusioncrm.oracle.com", "restgwoci-dr.oracle.com", "appcenter.bronto.com", "myemm.oracle.com", "cn.forums.oracle.com", "container-registry.oracle.com", "restgwoci.oracle.com", "www.covid19-rx.org", "wwwcmsapi.oracle.com", "maps.oracle.com", "cont

reverse_dns:
  myvisualization.oracle.com,sites.oracle.com,itweb.oracle.com,analytics.covid19.oracle.com,biapps-fusioncrm.oracle.com,securesites.oracle.com,elocation.oracle.com,m.oracle.com,scm-fusioncrm.oracle.com,restgwoci-dr.oracle.com,appcenter.bronto.com,myemm.oracle.com,cn.forums.oracle.com,container-registry.oracle.com,restgwoci.oracle.com,www.covid19-rx.org,wwwcmsapi.oracle.com,maps.oracle.com,content.bronto.com,mymobile.oracle.com,blog.bronto.com,wikis.oracle.com,mysites-api.oracle.com,covpn-site-port


indicator: 91.184.242.203
indicator_type: ipv4
source: shodan
city: starttls
reverse_dns: webmail.draconsecurity.ru
queried_at: 2026-05-25T18:12:26.456948
raw_data:
  {"ports": [25], "vulns": [], "hostnames": ["webmail.draconsecurity.ru"], "tags": ["starttls"], "cpes": []}


indicator: 91.184.242.219
indicator_type: ipv4
source: shodan
city: videogame
queried_at: 2026-05-25T18:12:39.073368
raw_data:
  {"ports": [22, 25565], "vulns": [], "hostnames": [], "tags": ["videogame"], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:9.2p1", "cpe:/a:minecraft:minecraft", "cpe:/o:debian:debian_linux"]}

hosting_provider:
  cpe:/o:linux:linux_kernel,cpe:/a:openbsd:openssh:9.2p1,cpe:/a:minecraft:minecraft,cpe:/o:debian:debian_linux


indicator: 91.184.242.221
indicator_type: ipv4
source: shodan
city: starttls
reverse_dns: srv8.pklnd.com
hosting_provider: cpe:/a:f5:nginx
queried_at: 2026-05-25T18:12:42.667827
raw_data:
  {"ports": [80, 110], "vulns": [], "hostnames": ["srv8.pklnd.com"], "tags": ["starttls"], "cpes": ["cpe:/a:f5:nginx"]}


indicator: 91.184.242.239
indicator_type: ipv4
source: shodan
reverse_dns: janwattsart.com
hosting_provider: cpe:/a:f5:nginx:1.28.0
queried_at: 2026-05-25T18:12:49.845576
raw_data:
  {"ports": [443], "vulns": [], "hostnames": ["janwattsart.com"], "tags": [], "cpes": ["cpe:/a:f5:nginx:1.28.0"]}


indicator: 91.184.242.52
indicator_type: ipv4
source: shodan
city: starttls
reverse_dns: srv3.pklnd.com
hosting_provider: cpe:/a:f5:nginx
queried_at: 2026-05-25T18:13:14.698831
raw_data:
  {"ports": [25, 80, 443, 587, 993, 995], "vulns": [], "hostnames": ["srv3.pklnd.com"], "tags": ["starttls"], "cpes": ["cpe:/a:f5:nginx"]}


indicator: 91.184.242.64
indicator_type: ipv4
source: shodan
reverse_dns: vpsarch.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:10.2
queried_at: 2026-05-25T18:13:23.828751
raw_data:
  {"ports": [2222], "vulns": ["CVE-2008-3844", "CVE-2026-35386", "CVE-2026-35385", "CVE-2026-35387", "CVE-2026-35388", "CVE-2023-51767", "CVE-2026-35414", "CVE-2007-2768"], "hostnames": ["vpsarch.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:10.2"]}


indicator: 91.184.242.83
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: colouredblack.ptr.network
hosting_provider: cpe:/a:google:web_server,cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-25T18:13:36.384508
raw_data:
  {"ports": [22, 443], "vulns": [], "hostnames": ["colouredblack.ptr.network"], "tags": ["self-signed"], "cpes": ["cpe:/a:google:web_server", "cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.184.242.98
indicator_type: ipv4
source: shodan
reverse_dns: modestcar.ptr.network,vivaciouscyan.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-25T18:13:48.844915
raw_data:
  {"ports": [22, 1443], "vulns": [], "hostnames": ["modestcar.ptr.network", "vivaciouscyan.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.184.243.102
indicator_type: ipv4
source: shodan
city: self-signed
queried_at: 2026-05-25T18:13:54.217051
raw_data:
  {"ports": [443, 3000, 4444, 8443], "vulns": [], "hostnames": ["yandex.com", "yandex.uz", "yandex.co.il", "delicatesweater.ptr.network", "ya.ru", "yandex.aero", "yandex.ee", "yandex.net", "yandex.ru", "yandex.lv", "yandex.it", "yandex.fr", "yandex.tr", "yandex.tj", "yandex.md", "yandex.com.am", "yandex.com.ge", "yandex.kz", "yandex.com.tr", "yandex.lt", "yandex.org", "xn--d1acpjx3f.xn--p1ai", "yandex.by", "yandex.az", "yandex.tm", "yandex.de", "yandex.jobs"], "tags": ["self-signed"], "cpes": ["cp

reverse_dns:
  yandex.com,yandex.uz,yandex.co.il,delicatesweater.ptr.network,ya.ru,yandex.aero,yandex.ee,yandex.net,yandex.ru,yandex.lv,yandex.it,yandex.fr,yandex.tr,yandex.tj,yandex.md,yandex.com.am,yandex.com.ge,yandex.kz,yandex.com.tr,yandex.lt,yandex.org,xn--d1acpjx3f.xn--p1ai,yandex.by,yandex.az,yandex.tm,yandex.de,yandex.jobs

hosting_provider:
  cpe:/a:google:web_server,cpe:/a:ntop:ntopng,cpe:/o:canonical:ubuntu_linux,cpe:/o:canonical:ubuntu_linux:24.04.4,cpe:/a:ntop:ntopng:6.6.260324


indicator: 91.184.243.103
indicator_type: ipv4
source: shodan
reverse_dns: max.ru,permissibledog.ptr.network
queried_at: 2026-05-25T18:13:55.988790
raw_data:
  {"ports": [443, 8080], "vulns": [], "hostnames": ["max.ru", "permissibledog.ptr.network"], "tags": [], "cpes": []}


indicator: 91.184.243.11
indicator_type: ipv4
source: shodan
reverse_dns: github.com,moralmeat.ptr.network,www.github.com
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-25T18:14:01.372293
raw_data:
  {"ports": [22, 443], "vulns": [], "hostnames": ["github.com", "moralmeat.ptr.network", "www.github.com"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.184.243.110
indicator_type: ipv4
source: shodan
reverse_dns: serverincognito.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-25T18:14:03.125659
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["serverincognito.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.184.243.112
indicator_type: ipv4
source: shodan
reverse_dns: stanki.ru,institutionalgr.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-25T18:14:04.931229
raw_data:
  {"ports": [22, 443], "vulns": [], "hostnames": ["stanki.ru", "institutionalgr.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.184.243.114
indicator_type: ipv4
source: shodan
reverse_dns: scared-apparatus.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-25T18:14:06.733701
raw_data:
  {"ports": [22, 8080], "vulns": [], "hostnames": ["scared-apparatus.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.184.243.117
indicator_type: ipv4
source: shodan
reverse_dns: ns.cloudflare.com,cloudflare.com,scarychocolate.ptr.network,secondary.cloudflare.com
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux,cpe:/a:cloudflare:cloudflare
queried_at: 2026-05-25T18:14:10.274834
raw_data:
  {"ports": [22, 443], "vulns": [], "hostnames": ["ns.cloudflare.com", "cloudflare.com", "scarychocolate.ptr.network", "secondary.cloudflare.com"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:cloudflare:cloudflare"]}


indicator: 91.184.243.121
indicator_type: ipv4
source: shodan
reverse_dns: skillfulwriter.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-25T18:14:12.052887
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["skillfulwriter.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.184.243.128
indicator_type: ipv4
source: shodan
reverse_dns: benyafin.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-25T18:14:13.837302
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["benyafin.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.184.243.130
indicator_type: ipv4
source: shodan
reverse_dns: mycdn.me,alivedoctor.ptr.network,okcdn.ru
hosting_provider: cpe:/a:apache:http_server
queried_at: 2026-05-25T18:14:17.405867
raw_data:
  {"ports": [443], "vulns": [], "hostnames": ["mycdn.me", "alivedoctor.ptr.network", "okcdn.ru"], "tags": [], "cpes": ["cpe:/a:apache:http_server"]}


indicator: 91.184.243.131
indicator_type: ipv4
source: shodan
reverse_dns: yappyviolet.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-25T18:14:19.200838
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["yappyviolet.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.184.243.134
indicator_type: ipv4
source: shodan
queried_at: 2026-05-25T18:14:20.977265
raw_data:
  {"ports": [443], "vulns": [], "hostnames": ["nocord-tools.ru", "appmetrica.com", "fizard.ru", "www.catboost.ai", "yandexlauncher.com", "yaconnect.com", "market.ru", "thequestion.com", "www.yandex", "yandex-launcher.com", "www.nocord-tools.ru", "yandexdatafactory.com", "appmetrica.ru", "yandex.com.ru", "yandex.market", "yandexdatafactory.ru", "outstep.ru", "www.lunnen.pro", "thequestion.ru", "www.yadi.sk", "yandex.travel", "www.cubits.ru", "123.ya.rs", "boxbot-tools.ru", "eda.rest", "wiki-front.e

reverse_dns:
  nocord-tools.ru,appmetrica.com,fizard.ru,www.catboost.ai,yandexlauncher.com,yaconnect.com,market.ru,thequestion.com,www.yandex,yandex-launcher.com,www.nocord-tools.ru,yandexdatafactory.com,appmetrica.ru,yandex.com.ru,yandex.market,yandexdatafactory.ru,outstep.ru,www.lunnen.pro,thequestion.ru,www.yadi.sk,yandex.travel,www.cubits.ru,123.ya.rs,boxbot-tools.ru,eda.rest,wiki-front.eva.yandex-team.ru,upset-science.ptr.network,www.catboost.yandex,cubits.ru,www.mutedwear.ru,junion.ru,alisa.ai,pragmahome


indicator: 91.184.243.142
indicator_type: ipv4
source: shodan
reverse_dns: fuzzywrench.ptr.network
hosting_provider: cpe:/a:openresty:openresty,cpe:/a:f5:nginx
queried_at: 2026-05-25T18:14:29.829696
raw_data:
  {"ports": [81, 2376], "vulns": [], "hostnames": ["fuzzywrench.ptr.network"], "tags": [], "cpes": ["cpe:/a:openresty:openresty", "cpe:/a:f5:nginx"]}


indicator: 91.184.243.146
indicator_type: ipv4
source: shodan
reverse_dns: choch.ptr.network,rkn.mkservergamezbt.ru
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-25T18:14:31.580570
raw_data:
  {"ports": [22, 8443, 9443], "vulns": [], "hostnames": ["choch.ptr.network", "rkn.mkservergamezbt.ru"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.184.243.147
indicator_type: ipv4
source: shodan
reverse_dns: willingturquois.ptr.network
hosting_provider: cpe:/a:cloudflare:cloudflare
queried_at: 2026-05-25T18:14:33.349213
raw_data:
  {"ports": [2054, 8000], "vulns": [], "hostnames": ["willingturquois.ptr.network"], "tags": [], "cpes": ["cpe:/a:cloudflare:cloudflare"]}


indicator: 91.184.243.155
indicator_type: ipv4
source: shodan
reverse_dns: starkey.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-25T18:14:36.922376
raw_data:
  {"ports": [22, 5000, 8443], "vulns": [], "hostnames": ["starkey.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.184.243.156
indicator_type: ipv4
source: shodan
city: starttls,self-signed
reverse_dns: slimycat.ptr.network,dayzland.su
hosting_provider: cpe:/a:f5:nginx,cpe:/a:exim:exim:4.97
queried_at: 2026-05-25T18:14:38.699951
raw_data:
  {"ports": [21, 80, 110, 443, 587, 995], "vulns": ["CVE-2025-67896", "CVE-2026-40687", "CVE-2024-39929", "CVE-2023-51766", "CVE-2026-40685", "CVE-2026-40686", "CVE-2025-30232", "CVE-2026-40684"], "hostnames": ["slimycat.ptr.network", "dayzland.su"], "tags": ["starttls", "self-signed"], "cpes": ["cpe:/a:f5:nginx", "cpe:/a:exim:exim:4.97"]}


indicator: 91.184.243.157
indicator_type: ipv4
source: shodan
reverse_dns: governingchocol.ptr.network
queried_at: 2026-05-25T18:14:40.465636
raw_data:
  {"ports": [2222], "vulns": [], "hostnames": ["governingchocol.ptr.network"], "tags": [], "cpes": []}


indicator: 91.184.243.164
indicator_type: ipv4
source: shodan
reverse_dns: fortunatebrown.ptr.network,lateauthority.ptr.network
queried_at: 2026-05-25T18:14:51.108826
raw_data:
  {"ports": [22, 80, 1234, 1337, 1456, 1471, 1501, 2332, 2382, 2435, 2562, 3310, 3388, 3389, 3402, 3523, 3524, 3541, 3551, 3553, 4369, 4449, 4461, 4550, 8080], "vulns": [], "hostnames": ["fortunatebrown.ptr.network", "lateauthority.ptr.network"], "tags": [], "cpes": ["cpe:/o:canonical:ubuntu_linux", "cpe:/a:openbsd:openssh:9.6p1", "cpe:/a:f5:nginx:1.28.2", "cpe:/a:f5:nginx:1.30.0"]}

hosting_provider:
  cpe:/o:canonical:ubuntu_linux,cpe:/a:openbsd:openssh:9.6p1,cpe:/a:f5:nginx:1.28.2,cpe:/a:f5:nginx:1.30.0


indicator: 91.184.243.168
indicator_type: ipv4
source: shodan
reverse_dns: rambunctious-toes.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-25T18:14:54.681667
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["rambunctious-toes.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.184.243.173
indicator_type: ipv4
source: shodan
reverse_dns: cleverblack.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-25T18:14:58.257656
raw_data:
  {"ports": [22, 8000], "vulns": [], "hostnames": ["cleverblack.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.184.243.176
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: dangerouschocol-2.ptr.network
queried_at: 2026-05-25T18:15:01.975922
raw_data:
  {"ports": [3389], "vulns": [], "hostnames": ["dangerouschocol-2.ptr.network"], "tags": ["self-signed"], "cpes": []}


indicator: 91.184.243.18
indicator_type: ipv4
source: shodan
reverse_dns: vestalkittens-n2.ptr.network
hosting_provider: cpe:/a:golang:go,cpe:/a:caddyserver:caddy
queried_at: 2026-05-25T18:15:07.485968
raw_data:
  {"ports": [80, 8083], "vulns": [], "hostnames": ["vestalkittens-n2.ptr.network"], "tags": [], "cpes": ["cpe:/a:golang:go", "cpe:/a:caddyserver:caddy"]}


