# enrichment_results

indicator: 184.95.51.172
indicator_type: ipv4
source: otx
country: US
hosting_provider: gru,apt28,fancy bear,sofacy
queried_at: 2026-04-02T19:30:11.711824
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "AS20454 secured servers llc", "indicator": "184.95.51.172", "tags": ["gru", "apt28", "fancy bear", "sofacy"], "pulses": ["US firm says Russia hacked company at heart of Trump impeachment"], "malware_count": 0, "passive_dns_count": 5, "malware_samples": [], "passive_dns": ["whm.pumadventuresperu.com", "www.jenkins.pumadventuresperu.com", "sitemap.pumadventuresperu.com", "184.95.5

reverse_dns:
  whm.pumadventuresperu.com,www.jenkins.pumadventuresperu.com,sitemap.pumadventuresperu.com,184.95.51.172,liveserviceonedrive.com


indicator: 178.32.251.98
indicator_type: ipv4
source: otx
country: FR
hosting_provider: apt28,gru,fancy bear,sofacy
queried_at: 2026-04-02T19:30:20.420385
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "France", "country_code": "FR", "city": null, "asn": "AS16276 ovh sas", "indicator": "178.32.251.98", "tags": ["apt28", "gru", "fancy bear", "sofacy"], "pulses": ["US firm says Russia hacked company at heart of Trump impeachment"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 185.141.63.103
indicator_type: ipv4
source: otx
country: CY
hosting_provider: gru,apt28,fancy bear,sofacy
queried_at: 2026-04-02T19:30:33.165024
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Cyprus", "country_code": "CY", "city": null, "asn": "AS44901 belcloud ltd", "indicator": "185.141.63.103", "tags": ["gru", "apt28", "fancy bear", "sofacy"], "pulses": ["US firm says Russia hacked company at heart of Trump impeachment"], "malware_count": 3, "passive_dns_count": 0, "malware_samples": ["43795e1070f5a398743a22242f1c3f41e2b4f90b309c6c10b811333f756da514", "e5504123eebac8b102a7bc91c7f5f525fd18ef44d35098c1fd63620fee6c1a47", "d09b7169f18ac1


indicator: 185.236.25.119
indicator_type: ipv4
source: otx
country: US
queried_at: 2026-04-02T19:30:52.090779
raw_data:
  {"pulse_count": 6, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "AS22773 cox communications inc.", "indicator": "185.236.25.119", "tags": ["foudre", "reconnaissance", "proactive defense", "filehashsha256", "iranian apt", "arenac2", "cve-2025-54068", "cve-2025-34291", "geopolitical tensions", "cve-2026-1281", "tonnerre", "filehashmd5", "time", "generatedbotid", "command and control", "cve-2025-55182", "encoded url", "uwhi6jqzqh7", "computernam

hosting_provider:
  foudre,reconnaissance,proactive defense,filehashsha256,iranian apt,arenac2,cve-2025-54068,cve-2025-34291,geopolitical tensions,cve-2026-1281


indicator: 185.76.79.125
indicator_type: ipv4
source: otx
country: ES
city: Dolores
hosting_provider: Kimsuky,phishing
queried_at: 2026-04-02T19:31:08.901418
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Spain", "country_code": "ES", "city": "Dolores", "asn": "AS50129 concisa  comunicacion  marketing y servicios s.l.", "indicator": "185.76.79.125", "tags": ["Kimsuky", "phishing"], "pulses": ["Twitter Feed - skocherhan - 07-03-2026"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 2.58.15.158
indicator_type: ipv4
source: otx
country: NL
city: Amsterdam
reverse_dns: background-services.net
hosting_provider: diplomatic,cherryspy,double-tap,kazakhstan,apt28,central asia,hatvibe,cyber espionage
queried_at: 2026-04-02T19:31:24.744760
raw_data:
  {"pulse_count": 4, "reputation": 0, "country": "Netherlands", "country_code": "NL", "city": "Amsterdam", "asn": "AS8100 quadranet enterprises llc", "indicator": "2.58.15.158", "tags": ["diplomatic", "cherryspy", "double-tap", "kazakhstan", "apt28", "central asia", "hatvibe", "cyber espionage"], "pulses": ["Russia-nexus APT possibly related to APT28 conducts cyber espionage on Central Asia and Kazakhstan diplomatic relations", "IOC TCS- IP", "Russia-nexus APT possibly related to APT28 conducts cy


indicator: 193.70.80.214
indicator_type: ipv4
source: otx
country: FR
hosting_provider: apt28,gru,fancy bear,sofacy
queried_at: 2026-04-02T19:31:26.678934
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "France", "country_code": "FR", "city": null, "asn": "AS16276 ovh sas", "indicator": "193.70.80.214", "tags": ["apt28", "gru", "fancy bear", "sofacy"], "pulses": ["US firm says Russia hacked company at heart of Trump impeachment"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 203.161.50.145
indicator_type: ipv4
source: otx
country: MY
hosting_provider: apt28,impact,post body,xss,linux x8664,metasploit,loop,nop exec,certua,go implant
queried_at: 2026-04-02T19:31:44.738091
raw_data:
  {"pulse_count": 12, "reputation": 0, "country": "Malaysia", "country_code": "MY", "city": null, "asn": "AS22612 namecheap  inc.", "indicator": "203.161.50.145", "tags": ["apt28", "impact", "post body", "xss", "linux x8664", "metasploit", "loop", "nop exec", "certua", "go implant", "address range", "appdata", "roundcube", "powershell", "entity akamai", "fancy bear", "zimbra", "proton", "APT", "squirrelmail", "totp", "credential theft", "khtml", "capture", "type", "gecko", "filehashsha256", "sedni


indicator: 209.74.87.100
indicator_type: ipv4
source: otx
country: US
hosting_provider: c2,watchtowr,exfiltration,time,attempt,cve20170199,cve-2025-55182,bitcoinaddress,http,keyc2
queried_at: 2026-04-02T19:32:03.759772
raw_data:
  {"pulse_count": 13, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "209.74.87.100", "tags": ["c2", "watchtowr", "exfiltration", "time", "attempt", "cve20170199", "cve-2025-55182", "bitcoinaddress", "http", "keyc2", "ai-assisted", "devtcp", "download", "sent baseinfo", "mena", "sliver", "encoded url", "uwhi6jqzqh7", "post-exploitation", "proactive defense", "execution", "domain", "ivanti", "foudre", "cyber espionage", "cv


indicator: 213.159.79.56
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-04-02T19:32:20.557376
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS13078 computer technologies institute ltd", "indicator": "213.159.79.56", "tags": [], "pulses": ["IOC TCS- IP"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 3.20.6.1
indicator_type: ipv4
source: otx
country: US
city: Columbus
reverse_dns: pimiteoui-dev.ottodock.com,pimiteoui.ottodock.com,api.cluster-qsvdr.qsvdr.example.opentlc.com
queried_at: 2026-04-02T19:32:28.135229
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Columbus", "asn": "AS16509 amazon.com inc", "indicator": "3.20.6.1", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["pimiteoui-dev.ottodock.com", "pimiteoui.ottodock.com", "api.cluster-qsvdr.qsvdr.example.opentlc.com"]}


indicator: 217.146.67.241
indicator_type: ipv4
source: otx
country: EE
queried_at: 2026-04-02T19:32:38.246241
raw_data:
  {"pulse_count": 4, "reputation": 0, "country": "Estonia", "country_code": "EE", "city": null, "asn": "AS49604 zone media ou", "indicator": "217.146.67.241", "tags": ["fancy bear", "credential theft", "spypress.roundish", "ukraine", "roundcube", "webmail", "xdsfeerdfbn", "chlg url", "government", "filehashsha256", "email", "css injection", "xss", "apt28", "go implant", "httd", "filehashmd5", "filehashsha1"], "pulses": ["Operation Roundish: Uncovering an APT28 Roundcube Exploitation Toolkit Target

hosting_provider:
  fancy bear,credential theft,spypress.roundish,ukraine,roundcube,webmail,xdsfeerdfbn,chlg url,government,filehashsha256


indicator: 38.180.206.61
indicator_type: ipv4
source: otx
country: US
hosting_provider: apt28,word,espionage,double-tap,kazakhstan,copy,hatvibe,microsoft word,insikt group,logpie
queried_at: 2026-04-02T19:33:17.010247
raw_data:
  {"pulse_count": 8, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "AS174 cogent communications", "indicator": "38.180.206.61", "tags": ["apt28", "word", "espionage", "double-tap", "kazakhstan", "copy", "hatvibe", "microsoft word", "insikt group", "logpie", "tag110", "word startup", "pyplunderplug", "central asia", "soar", "insikt", "cherryspy", "kremlin", "future", "diplomatic", "hta hatvibe", "russia-aligned", "tajikistan", "government", "case


indicator: 38.180.207.137
indicator_type: ipv4
source: otx
country: US
hosting_provider: central asia,apt28,hatvibe,cherryspy,double-tap,diplomatic,cyber espionage,kazakhstan
queried_at: 2026-04-02T19:33:34.659389
raw_data:
  {"pulse_count": 4, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "AS174 cogent communications", "indicator": "38.180.207.137", "tags": ["central asia", "apt28", "hatvibe", "cherryspy", "double-tap", "diplomatic", "cyber espionage", "kazakhstan"], "pulses": ["Russia-nexus APT possibly related to APT28 conducts cyber espionage on Central Asia and Kazakhstan diplomatic relations", "IOC TCS- IP", "Russia-nexus APT possibly related to APT28 conduct