indicator: 37.221.66.1
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-25T18:15:30.868681
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS200019 alexhost srl", "indicator": "37.221.66.1", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 37.221.66.2
indicator_type: ipv4
source: otx
country: RU
reverse_dns: jellyfin.209520.xyz,209520.xyz
queried_at: 2026-05-25T18:15:33.087276
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS200019 alexhost srl", "indicator": "37.221.66.2", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["jellyfin.209520.xyz", "209520.xyz"]}


indicator: 37.221.66.4
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-25T18:15:50.014970
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS200019 alexhost srl", "indicator": "37.221.66.4", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 37.221.66.5
indicator_type: ipv4
source: otx
country: RU
reverse_dns: personalmistress.com,jpm-idov.com
queried_at: 2026-05-25T18:15:52.338961
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS200019 alexhost srl", "indicator": "37.221.66.5", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["personalmistress.com", "jpm-idov.com"]}


indicator: 37.221.66.7
indicator_type: ipv4
source: otx
country: RU
reverse_dns: leatherbag-design.com
queried_at: 2026-05-25T18:15:55.041676
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS200019 alexhost srl", "indicator": "37.221.66.7", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["leatherbag-design.com"]}


indicator: 37.221.66.8
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-25T18:15:58.138531
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS200019 alexhost srl", "indicator": "37.221.66.8", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 76, "malware_samples": [], "passive_dns": ["mainmide.online", "nevertell2.duckdns.org", "msgshr.com", "alternatifw88id.com", "unnionbannk.lovesalubrity.com", "suncoastcrediitumion.mixiricanews.com", "unionnbaank.lovesalubrity.com", "firlsthorilzon.neuralatlantic.com",

reverse_dns:
  mainmide.online,nevertell2.duckdns.org,msgshr.com,alternatifw88id.com,unnionbannk.lovesalubrity.com,suncoastcrediitumion.mixiricanews.com,unionnbaank.lovesalubrity.com,firlsthorilzon.neuralatlantic.com,filrtshorlizon.denaira.com,firstshorlizon.denaira.com


indicator: 37.221.66.10
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-25T18:16:15.049150
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS200019 alexhost srl", "indicator": "37.221.66.10", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 37.221.66.11
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-25T18:16:18.276178
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS200019 alexhost srl", "indicator": "37.221.66.11", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 45, "malware_samples": [], "passive_dns": ["www.securitication.cam", "securitication.cam", "securityadd.cam", "shpotech.cam", "gamblerunity.com", "unlfyfcu.sndanalytics.com", "sunncolastcrelditunlion.rudygiulianic.com", "vsecu.bit-die.com", "synlcolastlcredltunlon.co

reverse_dns:
  www.securitication.cam,securitication.cam,securityadd.cam,shpotech.cam,gamblerunity.com,unlfyfcu.sndanalytics.com,sunncolastcrelditunlion.rudygiulianic.com,vsecu.bit-die.com,synlcolastlcredltunlon.cougarbearbobcat.com,suncoastcerdltunlon.cougarbearbobcat.com


indicator: 37.221.66.12
indicator_type: ipv4
source: otx
country: RU
reverse_dns: www.larserntoubro.com,ripcordnews.shop,larserntoubro.com,groupscandi.com,onlylovesite.online
queried_at: 2026-05-25T18:16:21.957616
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS200019 alexhost srl", "indicator": "37.221.66.12", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 5, "malware_samples": [], "passive_dns": ["www.larserntoubro.com", "ripcordnews.shop", "larserntoubro.com", "groupscandi.com", "onlylovesite.online"]}


indicator: 37.221.66.13
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-25T18:16:28.991982
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS200019 alexhost srl", "indicator": "37.221.66.13", "tags": [], "pulses": ["Cobalt Strike - C2 - Direcciones IPs - Julio 2023"], "malware_count": 0, "passive_dns_count": 12, "malware_samples": [], "passive_dns": ["sportslivehub.com", "dev.sportslivehub.com", "stage.sportslivehub.com", "test.sportslivehub.com", "www.sportslivehub.com", "decnetralaand.myagrimate.com", "decnterlaand.ale

reverse_dns:
  sportslivehub.com,dev.sportslivehub.com,stage.sportslivehub.com,test.sportslivehub.com,www.sportslivehub.com,decnetralaand.myagrimate.com,decnterlaand.alexrumak.com,decentratend.alexrumak.com,suffollkcfu.chheung.com,suffolkscfu.profitscene.com


indicator: 37.221.66.14
indicator_type: ipv4
source: otx
country: RU
reverse_dns: rcwrde.space
queried_at: 2026-05-25T18:16:31.227523
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS200019 alexhost srl", "indicator": "37.221.66.14", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["rcwrde.space"]}


indicator: 37.221.67.1
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-25T18:16:47.472081
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS200019 alexhost srl", "indicator": "37.221.67.1", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 37.221.67.2
indicator_type: ipv4
source: otx
country: RU
reverse_dns: c-f-sex.com,www.welkomhierzo.nl,welkomhierzo.nl,alldaynews.online
queried_at: 2026-05-25T18:16:49.674862
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS200019 alexhost srl", "indicator": "37.221.67.2", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 4, "malware_samples": [], "passive_dns": ["c-f-sex.com", "www.welkomhierzo.nl", "welkomhierzo.nl", "alldaynews.online"]}


indicator: 37.221.67.3
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-25T18:16:54.779047
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS200019 alexhost srl", "indicator": "37.221.67.3", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 37.221.67.4
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-25T18:16:57.304367
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS200019 alexhost srl", "indicator": "37.221.67.4", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 9, "malware_samples": [], "passive_dns": ["reprogrammation-instructions.com", "instructions-reprogrammation.com", "stealthiest.live", "cheslep.live", "aldons.live", "bartosch-spedition.com", "linkshrtnr.ug", "tdtrust.ac.ug", "mintdating.online"]}

reverse_dns:
  reprogrammation-instructions.com,instructions-reprogrammation.com,stealthiest.live,cheslep.live,aldons.live,bartosch-spedition.com,linkshrtnr.ug,tdtrust.ac.ug,mintdating.online


indicator: 37.221.67.5
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-25T18:17:00.622769
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS200019 alexhost srl", "indicator": "37.221.67.5", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 6, "malware_samples": [], "passive_dns": ["perspective.abcbarbecue.xyz", "paymentsecurentflix.info", "sema-tec.us", "gns92.top", "smtracking.killipaycheque.com", "t.gns92.top"]}

reverse_dns:
  perspective.abcbarbecue.xyz,paymentsecurentflix.info,sema-tec.us,gns92.top,smtracking.killipaycheque.com,t.gns92.top


indicator: 37.221.67.7
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-25T18:17:03.399645
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS200019 alexhost srl", "indicator": "37.221.67.7", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 13, "malware_samples": [], "passive_dns": ["www.ashleyxcosmetics.info", "admin.ashleyxcosmetics.info", "ashleyxcosmetics.info", "xn--netflix-korltozs-qmbd.com", "netfllx.co", "netflix-korlatozas.com", "sharp-perlman.37-221-67-7.plesk.page", "personal-olb.net", "www.pe

reverse_dns:
  www.ashleyxcosmetics.info,admin.ashleyxcosmetics.info,ashleyxcosmetics.info,xn--netflix-korltozs-qmbd.com,netfllx.co,netflix-korlatozas.com,sharp-perlman.37-221-67-7.plesk.page,personal-olb.net,www.personalolb.net,personalolb.net


indicator: 37.221.67.9
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-25T18:17:05.810675
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS200019 alexhost srl", "indicator": "37.221.67.9", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 37.221.67.12
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-25T18:17:08.411397
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS200019 alexhost srl", "indicator": "37.221.67.12", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 15, "malware_samples": [], "passive_dns": ["eloquent-vaughan.37-221-67-12.plesk.page", "deutschepost-web.de", "www.goofy-bouman.37-221-67-12.plesk.page", "goofy-bouman.37-221-67-12.plesk.page", "www.es-amazon.com", "m12.mediaworldscreative.com", "www.ctt-e.com", "www

reverse_dns:
  eloquent-vaughan.37-221-67-12.plesk.page,deutschepost-web.de,www.goofy-bouman.37-221-67-12.plesk.page,goofy-bouman.37-221-67-12.plesk.page,www.es-amazon.com,m12.mediaworldscreative.com,www.ctt-e.com,www.receber-ctt.com,es-amazon.com,pacotes-ctt.com


indicator: 37.221.67.13
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-25T18:17:11.249542
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS200019 alexhost srl", "indicator": "37.221.67.13", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["login.cxkxcb279a3t78s2jwqlxms4u23dkf84y41q64pc.xyz", "cxkxcb279a3t78s2jwqlxms4u23dkf84y41q64pc.xyz", "mail.kitchenknives.life"]}

reverse_dns:
  login.cxkxcb279a3t78s2jwqlxms4u23dkf84y41q64pc.xyz,cxkxcb279a3t78s2jwqlxms4u23dkf84y41q64pc.xyz,mail.kitchenknives.life


indicator: 37.221.67.14
indicator_type: ipv4
source: otx
country: RU
hosting_provider: auto-generated security
queried_at: 2026-05-25T18:17:14.170644
raw_data:
  {"pulse_count": 21, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS200019 alexhost srl", "indicator": "37.221.67.14", "tags": ["auto-generated security"], "pulses": ["jan2,2025 clone Auto-generated Pulse CREATED 1 YEAR AGO MODIFIED 1 YEAR AGO by AlessandroFiori", "jan2.2025clone-Auto-generated Pulse CREATED 1 YEAR AGO MODIFIED 1 YEAR AGO by AlessandroFiori", "jan 2 25 clone Auto-generated Pulse CREATED 1 YEAR AGO MODIFIED 1 YEAR AGO by AlessandroF

reverse_dns:
  readthenovel.com,manivertese.xyz,moncompte-iden.com,manotevere.com,tamanevo.com,namovoto.info,expedition-commande.com,antaiamandes-gouv.com,moncompte-auth.info,munovato.com


indicator: 37.221.67.10
indicator_type: ipv4
source: otx
country: RU
reverse_dns: rbcroyalcanada.sc.ug,linkshort.ac.ug,www.rbcroyalcanada.sc.ug,builderinc.org
queried_at: 2026-05-25T18:17:17.123810
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS200019 alexhost srl", "indicator": "37.221.67.10", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 4, "malware_samples": [], "passive_dns": ["rbcroyalcanada.sc.ug", "linkshort.ac.ug", "www.rbcroyalcanada.sc.ug", "builderinc.org"]}


indicator: 37.221.67.16
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-25T18:17:22.777871
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS200019 alexhost srl", "indicator": "37.221.67.16", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 43, "malware_samples": [], "passive_dns": ["fininsite.xyz", "rthelp.live", "connexion-abonnement.com", "paiement-mon-abonnement.com", "www-mondialrelay.com", "colis-mondialrelay.net", "www.colis-mondialrelay.net", "aqhelp.info", "brhelp.info", "cshelp38.info", "mscar

reverse_dns:
  fininsite.xyz,rthelp.live,connexion-abonnement.com,paiement-mon-abonnement.com,www-mondialrelay.com,colis-mondialrelay.net,www.colis-mondialrelay.net,aqhelp.info,brhelp.info,cshelp38.info


indicator: 37.221.67.24
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-25T18:17:40.273822
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS200019 alexhost srl", "indicator": "37.221.67.24", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 37.221.66.33
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-25T18:17:43.854592
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS200019 alexhost srl", "indicator": "37.221.66.33", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 196.251.69.2
indicator_type: ipv4
source: otx
country: GH
queried_at: 2026-05-25T18:17:46.011054
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Ghana", "country_code": "GH", "city": null, "asn": "ASNone ", "indicator": "196.251.69.2", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 196.251.69.12
indicator_type: ipv4
source: otx
country: GH
hosting_provider: ,Reverse_SSH,ransomware,Remcos,Hookbot,C2,Havoc,Supershell,Qakbot,malware
queried_at: 2026-05-25T18:17:52.314481
raw_data:
  {"pulse_count": 3, "reputation": 0, "country": "Ghana", "country_code": "GH", "city": null, "asn": "ASNone ", "indicator": "196.251.69.12", "tags": ["", "Reverse_SSH", "ransomware", "Remcos", "Hookbot", "C2", "Havoc", "Supershell", "Qakbot", "malware", "Mythic", "CobaltStrike", "Interactsh", "Hak5_Cloud_C2", "Deimos", "AsyncRAT", "Pegasus", "Sliver", "NetSupportRAT", "Dcrat"], "pulses": ["ThreatFix", "Twitter Feed - skocherhan - 05-09-2025", "Twitter Feed - drb_ra - 04-09-2025"], "malware_count"


indicator: 196.251.69.52
indicator_type: ipv4
source: otx
country: GH
queried_at: 2026-05-25T18:18:02.938182
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Ghana", "country_code": "GH", "city": null, "asn": "ASNone ", "indicator": "196.251.69.52", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 16, "malware_samples": [], "passive_dns": ["cip-govpko.cc", "www.cip-govpko.cc", "correo-uy-shop.cc", "vip-correoo-uy.cc", "ccorreo-gov-py.cc", "ccreo-shop.cc", "correoshop.cc", "www.ccorreo-gov-py.cc", "ccreoshops.cc", "www.correoo-uy.cc", "correoo-uy.cc", "www.correo-uy-shop.cc", "www.ccorr

reverse_dns:
  cip-govpko.cc,www.cip-govpko.cc,correo-uy-shop.cc,vip-correoo-uy.cc,ccorreo-gov-py.cc,ccreo-shop.cc,correoshop.cc,www.ccorreo-gov-py.cc,ccreoshops.cc,www.correoo-uy.cc


indicator: 196.251.69.62
indicator_type: ipv4
source: otx
country: GH
queried_at: 2026-05-25T18:18:20.114784
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Ghana", "country_code": "GH", "city": null, "asn": "ASNone ", "indicator": "196.251.69.62", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 196.251.69.82
indicator_type: ipv4
source: otx
country: GH
hosting_provider: ,ransomware,malware
queried_at: 2026-05-25T18:18:37.258233
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Ghana", "country_code": "GH", "city": null, "asn": "ASNone ", "indicator": "196.251.69.82", "tags": ["", "ransomware", "malware"], "pulses": ["ThreatFix"], "malware_count": 2, "passive_dns_count": 0, "malware_samples": ["6bdce13169731bbefcc93093c857fb0a7cdb0eba26217316b28b7cbbd92dd11e", "d309fcbf1525b4e3c3cdc730ed52d6ce5abd554ac490204967e304e4d57ed27f"]}


indicator: 196.251.69.92
indicator_type: ipv4
source: otx
country: GH
hosting_provider: 2025,HoneyNet Connect,01.10.2025
queried_at: 2026-05-25T18:18:54.453716
raw_data:
  {"pulse_count": 3, "reputation": 0, "country": "Ghana", "country_code": "GH", "city": null, "asn": "ASNone ", "indicator": "196.251.69.92", "tags": ["2025", "HoneyNet Connect", "01.10.2025"], "pulses": ["\"AS401120 cheapy_host LLC\" clone credit skocherhan", "AS401120 cheapy_host LLC", "HoneyPot Connect 01.10.2025"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 196.251.69.102
indicator_type: ipv4
source: otx
country: GH
queried_at: 2026-05-25T18:19:11.380769
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Ghana", "country_code": "GH", "city": null, "asn": "ASNone ", "indicator": "196.251.69.102", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 196.251.69.142
indicator_type: ipv4
source: otx
country: GH
queried_at: 2026-05-25T18:19:59.898674
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Ghana", "country_code": "GH", "city": null, "asn": "ASNone ", "indicator": "196.251.69.142", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 196.251.69.152
indicator_type: ipv4
source: otx
country: GH
queried_at: 2026-05-25T18:20:31.993711
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Ghana", "country_code": "GH", "city": null, "asn": "ASNone ", "indicator": "196.251.69.152", "tags": [], "pulses": ["Malware Filter - Botnet List - 07-11-2025"], "malware_count": 0, "passive_dns_count": 0}


indicator: 196.251.69.212
indicator_type: ipv4
source: otx
country: GH
queried_at: 2026-05-25T18:21:50.840854
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Ghana", "country_code": "GH", "city": null, "asn": "ASNone ", "indicator": "196.251.69.212", "tags": [], "pulses": ["\"AS401120 cheapy_host LLC\" clone credit skocherhan", "AS401120 cheapy_host LLC"], "malware_count": 0, "passive_dns_count": 0}


indicator: 196.251.69.242
indicator_type: ipv4
source: otx
country: GH
hosting_provider: ,ransomware,malware
queried_at: 2026-05-25T18:22:40.823477
raw_data:
  {"pulse_count": 3, "reputation": 0, "country": "Ghana", "country_code": "GH", "city": null, "asn": "ASNone ", "indicator": "196.251.69.242", "tags": ["", "ransomware", "malware"], "pulses": ["\"AS401120 cheapy_host LLC\" clone credit skocherhan", "AS401120 cheapy_host LLC", "ThreatFix"], "malware_count": 0, "passive_dns_count": 0}


indicator: 196.251.70.2
indicator_type: ipv4
source: otx
country: GH
city: Accra
hosting_provider: us abuse,columns,us none,hurricane us,timeout,pgp sign,unknown,2025,malicious,heralding
queried_at: 2026-05-25T18:22:44.154831
raw_data:
  {"pulse_count": 10, "reputation": 0, "country": "Ghana", "country_code": "GH", "city": "Accra", "asn": "ASNone ", "indicator": "196.251.70.2", "tags": ["us abuse", "columns", "us none", "hurricane us", "timeout", "pgp sign", "unknown", "2025", "malicious", "heralding", "china mobile", "block list", "dionaea", "hong kong", "01.10.2025", "nxdomain", "company limited", "network", "hk abusehandler", "LAMP", "honeytrap", "HoneyNet Connect"], "pulses": ["\"AS401120 cheapy_host LLC\" clone credit skoch

reverse_dns:
  esafeta.work,ausuposts.top,mxnpost.top,norderay.top,postenapp.lol,businessesposte.lol,imposten.lat,indiapost.biz,esafeta.bar,postcorp.lol


indicator: 196.251.70.32
indicator_type: ipv4
source: otx
country: GH
city: Accra
queried_at: 2026-05-25T18:23:04.188314
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Ghana", "country_code": "GH", "city": "Accra", "asn": "ASNone ", "indicator": "196.251.70.32", "tags": [], "pulses": ["\"AS401120 cheapy_host LLC\" clone credit skocherhan", "AS401120 cheapy_host LLC"], "malware_count": 0, "passive_dns_count": 10, "passive_dns": ["dundenbugunealisveris.online", "buguneozelindirimler.online", "kusursuzalisvrlerburada.online", "herkesburayabaksin.xyz", "supurgedeindirimlerburada.xyz", "kirkdortkereucuzlukaddresi.xyz"

reverse_dns:
  dundenbugunealisveris.online,buguneozelindirimler.online,kusursuzalisvrlerburada.online,herkesburayabaksin.xyz,supurgedeindirimlerburada.xyz,kirkdortkereucuzlukaddresi.xyz,pihilipsmaxdikeysupurge.xyz,herkesburayabaksin.online,supurgedeindirimbuhafta.online,kirkdortkereucuzlukaddresi.online


indicator: 196.251.70.42
indicator_type: ipv4
source: otx
country: GH
city: Accra
queried_at: 2026-05-25T18:23:21.103337
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Ghana", "country_code": "GH", "city": "Accra", "asn": "ASNone ", "indicator": "196.251.70.42", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 196.251.70.52
indicator_type: ipv4
source: otx
country: GH
city: Accra
queried_at: 2026-05-25T18:23:38.291916
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Ghana", "country_code": "GH", "city": "Accra", "asn": "ASNone ", "indicator": "196.251.70.52", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 196.251.70.62
indicator_type: ipv4
source: otx
country: GH
city: Accra
queried_at: 2026-05-25T18:23:41.459332
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Ghana", "country_code": "GH", "city": "Accra", "asn": "ASNone ", "indicator": "196.251.70.62", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 196.251.70.82
indicator_type: ipv4
source: otx
country: GH
city: Accra
queried_at: 2026-05-25T18:23:43.944075
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Ghana", "country_code": "GH", "city": "Accra", "asn": "ASNone ", "indicator": "196.251.70.82", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 196.251.70.122
indicator_type: ipv4
source: otx
country: GH
city: Accra
queried_at: 2026-05-25T18:24:00.849590
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Ghana", "country_code": "GH", "city": "Accra", "asn": "ASNone ", "indicator": "196.251.70.122", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 196.251.70.132
indicator_type: ipv4
source: otx
country: GH
city: Accra
hosting_provider: us abuse,columns,us none,hurricane us,timeout,pgp sign,unknown,2025,malicious,heralding
queried_at: 2026-05-25T18:24:18.257887
raw_data:
  {"pulse_count": 7, "reputation": 0, "country": "Ghana", "country_code": "GH", "city": "Accra", "asn": "ASNone ", "indicator": "196.251.70.132", "tags": ["us abuse", "columns", "us none", "hurricane us", "timeout", "pgp sign", "unknown", "2025", "malicious", "heralding", "china mobile", "block list", "dionaea", "hong kong", "01.10.2025", "nxdomain", "company limited", "network", "hk abusehandler", "LAMP", "honeytrap", "HoneyNet Connect"], "pulses": ["HoneyPot Connect 01.10.2025", "DShield Public 


indicator: 196.251.70.142
indicator_type: ipv4
source: otx
country: GH
city: Accra
reverse_dns: correiosdeangola.vip,ctt-pt-gov.top
queried_at: 2026-05-25T18:24:31.555798
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Ghana", "country_code": "GH", "city": "Accra", "asn": "ASNone ", "indicator": "196.251.70.142", "tags": [], "pulses": ["\"AS401120 cheapy_host LLC\" clone credit skocherhan", "AS401120 cheapy_host LLC"], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["correiosdeangola.vip", "ctt-pt-gov.top"]}


indicator: 196.251.70.152
indicator_type: ipv4
source: otx
country: GH
city: Accra
hosting_provider: ,ransomware,malware
queried_at: 2026-05-25T18:24:33.808443
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Ghana", "country_code": "GH", "city": "Accra", "asn": "ASNone ", "indicator": "196.251.70.152", "tags": ["", "ransomware", "malware"], "pulses": ["ThreatFix", "Threatfox Recent Additions"], "malware_count": 1, "passive_dns_count": 0, "malware_samples": ["0a666367b565edb99e6b1873e7ecb238a6926b0bd722e87eb7ceba4136470d06"], "passive_dns": []}


indicator: 196.251.70.162
indicator_type: ipv4
source: otx
country: GH
city: Accra
hosting_provider: count,Brute force,SSL VPN
queried_at: 2026-05-25T18:24:51.082400
raw_data:
  {"pulse_count": 14, "reputation": 0, "country": "Ghana", "country_code": "GH", "city": "Accra", "asn": "ASNone ", "indicator": "196.251.70.162", "tags": ["count", "Brute force", "SSL VPN"], "pulses": ["SSL VPN brute force attempts [120525]", "SSL VPN brute force attempts [120525]", "SSL VPN brute force attempts [090525]", "SSL VPN brute force attempts [080525]", "SSL VPN brute force attempts [070525]", "SSL VPN brute force attempts [060525]", "SSL VPN brute force attempts [180425]", "SSL VPN bru


indicator: 196.251.70.172
indicator_type: ipv4
source: otx
country: GH
city: Accra
queried_at: 2026-05-25T18:25:08.077704
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Ghana", "country_code": "GH", "city": "Accra", "asn": "ASNone ", "indicator": "196.251.70.172", "tags": [], "pulses": ["\"AS401120 cheapy_host LLC\" clone credit skocherhan", "AS401120 cheapy_host LLC"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 196.251.70.182
indicator_type: ipv4
source: otx
country: GH
city: Accra
reverse_dns: lsdmetin2.duckdns.org
hosting_provider: ,ransomware,malware
queried_at: 2026-05-25T18:25:16.788327
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Ghana", "country_code": "GH", "city": "Accra", "asn": "ASNone ", "indicator": "196.251.70.182", "tags": ["", "ransomware", "malware"], "pulses": ["ThreatFix", "Threatfox Recent Additions"], "malware_count": 2, "passive_dns_count": 1, "malware_samples": ["33cc3dd54cb030754bfa4a63d1109d63d8943696cfcbf77375089a1b8c7a5c58", "5de6707204c838495660eac477ceda019f5e8a1d511bc6c77baffce141c05ac3"], "passive_dns": ["lsdmetin2.duckdns.org"]}


indicator: 196.251.70.192
indicator_type: ipv4
source: otx
country: GH
city: Accra
queried_at: 2026-05-25T18:25:34.568632
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Ghana", "country_code": "GH", "city": "Accra", "asn": "ASNone ", "indicator": "196.251.70.192", "tags": [], "pulses": ["\"AS401120 cheapy_host LLC\" clone credit skocherhan", "AS401120 cheapy_host LLC"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 196.251.70.202
indicator_type: ipv4
source: otx
country: GH
city: Accra
queried_at: 2026-05-25T18:26:02.464396
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Ghana", "country_code": "GH", "city": "Accra", "asn": "ASNone ", "indicator": "196.251.70.202", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 196.251.70.252
indicator_type: ipv4
source: otx
country: GH
city: Accra
queried_at: 2026-05-25T18:26:34.951642
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Ghana", "country_code": "GH", "city": "Accra", "asn": "ASNone ", "indicator": "196.251.70.252", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 34.70.205.211
indicator_type: ipv4
source: otx
country: US
city: Council Bluffs
queried_at: 2026-05-25T18:26:37.467334
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Council Bluffs", "asn": "AS396982 google", "indicator": "34.70.205.211", "tags": [], "pulses": ["URLHaus"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 38.150.0.118
indicator_type: ipv4
source: otx
country: US
hosting_provider: gafgyt,Formbook,gz,eilf,ascii,connectwise,Stealc,32-bit,bin,Loda
queried_at: 2026-05-25T18:27:02.160094
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "AS174 cogent communications", "indicator": "38.150.0.118", "tags": ["gafgyt", "Formbook", "gz", "eilf", "ascii", "connectwise", "Stealc", "32-bit", "bin", "Loda", "malware", "mirai", "elf", "MassLogger", "js", "PowerPC", "SimpleHelp", "WeedHack", "sparc", "cnc", "botnetdomain", "ddos", "rat", "opendir", "tar", "backdoor", "triage", "arm", "lnk", "gitlab", "PhantomStealer", "Malg


indicator: 80.76.49.1
indicator_type: ipv4
source: otx
country: US
queried_at: 2026-05-25T18:27:19.074506
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.1", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 80.76.49.6
indicator_type: ipv4
source: otx
country: US
queried_at: 2026-05-25T18:27:21.916846
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.6", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 6, "malware_samples": [], "passive_dns": ["2f613c8ce0966798.daemon.panel.gg", "bliodsugers.cam", "www.seasbridge.com", "seasbridge.com", "www.guanzhuhome.com", "guanzhuhome.com"]}

reverse_dns:
  2f613c8ce0966798.daemon.panel.gg,bliodsugers.cam,www.seasbridge.com,seasbridge.com,www.guanzhuhome.com,guanzhuhome.com


indicator: 80.76.49.7
indicator_type: ipv4
source: otx
country: US
queried_at: 2026-05-25T18:27:25.384372
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.7", "tags": [], "pulses": [], "malware_count": 1, "passive_dns_count": 7, "malware_samples": ["01979527b485501cc7f6a58acba5ad973940ff7194b586681fa09853363ea74f"], "passive_dns": ["www.zip.mysynology.net", "fowl-fo.info", "admin.ddnsguru.com", "aisumbreaty.beauty", "www.shenfujibj.com", "shenfujibj.com", "www.ymdoo.com"]}

reverse_dns:
  www.zip.mysynology.net,fowl-fo.info,admin.ddnsguru.com,aisumbreaty.beauty,www.shenfujibj.com,shenfujibj.com,www.ymdoo.com


indicator: 80.76.49.8
indicator_type: ipv4
source: otx
country: US
queried_at: 2026-05-25T18:27:49.448140
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.8", "tags": [], "pulses": ["20250217 Most Active Threat Indicators"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 80.76.49.16
indicator_type: ipv4
source: otx
country: US
reverse_dns: fiuzesbuges.cam,lfdtrade.com,www.lfdtrade.com,sdjmrg.com,www.sdjmrg.com
queried_at: 2026-05-25T18:27:52.115923
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.16", "tags": [], "pulses": ["Threatfox Recent Additions", "Unknown malware"], "malware_count": 0, "passive_dns_count": 5, "malware_samples": [], "passive_dns": ["fiuzesbuges.cam", "lfdtrade.com", "www.lfdtrade.com", "sdjmrg.com", "www.sdjmrg.com"]}


indicator: 80.76.49.17
indicator_type: ipv4
source: otx
country: US
reverse_dns: skiniesmychoco.cam,lienafox.com,www.51lyqx.com,51lyqx.com
queried_at: 2026-05-25T18:28:01.695201
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.17", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 4, "malware_samples": [], "passive_dns": ["skiniesmychoco.cam", "lienafox.com", "www.51lyqx.com", "51lyqx.com"]}


indicator: 80.76.49.19
indicator_type: ipv4
source: otx
country: US
reverse_dns: qnab1na.anondns.net,campeslejuiences.cam
queried_at: 2026-05-25T18:28:05.858311
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.19", "tags": [], "pulses": ["Twitter Feed - malwrhunterteam - 12-02-2025"], "malware_count": 2, "passive_dns_count": 2, "malware_samples": ["badd6feb2ba3564500c0ef86094180716bef2848ed5074a3cb5685bfed346fe8", "36513cf0040c0440aed3f43ae7cd80e0995bf007785c9d49c1fdd32fdbf46d4d"], "passive_dns": ["qnab1na.anondns.net", "campeslejuiences.cam"]}


indicator: 80.76.49.24
indicator_type: ipv4
source: otx
country: US
reverse_dns: jumitsegumies.cam
hosting_provider: Qakbot,Evilginx,Interactsh,Reverse_SSH,C2,Deimos,AsyncRAT,NetSupportRAT,Havoc,Pegasus
queried_at: 2026-05-25T18:28:10.772659
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.24", "tags": ["Qakbot", "Evilginx", "Interactsh", "Reverse_SSH", "C2", "Deimos", "AsyncRAT", "NetSupportRAT", "Havoc", "Pegasus", "Bianlian", "Sliver", "Mythic", "Remcos", "CobaltStrike", "Dcrat", "EvilGoPhish", "Hookbot"], "pulses": ["Threatfox Recent Additions", "Twitter Feed - drb_ra - 03-05-2025"], "malware_count": 0, "passive_dns_count": 1, 