indicator: 38.180.239.161
indicator_type: ipv4
source: otx
country: US
queried_at: 2026-04-02T19:33:59.692507
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "AS174 cogent communications", "indicator": "38.180.239.161", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 45.159.250.43
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-04-02T19:34:16.692055
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS44676 perviy tsod llc", "indicator": "45.159.250.43", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 78.142.19.114
indicator_type: ipv4
source: otx
country: BG
hosting_provider: gru,apt28,fancy bear,sofacy
queried_at: 2026-04-02T19:34:34.117914
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Bulgaria", "country_code": "BG", "city": null, "asn": "AS57705 lifoet-2007 llc", "indicator": "78.142.19.114", "tags": ["gru", "apt28", "fancy bear", "sofacy"], "pulses": ["US firm says Russia hacked company at heart of Trump impeachment"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 8.208.178.52
indicator_type: ipv4
source: otx
country: GB
city: London
queried_at: 2026-04-02T19:34:52.388962
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": "London", "asn": "AS45102 alibaba (us) technology co.  ltd.", "indicator": "8.208.178.52", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 80.255.3.116
indicator_type: ipv4
source: otx
country: DE
hosting_provider: apt28,gru,fancy bear,sofacy
queried_at: 2026-04-02T19:35:10.034174
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS201011 as33891 netzbetrieb gmbh", "indicator": "80.255.3.116", "tags": ["apt28", "gru", "fancy bear", "sofacy"], "pulses": ["US firm says Russia hacked company at heart of Trump impeachment"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 86.104.73.52
indicator_type: ipv4
source: otx
country: CA
city: Toronto
queried_at: 2026-04-02T19:35:26.750204
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Canada", "country_code": "CA", "city": "Toronto", "asn": "AS208913 mouk  llc", "indicator": "86.104.73.52", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 92.243.65.243
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-04-02T19:36:02.028583
raw_data:
  {"pulse_count": 4, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS30968 ooo national telecommunications", "indicator": "92.243.65.243", "tags": ["infrastructure analysis", "tls fingerprinting", "cyberattacks", "fmapp.exe", "foudre", "asn patterns", "proactive defense", "tsundere", "sliver", "phishing", "iranian apt", "malware", "Kimsuky", "geopolitical tensions", "tamecat", "threat intelligence", "tonnerre"], "pulses": ["Iranian APT Infrastructure

hosting_provider:
  infrastructure analysis,tls fingerprinting,cyberattacks,fmapp.exe,foudre,asn patterns,proactive defense,tsundere,sliver,phishing


indicator: 94.198.40.4
indicator_type: ipv4
source: otx
country: DE
city: Frankfurt am Main
hosting_provider: word,html,span,hta file,description,angolaministry,find,small,sugargh0st,body
queried_at: 2026-04-02T19:36:11.785769
raw_data:
  {"pulse_count": 11, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Frankfurt am Main", "asn": "AS9009 m247 ltd", "indicator": "94.198.40.4", "tags": ["word", "html", "span", "hta file", "description", "angolaministry", "find", "small", "sugargh0st", "body", "umbrella", "cluster", "foreign affairs", "github", "rat", "script", "friday", "homepage", "copy", "link", "talos", "tornet", "contact", "windows task", "download", "rar file", "footer", "sneakychef", "reload", "cisco s

reverse_dns:
  app.turkmensk.org,login.pnmukkcp0byonvbeirhkryzrr.ml,www.pnmukkcp0byonvbeirhkryzrr.ml,www.cra-101.ca,handphonearena.com,isonic-int.com,find.sppwoods.com,matbet239.com,travelkhatlon.com,boom.asamerla.live


indicator: 157.20.182.49
indicator_type: ipv4
source: abuseipdb
country: NL
city: 2
hosting_provider: Hosterdaddy Private Limited
queried_at: 2026-04-02T19:36:16.323164
raw_data:
  {"abuse_confidence": 8, "total_reports": 2, "is_public": true, "is_tor": false, "country": "NL", "isp": "Hosterdaddy Private Limited", "domain": "hosterdaddy.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-03-10T21:00:01+00:00", "categories": [20, 15]}


indicator: 194.67.109.14
indicator_type: ipv4
source: abuseipdb
country: RU
city: 0
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T19:36:18.204966
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RU", "isp": "Domain names registrar REG.RU, Ltd", "domain": "reg.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 194.67.71.55
indicator_type: ipv4
source: abuseipdb
country: RU
city: 0
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T19:36:20.130937
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RU", "isp": "Domain names registrar REG.RU, Ltd", "domain": "reg.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-03-31T09:01:03+00:00", "categories": []}


indicator: 94.131.121.56
indicator_type: ipv4
source: otx
country: US
city: New York
queried_at: 2026-04-02T19:36:21.177741
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "New York", "asn": "AS6461 zayo bandwidth", "indicator": "94.131.121.56", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 194.67.86.167
indicator_type: ipv4
source: abuseipdb
country: RU
city: 0
hosting_provider: Reg.Ru Hosting
queried_at: 2026-04-02T19:36:22.029676
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RU", "isp": "Reg.Ru Hosting", "domain": "reg.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 83.166.250.21
indicator_type: ipv4
source: abuseipdb
country: RU
city: 0
hosting_provider: VK Cloud Solutions
queried_at: 2026-04-02T19:36:33.332204
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RU", "isp": "VK Cloud Solutions", "domain": "mail.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 92.242.62.132
indicator_type: ipv4
source: abuseipdb
country: RU
city: 0
hosting_provider: Selectel Network
queried_at: 2026-04-02T19:36:37.100026
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RU", "isp": "Selectel Network", "domain": "selectel.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 3.22.57.57
indicator_type: ipv4
source: abuseipdb
country: US
city: 0
hosting_provider: Amazon Technologies Inc.
queried_at: 2026-04-02T19:36:38.875321
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "US", "isp": "Amazon Technologies Inc.", "domain": "amazon.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2023-07-28T14:07:26+00:00", "categories": []}


indicator: 2.2.2.6
indicator_type: ipv4
source: abuseipdb
country: US
city: 0
hosting_provider: Oracle America Inc.
queried_at: 2026-04-02T19:36:40.580907
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "US", "isp": "Oracle America Inc.", "domain": "sun.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2021-02-16T21:38:46+00:00", "categories": []}


indicator: 2.2.3.6
indicator_type: ipv4
source: abuseipdb
country: US
city: 0
hosting_provider: Oracle America Inc.
queried_at: 2026-04-02T19:36:42.423908
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "US", "isp": "Oracle America Inc.", "domain": "sun.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 65.20.97.203
indicator_type: ipv4
source: abuseipdb
country: ES
city: 0
hosting_provider: Vultr Holdings, LLC
queried_at: 2026-04-02T19:36:44.365390
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "ES", "isp": "Vultr Holdings, LLC", "domain": "vultr.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 141.105.130.237
indicator_type: ipv4
source: abuseipdb
country: UA
city: 0
hosting_provider: Hostiko
queried_at: 2026-04-02T19:36:46.091507
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "UA", "isp": "Hostiko", "domain": "hostiko.network", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 1.0.1.1
indicator_type: ipv4
source: abuseipdb
country: CN
city: 0
hosting_provider: CHINANET FUJIAN PROVINCE NETWORK
queried_at: 2026-04-02T19:36:47.788101
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "CN", "isp": "CHINANET FUJIAN PROVINCE NETWORK", "domain": "chinatelecom.cn", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-11-25T05:25:51+00:00", "categories": []}


indicator: 104.238.189.186
indicator_type: ipv4
source: abuseipdb
country: FR
city: 0
hosting_provider: Vultr Holdings, LLC
queried_at: 2026-04-02T19:36:49.747740
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "FR", "isp": "Vultr Holdings, LLC", "domain": "vultr.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2023-12-15T08:45:15+00:00", "categories": []}


indicator: 104.248.36.191
indicator_type: ipv4
source: abuseipdb
country: DE
city: 0
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:36:51.466742
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "DE", "isp": "DigitalOcean, LLC", "domain": "digitalocean.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-10-31T06:36:47+00:00", "categories": []}


indicator: 109.200.159.45
indicator_type: ipv4
source: abuseipdb
country: UA
city: 0
hosting_provider: SunCity
queried_at: 2026-04-02T19:36:53.505796
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "UA", "isp": "SunCity", "domain": "crelcom.ru", "usage_type": "Fixed Line ISP", "last_reported": null, "categories": []}


indicator: 109.234.38.232
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: Amsterdam, Netherlands
queried_at: 2026-04-02T19:36:55.337237
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "Amsterdam, Netherlands", "domain": "vdsina.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 134.122.109.104
indicator_type: ipv4
source: abuseipdb
country: GB
city: 0
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:36:58.926748
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "GB", "isp": "DigitalOcean, LLC", "domain": "digitalocean.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-06-22T03:04:13+00:00", "categories": []}