indicator: 80.76.49.30
indicator_type: ipv4
source: otx
country: US
reverse_dns: nb-fidelityinvestments.help,kriokaterro.com,zinceskes.cam,tj-rlj.com
hosting_provider: cvss,grouped,mozi,week,clearfake,redline stealer,compromise,malicious,remcos,asyncrat
queried_at: 2026-05-25T18:28:13.107276
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.30", "tags": ["cvss", "grouped", "mozi", "week", "clearfake", "redline stealer", "compromise", "malicious", "remcos", "asyncrat", "iocs", "april", "clickfix", "cvss base", "malware", "urls http", "telegram", "android", "interlock", "date"], "pulses": ["Threatfox Recent Additions", "Threat Intel Report - W16-2025"], "malware_count": 0, "passive_dn


indicator: 80.76.49.31
indicator_type: ipv4
source: otx
country: US
reverse_dns: www.sxmsgg.com,sxmsgg.com
queried_at: 2026-05-25T18:28:16.012272
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.31", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["www.sxmsgg.com", "sxmsgg.com"]}


indicator: 80.76.49.32
indicator_type: ipv4
source: otx
country: US
reverse_dns: xhoost.info,deresnchan.cam,shenxianzhai.com,www.shenxianzhai.com
hosting_provider: ,Reverse_SSH,ransomware,Remcos,Hookbot,C2,Havoc,Supershell,Qakbot,Evilginx
queried_at: 2026-05-25T18:28:22.570678
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.32", "tags": ["", "Reverse_SSH", "ransomware", "Remcos", "Hookbot", "C2", "Havoc", "Supershell", "Qakbot", "Evilginx", "malware", "Mythic", "CobaltStrike", "Interactsh", "Hak5_Cloud_C2", "AsyncRAT", "Pegasus", "Sliver", "NetSupportRAT", "Dcrat", "EvilGoPhish"], "pulses": ["ThreatFix", "Twitter Feed - drb_ra - 03-06-2025"], "malware_count": 0, "pa


indicator: 80.76.49.38
indicator_type: ipv4
source: otx
country: US
reverse_dns: www.qd-pa.com,qd-pa.com
queried_at: 2026-05-25T18:28:25.186525
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.38", "tags": [], "pulses": ["ETIC Cybersecurity  2024-05-07  Port Scan", "ETIC Cybersecurity  2024-05-06  Port Scan"], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["www.qd-pa.com", "qd-pa.com"]}


indicator: 80.76.49.41
indicator_type: ipv4
source: otx
country: US
reverse_dns: montersers.cam,www.nanhezhuang.com,nanhezhuang.com
hosting_provider: cowrie,malicious,heralding,sftp,tanner,ssh
queried_at: 2026-05-25T18:28:28.209012
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.41", "tags": ["cowrie", "malicious", "heralding", "sftp", "tanner", "ssh"], "pulses": ["LCIA HoneyNet Data - May 2025 - Tanner"], "malware_count": 1, "passive_dns_count": 3, "malware_samples": ["be4643760ecb8851f25a6d996d117e0a5054a54461f751ba85489d5b49f33112"], "passive_dns": ["montersers.cam", "www.nanhezhuang.com", "nanhezhuang.com"]}


indicator: 80.76.49.43
indicator_type: ipv4
source: otx
country: US
reverse_dns: svergbalent.cam
hosting_provider: ,malware,feed,rah623925,window,ransomware
queried_at: 2026-05-25T18:28:36.278787
raw_data:
  {"pulse_count": 5, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.43", "tags": ["", "malware", "feed", "rah623925", "window", "ransomware"], "pulses": ["ThreatFix_URL", "TI Advisory No-ESAF-SOC-TI-2026-9", "ThreatFix", "Twitter Feed - skocherhan - 23-12-2025", "Malware Filter - Botnet List - 23-12-2025 (Part 7)"], "malware_count": 3, "passive_dns_count": 1, "malware_samples": ["00c3310e279edb4a0fbbebe241e1da877


indicator: 80.76.49.45
indicator_type: ipv4
source: otx
country: US
reverse_dns: timeshamers.cam,huishou818.com,www.huishou818.com
queried_at: 2026-05-25T18:28:45.155457
raw_data:
  {"pulse_count": 35, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.45", "tags": ["dugganusa", "DugganUSA", "remcos", "c2-infrastructure", "threatfox", "LummaStealer, RedLine,...", "vidar", "auto-generated", "asyncrat", "unknown-malware", "pattern-49", "netsupportmanager-rat", "osint-volley", "commodity-rat", "automated-hunt", "automated"], "pulses": ["ThreatFix_IP", "ThreatFox Hunt: Remcos IOCs - 2026-01-16", "

hosting_provider:
  dugganusa,DugganUSA,remcos,c2-infrastructure,threatfox,LummaStealer, RedLine,...,vidar,auto-generated,asyncrat,unknown-malware


indicator: 80.76.49.56
indicator_type: ipv4
source: otx
country: US
queried_at: 2026-05-25T18:29:02.566504
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.56", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 80.76.49.57
indicator_type: ipv4
source: otx
country: US
reverse_dns: www.devicehealth.top,devicehealth.top,www.0580th.com,0580th.com
hosting_provider: honeypot,cowrie,ssh,brute force
queried_at: 2026-05-25T18:29:10.382391
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.57", "tags": ["honeypot", "cowrie", "ssh", "brute force"], "pulses": ["Fakelabs Honeynet Project", "Automated Threat Intelligence - Brute-force hosts for 2024-05-09"], "malware_count": 0, "passive_dns_count": 4, "malware_samples": [], "passive_dns": ["www.devicehealth.top", "devicehealth.top", "www.0580th.com", "0580th.com"]}


indicator: 80.76.49.60
indicator_type: ipv4
source: otx
country: US
hosting_provider: honeypot,cowrie,ssh,brute force
queried_at: 2026-05-25T18:29:27.547127
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.60", "tags": ["honeypot", "cowrie", "ssh", "brute force"], "pulses": ["Fakelabs Honeynet Project", "Automated Threat Intelligence - Brute-force hosts for 2024-05-09"], "malware_count": 2, "passive_dns_count": 0, "malware_samples": ["6c86bcacb9b6327ab09ebf85b541ccaf67d2a686d4e752b7411f3fd2bad55735", "cdcd685099278e0925bb718a7574e9dc0622ecde144b6cb


indicator: 80.76.49.67
indicator_type: ipv4
source: otx
country: US
reverse_dns: www.acrobat365.icu,acrobat365.icu,valiomeey.cam,www.fj-firsthighwayco.com
queried_at: 2026-05-25T18:29:29.829777
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.67", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 4, "malware_samples": [], "passive_dns": ["www.acrobat365.icu", "acrobat365.icu", "valiomeey.cam", "www.fj-firsthighwayco.com"]}


indicator: 80.76.49.73
indicator_type: ipv4
source: otx
country: US
reverse_dns: kointgunies.cam,www.zgqfyl.com
hosting_provider: ssh,brute force
queried_at: 2026-05-25T18:29:32.325254
raw_data:
  {"pulse_count": 6, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.73", "tags": ["ssh", "brute force"], "pulses": ["Threatfox Recent Additions", "Automated Threat Intelligence - Brute-force hosts for 2024-07-01", "ETIC Cybersecurity  2024-05-06  Port Scan", "ETIC Cybersecurity  2024-05-05  Port Scan", "ETIC Cybersecurity  2024-05-04  Port Scan", "ETIC Cybersecurity  2024-05-03  Port Scan"], "malware_count": 0, "


indicator: 80.76.49.80
indicator_type: ipv4
source: otx
country: US
reverse_dns: griffininc.gold,zukosoh.com,www.zjsaileng.com,zjsaileng.com
hosting_provider: honeypot,cowrie,ssh,brute force
queried_at: 2026-05-25T18:29:34.648459
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.80", "tags": ["honeypot", "cowrie", "ssh", "brute force"], "pulses": ["Fakelabs Honeynet Project", "Automated Threat Intelligence - Brute-force hosts for 2024-05-09"], "malware_count": 0, "passive_dns_count": 4, "malware_samples": [], "passive_dns": ["griffininc.gold", "zukosoh.com", "www.zjsaileng.com", "zjsaileng.com"]}


indicator: 80.76.49.86
indicator_type: ipv4
source: otx
country: US
reverse_dns: prisinliwes.cam,www.cwebway.com
queried_at: 2026-05-25T18:29:37.060594
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.86", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["prisinliwes.cam", "www.cwebway.com"]}


indicator: 80.76.49.87
indicator_type: ipv4
source: otx
country: US
reverse_dns: amork.xyz,redeembot.xyz,redeembot.lol,aiddika.com
queried_at: 2026-05-25T18:29:39.459409
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.87", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 4, "malware_samples": [], "passive_dns": ["amork.xyz", "redeembot.xyz", "redeembot.lol", "aiddika.com"]}


indicator: 80.76.49.92
indicator_type: ipv4
source: otx
country: US
queried_at: 2026-05-25T18:29:56.399640
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.92", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 91.184.243.189
indicator_type: ipv4
source: shodan
reverse_dns: glistening-suit.ptr.network
queried_at: 2026-05-26T00:04:07.055052
raw_data:
  {"ports": [8443], "vulns": [], "hostnames": ["glistening-suit.ptr.network"], "tags": [], "cpes": []}


indicator: 91.184.243.190
indicator_type: ipv4
source: shodan
reverse_dns: freeconnect-vpn.ptr.network,discordapp.com
hosting_provider: cpe:/a:cloudflare:cloudflare
queried_at: 2026-05-26T00:04:10.636114
raw_data:
  {"ports": [4433], "vulns": [], "hostnames": ["freeconnect-vpn.ptr.network", "discordapp.com"], "tags": [], "cpes": ["cpe:/a:cloudflare:cloudflare"]}


indicator: 91.184.243.194
indicator_type: ipv4
source: shodan
reverse_dns: www.cloudflare.com,obedientchocola.ptr.network
hosting_provider: cpe:/a:cloudflare:cloudflare
queried_at: 2026-05-26T00:04:14.220676
raw_data:
  {"ports": [443], "vulns": [], "hostnames": ["www.cloudflare.com", "obedientchocola.ptr.network"], "tags": [], "cpes": ["cpe:/a:cloudflare:cloudflare"]}


indicator: 91.184.243.205
indicator_type: ipv4
source: shodan
reverse_dns: ancientprotest.ptr.network
queried_at: 2026-05-26T00:04:19.563103
raw_data:
  {"ports": [443, 8080], "vulns": [], "hostnames": ["ancientprotest.ptr.network"], "tags": [], "cpes": []}


indicator: 91.184.243.216
indicator_type: ipv4
source: shodan
queried_at: 2026-05-26T00:04:24.852450
raw_data:
  {"ports": [10443], "vulns": [], "hostnames": ["yp.amazon.com", "p-nt-www-amazon-com-kalias.amazon.com", "p-yo-www-amazon-com-kalias.amazon.com", "shop.business.amazon.com", "amazon.com", "yellowpages.amazon.com", "p-y3-www-amazon-com-kalias.amazon.com", "www.amzn.com", "buybox.amazon.com", "gleamingtitle.ptr.network", "home.amazon.com", "mp3recs.amazon.com", "uedata.amazon.com", "us.amazon.com", "iphone.amazon.com", "amzn.com", "www.m.amazon.com", "www.amazon.com", "corporate.amazon.com"], "tags

reverse_dns:
  yp.amazon.com,p-nt-www-amazon-com-kalias.amazon.com,p-yo-www-amazon-com-kalias.amazon.com,shop.business.amazon.com,amazon.com,yellowpages.amazon.com,p-y3-www-amazon-com-kalias.amazon.com,www.amzn.com,buybox.amazon.com,gleamingtitle.ptr.network,home.amazon.com,mp3recs.amazon.com,uedata.amazon.com,us.amazon.com,iphone.amazon.com,amzn.com,www.m.amazon.com,www.amazon.com,corporate.amazon.com


indicator: 91.184.243.217
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/a:amazon:elastic_load_balancing,cpe:/a:f5:nginx
queried_at: 2026-05-26T00:04:26.633637
raw_data:
  {"ports": [443, 1080, 2087, 2222, 4443, 9443], "vulns": [], "hostnames": ["vkuservideo.net", "vkuseraudio.net", "vkuseraudio.ru", "www.microsoft.com", "vkuseraudio.com", "storage-1.yandexcloud.net", "website-1.yandexcloud.net", "modernamber.ptr.network", "vkuserdocs.ru", "www.apple.com.cn", "images.apple.com", "userapi.com", "s3.ua.yandexcloud.net", "storage-2.yandexcloud.net", "storage.ua.yandexcloud.net", "storage.pe.yandexcloud.net", "vkuservideo.ru", "i.s-microsoft.com", "vkuservideo.com", "

reverse_dns:
  vkuservideo.net,vkuseraudio.net,vkuseraudio.ru,www.microsoft.com,vkuseraudio.com,storage-1.yandexcloud.net,website-1.yandexcloud.net,modernamber.ptr.network,vkuserdocs.ru,www.apple.com.cn,images.apple.com,userapi.com,s3.ua.yandexcloud.net,storage-2.yandexcloud.net,storage.ua.yandexcloud.net,storage.pe.yandexcloud.net,vkuservideo.ru,i.s-microsoft.com,vkuservideo.com,staticview.microsoft.com,wwwqa.microsoft.com,website.yandexcloud.net,storage-internal.cloud.yandex.net,vkuserphoto.ru,storage.yandex


indicator: 91.184.243.219
indicator_type: ipv4
source: shodan
reverse_dns: shiveringmoccasin.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-26T00:04:28.430155
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["shiveringmoccasin.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.184.243.24
indicator_type: ipv4
source: shodan
reverse_dns: rainy-town.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-26T00:04:37.418350
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["rainy-town.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.184.243.244
indicator_type: ipv4
source: shodan
reverse_dns: quiet-earthquake.ptr.network
queried_at: 2026-05-26T00:04:41.051335
raw_data:
  {"ports": [8080], "vulns": [], "hostnames": ["quiet-earthquake.ptr.network"], "tags": [], "cpes": []}


indicator: 91.184.243.246
indicator_type: ipv4
source: shodan
reverse_dns: nippystreet.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-26T00:04:44.589764
raw_data:
  {"ports": [10022], "vulns": [], "hostnames": ["nippystreet.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.184.243.25
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: cheerfullavende.ptr.network
queried_at: 2026-05-26T00:04:46.356371
raw_data:
  {"ports": [22, 80], "vulns": ["CVE-2025-23419", "CVE-2021-3618", "CVE-2021-23017", "CVE-2023-44487"], "hostnames": ["cheerfullavende.ptr.network"], "tags": ["eol-product"], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx:1.18.0"]}

hosting_provider:
  cpe:/o:linux:linux_kernel,cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx:1.18.0


indicator: 91.184.243.45
indicator_type: ipv4
source: shodan
reverse_dns: amateurplum.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-26T00:05:04.448857
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["amateurplum.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.184.243.51
indicator_type: ipv4
source: shodan
reverse_dns: smi1.ptr.network
hosting_provider: cpe:/o:linux:linux_kernel,cpe:/a:openbsd:openssh:9.2p1,cpe:/o:debian:debian_linux
queried_at: 2026-05-26T00:05:06.262364
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["smi1.ptr.network"], "tags": [], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:9.2p1", "cpe:/o:debian:debian_linux"]}


indicator: 91.184.243.52
indicator_type: ipv4
source: shodan
reverse_dns: defeatedindigo.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-26T00:05:08.011008
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["defeatedindigo.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.184.243.56
indicator_type: ipv4
source: shodan
reverse_dns: coherentazure.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-26T00:05:11.548459
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["coherentazure.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.184.243.57
indicator_type: ipv4
source: shodan
reverse_dns: wellcyan.ptr.network
hosting_provider: cpe:/a:f5:nginx:1.29.7
queried_at: 2026-05-26T00:05:13.336776
raw_data:
  {"ports": [80], "vulns": [], "hostnames": ["wellcyan.ptr.network"], "tags": [], "cpes": ["cpe:/a:f5:nginx:1.29.7"]}


indicator: 91.184.243.61
indicator_type: ipv4
source: shodan
reverse_dns: justcoral.ptr.network,cdnjs.cloudflare.com
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux,cpe:/a:cloudflare:cloudflare
queried_at: 2026-05-26T00:05:18.715287
raw_data:
  {"ports": [22, 2222, 8443], "vulns": [], "hostnames": ["justcoral.ptr.network", "cdnjs.cloudflare.com"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:cloudflare:cloudflare"]}


indicator: 91.184.243.62
indicator_type: ipv4
source: shodan
reverse_dns: wispyorange.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-26T00:05:20.483400
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["wispyorange.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.184.243.63
indicator_type: ipv4
source: shodan
reverse_dns: overjoyedchange.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-26T00:05:22.258123
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["overjoyedchange.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.184.243.74
indicator_type: ipv4
source: shodan
reverse_dns: www.cloudflare.com,rollinglime.ptr.network,blog.api.www.cloudflare.com
hosting_provider: cpe:/a:cloudflare:cloudflare
queried_at: 2026-05-26T00:05:36.607036
raw_data:
  {"ports": [8443], "vulns": [], "hostnames": ["www.cloudflare.com", "rollinglime.ptr.network", "blog.api.www.cloudflare.com"], "tags": [], "cpes": ["cpe:/a:cloudflare:cloudflare"]}


indicator: 91.184.243.88
indicator_type: ipv4
source: shodan
reverse_dns: vpn-helsinki.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-26T00:05:42.084795
raw_data:
  {"ports": [22, 1080, 2222, 9443], "vulns": [], "hostnames": ["vpn-helsinki.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.184.243.94
indicator_type: ipv4
source: shodan
reverse_dns: cooperativesapp.ptr.network,max.ru
queried_at: 2026-05-26T00:05:45.629387
raw_data:
  {"ports": [443], "vulns": [], "hostnames": ["cooperativesapp.ptr.network", "max.ru"], "tags": [], "cpes": []}


indicator: 91.184.243.98
indicator_type: ipv4
source: shodan
reverse_dns: devhub.ptr.network
hosting_provider: cpe:/o:canonical:ubuntu_linux,cpe:/a:openbsd:openssh:8.2p1
queried_at: 2026-05-26T00:05:47.390483
raw_data:
  {"ports": [22, 3478, 9090], "vulns": [], "hostnames": ["devhub.ptr.network"], "tags": [], "cpes": ["cpe:/o:canonical:ubuntu_linux", "cpe:/a:openbsd:openssh:8.2p1"]}


indicator: 91.184.243.99
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: murkychannel.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/a:google:web_server,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-26T00:05:49.145155
raw_data:
  {"ports": [22, 8443], "vulns": [], "hostnames": ["murkychannel.ptr.network"], "tags": ["self-signed"], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/a:google:web_server", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.186.217.101
indicator_type: ipv4
source: shodan
reverse_dns: reserved-by-avm.ptr.network,smartaigames.com
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux,cpe:/a:apache:http_server:2.4.67
queried_at: 2026-05-26T00:05:50.896922
raw_data:
  {"ports": [22, 80, 443], "vulns": [], "hostnames": ["reserved-by-avm.ptr.network", "smartaigames.com"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:apache:http_server:2.4.67"]}


indicator: 91.186.217.104
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: alts.lirika.gay,reserved-by-avm.ptr.network
queried_at: 2026-05-26T00:05:52.647795
raw_data:
  {"ports": [22, 80, 443, 444], "vulns": ["CVE-2025-23419", "CVE-2023-44487"], "hostnames": ["alts.lirika.gay", "reserved-by-avm.ptr.network"], "tags": ["eol-product"], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx:1.24.0"]}

hosting_provider:
[cell repeats an earlier one in this file: 107 characters]


indicator: 91.186.217.108
indicator_type: ipv4
source: shodan
reverse_dns: reserved-by-avm.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-26T00:05:56.160803
raw_data:
  {"ports": [22, 53], "vulns": [], "hostnames": ["reserved-by-avm.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.186.217.111
indicator_type: ipv4
source: shodan
city: starttls,self-signed
reverse_dns: reserved-by-avm.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-26T00:05:57.919190
raw_data:
  {"ports": [22, 25, 9000], "vulns": [], "hostnames": ["reserved-by-avm.ptr.network"], "tags": ["starttls", "self-signed"], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.186.217.126
indicator_type: ipv4
source: shodan
reverse_dns: reserved-by-avm.ptr.network
hosting_provider: cpe:/a:ntp:ntp:3
queried_at: 2026-05-26T00:06:01.485098
raw_data:
  {"ports": [53, 80, 123], "vulns": [], "hostnames": ["reserved-by-avm.ptr.network"], "tags": [], "cpes": ["cpe:/a:ntp:ntp:3"]}


indicator: 91.186.217.133
indicator_type: ipv4
source: shodan
city: ai,proxy
reverse_dns: reserved-by-avm.ptr.network
hosting_provider: cpe:/a:jquery:jquery,cpe:/a:squid-cache:squid:6.13
queried_at: 2026-05-26T00:06:05.006217
raw_data:
  {"ports": [3128, 8123], "vulns": ["CVE-2026-33515", "CVE-2026-33526", "CVE-2025-62168", "CVE-2025-59362", "CVE-2026-32748"], "hostnames": ["reserved-by-avm.ptr.network"], "tags": ["ai", "proxy"], "cpes": ["cpe:/a:jquery:jquery", "cpe:/a:squid-cache:squid:6.13"]}


indicator: 91.186.217.137
indicator_type: ipv4
source: shodan
reverse_dns: reserved-by-avm.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-26T00:06:08.503597
raw_data:
  {"ports": [22, 992, 5555], "vulns": [], "hostnames": ["reserved-by-avm.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.186.217.142
indicator_type: ipv4
source: shodan
reverse_dns: www.apple.com,snowy-waste.ptr.network,www.apple.com.cn,images.apple.com
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-26T00:06:10.264997
raw_data:
  {"ports": [22, 443], "vulns": [], "hostnames": ["www.apple.com", "snowy-waste.ptr.network", "www.apple.com.cn", "images.apple.com"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.186.217.148
indicator_type: ipv4
source: shodan
city: proxy,eol-product
reverse_dns: reserved-by-avm.ptr.network,obsolete-fog.ptr.network
queried_at: 2026-05-26T00:06:15.568851
raw_data:
  {"ports": [22, 80, 8080], "vulns": ["CVE-2024-45802", "CVE-2026-32748", "CVE-2023-49288", "CVE-2021-23017", "CVE-2021-3618", "CVE-2024-25617", "CVE-2023-50269", "CVE-2026-33515", "CVE-2025-23419", "CVE-2024-25111", "CVE-2023-46848", "CVE-2023-49285", "CVE-2024-37894", "CVE-2024-23638", "CVE-2023-46728", "CVE-2023-44487", "CVE-2026-33526", "CVE-2023-46847", "CVE-2025-54574", "CVE-2023-5824", "CVE-2023-46724", "CVE-2025-59362", "CVE-2025-62168", "CVE-2023-49286", "CVE-2023-46846"], "hostnames": ["

hosting_provider:
  cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx:1.18.0,cpe:/a:squid-cache:squid:5.9,cpe:/o:linux:linux_kernel,cpe:/a:openbsd:openssh:8.9p1


indicator: 91.186.217.152
indicator_type: ipv4
source: shodan
reverse_dns: reserved-by-avm.ptr.network
queried_at: 2026-05-26T00:06:17.373101
raw_data:
  {"ports": [8080], "vulns": [], "hostnames": ["reserved-by-avm.ptr.network"], "tags": [], "cpes": []}


indicator: 91.186.217.158
indicator_type: ipv4
source: shodan
reverse_dns: damaging-afterthought.ptr.network,cdnjs.cloudflare.com
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/a:cloudflare:cloudflare,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-26T00:06:20.929916
raw_data:
  {"ports": [22, 443, 444, 445], "vulns": [], "hostnames": ["damaging-afterthought.ptr.network", "cdnjs.cloudflare.com"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/a:cloudflare:cloudflare", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.186.217.16
indicator_type: ipv4
source: shodan
reverse_dns: cdnjs.cloudflare.com,reserved-by-avm.ptr.network
hosting_provider: cpe:/a:cloudflare:cloudflare
queried_at: 2026-05-26T00:06:22.695605
raw_data:
  {"ports": [8443], "vulns": [], "hostnames": ["cdnjs.cloudflare.com", "reserved-by-avm.ptr.network"], "tags": [], "cpes": ["cpe:/a:cloudflare:cloudflare"]}


indicator: 91.186.217.173
indicator_type: ipv4
source: shodan
reverse_dns: sunset.xxqq.ru
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-26T00:06:26.234946
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["sunset.xxqq.ru"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.186.217.180
indicator_type: ipv4
source: shodan
reverse_dns: somberhydrant.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-26T00:06:31.501795
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["somberhydrant.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.186.217.190
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: elastic-limit.ptr.network
queried_at: 2026-05-26T00:06:35.003950
raw_data:
  {"ports": [22, 80], "vulns": ["CVE-2025-23419", "CVE-2023-44487"], "hostnames": ["elastic-limit.ptr.network"], "tags": ["eol-product"], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx:1.24.0"]}

hosting_provider:
[cell repeats an earlier one in this file: 107 characters]


indicator: 91.186.217.193
indicator_type: ipv4
source: shodan
reverse_dns: reserved-by-avm.ptr.network
hosting_provider: cpe:/o:linux:linux_kernel,cpe:/a:openbsd:openssh:9.2p1,cpe:/o:debian:debian_linux
queried_at: 2026-05-26T00:06:38.514826
raw_data:
  {"ports": [20, 22], "vulns": [], "hostnames": ["reserved-by-avm.ptr.network"], "tags": [], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:9.2p1", "cpe:/o:debian:debian_linux"]}


indicator: 91.186.217.204
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/a:apache:traffic_server
queried_at: 2026-05-26T00:06:46.416495
raw_data:
  {"ports": [443], "vulns": [], "hostnames": ["ca.my.yahoo.com", "ddl.fp.yahoo.com", "ca.rogers.yahoo.com", "yahoo.com", "add.my.yahoo.com", "brb.yahoo.net", "s.yimg.com", "mbp.yimg.com", "magical-education.ptr.network", "tw.rd.yahoo.com", "hk.rd.yahoo.com", "fr-ca.rogers.yahoo.com"], "tags": [], "cpes": ["cpe:/a:apache:traffic_server"]}

reverse_dns:
  ca.my.yahoo.com,ddl.fp.yahoo.com,ca.rogers.yahoo.com,yahoo.com,add.my.yahoo.com,brb.yahoo.net,s.yimg.com,mbp.yimg.com,magical-education.ptr.network,tw.rd.yahoo.com,hk.rd.yahoo.com,fr-ca.rogers.yahoo.com


indicator: 91.186.217.219
indicator_type: ipv4
source: shodan
city: proxy,starttls
reverse_dns: sda.run.place,reserved-by-avm.ptr.network
hosting_provider: cpe:/a:f5:nginx
queried_at: 2026-05-26T00:06:53.474270
raw_data:
  {"ports": [53, 80, 587, 3128], "vulns": [], "hostnames": ["sda.run.place", "reserved-by-avm.ptr.network"], "tags": ["proxy", "starttls"], "cpes": ["cpe:/a:f5:nginx"]}


indicator: 91.186.217.227
indicator_type: ipv4
source: shodan
reverse_dns: reserved-by-avm.ptr.network
hosting_provider: cpe:/a:angularjs:angular.js,cpe:/a:portainer:portainer:2.39.2
queried_at: 2026-05-26T00:06:55.215865
raw_data:
  {"ports": [8000, 9443], "vulns": [], "hostnames": ["reserved-by-avm.ptr.network"], "tags": [], "cpes": ["cpe:/a:angularjs:angular.js", "cpe:/a:portainer:portainer:2.39.2"]}


indicator: 91.186.217.238
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: reserved-by-avm.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/a:google:web_server,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-26T00:06:59.028226
raw_data:
  {"ports": [22, 443, 8080], "vulns": [], "hostnames": ["reserved-by-avm.ptr.network"], "tags": ["self-signed"], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/a:google:web_server", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.186.217.243
indicator_type: ipv4
source: shodan
reverse_dns: stockholm.vpn.evolution89.me,reserved-by-avm.ptr.network,portfolio.ptr.network
hosting_provider: cpe:/a:f5:nginx:1.29.4
queried_at: 2026-05-26T00:07:02.583623
raw_data:
  {"ports": [80, 2083, 2222, 9443, 44444], "vulns": [], "hostnames": ["stockholm.vpn.evolution89.me", "reserved-by-avm.ptr.network", "portfolio.ptr.network"], "tags": [], "cpes": ["cpe:/a:f5:nginx:1.29.4"]}


indicator: 91.186.217.244
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: reserved-by-avm.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-26T00:07:04.386119
raw_data:
  {"ports": [22, 80, 443], "vulns": [], "hostnames": ["reserved-by-avm.ptr.network"], "tags": ["self-signed"], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.186.217.246
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/o:canonical:ubuntu_linux,cpe:/a:apache:traffic_server,cpe:/a:openbsd:openssh:8.2p1
queried_at: 2026-05-26T00:07:06.434295
raw_data:
  {"ports": [22, 443], "vulns": [], "hostnames": ["ca.my.yahoo.com", "ddl.fp.yahoo.com", "ca.rogers.yahoo.com", "yahoo.com", "reserved-by-avm.ptr.network", "add.my.yahoo.com", "brb.yahoo.net", "s.yimg.com", "mbp.yimg.com", "tw.rd.yahoo.com", "hk.rd.yahoo.com", "fr-ca.rogers.yahoo.com"], "tags": [], "cpes": ["cpe:/o:canonical:ubuntu_linux", "cpe:/a:apache:traffic_server", "cpe:/a:openbsd:openssh:8.2p1"]}

reverse_dns:
  ca.my.yahoo.com,ddl.fp.yahoo.com,ca.rogers.yahoo.com,yahoo.com,reserved-by-avm.ptr.network,add.my.yahoo.com,brb.yahoo.net,s.yimg.com,mbp.yimg.com,tw.rd.yahoo.com,hk.rd.yahoo.com,fr-ca.rogers.yahoo.com