indicator: 137.184.116.179
indicator_type: ipv4
source: abuseipdb
country: US
city: 215
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:37:00.868510
raw_data:
  {"abuse_confidence": 57, "total_reports": 215, "is_public": true, "is_tor": false, "country": "US", "isp": "DigitalOcean, LLC", "domain": "digitalocean.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-03-11T02:19:50+00:00", "categories": [5, 10, 12, 13, 14, 15, 18, 19, 20, 21, 22]}


indicator: 138.68.161.53
indicator_type: ipv4
source: abuseipdb
country: GB
city: 7
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:37:02.581333
raw_data:
  {"abuse_confidence": 41, "total_reports": 7, "is_public": true, "is_tor": false, "country": "GB", "isp": "DigitalOcean, LLC", "domain": "digitalocean.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-03-31T09:00:22+00:00", "categories": [18, 21, 14, 15]}


indicator: 139.59.85.26
indicator_type: ipv4
source: abuseipdb
country: IN
city: 0
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:37:04.563782
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "IN", "isp": "DigitalOcean, LLC", "domain": "digitalocean.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-12-15T14:26:44+00:00", "categories": []}


indicator: 140.82.29.65
indicator_type: ipv4
source: abuseipdb
country: US
city: 0
hosting_provider: Vultr Holdings, LLC
queried_at: 2026-04-02T19:37:06.264919
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "US", "isp": "Vultr Holdings, LLC", "domain": "vultr.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-10-18T17:50:14+00:00", "categories": []}


indicator: 141.164.45.200
indicator_type: ipv4
source: abuseipdb
country: KR
city: 0
hosting_provider: The Constant Company, LLC
queried_at: 2026-04-02T19:37:08.250529
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "KR", "isp": "The Constant Company, LLC", "domain": "constant.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-08-22T04:14:08+00:00", "categories": []}


indicator: 141.98.233.17
indicator_type: ipv4
source: abuseipdb
country: BE
city: 0
hosting_provider: GLOBAL CONNECTIVITY SOLUTIONS LLP
queried_at: 2026-04-02T19:37:10.124574
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "BE", "isp": "GLOBAL CONNECTIVITY SOLUTIONS LLP", "domain": "globconnex.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 143.110.168.51
indicator_type: ipv4
source: abuseipdb
country: GB
city: 0
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:37:11.873314
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "GB", "isp": "DigitalOcean, LLC", "domain": "digitalocean.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-12-24T08:17:31+00:00", "categories": []}


indicator: 143.198.216.105
indicator_type: ipv4
source: abuseipdb
country: SG
city: 0
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:37:15.379667
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "SG", "isp": "DigitalOcean, LLC", "domain": "digitalocean.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 143.244.134.188
indicator_type: ipv4
source: abuseipdb
country: IN
city: 9
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:37:17.139425
raw_data:
  {"abuse_confidence": 0, "total_reports": 9, "is_public": true, "is_tor": false, "country": "IN", "isp": "DigitalOcean, LLC", "domain": "digitalocean.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-01-26T02:10:19+00:00", "categories": [14, 15, 18, 20, 21, 23]}


indicator: 144.126.218.218
indicator_type: ipv4
source: abuseipdb
country: US
city: 2
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:37:18.917591
raw_data:
  {"abuse_confidence": 1, "total_reports": 2, "is_public": true, "is_tor": false, "country": "US", "isp": "DigitalOcean, LLC", "domain": "digitalocean.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-03-09T06:12:19+00:00", "categories": [14, 15]}


indicator: 146.190.74.132
indicator_type: ipv4
source: abuseipdb
country: US
city: 0
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:37:20.686238
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "US", "isp": "DigitalOcean, LLC", "domain": "digitalocean.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-02-13T23:08:14+00:00", "categories": []}


indicator: 155.138.138.195
indicator_type: ipv4
source: abuseipdb
country: CA
city: 0
hosting_provider: Vultr Holdings, LLC
queried_at: 2026-04-02T19:37:33.916780
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "CA", "isp": "Vultr Holdings, LLC", "domain": "vultr.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 157.230.108.94
indicator_type: ipv4
source: abuseipdb
country: DE
city: 0
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:37:35.680742
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "DE", "isp": "DigitalOcean, LLC", "domain": "digitalocean.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-10-20T16:25:49+00:00", "categories": []}


indicator: 157.230.94.134
indicator_type: ipv4
source: abuseipdb
country: US
city: 0
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:37:37.509208
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "US", "isp": "DigitalOcean, LLC", "domain": "digitalocean.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-06-29T14:05:37+00:00", "categories": []}


indicator: 159.203.14.8
indicator_type: ipv4
source: abuseipdb
country: CA
city: 0
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:37:40.918125
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "CA", "isp": "DigitalOcean, LLC", "domain": "digitalocean.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2022-03-10T10:59:56+00:00", "categories": []}


indicator: 159.203.21.16
indicator_type: ipv4
source: abuseipdb
country: CA
city: 2
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:37:42.664653
raw_data:
  {"abuse_confidence": 9, "total_reports": 2, "is_public": true, "is_tor": false, "country": "CA", "isp": "DigitalOcean, LLC", "domain": "digitalocean.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-03-01T01:42:42+00:00", "categories": [20, 14, 15]}


indicator: 159.223.152.63
indicator_type: ipv4
source: abuseipdb
country: US
city: 0
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:37:44.379920
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "US", "isp": "DigitalOcean, LLC", "domain": "digitalocean.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-01-12T00:37:43+00:00", "categories": []}


indicator: 159.223.226.57
indicator_type: ipv4
source: abuseipdb
country: NL
city: 1
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:37:46.165753
raw_data:
  {"abuse_confidence": 0, "total_reports": 1, "is_public": true, "is_tor": false, "country": "NL", "isp": "DigitalOcean, LLC", "domain": "digitalocean.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-01-04T15:12:34+00:00", "categories": [18, 22]}


indicator: 159.89.31.49
indicator_type: ipv4
source: abuseipdb
country: DE
city: 0
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:37:47.968528
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "DE", "isp": "DigitalOcean, LLC", "domain": "digitalocean.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2021-12-07T11:57:47+00:00", "categories": []}


indicator: 161.35.169.180
indicator_type: ipv4
source: abuseipdb
country: GB
city: 0
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:37:51.572361
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "GB", "isp": "DigitalOcean, LLC", "domain": "digitalocean.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-06-02T23:53:57+00:00", "categories": []}


indicator: 161.35.185.146
indicator_type: ipv4
source: abuseipdb
country: US
city: 0
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:37:53.352618
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "US", "isp": "DigitalOcean, LLC", "domain": "digitalocean.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-12-22T03:10:29+00:00", "categories": []}


indicator: 164.90.210.128
indicator_type: ipv4
source: abuseipdb
country: DE
city: 0
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:37:55.097966
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "DE", "isp": "DigitalOcean, LLC", "domain": "digitalocean.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-12-26T23:45:13+00:00", "categories": []}


indicator: 165.22.120.122
indicator_type: ipv4
source: abuseipdb
country: GB
city: 0
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:37:58.637284
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "GB", "isp": "DigitalOcean, LLC", "domain": "digitalocean.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 165.227.208.207
indicator_type: ipv4
source: abuseipdb
country: US
city: 0
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:38:00.374873
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "US", "isp": "DigitalOcean, LLC", "domain": "digitalocean.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2023-04-04T19:00:24+00:00", "categories": []}


indicator: 165.232.136.224
indicator_type: ipv4
source: abuseipdb
country: US
city: 0
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:38:02.222199
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "US", "isp": "DigitalOcean, LLC", "domain": "digitalocean.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-05-08T05:04:04+00:00", "categories": []}


indicator: 167.172.139.39
indicator_type: ipv4
source: abuseipdb
country: US
city: 0
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:38:03.977177
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "US", "isp": "DigitalOcean, LLC", "domain": "digitalocean.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2023-10-24T06:03:45+00:00", "categories": []}


indicator: 176.118.164.124
indicator_type: ipv4
source: abuseipdb
country: RU
city: 0
hosting_provider: Basis LLC
queried_at: 2026-04-02T19:38:11.007613
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RU", "isp": "Basis LLC", "domain": "basistech.ru", "usage_type": null, "last_reported": "2021-10-14T10:13:42+00:00", "categories": []}


indicator: 176.118.164.159
indicator_type: ipv4
source: abuseipdb
country: RU
city: 0
hosting_provider: Basis LLC
queried_at: 2026-04-02T19:38:12.777715
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RU", "isp": "Basis LLC", "domain": "basistech.ru", "usage_type": null, "last_reported": null, "categories": []}


indicator: 176.118.164.187
indicator_type: ipv4
source: abuseipdb
country: RU
city: 0
hosting_provider: Basis LLC
queried_at: 2026-04-02T19:38:14.555914
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RU", "isp": "Basis LLC", "domain": "basistech.ru", "usage_type": null, "last_reported": "2022-02-21T12:18:47+00:00", "categories": []}


indicator: 176.118.165.76
indicator_type: ipv4
source: abuseipdb
country: RU
city: 0
hosting_provider: Basis LLC
queried_at: 2026-04-02T19:38:16.279696
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RU", "isp": "Basis LLC", "domain": "basistech.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 176.57.208.203
indicator_type: ipv4
source: abuseipdb
country: RU
city: 0
hosting_provider: JSC TIMEWEB
queried_at: 2026-04-02T19:38:18.517085
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RU", "isp": "JSC TIMEWEB", "domain": "timeweb.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 178.128.215.84
indicator_type: ipv4
source: abuseipdb
country: SG
city: 0
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:38:20.315743
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "SG", "isp": "DigitalOcean, LLC", "domain": "digitalocean.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2021-06-14T10:52:36+00:00", "categories": []}