indicator: 91.186.217.247
indicator_type: ipv4
source: shodan
reverse_dns: limitless-lumber.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-26T00:07:08.194450
raw_data:
  {"ports": [22, 8813], "vulns": [], "hostnames": ["limitless-lumber.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.186.217.249
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: reserved-by-avm.ptr.network
hosting_provider: cpe:/a:f5:nginx,cpe:/o:canonical:ubuntu_linux,cpe:/a:openbsd:openssh:9.6p1
queried_at: 2026-05-26T00:07:09.969274
raw_data:
  {"ports": [22, 443], "vulns": [], "hostnames": ["reserved-by-avm.ptr.network"], "tags": ["self-signed"], "cpes": ["cpe:/a:f5:nginx", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:openbsd:openssh:9.6p1"]}


indicator: 91.186.217.29
indicator_type: ipv4
source: shodan
reverse_dns: www.consulting.1c.ru,reserved-by-avm.ptr.network,www.torg.1c.ru,1c.ru
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-26T00:07:13.841207
raw_data:
  {"ports": [22, 443], "vulns": [], "hostnames": ["www.consulting.1c.ru", "reserved-by-avm.ptr.network", "www.torg.1c.ru", "1c.ru"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.186.217.34
indicator_type: ipv4
source: shodan
city: eol-product,database,self-signed
reverse_dns: racialtable.ptr.network,racialtable.aeza.network
queried_at: 2026-05-26T00:07:15.621638
raw_data:
  {"ports": [22, 80, 5432], "vulns": ["CVE-2013-2220", "CVE-2007-3205", "CVE-2024-3566", "CVE-2024-5458"], "hostnames": ["racialtable.ptr.network", "racialtable.aeza.network"], "tags": ["eol-product", "database", "self-signed"], "cpes": ["cpe:/a:postgresql:postgresql", "cpe:/a:f5:nginx:1.28.3", "cpe:/a:php:php:8.0.30", "cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:varnish-software:varnish_cache_plus"]}

hosting_provider:
  cpe:/a:postgresql:postgresql,cpe:/a:f5:nginx:1.28.3,cpe:/a:php:php:8.0.30,cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux,cpe:/a:varnish-software:varnish_cache_plus


indicator: 91.186.217.41
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: reserved-by-avm.ptr.network,grandiose-egg.ptr.network,facelessmen.org
queried_at: 2026-05-26T00:07:17.366537
raw_data:
  {"ports": [22, 80, 443], "vulns": ["CVE-2025-23419", "CVE-2023-44487"], "hostnames": ["reserved-by-avm.ptr.network", "grandiose-egg.ptr.network", "facelessmen.org"], "tags": ["eol-product"], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/o:debian:debian_linux", "cpe:/a:openbsd:openssh:9.2p1", "cpe:/a:f5:nginx:1.22.1"]}

hosting_provider:
[cell repeats an earlier one in this file: 104 characters]


indicator: 91.186.217.47
indicator_type: ipv4
source: shodan
reverse_dns: reserved-by-avm.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-26T00:07:20.941924
raw_data:
  {"ports": [22, 441, 3333], "vulns": [], "hostnames": ["reserved-by-avm.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.186.217.55
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: reserved-by-avm.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/a:google:web_server,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-26T00:07:24.485569
raw_data:
  {"ports": [22, 9443], "vulns": [], "hostnames": ["reserved-by-avm.ptr.network"], "tags": ["self-signed"], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/a:google:web_server", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.186.217.56
indicator_type: ipv4
source: shodan
reverse_dns: reserved-by-avm.ptr.network,flexi-dev.arturka.net
hosting_provider: cpe:/a:f5:nginx
queried_at: 2026-05-26T00:07:26.259743
raw_data:
  {"ports": [80, 443, 50000], "vulns": [], "hostnames": ["reserved-by-avm.ptr.network", "flexi-dev.arturka.net"], "tags": [], "cpes": ["cpe:/a:f5:nginx"]}


indicator: 91.186.217.57
indicator_type: ipv4
source: shodan
reverse_dns: reserved-by-avm.ptr.network
hosting_provider: cpe:/a:caddyserver:caddy,cpe:/a:golang:go
queried_at: 2026-05-26T00:07:28.087202
raw_data:
  {"ports": [80, 2222], "vulns": [], "hostnames": ["reserved-by-avm.ptr.network"], "tags": [], "cpes": ["cpe:/a:caddyserver:caddy", "cpe:/a:golang:go"]}


indicator: 91.186.217.59
indicator_type: ipv4
source: shodan
reverse_dns: reserved-by-avm.ptr.network,petrovich.ru
queried_at: 2026-05-26T00:07:29.848603
raw_data:
  {"ports": [443, 9443], "vulns": [], "hostnames": ["reserved-by-avm.ptr.network", "petrovich.ru"], "tags": [], "cpes": []}


indicator: 91.186.217.60
indicator_type: ipv4
source: shodan
reverse_dns: reserved-by-avm.ptr.network
hosting_provider: cpe:/a:f5:nginx,cpe:/o:canonical:ubuntu_linux,cpe:/a:openbsd:openssh:9.6p1
queried_at: 2026-05-26T00:07:31.621749
raw_data:
  {"ports": [22, 80], "vulns": [], "hostnames": ["reserved-by-avm.ptr.network"], "tags": [], "cpes": ["cpe:/a:f5:nginx", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:openbsd:openssh:9.6p1"]}


indicator: 91.186.217.62
indicator_type: ipv4
source: shodan
reverse_dns: hbrew.ru,cdnjs.cloudflare.com,reserved-by-avm.ptr.network
queried_at: 2026-05-26T00:07:35.161066
raw_data:
  {"ports": [80, 443, 1701, 8443], "vulns": ["CVE-2023-45802", "CVE-2024-38472", "CVE-2023-4807", "CVE-2023-0464", "CVE-2009-1390", "CVE-2009-2299", "CVE-2012-4360", "CVE-2009-0796", "CVE-2009-3765", "CVE-2013-4365", "CVE-2007-4723", "CVE-2025-49812", "CVE-2025-59775", "CVE-2023-0466", "CVE-2023-3817", "CVE-2025-53020", "CVE-2025-55753", "CVE-2025-66200", "CVE-2009-3766", "CVE-2025-23048", "CVE-2023-5678", "CVE-2023-25690", "CVE-2023-43622", "CVE-2026-33006", "CVE-2026-28390", "CVE-2026-33523", "C

hosting_provider:
  cpe:/a:openssl:openssl:1.1.1s,cpe:/o:debian:debian_linux,cpe:/a:cloudflare:cloudflare,cpe:/a:apache:http_server:2.4.66,cpe:/a:apache:http_server:2.4.55


indicator: 91.186.217.64
indicator_type: ipv4
source: shodan
city: proxy,eol-product
reverse_dns: reserved-by-avm.ptr.network,fallentheowl.space
queried_at: 2026-05-26T00:07:36.922008
raw_data:
  {"ports": [22, 443, 1080, 3128], "vulns": ["CVE-2024-45802", "CVE-2026-32748", "CVE-2023-49288", "CVE-2021-23017", "CVE-2021-3618", "CVE-2024-25617", "CVE-2023-50269", "CVE-2026-33515", "CVE-2025-23419", "CVE-2024-25111", "CVE-2023-46848", "CVE-2023-49285", "CVE-2024-37894", "CVE-2024-23638", "CVE-2023-46728", "CVE-2023-44487", "CVE-2026-33526", "CVE-2023-46847", "CVE-2025-54574", "CVE-2023-5824", "CVE-2023-46724", "CVE-2025-59362", "CVE-2025-62168", "CVE-2023-49286", "CVE-2023-46846"], "hostnam

hosting_provider:
  cpe:/o:debian:debian_linux,cpe:/a:openbsd:openssh:9.2p1,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx:1.18.0,cpe:/a:squid-cache:squid:5.9,cpe:/o:linux:linux_kernel


indicator: 91.186.217.7
indicator_type: ipv4
source: shodan
reverse_dns: wiggly-hobbies.ptr.network
queried_at: 2026-05-26T00:07:40.441223
raw_data:
  {"ports": [22, 5000], "vulns": [], "hostnames": ["wiggly-hobbies.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:encode:uvicorn", "cpe:/a:python:python"]}

hosting_provider:
  cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux,cpe:/a:encode:uvicorn,cpe:/a:python:python


indicator: 91.186.217.72
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: nutritiouspan.ptr.network
hosting_provider: cpe:/a:google:web_server
queried_at: 2026-05-26T00:07:43.980266
raw_data:
  {"ports": [443], "vulns": [], "hostnames": ["nutritiouspan.ptr.network"], "tags": ["self-signed"], "cpes": ["cpe:/a:google:web_server"]}


indicator: 91.186.217.78
indicator_type: ipv4
source: shodan
reverse_dns: reserved-by-avm.ptr.network
queried_at: 2026-05-26T00:07:45.787878
raw_data:
  {"ports": [8443], "vulns": [], "hostnames": ["reserved-by-avm.ptr.network"], "tags": [], "cpes": []}


indicator: 91.186.217.92
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-26T00:07:54.872209
raw_data:
  {"ports": [22, 443], "vulns": [], "hostnames": ["vk.com", "stats.vk-portal.net", "m.vk.ru", "vk.me", "vk.cc", "vk.ru", "m.vk.com", "vk.design", "api.vk.ru", "elatedpassenger.ptr.network", "api.vk.com", "vkontakte.com", "vk.link", "vkvideo.ru", "vkontakte.ru"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}

reverse_dns:
  vk.com,stats.vk-portal.net,m.vk.ru,vk.me,vk.cc,vk.ru,m.vk.com,vk.design,api.vk.ru,elatedpassenger.ptr.network,api.vk.com,vkontakte.com,vk.link,vkvideo.ru,vkontakte.ru


indicator: 91.92.40.49
indicator_type: ipv4
source: shodan
city: eol-product
hosting_provider: cpe:/a:f5:nginx:1.26.2,cpe:/o:canonical:ubuntu_linux,cpe:/a:openbsd:openssh:8.2p1
queried_at: 2026-05-26T00:09:25.044339
raw_data:
  {"ports": [22, 2083], "vulns": ["CVE-2025-23419"], "hostnames": [], "tags": ["eol-product"], "cpes": ["cpe:/a:f5:nginx:1.26.2", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:openbsd:openssh:8.2p1"]}


indicator: 91.92.40.71
indicator_type: ipv4
source: shodan
city: eol-product
hosting_provider: cpe:/a:f5:nginx:1.18.0,cpe:/o:linux:linux_kernel,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-26T00:09:37.713053
raw_data:
  {"ports": [80], "vulns": ["CVE-2021-23017", "CVE-2025-23419", "CVE-2023-44487", "CVE-2021-3618"], "hostnames": [], "tags": ["eol-product"], "cpes": ["cpe:/a:f5:nginx:1.18.0", "cpe:/o:linux:linux_kernel", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 194.85.251.102
indicator_type: ipv4
source: shodan
city: database,eol-product
queried_at: 2026-05-26T00:14:50.313607
raw_data:
  {"ports": [22, 27017], "vulns": ["CVE-2023-3817", "CVE-2021-3711", "CVE-2022-2097", "CVE-2009-3766", "CVE-2026-28387", "CVE-2021-3449", "CVE-2023-5678", "CVE-2023-4807", "CVE-2021-23840", "CVE-2009-3767", "CVE-2025-69418", "CVE-2022-1292", "CVE-2021-4160", "CVE-2023-0464", "CVE-2009-1390", "CVE-2020-1971", "CVE-2026-28390", "CVE-2009-3765", "CVE-2026-28388", "CVE-2019-0190", "CVE-2023-0465", "CVE-2023-0215", "CVE-2026-22795", "CVE-2021-3712", "CVE-2025-69419", "CVE-2025-69421", "CVE-2026-28389",

hosting_provider:
  cpe:/a:mongodb:mongodb:4.4.13,cpe:/a:openbsd:openssh:8.2p1,cpe:/o:canonical:ubuntu_linux,cpe:/a:openssl:openssl:1.1.1f


indicator: 194.85.251.107
indicator_type: ipv4
source: shodan
city: eol-product
queried_at: 2026-05-26T00:14:52.060328
raw_data:
  {"ports": [22, 80], "vulns": ["CVE-2025-23419", "CVE-2023-44487"], "hostnames": [], "tags": ["eol-product"], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx:1.24.0"]}

hosting_provider:
[cell repeats an earlier one in this file: 107 characters]


indicator: 194.85.251.136
indicator_type: ipv4
source: shodan
city: self-signed
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/a:google:web_server,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-26T00:14:55.571669
raw_data:
  {"ports": [22, 8443, 9090, 9100], "vulns": [], "hostnames": [], "tags": ["self-signed"], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/a:google:web_server", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 194.85.251.14
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/a:google:web_server,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-26T00:14:57.351313
raw_data:
  {"ports": [22, 80], "vulns": [], "hostnames": [], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/a:google:web_server", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 194.85.251.163
indicator_type: ipv4
source: shodan
reverse_dns: 194.85.251.163.sslip.io
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-26T00:14:59.112623
raw_data:
  {"ports": [22, 80, 443], "vulns": [], "hostnames": ["194.85.251.163.sslip.io"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 194.85.251.184
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: 194.85.251.184.sslip.io
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/a:f5:nginx:1.26.3,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-26T00:15:04.575816
raw_data:
  {"ports": [22, 80, 443], "vulns": [], "hostnames": ["194.85.251.184.sslip.io"], "tags": ["eol-product"], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/a:f5:nginx:1.26.3", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 194.85.251.185
indicator_type: ipv4
source: shodan
reverse_dns: ozon.ru,www.ozon.ru
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-26T00:15:06.360479
raw_data:
  {"ports": [22, 443], "vulns": [], "hostnames": ["ozon.ru", "www.ozon.ru"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 194.85.251.19
indicator_type: ipv4
source: shodan
city: self-signed
hosting_provider: cpe:/a:google:web_server,cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-26T00:15:08.115151
raw_data:
  {"ports": [22, 443, 8888], "vulns": [], "hostnames": [], "tags": ["self-signed"], "cpes": ["cpe:/a:google:web_server", "cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 194.85.251.216
indicator_type: ipv4
source: shodan
queried_at: 2026-05-26T00:15:13.522976
raw_data:
  {"ports": [2222, 7443], "vulns": [], "hostnames": ["yandex.com", "yandex.uz", "yandex.co.il", "ya.ru", "yandex.aero", "yandex.ee", "yandex.net", "yandex.ru", "yandex.lv", "yandex.it", "yandex.fr", "yandex.tr", "yandex.tj", "yandex.md", "yandex.com.am", "yandex.com.ge", "yandex.kz", "yandex.com.tr", "yandex.lt", "yandex.org", "xn--d1acpjx3f.xn--p1ai", "yandex.by", "yandex.az", "yandex.tm", "yandex.de", "yandex.jobs"], "tags": [], "cpes": []}

reverse_dns:
  yandex.com,yandex.uz,yandex.co.il,ya.ru,yandex.aero,yandex.ee,yandex.net,yandex.ru,yandex.lv,yandex.it,yandex.fr,yandex.tr,yandex.tj,yandex.md,yandex.com.am,yandex.com.ge,yandex.kz,yandex.com.tr,yandex.lt,yandex.org,xn--d1acpjx3f.xn--p1ai,yandex.by,yandex.az,yandex.tm,yandex.de,yandex.jobs


indicator: 194.85.251.234
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: n.sni-347-default.ssl.fastly.net
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/a:google:web_server,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-26T00:15:17.086255
raw_data:
  {"ports": [22, 443, 8443], "vulns": [], "hostnames": ["n.sni-347-default.ssl.fastly.net"], "tags": ["self-signed"], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/a:google:web_server", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 194.85.251.239
indicator_type: ipv4
source: shodan
reverse_dns: lumen.yandex.ru,daimon.yandex.ru,avatar.yandex.ru,daemon.yandex.ru
queried_at: 2026-05-26T00:15:18.846741
raw_data:
  {"ports": [8443], "vulns": [], "hostnames": ["lumen.yandex.ru", "daimon.yandex.ru", "avatar.yandex.ru", "daemon.yandex.ru"], "tags": [], "cpes": []}


indicator: 194.85.251.44
indicator_type: ipv4
source: shodan
city: self-signed
hosting_provider: cpe:/a:google:web_server
queried_at: 2026-05-26T00:15:20.620380
raw_data:
  {"ports": [443, 8443], "vulns": [], "hostnames": [], "tags": ["self-signed"], "cpes": ["cpe:/a:google:web_server"]}


indicator: 194.85.251.61
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: projautosmm.ru,www.projautosmm.ru
queried_at: 2026-05-26T00:15:24.174761
raw_data:
  {"ports": [22, 80, 443], "vulns": ["CVE-2021-23017", "CVE-2025-23419", "CVE-2023-44487", "CVE-2021-3618"], "hostnames": ["projautosmm.ru", "www.projautosmm.ru"], "tags": ["eol-product"], "cpes": ["cpe:/a:f5:nginx:1.18.0", "cpe:/o:linux:linux_kernel", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:openbsd:openssh:8.9p1"]}

hosting_provider:
  cpe:/a:f5:nginx:1.18.0,cpe:/o:linux:linux_kernel,cpe:/o:canonical:ubuntu_linux,cpe:/a:openbsd:openssh:8.9p1


indicator: 194.85.251.74
indicator_type: ipv4
source: shodan
reverse_dns: medobob.online
hosting_provider: cpe:/o:linux:linux_kernel,cpe:/a:openbsd:openssh:9.2p1,cpe:/o:debian:debian_linux
queried_at: 2026-05-26T00:15:25.942638
raw_data:
  {"ports": [22, 8443], "vulns": [], "hostnames": ["medobob.online"], "tags": [], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:9.2p1", "cpe:/o:debian:debian_linux"]}


indicator: 194.85.251.22
indicator_type: ipv4
source: shodan
city: self-signed
hosting_provider: cpe:/a:google:web_server,cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-26T00:15:29.479271
raw_data:
  {"ports": [22, 443], "vulns": [], "hostnames": [], "tags": ["self-signed"], "cpes": ["cpe:/a:google:web_server", "cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 194.85.251.140
indicator_type: ipv4
source: shodan
reverse_dns: www.ozon.ru,ozon.ru
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-26T00:15:52.452865
raw_data:
  {"ports": [22, 444], "vulns": [], "hostnames": ["www.ozon.ru", "ozon.ru"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 194.85.251.147
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-26T00:16:01.250418
raw_data:
  {"ports": [22, 8858], "vulns": [], "hostnames": [], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 194.85.251.154
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-26T00:16:03.015431
raw_data:
  {"ports": [22, 443], "vulns": [], "hostnames": ["staticview.microsoft.com", "wwwqa.microsoft.com", "microsoft.com", "www.microsoft.com", "c.s-microsoft.com", "privacy.microsoft.com", "i.s-microsoft.com"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}

reverse_dns:
  staticview.microsoft.com,wwwqa.microsoft.com,microsoft.com,www.microsoft.com,c.s-microsoft.com,privacy.microsoft.com,i.s-microsoft.com


indicator: 194.85.251.190
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: www.cloudflare.com
hosting_provider: cpe:/a:google:web_server,cpe:/a:cloudflare:cloudflare
queried_at: 2026-05-26T00:16:11.837822
raw_data:
  {"ports": [2083, 8443], "vulns": [], "hostnames": ["www.cloudflare.com"], "tags": ["self-signed"], "cpes": ["cpe:/a:google:web_server", "cpe:/a:cloudflare:cloudflare"]}


indicator: 194.85.251.197
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-26T00:16:15.348387
raw_data:
  {"ports": [22, 443], "vulns": [], "hostnames": ["yandex.com", "yandex.uz", "yandex.co.il", "ya.ru", "yandex.aero", "yandex.ee", "yandex.net", "yandex.ru", "yandex.lv", "yandex.it", "yandex.fr", "yandex.tr", "yandex.tj", "yandex.md", "yandex.com.am", "yandex.com.ge", "yandex.kz", "yandex.com.tr", "yandex.lt", "yandex.org", "xn--d1acpjx3f.xn--p1ai", "yandex.by", "yandex.az", "yandex.tm", "yandex.de", "yandex.jobs"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linu

reverse_dns:
  yandex.com,yandex.uz,yandex.co.il,ya.ru,yandex.aero,yandex.ee,yandex.net,yandex.ru,yandex.lv,yandex.it,yandex.fr,yandex.tr,yandex.tj,yandex.md,yandex.com.am,yandex.com.ge,yandex.kz,yandex.com.tr,yandex.lt,yandex.org,xn--d1acpjx3f.xn--p1ai,yandex.by,yandex.az,yandex.tm,yandex.de,yandex.jobs


indicator: 194.85.251.205
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: cdn.edgecluster.site
queried_at: 2026-05-26T00:16:17.100409
raw_data:
  {"ports": [22, 443, 9443], "vulns": ["CVE-2025-23419", "CVE-2021-3618", "CVE-2021-23017", "CVE-2023-44487"], "hostnames": ["cdn.edgecluster.site"], "tags": ["eol-product"], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx:1.18.0"]}

hosting_provider:
  cpe:/o:linux:linux_kernel,cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx:1.18.0


indicator: 194.85.251.208
indicator_type: ipv4
source: shodan
queried_at: 2026-05-26T00:16:18.848020
raw_data:
  {"ports": [8443], "vulns": [], "hostnames": ["yandex.aero", "yandex.ee", "yandex.com.am", "yandex.uz", "yandex.kz", "yandex.net", "xn--d1acpjx3f.xn--p1ai", "yandex.jobs", "ya.ru", "yandex.ru", "yandex.tm", "yandex.lt", "yandex.de", "yandex.it", "yandex.by", "yandex.tj", "yandex.co.il", "yandex.com", "yandex.az", "yandex.org", "yandex.com.tr", "yandex.tr", "yandex.lv", "yandex.com.ge", "yandex.fr", "yandex.md"], "tags": [], "cpes": []}

reverse_dns:
  yandex.aero,yandex.ee,yandex.com.am,yandex.uz,yandex.kz,yandex.net,xn--d1acpjx3f.xn--p1ai,yandex.jobs,ya.ru,yandex.ru,yandex.tm,yandex.lt,yandex.de,yandex.it,yandex.by,yandex.tj,yandex.co.il,yandex.com,yandex.az,yandex.org,yandex.com.tr,yandex.tr,yandex.lv,yandex.com.ge,yandex.fr,yandex.md


indicator: 194.85.251.229
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: panel.netedge.online
queried_at: 2026-05-26T00:16:20.625322
raw_data:
  {"ports": [22, 80, 8443], "vulns": ["CVE-2025-23419", "CVE-2021-3618", "CVE-2021-23017", "CVE-2023-44487"], "hostnames": ["panel.netedge.online"], "tags": ["eol-product"], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx:1.18.0"]}

hosting_provider:
[cell repeats an earlier one in this file: 107 characters]


indicator: 194.85.251.230
indicator_type: ipv4
source: shodan
city: eol-product
queried_at: 2026-05-26T00:16:22.387676
raw_data:
  {"ports": [22, 6002, 8080], "vulns": ["CVE-2025-23419", "CVE-2021-3618", "CVE-2021-23017", "CVE-2023-44487"], "hostnames": [], "tags": ["eol-product"], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx:1.18.0"]}

hosting_provider:
[cell repeats an earlier one in this file: 107 characters]


indicator: 194.85.251.37
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-26T00:16:32.978948
raw_data:
  {"ports": [22, 443, 2000], "vulns": [], "hostnames": [], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 194.85.251.78
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-26T00:16:34.737935
raw_data:
  {"ports": [22, 6080], "vulns": [], "hostnames": [], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 194.85.251.117
indicator_type: ipv4
source: shodan
reverse_dns: api-maps.yandex.com,api-maps.yandex.ru,api-maps.yandex.com.tr,enterprise.api-maps.yandex.ru
queried_at: 2026-05-26T00:16:36.491683
raw_data:
  {"ports": [22, 80, 111, 2222, 5991, 5997, 6000, 6002, 6020, 6070, 6080, 6081, 6443, 6500, 6503, 8443], "vulns": [], "hostnames": ["api-maps.yandex.com", "api-maps.yandex.ru", "api-maps.yandex.com.tr", "enterprise.api-maps.yandex.ru"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/a:golang:go", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:caddyserver:caddy"]}

hosting_provider:
  cpe:/a:openbsd:openssh:9.6p1,cpe:/a:golang:go,cpe:/o:canonical:ubuntu_linux,cpe:/a:caddyserver:caddy


indicator: 194.85.251.151
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-26T00:16:38.266934
raw_data:
  {"ports": [22, 3001, 5353], "vulns": [], "hostnames": [], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 194.85.251.161
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: sub.musicpowernow2026.online
queried_at: 2026-05-26T00:16:47.089938
raw_data:
  {"ports": [22, 80, 443], "vulns": ["CVE-2025-23419", "CVE-2023-44487"], "hostnames": ["sub.musicpowernow2026.online"], "tags": ["eol-product"], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx:1.24.0"]}

hosting_provider:
[cell repeats an earlier one in this file: 107 characters]


indicator: 194.85.251.177
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: avorvps.su
queried_at: 2026-05-26T00:16:48.848928
raw_data:
  {"ports": [22, 443], "vulns": ["CVE-2025-23419", "CVE-2021-3618", "CVE-2021-23017", "CVE-2023-44487"], "hostnames": ["avorvps.su"], "tags": ["eol-product"], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx:1.18.0"]}

hosting_provider:
[cell repeats an earlier one in this file: 107 characters]


indicator: 194.85.251.203
indicator_type: ipv4
source: shodan
reverse_dns: api-maps.yandex.com,api-maps.yandex.ru,api-maps.yandex.com.tr,enterprise.api-maps.yandex.ru
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-26T00:16:52.376304
raw_data:
  {"ports": [22, 443], "vulns": [], "hostnames": ["api-maps.yandex.com", "api-maps.yandex.ru", "api-maps.yandex.com.tr", "enterprise.api-maps.yandex.ru"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 194.85.251.241
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: www.ozon.ru,ozon.ru,ozon.tmtvp.store
queried_at: 2026-05-26T00:16:55.922508
raw_data:
  {"ports": [22, 443, 8443], "vulns": ["CVE-2025-23419", "CVE-2023-44487"], "hostnames": ["www.ozon.ru", "ozon.ru", "ozon.tmtvp.store"], "tags": ["eol-product"], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx:1.24.0"]}

hosting_provider:
[cell repeats an earlier one in this file: 107 characters]


indicator: 141.11.178.108
indicator_type: ipv4
source: shodan
reverse_dns: panel.caserna.ch
hosting_provider: cpe:/o:microsoft:windows
queried_at: 2026-05-26T00:17:03.002370
raw_data:
  {"ports": [21, 443], "vulns": [], "hostnames": ["panel.caserna.ch"], "tags": [], "cpes": ["cpe:/o:microsoft:windows"]}


indicator: 141.11.178.62
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/o:debian:debian_linux,cpe:/a:apache:http_server:2.4.66
queried_at: 2026-05-26T00:18:06.894570
raw_data:
  {"ports": [80], "vulns": ["CVE-2012-4001", "CVE-2009-0796", "CVE-2013-2765", "CVE-2011-2688", "CVE-2012-4360", "CVE-2009-2299", "CVE-2013-4365", "CVE-2012-3526", "CVE-2007-4723", "CVE-2013-0942", "CVE-2013-0941", "CVE-2011-1176"], "hostnames": [], "tags": [], "cpes": ["cpe:/o:debian:debian_linux", "cpe:/a:apache:http_server:2.4.66"]}


indicator: 141.11.178.72
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/a:expressjs:express,cpe:/a:f5:nginx,cpe:/a:nodejs:node.js
queried_at: 2026-05-26T00:18:10.421767
raw_data:
  {"ports": [80, 3000, 3001], "vulns": [], "hostnames": [], "tags": [], "cpes": ["cpe:/a:expressjs:express", "cpe:/a:f5:nginx", "cpe:/a:nodejs:node.js"]}


indicator: 141.11.178.8
indicator_type: ipv4
source: shodan
city: starttls
queried_at: 2026-05-26T00:18:13.942265
raw_data:
  {"ports": [81, 110, 8085, 9080], "vulns": [], "hostnames": [], "tags": ["starttls"], "cpes": ["cpe:/a:openresty:openresty", "cpe:/a:getbootstrap:bootstrap:4.1.3", "cpe:/a:jquery:jquery:3.5.1", "cpe:/a:f5:nginx"]}

hosting_provider:
  cpe:/a:openresty:openresty,cpe:/a:getbootstrap:bootstrap:4.1.3,cpe:/a:jquery:jquery:3.5.1,cpe:/a:f5:nginx


indicator: 146.19.213.102
indicator_type: ipv4
source: shodan
city: starttls
reverse_dns: panelmerkez.xyz,www.panelmerkez.xyz
hosting_provider: cpe:/a:apache:http_server,cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-26T00:18:24.553469
raw_data:
  {"ports": [21, 22, 80, 143, 995, 2222, 20000], "vulns": [], "hostnames": ["panelmerkez.xyz", "www.panelmerkez.xyz"], "tags": ["starttls"], "cpes": ["cpe:/a:apache:http_server", "cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 146.19.213.103
indicator_type: ipv4
source: shodan
city: self-signed,starttls
reverse_dns: vps7
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-26T00:18:26.310973
raw_data:
  {"ports": [22, 143], "vulns": [], "hostnames": ["vps7"], "tags": ["self-signed", "starttls"], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 146.19.213.110
indicator_type: ipv4
source: shodan
reverse_dns: x32.cc
hosting_provider: cpe:/o:canonical:ubuntu_linux,cpe:/a:openbsd:openssh:8.2p1
queried_at: 2026-05-26T00:18:28.075047
raw_data:
  {"ports": [22, 80], "vulns": [], "hostnames": ["x32.cc"], "tags": [], "cpes": ["cpe:/o:canonical:ubuntu_linux", "cpe:/a:openbsd:openssh:8.2p1"]}