indicator: 178.20.44.214
indicator_type: ipv4
source: abuseipdb
country: RU
city: 0
hosting_provider: VDSINA VDS Hosting
queried_at: 2026-04-02T19:38:22.238658
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RU", "isp": "VDSINA VDS Hosting", "domain": "vdsina.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 185.225.19.16
indicator_type: ipv4
source: abuseipdb
country: RO
city: 0
hosting_provider: MivoCloud
queried_at: 2026-04-02T19:38:36.915583
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RO", "isp": "MivoCloud", "domain": "mivocloud.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-01-14T01:49:17+00:00", "categories": []}


indicator: 185.251.91.137
indicator_type: ipv4
source: abuseipdb
country: RU
city: 0
hosting_provider: SPRINTHOST.RU LLC
queried_at: 2026-04-02T19:38:38.808236
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RU", "isp": "SPRINTHOST.RU LLC", "domain": "sprinthost.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-07-18T11:44:38+00:00", "categories": []}


indicator: 185.46.11.72
indicator_type: ipv4
source: abuseipdb
country: RU
city: 0
hosting_provider: Reg.Ru Hosting
queried_at: 2026-04-02T19:38:57.490613
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RU", "isp": "Reg.Ru Hosting", "domain": "reg.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-07-04T07:21:54+00:00", "categories": []}


indicator: 185.46.11.79
indicator_type: ipv4
source: abuseipdb
country: RU
city: 0
hosting_provider: Reg.Ru Hosting
queried_at: 2026-04-02T19:38:59.342883
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RU", "isp": "Reg.Ru Hosting", "domain": "reg.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2022-10-24T16:10:03+00:00", "categories": []}


indicator: 185.46.9.133
indicator_type: ipv4
source: abuseipdb
country: RU
city: 0
hosting_provider: Reg.Ru Hosting
queried_at: 2026-04-02T19:39:03.360789
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RU", "isp": "Reg.Ru Hosting", "domain": "reg.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2022-04-03T11:00:59+00:00", "categories": []}


indicator: 185.46.9.173
indicator_type: ipv4
source: abuseipdb
country: RU
city: 3
hosting_provider: Reg.Ru Hosting
queried_at: 2026-04-02T19:39:05.255121
raw_data:
  {"abuse_confidence": 0, "total_reports": 3, "is_public": true, "is_tor": false, "country": "RU", "isp": "Reg.Ru Hosting", "domain": "reg.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-01-19T13:11:51+00:00", "categories": [20, 14, 15]}


indicator: 185.46.9.81
indicator_type: ipv4
source: abuseipdb
country: RU
city: 0
hosting_provider: Reg.Ru Hosting
queried_at: 2026-04-02T19:39:07.159592
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RU", "isp": "Reg.Ru Hosting", "domain": "reg.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2022-02-07T14:33:37+00:00", "categories": []}


indicator: 188.166.43.183
indicator_type: ipv4
source: abuseipdb
country: NL
city: 22
hosting_provider: Digital Ocean, Inc.
queried_at: 2026-04-02T19:39:10.724711
raw_data:
  {"abuse_confidence": 34, "total_reports": 22, "is_public": true, "is_tor": false, "country": "NL", "isp": "Digital Ocean, Inc.", "domain": "digitalocean.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-02-18T20:12:40+00:00", "categories": [18, 22, 14]}


indicator: 188.93.210.54
indicator_type: ipv4
source: abuseipdb
country: RU
city: 0
hosting_provider: Reg.Ru
queried_at: 2026-04-02T19:39:29.449143
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RU", "isp": "Reg.Ru", "domain": "reg.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 193.124.206.128
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: Reliable Communications s.r.o.
queried_at: 2026-04-02T19:39:30.405787
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "Reliable Communications s.r.o.", "domain": "reliablecom.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 194.180.174.46
indicator_type: ipv4
source: abuseipdb
country: CA
city: 0
hosting_provider: MivoCloud SRL
queried_at: 2026-04-02T19:39:33.617275
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "CA", "isp": "MivoCloud SRL", "domain": "mivocloud.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2023-02-06T05:37:47+00:00", "categories": []}


indicator: 194.180.191.105
indicator_type: ipv4
source: abuseipdb
country: MD
city: 0
hosting_provider: MivoCloud SRL
queried_at: 2026-04-02T19:39:34.575005
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "MD", "isp": "MivoCloud SRL", "domain": "mivocloud.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-01-09T14:28:46+00:00", "categories": []}


indicator: 194.180.191.30
indicator_type: ipv4
source: abuseipdb
country: MD
city: 0
hosting_provider: MivoCloud SRL
queried_at: 2026-04-02T19:39:35.465895
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "MD", "isp": "MivoCloud SRL", "domain": "mivocloud.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-07-12T19:33:32+00:00", "categories": []}


indicator: 194.58.111.215
indicator_type: ipv4
source: abuseipdb
country: RU
city: 0
hosting_provider: Reg.Ru Hosting
queried_at: 2026-04-02T19:39:39.194559
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RU", "isp": "Reg.Ru Hosting", "domain": "reg.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2022-10-23T03:31:07+00:00", "categories": []}


indicator: 194.58.119.99
indicator_type: ipv4
source: abuseipdb
country: RU
city: 0
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T19:39:42.932898
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RU", "isp": "Domain names registrar REG.RU, Ltd", "domain": "reg.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2022-10-31T17:12:02+00:00", "categories": []}


indicator: 194.58.120.207
indicator_type: ipv4
source: abuseipdb
country: RU
city: 0
hosting_provider: Reg.Ru Hosting
queried_at: 2026-04-02T19:39:43.898608
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RU", "isp": "Reg.Ru Hosting", "domain": "reg.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2022-10-23T02:52:45+00:00", "categories": []}


indicator: 194.58.123.47
indicator_type: ipv4
source: abuseipdb
country: RU
city: 0
hosting_provider: Reg.Ru Hosting
queried_at: 2026-04-02T19:39:48.542015
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RU", "isp": "Reg.Ru Hosting", "domain": "reg.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-11-14T05:39:50+00:00", "categories": []}


indicator: 194.67.113.99
indicator_type: ipv4
source: abuseipdb
country: RU
city: 0
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T19:40:04.272395
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RU", "isp": "Domain names registrar REG.RU, Ltd", "domain": "reg.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2021-01-18T10:03:03+00:00", "categories": []}


indicator: 194.67.116.81
indicator_type: ipv4
source: abuseipdb
country: RU
city: 0
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T19:40:11.923510
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RU", "isp": "Domain names registrar REG.RU, Ltd", "domain": "reg.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-09-01T18:01:01+00:00", "categories": []}


indicator: 194.67.71.4
indicator_type: ipv4
source: abuseipdb
country: RU
city: 0
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T19:40:14.042376
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RU", "isp": "Domain names registrar REG.RU, Ltd", "domain": "reg.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-04-01T13:22:04+00:00", "categories": []}


indicator: 195.133.88.128
indicator_type: ipv4
source: abuseipdb
country: AT
city: 0
hosting_provider: GLOBAL CONNECTIVITY SOLUTIONS LLP
queried_at: 2026-04-02T19:40:25.872324
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "AT", "isp": "GLOBAL CONNECTIVITY SOLUTIONS LLP", "domain": "globconnex.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 195.140.146.128
indicator_type: ipv4
source: abuseipdb
country: RU
city: 0
hosting_provider: JSC Datacenter
queried_at: 2026-04-02T19:40:27.973105
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RU", "isp": "JSC Datacenter", "domain": "webdc.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 199.247.14.64
indicator_type: ipv4
source: abuseipdb
country: FR
city: 0
hosting_provider: The Constant Company, LLC.
queried_at: 2026-04-02T19:40:31.949375
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "FR", "isp": "The Constant Company, LLC.", "domain": "vultr.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 206.172.194.0
indicator_type: ipv4
source: abuseipdb
country: CA
city: 0
hosting_provider: Bell Canada
queried_at: 2026-04-02T19:40:33.842190
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "CA", "isp": "Bell Canada", "domain": "bell.ca", "usage_type": "Mobile ISP", "last_reported": null, "categories": []}


indicator: 209.38.97.36
indicator_type: ipv4
source: abuseipdb
country: NL
city: 3
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:40:37.558980
raw_data:
  {"abuse_confidence": 1, "total_reports": 3, "is_public": true, "is_tor": false, "country": "NL", "isp": "DigitalOcean, LLC", "domain": "digitalocean.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-03-09T00:18:35+00:00", "categories": [18]}


indicator: 212.18.104.56
indicator_type: ipv4
source: abuseipdb
country: US
city: 0
hosting_provider: GLOBAL CONNECTIVITY SOLUTIONS LLP
queried_at: 2026-04-02T19:40:41.398065
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "US", "isp": "GLOBAL CONNECTIVITY SOLUTIONS LLP", "domain": "gir.network", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 213.182.204.71
indicator_type: ipv4
source: abuseipdb
country: ES
city: 0
hosting_provider: Baxet Group Inc.
queried_at: 2026-04-02T19:40:43.314249
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "ES", "isp": "Baxet Group Inc.", "domain": "baxetgroup.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 216.238.69.137
indicator_type: ipv4
source: abuseipdb
country: MX
city: 0
hosting_provider: The Constant Company, LLC
queried_at: 2026-04-02T19:40:45.334402
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "MX", "isp": "The Constant Company, LLC", "domain": "constant.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 217.25.89.191
indicator_type: ipv4
source: abuseipdb
country: RU
city: 0
hosting_provider: JSC TIMEWEB
queried_at: 2026-04-02T19:40:47.490073
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RU", "isp": "JSC TIMEWEB", "domain": "timeweb.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2022-08-21T12:22:46+00:00", "categories": []}


indicator: 23.42.150.172
indicator_type: ipv4
source: abuseipdb
country: CA
city: 0
hosting_provider: Akamai International, BV
queried_at: 2026-04-02T19:40:53.180224
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "CA", "isp": "Akamai International, BV", "domain": "akamai.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 31.31.203.219
indicator_type: ipv4
source: abuseipdb
country: RU
city: 0
hosting_provider: Reg.Ru Hosting
queried_at: 2026-04-02T19:40:57.050598
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RU", "isp": "Reg.Ru Hosting", "domain": "reg.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2021-12-04T06:39:20+00:00", "categories": []}


indicator: 37.140.197.206
indicator_type: ipv4
source: abuseipdb
country: RU
city: 0
hosting_provider: Reg.Ru Hosting
queried_at: 2026-04-02T19:41:06.526475
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RU", "isp": "Reg.Ru Hosting", "domain": "reg.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2021-06-11T18:42:30+00:00", "categories": []}


indicator: 37.140.199.20
indicator_type: ipv4
source: abuseipdb
country: RU
city: 0
hosting_provider: Reg.Ru Hosting
queried_at: 2026-04-02T19:41:10.277894
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RU", "isp": "Reg.Ru Hosting", "domain": "reg.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2023-06-18T01:41:20+00:00", "categories": []}


indicator: 37.140.199.224
indicator_type: ipv4
source: abuseipdb
country: RU
city: 0
hosting_provider: Reg.Ru Hosting
queried_at: 2026-04-02T19:41:12.155081
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RU", "isp": "Reg.Ru Hosting", "domain": "reg.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2022-05-04T09:13:35+00:00", "categories": []}


indicator: 38.54.12.3
indicator_type: ipv4
source: abuseipdb
country: DE
city: 0
hosting_provider: Kaopu Cloud HK Limited
queried_at: 2026-04-02T19:41:13.943751
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "DE", "isp": "Kaopu Cloud HK Limited", "domain": "kaopucloud.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 45.134.255.131
indicator_type: ipv4
source: abuseipdb
country: RU
city: 0
hosting_provider: Basis LLC
queried_at: 2026-04-02T19:41:15.661073
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RU", "isp": "Basis LLC", "domain": "basistech.ru", "usage_type": null, "last_reported": "2022-01-10T16:35:42+00:00", "categories": []}


indicator: 45.32.149.8
indicator_type: ipv4
source: abuseipdb
country: FR
city: 0
hosting_provider: Vultr Holdings, LLC
queried_at: 2026-04-02T19:41:18.299027
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "FR", "isp": "Vultr Holdings, LLC", "domain": "vultr.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2022-01-06T09:37:14+00:00", "categories": []}


indicator: 45.77.229.187
indicator_type: ipv4
source: abuseipdb
country: GB
city: 0
hosting_provider: Vultr Holdings, LLC
queried_at: 2026-04-02T19:41:22.677341
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "GB", "isp": "Vultr Holdings, LLC", "domain": "vultr.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 46.29.234.46
indicator_type: ipv4
source: abuseipdb
country: LT
city: 0
hosting_provider: GLOBAL CONNECTIVITY SOLUTIONS LLP
queried_at: 2026-04-02T19:41:24.049403
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "LT", "isp": "GLOBAL CONNECTIVITY SOLUTIONS LLP", "domain": "gir.network", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 5.252.178.140
indicator_type: ipv4
source: abuseipdb
country: RO
city: 0
hosting_provider: MivoCloud
queried_at: 2026-04-02T19:41:25.944990
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RO", "isp": "MivoCloud", "domain": "mivocloud.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2022-07-09T09:39:22+00:00", "categories": []}


indicator: 5.63.154.19
indicator_type: ipv4
source: abuseipdb
country: RU
city: 0
hosting_provider: Reg.Ru Hosting
queried_at: 2026-04-02T19:41:28.380646
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RU", "isp": "Reg.Ru Hosting", "domain": "reg.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2021-10-30T10:53:59+00:00", "categories": []}


indicator: 5.63.158.238
indicator_type: ipv4
source: abuseipdb
country: RU
city: 0
hosting_provider: Reg.Ru Hosting
queried_at: 2026-04-02T19:41:31.530770
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RU", "isp": "Reg.Ru Hosting", "domain": "reg.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2021-12-01T09:59:51+00:00", "categories": []}


indicator: 62.133.62.73
indicator_type: ipv4
source: abuseipdb
country: FR
city: 0
hosting_provider: GLOBAL CONNECTIVITY SOLUTIONS LLP
queried_at: 2026-04-02T19:41:32.161746
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "FR", "isp": "GLOBAL CONNECTIVITY SOLUTIONS LLP", "domain": "gir.network", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-05-03T21:45:54+00:00", "categories": []}


indicator: 64.227.139.249
indicator_type: ipv4
source: abuseipdb
country: IN
city: 0
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:41:33.286378
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "IN", "isp": "DigitalOcean, LLC", "domain": "digitalocean.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-08-28T17:43:15+00:00", "categories": []}


indicator: 64.227.172.243
indicator_type: ipv4
source: abuseipdb
country: IN
city: 19
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:41:33.966438
raw_data:
  {"abuse_confidence": 30, "total_reports": 19, "is_public": true, "is_tor": false, "country": "IN", "isp": "DigitalOcean, LLC", "domain": "digitalocean.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-02-22T00:00:41+00:00", "categories": [18, 15, 14, 22]}


indicator: 67.205.160.237
indicator_type: ipv4
source: abuseipdb
country: US
city: 0
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:41:35.049734
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "US", "isp": "DigitalOcean, LLC", "domain": "digitalocean.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2023-04-17T11:49:52+00:00", "categories": []}


indicator: 68.183.2.92
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:41:35.750312
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "DigitalOcean, LLC", "domain": "digitalocean.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-01-06T09:35:32+00:00", "categories": []}


indicator: 70.34.194.123
indicator_type: ipv4
source: abuseipdb
country: SE
city: 0
hosting_provider: The Constant Company, LLC
queried_at: 2026-04-02T19:41:37.003339
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "SE", "isp": "The Constant Company, LLC", "domain": "constant.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2023-10-03T10:51:12+00:00", "categories": []}


indicator: 70.34.194.31
indicator_type: ipv4
source: abuseipdb
country: SE
city: 0
hosting_provider: The Constant Company, LLC
queried_at: 2026-04-02T19:41:37.712923
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "SE", "isp": "The Constant Company, LLC", "domain": "constant.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2022-10-23T02:42:39+00:00", "categories": []}


indicator: 70.34.195.75
indicator_type: ipv4
source: abuseipdb
country: SE
city: 0
hosting_provider: The Constant Company, LLC
queried_at: 2026-04-02T19:41:39.028633
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "SE", "isp": "The Constant Company, LLC", "domain": "constant.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 70.34.204.141
indicator_type: ipv4
source: abuseipdb
country: SE
city: 0
hosting_provider: The Constant Company, LLC
queried_at: 2026-04-02T19:41:43.600264
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "SE", "isp": "The Constant Company, LLC", "domain": "constant.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-06-23T04:06:21+00:00", "categories": []}


indicator: 80.78.240.210
indicator_type: ipv4
source: abuseipdb
country: RU
city: 0
hosting_provider: Reg.Ru Hosting
queried_at: 2026-04-02T19:41:46.790619
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RU", "isp": "Reg.Ru Hosting", "domain": "reg.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2022-10-24T13:13:37+00:00", "categories": []}


indicator: 80.78.245.223
indicator_type: ipv4
source: abuseipdb
country: RU
city: 0
hosting_provider: Reg.Ru Hosting
queried_at: 2026-04-02T19:41:49.315930
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RU", "isp": "Reg.Ru Hosting", "domain": "reg.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-02-23T00:45:57+00:00", "categories": []}


indicator: 80.78.248.222
indicator_type: ipv4
source: abuseipdb
country: RU
city: 0
hosting_provider: Reg.Ru Hosting
queried_at: 2026-04-02T19:41:54.135142
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RU", "isp": "Reg.Ru Hosting", "domain": "reg.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2021-12-03T06:03:47+00:00", "categories": []}


indicator: 80.90.181.107
indicator_type: ipv4
source: abuseipdb
country: KZ
city: 0
hosting_provider: lease for Timeweb
queried_at: 2026-04-02T19:42:00.540340
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "KZ", "isp": "lease for Timeweb", "domain": "timewebcloud.kz", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 82.146.39.104
indicator_type: ipv4
source: abuseipdb
country: RU
city: 0
hosting_provider: JSC Datacenter
queried_at: 2026-04-02T19:42:01.651861
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RU", "isp": "JSC Datacenter", "domain": "webdc.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-10-01T08:04:30+00:00", "categories": []}