indicator: 196.251.69.112
indicator_type: ipv4
source: otx
country: GH
hosting_provider: LummaStealer,dcrat,bash,ua-wget,exe,search,c2-monitor-auto,linux,backdoor,xworm
queried_at: 2026-05-26T00:18:46.653725
raw_data:
  {"pulse_count": 5, "reputation": 0, "country": "Ghana", "country_code": "GH", "city": null, "asn": "ASNone ", "indicator": "196.251.69.112", "tags": ["LummaStealer", "dcrat", "bash", "ua-wget", "exe", "search", "c2-monitor-auto", "linux", "backdoor", "xworm", "Mozi", "PlugX", "CoinMiner", "hajime", "rev-base64-loader", "elf", "wget", "ascii", "RedLineStealer", "hta", "gafgyt", "sshdkit", "botnet-backend", "ddos", "Formbook", "moobot", "github", "donutloader", "AsyncRAT", "WsgiDAV", "mirai intern


indicator: 196.251.69.132
indicator_type: ipv4
source: otx
country: GH
queried_at: 2026-05-26T00:19:03.515186
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Ghana", "country_code": "GH", "city": null, "asn": "ASNone ", "indicator": "196.251.69.132", "tags": [], "pulses": ["\"AS401120 cheapy_host LLC\" clone credit skocherhan", "AS401120 cheapy_host LLC"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 196.251.69.162
indicator_type: ipv4
source: otx
country: GH
queried_at: 2026-05-26T00:19:20.403932
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Ghana", "country_code": "GH", "city": null, "asn": "ASNone ", "indicator": "196.251.69.162", "tags": [], "pulses": ["\"AS401120 cheapy_host LLC\" clone credit skocherhan", "AS401120 cheapy_host LLC"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 196.251.69.182
indicator_type: ipv4
source: otx
country: GH
queried_at: 2026-05-26T00:19:37.261169
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Ghana", "country_code": "GH", "city": null, "asn": "ASNone ", "indicator": "196.251.69.182", "tags": [], "pulses": ["Malware Filter - Botnet List - 18-10-2025"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 196.251.69.202
indicator_type: ipv4
source: otx
country: GH
hosting_provider: AsyncRAT,Interactsh,Hookbot,NetSupportRAT,Supershell,Dcrat,Qakbot,Deimos,Pegasus,Remcos
queried_at: 2026-05-26T00:19:40.440445
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Ghana", "country_code": "GH", "city": null, "asn": "ASNone ", "indicator": "196.251.69.202", "tags": ["AsyncRAT", "Interactsh", "Hookbot", "NetSupportRAT", "Supershell", "Dcrat", "Qakbot", "Deimos", "Pegasus", "Remcos", "Sliver", "Mythic", "CobaltStrike", "Havoc", "C2"], "pulses": ["Malware Filter - Botnet List - 20-10-2025", "Twitter Feed - drb_ra - 13-08-2025"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 196.251.69.222
indicator_type: ipv4
source: otx
country: GH
hosting_provider: Covenant,malicious,dionaea,sftp,Supershell,Pegasus,cowrie,Interactsh,mailoney,Deimos
queried_at: 2026-05-26T00:19:42.595047
raw_data:
  {"pulse_count": 5, "reputation": 0, "country": "Ghana", "country_code": "GH", "city": null, "asn": "ASNone ", "indicator": "196.251.69.222", "tags": ["Covenant", "malicious", "dionaea", "sftp", "Supershell", "Pegasus", "cowrie", "Interactsh", "mailoney", "Deimos", "Remcos", "Sliver", "Havoc", "AsyncRAT", "honeytrap", "LAMP", "email", "tanner", "Qakbot", "CobaltStrike", "sip", "Hak5_Cloud_C2", "cisco", "Hookbot", "NetSupportRAT", "ssh", "sentrypeer", "Mythic", "C2"], "pulses": ["LCIA HoneyNet Dat


indicator: 196.251.70.222
indicator_type: ipv4
source: otx
country: GH
city: Accra
queried_at: 2026-05-26T00:20:05.814294
raw_data:
  {"pulse_count": 6, "reputation": 0, "country": "Ghana", "country_code": "GH", "city": "Accra", "asn": "ASNone ", "indicator": "196.251.70.222", "tags": ["HoneyNet Connect", "hk abusehandler", "pgp sign", "malicious", "heralding", "dionaea", "hurricane us", "china mobile", "unknown", "nxdomain", "us none", "2025", "hong kong", "honeytrap", "LAMP", "01.10.2025", "timeout", "company limited", "columns", "network", "block list"], "pulses": ["HoneyPot Connect 01.10.2025", "DShield Public Data Feed - 

hosting_provider:
  HoneyNet Connect,hk abusehandler,pgp sign,malicious,heralding,dionaea,hurricane us,china mobile,unknown,nxdomain


indicator: 80.76.49.93
indicator_type: ipv4
source: otx
country: US
queried_at: 2026-05-26T00:20:14.025747
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.93", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 7, "malware_samples": [], "passive_dns": ["outlook.sanfordfarmllc.com", "ulgroup.sanfordfarmllc.com", "office.sanfordfarmllc.com", "login.sanfordfarmllc.com", "sanfordfarmllc.com", "www.qhuc2c.com", "qhuc2c.com"]}

reverse_dns:
  outlook.sanfordfarmllc.com,ulgroup.sanfordfarmllc.com,office.sanfordfarmllc.com,login.sanfordfarmllc.com,sanfordfarmllc.com,www.qhuc2c.com,qhuc2c.com


indicator: 80.76.49.96
indicator_type: ipv4
source: otx
country: US
reverse_dns: portal-lbank.com,stability.cam,www.jiansuozixun.com
queried_at: 2026-05-26T00:20:27.412534
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.96", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["portal-lbank.com", "stability.cam", "www.jiansuozixun.com"]}


indicator: 80.76.49.97
indicator_type: ipv4
source: otx
country: US
hosting_provider: Evilginx,EvilGoPhish,NetSupportRAT,Qakbot,CobaltStrike,Remcos,C2,abuseipdb,Havoc,AsyncRAT
queried_at: 2026-05-26T00:20:44.552865
raw_data:
  {"pulse_count": 5, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.97", "tags": ["Evilginx", "EvilGoPhish", "NetSupportRAT", "Qakbot", "CobaltStrike", "Remcos", "C2", "abuseipdb", "Havoc", "AsyncRAT"], "pulses": ["Threatfox Recent Additions", "Twitter Feed - drb_ra - 27-12-2024", "Threatview.io OSINT Threat Feed", "Compiled Blocklist of AbuseIPDB: Most reported IP addresses - by skocherhan", "Aggregated Blocklis


indicator: 80.76.49.100
indicator_type: ipv4
source: otx
country: US
queried_at: 2026-05-26T00:21:01.515840
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.100", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 80.76.49.103
indicator_type: ipv4
source: otx
country: US
hosting_provider: ssh,brute force
queried_at: 2026-05-26T00:21:18.893346
raw_data:
  {"pulse_count": 13, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.103", "tags": ["ssh", "brute force"], "pulses": ["Automated Threat Intelligence - Brute-force hosts for 2024-07-01", "ETIC Cybersecurity  2024-08-19  Port Scan", "ETIC Cybersecurity  2024-08-17  Port Scan", "ETIC Cybersecurity  2024-08-16  Port Scan", "ETIC Cybersecurity  2024-08-15  Port Scan", "ETIC Cybersecurity  2024-08-14  Port Scan", "ETIC


indicator: 80.76.49.104
indicator_type: ipv4
source: otx
country: US
queried_at: 2026-05-26T00:21:36.101890
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.104", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 80.76.49.114
indicator_type: ipv4
source: otx
country: US
reverse_dns: basb24ao.anondns.net,huh168.com,www.huh168.com
hosting_provider: auto-generated,LummaStealer, RedLine,...,DugganUSA
queried_at: 2026-05-26T00:21:39.067692
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.114", "tags": ["auto-generated", "LummaStealer, RedLine,...", "DugganUSA"], "pulses": ["ThreatFix_IP", "ThreatFix_IP", "Oz Batch: 50 IOCs (avg BDE: 85)", "Oz Batch: 50 IOCs (avg BDE: 85)", "Oz Batch: 50 IOCs (avg BDE: 85)", "Oz Batch: 50 IOCs (avg BDE: 85)", "Oz Batch: 50 IOCs (avg BDE: 85)", "Oz Batch: 50 IOCs (avg BDE: 85)", "Oz Batch: 50 IOCs


indicator: 80.76.49.118
indicator_type: ipv4
source: otx
country: US
queried_at: 2026-05-26T00:21:56.586680
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.118", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 80.76.49.122
indicator_type: ipv4
source: otx
country: US
queried_at: 2026-05-26T00:22:13.688997
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.122", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 80.76.49.134
indicator_type: ipv4
source: otx
country: US
queried_at: 2026-05-26T00:22:31.320357
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.134", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 80.76.49.135
indicator_type: ipv4
source: otx
country: US
reverse_dns: smartsheetsapp.com,extifird.cam,www.fisherxx.com
queried_at: 2026-05-26T00:22:34.252698
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.135", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["smartsheetsapp.com", "extifird.cam", "www.fisherxx.com"]}


indicator: 80.76.49.140
indicator_type: ipv4
source: otx
country: US
reverse_dns: bueroti.cam,aman7758.com,www.aman7758.com
queried_at: 2026-05-26T00:22:36.957673
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.140", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["bueroti.cam", "aman7758.com", "www.aman7758.com"]}


indicator: 80.76.49.141
indicator_type: ipv4
source: otx
country: US
reverse_dns: atlantacreators.io,webforgestudioatl.com,amixrent.cam,antegouwu.com,www.antegouwu.com
hosting_provider: probing,web app attack,Crawler,webscanner,abuseipdb
queried_at: 2026-05-26T00:22:39.922098
raw_data:
  {"pulse_count": 8, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.141", "tags": ["probing", "web app attack", "Crawler", "webscanner", "abuseipdb"], "pulses": ["Webscanners IPs 2024-04-08 thru current day", "webscanners_pules", "webscanners_pules", "webscanners_pules", "webscanners_pules", "webscanners_pules", "Compiled Blocklist of AbuseIPDB: Most reported IP addresses - by skocherhan", "Aggregated Blocklist f


indicator: 80.76.49.142
indicator_type: ipv4
source: otx
country: US
queried_at: 2026-05-26T00:22:57.654114
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.142", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 80.76.49.151
indicator_type: ipv4
source: otx
country: US
reverse_dns: ibiation.cam,www.h-m-tech.com,h-m-tech.com
queried_at: 2026-05-26T00:23:02.947540
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.151", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["ibiation.cam", "www.h-m-tech.com", "h-m-tech.com"]}


indicator: 80.76.49.153
indicator_type: ipv4
source: otx
country: US
queried_at: 2026-05-26T00:23:19.813039
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.153", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 80.76.49.155
indicator_type: ipv4
source: otx
country: US
reverse_dns: lightofhealingeducation.cyou,verange.cam,www.whxzhh.com,whxzhh.com
queried_at: 2026-05-26T00:23:22.873291
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.155", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 4, "malware_samples": [], "passive_dns": ["lightofhealingeducation.cyou", "verange.cam", "www.whxzhh.com", "whxzhh.com"]}


indicator: 80.76.49.158
indicator_type: ipv4
source: otx
country: US
queried_at: 2026-05-26T00:23:40.043493
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.158", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 80.76.49.159
indicator_type: ipv4
source: otx
country: US
hosting_provider: honeypot,phpMyAdmin
queried_at: 2026-05-26T00:23:57.795918
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.159", "tags": ["honeypot", "phpMyAdmin"], "pulses": ["phpMyAdmin honeypot logs for 2026-03-29", "phpMyAdmin honeypot logs for 2026-03-21", "phpMyAdmin honeypot logs for 2026-03-17", "phpMyAdmin honeypot logs for 2026-03-15", "phpMyAdmin honeypot logs for 2026-03-14", "phpMyAdmin honeypot logs for 2026-03-11", "phpMyAdmin honeypot logs for 2026-0


indicator: 80.76.49.161
indicator_type: ipv4
source: otx
country: US
queried_at: 2026-05-26T00:24:14.754877
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.161", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 80.76.49.170
indicator_type: ipv4
source: otx
country: US
queried_at: 2026-05-26T00:24:33.602458
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.170", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 80.76.49.171
indicator_type: ipv4
source: otx
country: US
hosting_provider: Evilginx,EvilGoPhish,brute force,NetSupportRAT,Qakbot,CobaltStrike,Remcos,C2,ssh,Havoc
queried_at: 2026-05-26T00:24:51.880631
raw_data:
  {"pulse_count": 4, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.171", "tags": ["Evilginx", "EvilGoPhish", "brute force", "NetSupportRAT", "Qakbot", "CobaltStrike", "Remcos", "C2", "ssh", "Havoc", "AsyncRAT"], "pulses": ["Automated Threat Intelligence - Brute-force hosts for 2025-11-25", "Threatfox Recent Additions", "Twitter Feed - drb_ra - 27-12-2024", "Threatview.io OSINT Threat Feed"], "malware_count": 0, 


indicator: 80.76.49.172
indicator_type: ipv4
source: otx
country: US
hosting_provider: ,LummaStealer,ransomware,Xworm,RAT,malware
queried_at: 2026-05-26T00:25:09.107572
raw_data:
  {"pulse_count": 3, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.172", "tags": ["", "LummaStealer", "ransomware", "Xworm", "RAT", "malware"], "pulses": ["ThreatFix", "Threatfox Recent Additions", "Twitter Feed - K_N1kolenko - 14-04-2025"], "malware_count": 2, "passive_dns_count": 0, "malware_samples": ["24b470e81029c81ee03253cbec066b30f4ffba943849c6e8e0eb97899c98d7aa", "5eeed9e7dd5a1ae6bd8847dcb723d998c38fa5a6


indicator: 80.76.49.173
indicator_type: ipv4
source: otx
country: US
queried_at: 2026-05-26T00:25:26.165451
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.173", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 80.76.49.177
indicator_type: ipv4
source: otx
country: US
queried_at: 2026-05-26T00:25:42.992208
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.177", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 80.76.49.178
indicator_type: ipv4
source: otx
country: US
reverse_dns: gokeol.cam,www.ours96.com,ours96.com
hosting_provider: police,agent tesla,mylobot,csrmirteam,vidar,lumma,indonesia,mozi lin,greed mirai,february
queried_at: 2026-05-26T00:25:53.666502
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.178", "tags": ["police", "agent tesla", "mylobot", "csrmirteam", "vidar", "lumma", "indonesia", "mozi lin", "greed mirai", "february", "south africa", "jaff", "date", "tech mahindra", "asyncrat", "mozi", "malware", "paraguay", "ra world", "germany", "steam", "greed mi", "ukraine", "threat report", "mirai", "finaldraft", "blacklist host", "remcos"


indicator: 80.76.49.179
indicator_type: ipv4
source: otx
country: US
reverse_dns: schooleducationcenter.cyou,mesproach.link,www.pcvicp.com,pcvicp.com
queried_at: 2026-05-26T00:25:56.140936
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.179", "tags": [], "pulses": ["Malware Filter - Botnet List - 14-03-2026 (Part 13)", "ETIC Cybersecurity  2024-07-04  Port Scan"], "malware_count": 0, "passive_dns_count": 4, "malware_samples": [], "passive_dns": ["schooleducationcenter.cyou", "mesproach.link", "www.pcvicp.com", "pcvicp.com"]}


indicator: 80.76.49.183
indicator_type: ipv4
source: otx
country: US
queried_at: 2026-05-26T00:26:13.796862
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.183", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 80.76.49.185
indicator_type: ipv4
source: otx
country: US
queried_at: 2026-05-26T00:26:30.774992
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.185", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