indicator: 83.166.242.108
indicator_type: ipv4
source: abuseipdb
country: RU
city: 0
hosting_provider: Plusinfo OOO
queried_at: 2026-04-02T19:42:02.548099
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RU", "isp": "Plusinfo OOO", "domain": "plusinfo.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 89.108.115.232
indicator_type: ipv4
source: abuseipdb
country: RU
city: 0
hosting_provider: Reg.Ru Hosting
queried_at: 2026-04-02T19:42:11.032330
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RU", "isp": "Reg.Ru Hosting", "domain": "reg.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2022-01-25T18:33:20+00:00", "categories": []}


indicator: 89.108.115.235
indicator_type: ipv4
source: abuseipdb
country: RU
city: 0
hosting_provider: Reg.Ru Hosting
queried_at: 2026-04-02T19:42:12.880645
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RU", "isp": "Reg.Ru Hosting", "domain": "reg.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2021-12-19T08:31:18+00:00", "categories": []}


indicator: 89.108.115.236
indicator_type: ipv4
source: abuseipdb
country: RU
city: 0
hosting_provider: Reg.Ru Hosting
queried_at: 2026-04-02T19:42:13.835784
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RU", "isp": "Reg.Ru Hosting", "domain": "reg.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2021-12-19T08:31:33+00:00", "categories": []}


indicator: 89.108.115.241
indicator_type: ipv4
source: abuseipdb
country: RU
city: 0
hosting_provider: Reg.Ru Hosting
queried_at: 2026-04-02T19:42:14.752291
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RU", "isp": "Reg.Ru Hosting", "domain": "reg.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-10-17T13:43:18+00:00", "categories": []}


indicator: 89.108.65.157
indicator_type: ipv4
source: abuseipdb
country: RU
city: 0
hosting_provider: Reg.Ru Hosting
queried_at: 2026-04-02T19:42:15.568742
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RU", "isp": "Reg.Ru Hosting", "domain": "reg.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2022-10-24T16:42:16+00:00", "categories": []}


indicator: 89.108.70.223
indicator_type: ipv4
source: abuseipdb
country: RU
city: 0
hosting_provider: Reg.Ru Hosting
queried_at: 2026-04-02T19:42:17.462816
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RU", "isp": "Reg.Ru Hosting", "domain": "reg.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-04-24T05:03:33+00:00", "categories": []}


indicator: 185.163.45.5
indicator_type: ipv4
source: virustotal
country: MD
hosting_provider: MivoCloud SRL
queried_at: 2026-04-02T19:42:25.312224
raw_data:
  {"malicious": 6, "suspicious": 0, "harmless": 55, "undetected": 33, "reputation": -1, "country": "MD", "as_owner": "MivoCloud SRL", "asn": 39798, "network": "185.163.44.0/22", "last_analysis_date": 1767797845}


indicator: 89.108.78.126
indicator_type: ipv4
source: abuseipdb
country: RU
city: 0
hosting_provider: Reg.Ru Hosting
queried_at: 2026-04-02T19:42:27.910127
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RU", "isp": "Reg.Ru Hosting", "domain": "reg.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2022-10-23T03:07:54+00:00", "categories": []}


indicator: 185.163.47.177
indicator_type: ipv4
source: virustotal
country: MD
hosting_provider: MivoCloud SRL
queried_at: 2026-04-02T19:42:35.719929
raw_data:
  {"malicious": 6, "suspicious": 0, "harmless": 56, "undetected": 32, "reputation": 0, "country": "MD", "as_owner": "MivoCloud SRL", "asn": 39798, "network": "185.163.44.0/22", "last_analysis_date": 1774960031}


indicator: 157.20.182.49
indicator_type: ipv4
source: virustotal
country: NL
hosting_provider: Hosterdaddy Private Limited
queried_at: 2026-04-02T19:42:46.337996
raw_data:
  {"malicious": 22, "suspicious": 1, "harmless": 46, "undetected": 25, "reputation": -60, "country": "NL", "as_owner": "Hosterdaddy Private Limited", "asn": 152485, "network": "157.20.182.0/23", "last_analysis_date": 1775112273}


indicator: 2.2.2.6
indicator_type: ipv4
source: virustotal
country: SE
queried_at: 2026-04-02T19:42:56.275243
raw_data:
  {"malicious": 1, "suspicious": 0, "harmless": 58, "undetected": 35, "reputation": -1, "country": "SE", "as_owner": "", "asn": 0, "network": "", "last_analysis_date": 1770093725}


indicator: 2.2.3.6
indicator_type: ipv4
source: virustotal
country: SE
queried_at: 2026-04-02T19:43:06.830094
raw_data:
  {"malicious": 1, "suspicious": 0, "harmless": 59, "undetected": 34, "reputation": 0, "country": "SE", "as_owner": "", "asn": 0, "network": "", "last_analysis_date": 1770093725}


indicator: 65.20.97.203
indicator_type: ipv4
source: virustotal
country: ES
hosting_provider: The Constant Company, LLC
queried_at: 2026-04-02T19:43:16.934008
raw_data:
  {"malicious": 6, "suspicious": 0, "harmless": 53, "undetected": 35, "reputation": 0, "country": "ES", "as_owner": "The Constant Company, LLC", "asn": 20473, "network": "65.20.64.0/18", "last_analysis_date": 1773171577}


indicator: 141.105.130.237
indicator_type: ipv4
source: virustotal
country: UA
hosting_provider: South Park Networks LLC
queried_at: 2026-04-02T19:43:27.473285
raw_data:
  {"malicious": 6, "suspicious": 0, "harmless": 54, "undetected": 34, "reputation": 0, "country": "UA", "as_owner": "South Park Networks LLC", "asn": 214379, "network": "141.105.130.0/24", "last_analysis_date": 1775090469}


indicator: 1.0.1.1
indicator_type: ipv4
source: virustotal
country: CN
queried_at: 2026-04-02T19:43:37.496555
raw_data:
  {"malicious": 1, "suspicious": 0, "harmless": 58, "undetected": 35, "reputation": 0, "country": "CN", "as_owner": "", "asn": 0, "network": "", "last_analysis_date": 1774951433}


indicator: 104.238.189.186
indicator_type: ipv4
source: virustotal
country: FR
hosting_provider: The Constant Company, LLC
queried_at: 2026-04-02T19:43:47.984427
raw_data:
  {"malicious": 7, "suspicious": 0, "harmless": 50, "undetected": 37, "reputation": 0, "country": "FR", "as_owner": "The Constant Company, LLC", "asn": 20473, "network": "104.238.128.0/18", "last_analysis_date": 1772618529}


indicator: 104.248.36.191
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:43:57.975066
raw_data:
  {"malicious": 1, "suspicious": 0, "harmless": 59, "undetected": 34, "reputation": 0, "country": "DE", "as_owner": "DigitalOcean, LLC", "asn": 14061, "network": "104.248.0.0/16", "last_analysis_date": 1768650609}


indicator: 109.200.159.45
indicator_type: ipv4
source: virustotal
country: UA
hosting_provider: Crelcom LLC
queried_at: 2026-04-02T19:44:08.832766
raw_data:
  {"malicious": 9, "suspicious": 0, "harmless": 50, "undetected": 35, "reputation": 0, "country": "UA", "as_owner": "Crelcom LLC", "asn": 6789, "network": "109.200.158.0/23", "last_analysis_date": 1773568611}


indicator: 109.234.38.232
indicator_type: ipv4
source: virustotal
country: NL
hosting_provider: Servers Tech Fzco
queried_at: 2026-04-02T19:44:18.572332
raw_data:
  {"malicious": 11, "suspicious": 0, "harmless": 50, "undetected": 33, "reputation": 0, "country": "NL", "as_owner": "Servers Tech Fzco", "asn": 216071, "network": "109.234.36.0/22", "last_analysis_date": 1775011560}


indicator: 134.0.112.117
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T19:44:29.350601
raw_data:
  {"malicious": 8, "suspicious": 0, "harmless": 50, "undetected": 36, "reputation": 0, "country": "RU", "as_owner": "Domain names registrar REG.RU, Ltd", "asn": 197695, "network": "134.0.112.0/21", "last_analysis_date": 1772412058}


indicator: 134.122.109.104
indicator_type: ipv4
source: virustotal
country: GB
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:44:39.068727
raw_data:
  {"malicious": 2, "suspicious": 0, "harmless": 57, "undetected": 35, "reputation": 0, "country": "GB", "as_owner": "DigitalOcean, LLC", "asn": 14061, "network": "134.122.0.0/17", "last_analysis_date": 1757881550}


indicator: 137.184.116.179
indicator_type: ipv4
source: virustotal
country: US
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:44:49.835003
raw_data:
  {"malicious": 7, "suspicious": 5, "harmless": 53, "undetected": 29, "reputation": -1, "country": "US", "as_owner": "DigitalOcean, LLC", "asn": 14061, "network": "137.184.0.0/17", "last_analysis_date": 1770240588}


indicator: 138.68.161.53
indicator_type: ipv4
source: virustotal
country: GB
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:44:59.774104
raw_data:
  {"malicious": 5, "suspicious": 1, "harmless": 55, "undetected": 33, "reputation": 0, "country": "GB", "as_owner": "DigitalOcean, LLC", "asn": 14061, "network": "138.68.128.0/17", "last_analysis_date": 1773935749}


indicator: 139.59.85.26
indicator_type: ipv4
source: virustotal
country: IN
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:45:10.310103
raw_data:
  {"malicious": 1, "suspicious": 1, "harmless": 60, "undetected": 32, "reputation": -1, "country": "IN", "as_owner": "DigitalOcean, LLC", "asn": 14061, "network": "139.59.0.0/16", "last_analysis_date": 1767693390}


indicator: 140.82.29.65
indicator_type: ipv4
source: virustotal
country: US
hosting_provider: The Constant Company, LLC
queried_at: 2026-04-02T19:45:20.391026
raw_data:
  {"malicious": 6, "suspicious": 0, "harmless": 53, "undetected": 35, "reputation": 0, "country": "US", "as_owner": "The Constant Company, LLC", "asn": 20473, "network": "140.82.0.0/18", "last_analysis_date": 1772697414}


indicator: 141.164.45.200
indicator_type: ipv4
source: virustotal
country: KR
hosting_provider: The Constant Company, LLC
queried_at: 2026-04-02T19:45:30.945242
raw_data:
  {"malicious": 5, "suspicious": 0, "harmless": 54, "undetected": 35, "reputation": -1, "country": "KR", "as_owner": "The Constant Company, LLC", "asn": 20473, "network": "141.164.32.0/19", "last_analysis_date": 1772103433}


indicator: 141.98.233.17
indicator_type: ipv4
source: virustotal
country: BE
hosting_provider: Global Connectivity Solutions Llp
queried_at: 2026-04-02T19:45:40.865006
raw_data:
  {"malicious": 1, "suspicious": 0, "harmless": 60, "undetected": 33, "reputation": 0, "country": "BE", "as_owner": "Global Connectivity Solutions Llp", "asn": 215540, "network": "141.98.233.0/24", "last_analysis_date": 1775026909}


indicator: 143.110.168.51
indicator_type: ipv4
source: virustotal
country: GB
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:45:51.449226
raw_data:
  {"malicious": 0, "suspicious": 1, "harmless": 58, "undetected": 35, "reputation": 0, "country": "GB", "as_owner": "DigitalOcean, LLC", "asn": 14061, "network": "143.110.128.0/17", "last_analysis_date": 1768161216}


indicator: 143.198.160.45
indicator_type: ipv4
source: virustotal
country: US
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:46:01.706881
raw_data:
  {"malicious": 3, "suspicious": 2, "harmless": 56, "undetected": 33, "reputation": 0, "country": "US", "as_owner": "DigitalOcean, LLC", "asn": 14061, "network": "143.198.128.0/18", "last_analysis_date": 1774223988}


indicator: 143.198.216.105
indicator_type: ipv4
source: virustotal
country: SG
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:46:12.312706
raw_data:
  {"malicious": 3, "suspicious": 1, "harmless": 56, "undetected": 34, "reputation": 0, "country": "SG", "as_owner": "DigitalOcean, LLC", "asn": 14061, "network": "143.198.192.0/19", "last_analysis_date": 1770004719}


indicator: 143.244.134.188
indicator_type: ipv4
source: virustotal
country: IN
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:46:22.186653
raw_data:
  {"malicious": 5, "suspicious": 3, "harmless": 55, "undetected": 31, "reputation": 0, "country": "IN", "as_owner": "DigitalOcean, LLC", "asn": 14061, "network": "143.244.128.0/18", "last_analysis_date": 1770048714}


indicator: 144.126.218.218
indicator_type: ipv4
source: virustotal
country: US
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:46:32.990561
raw_data:
  {"malicious": 5, "suspicious": 2, "harmless": 53, "undetected": 34, "reputation": 0, "country": "US", "as_owner": "DigitalOcean, LLC", "asn": 14061, "network": "144.126.192.0/18", "last_analysis_date": 1773192043}


indicator: 146.190.74.132
indicator_type: ipv4
source: virustotal
country: US
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:46:42.959922
raw_data:
  {"malicious": 2, "suspicious": 1, "harmless": 57, "undetected": 34, "reputation": 0, "country": "US", "as_owner": "DigitalOcean, LLC", "asn": 14061, "network": "146.190.0.0/17", "last_analysis_date": 1775037690}


indicator: 151.248.114.67
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T19:46:53.544466
raw_data:
  {"malicious": 2, "suspicious": 0, "harmless": 56, "undetected": 36, "reputation": 0, "country": "RU", "as_owner": "Domain names registrar REG.RU, Ltd", "asn": 197695, "network": "151.248.112.0/20", "last_analysis_date": 1773734134}


indicator: 151.248.114.88
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T19:47:03.660916
raw_data:
  {"malicious": 7, "suspicious": 0, "harmless": 52, "undetected": 35, "reputation": 0, "country": "RU", "as_owner": "Domain names registrar REG.RU, Ltd", "asn": 197695, "network": "151.248.112.0/20", "last_analysis_date": 1772412055}


indicator: 151.248.116.243
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T19:47:14.029268
raw_data:
  {"malicious": 8, "suspicious": 0, "harmless": 52, "undetected": 34, "reputation": 0, "country": "RU", "as_owner": "Domain names registrar REG.RU, Ltd", "asn": 197695, "network": "151.248.112.0/20", "last_analysis_date": 1773975442}


indicator: 151.248.117.250
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T19:47:24.184918
raw_data:
  {"malicious": 9, "suspicious": 0, "harmless": 52, "undetected": 33, "reputation": 0, "country": "RU", "as_owner": "Domain names registrar REG.RU, Ltd", "asn": 197695, "network": "151.248.112.0/20", "last_analysis_date": 1772412058}


indicator: 151.248.121.176
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T19:47:34.550035
raw_data:
  {"malicious": 7, "suspicious": 0, "harmless": 54, "undetected": 33, "reputation": 0, "country": "RU", "as_owner": "Domain names registrar REG.RU, Ltd", "asn": 197695, "network": "151.248.112.0/20", "last_analysis_date": 1772412058}


indicator: 151.248.125.140
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T19:47:44.781408
raw_data:
  {"malicious": 4, "suspicious": 0, "harmless": 54, "undetected": 36, "reputation": 0, "country": "RU", "as_owner": "Domain names registrar REG.RU, Ltd", "asn": 197695, "network": "151.248.112.0/20", "last_analysis_date": 1767662981}


indicator: 155.138.138.195
indicator_type: ipv4
source: virustotal
country: CA
hosting_provider: The Constant Company, LLC
queried_at: 2026-04-02T19:47:55.157267
raw_data:
  {"malicious": 2, "suspicious": 0, "harmless": 55, "undetected": 37, "reputation": 0, "country": "CA", "as_owner": "The Constant Company, LLC", "asn": 20473, "network": "155.138.128.0/17", "last_analysis_date": 1774350756}


indicator: 157.230.108.94
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:48:05.234858
raw_data:
  {"malicious": 3, "suspicious": 1, "harmless": 56, "undetected": 34, "reputation": 0, "country": "DE", "as_owner": "DigitalOcean, LLC", "asn": 14061, "network": "157.230.0.0/16", "last_analysis_date": 1775037693}


indicator: 157.230.94.134
indicator_type: ipv4
source: virustotal
country: US
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:48:15.826566
raw_data:
  {"malicious": 2, "suspicious": 1, "harmless": 56, "undetected": 35, "reputation": 0, "country": "US", "as_owner": "DigitalOcean, LLC", "asn": 14061, "network": "157.230.0.0/16", "last_analysis_date": 1773529019}


indicator: 157.245.201.196
indicator_type: ipv4
source: virustotal
country: SG
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:48:25.698635
raw_data:
  {"malicious": 2, "suspicious": 1, "harmless": 55, "undetected": 36, "reputation": 0, "country": "SG", "as_owner": "DigitalOcean, LLC", "asn": 14061, "network": "157.245.0.0/16", "last_analysis_date": 1772787472}


indicator: 159.203.14.8
indicator_type: ipv4
source: virustotal
country: CA
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:48:36.279512
raw_data:
  {"malicious": 1, "suspicious": 1, "harmless": 57, "undetected": 35, "reputation": 0, "country": "CA", "as_owner": "DigitalOcean, LLC", "asn": 14061, "network": "159.203.0.0/16", "last_analysis_date": 1774927379}


indicator: 159.203.21.16
indicator_type: ipv4
source: virustotal
country: CA
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:48:46.167739
raw_data:
  {"malicious": 5, "suspicious": 1, "harmless": 54, "undetected": 34, "reputation": 0, "country": "CA", "as_owner": "DigitalOcean, LLC", "asn": 14061, "network": "159.203.0.0/16", "last_analysis_date": 1773962106}


indicator: 159.223.152.63
indicator_type: ipv4
source: virustotal
country: US
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:48:56.762410
raw_data:
  {"malicious": 1, "suspicious": 1, "harmless": 58, "undetected": 34, "reputation": 0, "country": "US", "as_owner": "DigitalOcean, LLC", "asn": 14061, "network": "159.223.128.0/18", "last_analysis_date": 1769846175}


indicator: 159.223.226.57
indicator_type: ipv4
source: virustotal
country: NL
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:49:06.628727
raw_data:
  {"malicious": 8, "suspicious": 2, "harmless": 54, "undetected": 30, "reputation": -2, "country": "NL", "as_owner": "DigitalOcean, LLC", "asn": 14061, "network": "159.223.224.0/20", "last_analysis_date": 1770004716}


indicator: 159.89.31.49
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:49:17.209656
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 58, "undetected": 36, "reputation": 0, "country": "DE", "as_owner": "DigitalOcean, LLC", "asn": 14061, "network": "159.89.0.0/19", "last_analysis_date": 1760409659}


indicator: 161.35.106.28
indicator_type: ipv4
source: virustotal
country: US
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:49:27.658022
raw_data:
  {"malicious": 7, "suspicious": 0, "harmless": 56, "undetected": 31, "reputation": 0, "country": "US", "as_owner": "DigitalOcean, LLC", "asn": 14061, "network": "161.35.0.0/16", "last_analysis_date": 1768755476}


indicator: 161.35.169.180
indicator_type: ipv4
source: virustotal
country: GB
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:49:37.710074
raw_data:
  {"malicious": 3, "suspicious": 1, "harmless": 57, "undetected": 33, "reputation": 0, "country": "GB", "as_owner": "DigitalOcean, LLC", "asn": 14061, "network": "161.35.0.0/16", "last_analysis_date": 1769647751}


indicator: 161.35.185.146
indicator_type: ipv4
source: virustotal
country: US
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:49:48.138186
raw_data:
  {"malicious": 2, "suspicious": 1, "harmless": 56, "undetected": 35, "reputation": 0, "country": "US", "as_owner": "DigitalOcean, LLC", "asn": 14061, "network": "161.35.0.0/16", "last_analysis_date": 1773989953}


indicator: 164.90.210.128
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:49:58.200876
raw_data:
  {"malicious": 3, "suspicious": 1, "harmless": 55, "undetected": 35, "reputation": 0, "country": "DE", "as_owner": "DigitalOcean, LLC", "asn": 14061, "network": "164.90.192.0/19", "last_analysis_date": 1775037690}


indicator: 164.92.115.188
indicator_type: ipv4
source: virustotal
country: US
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:50:08.670361
raw_data:
  {"malicious": 2, "suspicious": 3, "harmless": 56, "undetected": 33, "reputation": 0, "country": "US", "as_owner": "DigitalOcean, LLC", "asn": 14061, "network": "164.92.64.0/18", "last_analysis_date": 1774223881}


indicator: 165.22.120.122
indicator_type: ipv4
source: virustotal
country: GB
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:50:18.743620
raw_data:
  {"malicious": 2, "suspicious": 0, "harmless": 58, "undetected": 34, "reputation": 0, "country": "GB", "as_owner": "DigitalOcean, LLC", "asn": 14061, "network": "165.22.0.0/16", "last_analysis_date": 1757881551}


indicator: 165.227.208.207
indicator_type: ipv4
source: virustotal
country: US
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:50:29.373072
raw_data:
  {"malicious": 3, "suspicious": 1, "harmless": 57, "undetected": 33, "reputation": 0, "country": "US", "as_owner": "DigitalOcean, LLC", "asn": 14061, "network": "165.227.0.0/16", "last_analysis_date": 1773783378}


indicator: 165.232.136.224
indicator_type: ipv4
source: virustotal
country: US
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:50:39.276822
raw_data:
  {"malicious": 2, "suspicious": 1, "harmless": 57, "undetected": 34, "reputation": 0, "country": "US", "as_owner": "DigitalOcean, LLC", "asn": 14061, "network": "165.232.128.0/18", "last_analysis_date": 1773449775}


indicator: 167.172.139.39
indicator_type: ipv4
source: virustotal
country: US
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:50:49.889474
raw_data:
  {"malicious": 6, "suspicious": 0, "harmless": 54, "undetected": 34, "reputation": 0, "country": "US", "as_owner": "DigitalOcean, LLC", "asn": 14061, "network": "167.172.0.0/16", "last_analysis_date": 1767578291}


indicator: 167.172.74.200
indicator_type: ipv4
source: virustotal
country: SG
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:50:59.745813
raw_data:
  {"malicious": 3, "suspicious": 1, "harmless": 55, "undetected": 35, "reputation": 0, "country": "SG", "as_owner": "DigitalOcean, LLC", "asn": 14061, "network": "167.172.0.0/16", "last_analysis_date": 1775037690}


indicator: 167.99.127.118
indicator_type: ipv4
source: virustotal
country: US
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:51:10.431407
raw_data:
  {"malicious": 3, "suspicious": 1, "harmless": 56, "undetected": 34, "reputation": 0, "country": "US", "as_owner": "DigitalOcean, LLC", "asn": 14061, "network": "167.99.0.0/16", "last_analysis_date": 1769875010}


indicator: 167.99.138.16
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:51:20.253835
raw_data:
  {"malicious": 6, "suspicious": 0, "harmless": 55, "undetected": 33, "reputation": 0, "country": "DE", "as_owner": "DigitalOcean, LLC", "asn": 14061, "network": "167.99.0.0/16", "last_analysis_date": 1773385084}


indicator: 176.118.164.124
indicator_type: ipv4
source: virustotal
country: RU
queried_at: 2026-04-02T19:51:31.026632
raw_data:
  {"malicious": 9, "suspicious": 0, "harmless": 49, "undetected": 36, "reputation": 0, "country": "RU", "as_owner": "", "asn": 0, "network": "", "last_analysis_date": 1772412056}


indicator: 176.118.164.159
indicator_type: ipv4
source: virustotal
country: RU
queried_at: 2026-04-02T19:51:40.951115
raw_data:
  {"malicious": 8, "suspicious": 0, "harmless": 53, "undetected": 33, "reputation": 0, "country": "RU", "as_owner": "", "asn": 0, "network": "", "last_analysis_date": 1773327417}


indicator: 176.118.164.187
indicator_type: ipv4
source: virustotal
country: RU
queried_at: 2026-04-02T19:51:51.539027
raw_data:
  {"malicious": 7, "suspicious": 0, "harmless": 51, "undetected": 36, "reputation": 0, "country": "RU", "as_owner": "", "asn": 0, "network": "", "last_analysis_date": 1772690131}


indicator: 176.118.165.76
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Basis LLC
queried_at: 2026-04-02T19:52:01.511666
raw_data:
  {"malicious": 7, "suspicious": 0, "harmless": 52, "undetected": 35, "reputation": 0, "country": "RU", "as_owner": "Basis LLC", "asn": 43830, "network": "176.118.165.0/24", "last_analysis_date": 1772412056}


indicator: 176.57.208.203
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Jsc timeweb
queried_at: 2026-04-02T19:52:12.060269
raw_data:
  {"malicious": 8, "suspicious": 0, "harmless": 52, "undetected": 34, "reputation": 0, "country": "RU", "as_owner": "Jsc timeweb", "asn": 9123, "network": "176.57.208.0/22", "last_analysis_date": 1772412056}


indicator: 178.128.215.84
indicator_type: ipv4
source: virustotal
country: SG
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:52:22.311832
raw_data:
  {"malicious": 2, "suspicious": 1, "harmless": 57, "undetected": 34, "reputation": 0, "country": "SG", "as_owner": "DigitalOcean, LLC", "asn": 14061, "network": "178.128.0.0/16", "last_analysis_date": 1770177721}


indicator: 178.20.44.214
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Hosting technology LTD
queried_at: 2026-04-02T19:52:32.607594
raw_data:
  {"malicious": 7, "suspicious": 0, "harmless": 51, "undetected": 36, "reputation": 0, "country": "RU", "as_owner": "Hosting technology LTD", "asn": 48282, "network": "178.20.40.0/21", "last_analysis_date": 1772412056}


indicator: 178.21.11.23
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T19:52:42.832717
raw_data:
  {"malicious": 5, "suspicious": 1, "harmless": 55, "undetected": 33, "reputation": 0, "country": "RU", "as_owner": "Domain names registrar REG.RU, Ltd", "asn": 197695, "network": "178.21.10.0/23", "last_analysis_date": 1773820558}


indicator: 185.193.143.11
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Basis LLC
queried_at: 2026-04-02T19:52:53.141631
raw_data:
  {"malicious": 7, "suspicious": 0, "harmless": 52, "undetected": 35, "reputation": 0, "country": "RU", "as_owner": "Basis LLC", "asn": 43830, "network": "185.193.143.0/24", "last_analysis_date": 1772412056}


indicator: 185.193.143.70
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Basis LLC
queried_at: 2026-04-02T19:53:03.314611
raw_data:
  {"malicious": 9, "suspicious": 0, "harmless": 51, "undetected": 34, "reputation": 0, "country": "RU", "as_owner": "Basis LLC", "asn": 43830, "network": "185.193.143.0/24", "last_analysis_date": 1773410759}


indicator: 185.20.224.168
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T19:53:13.690409
raw_data:
  {"malicious": 8, "suspicious": 0, "harmless": 50, "undetected": 36, "reputation": 0, "country": "RU", "as_owner": "Domain names registrar REG.RU, Ltd", "asn": 197695, "network": "185.20.224.0/22", "last_analysis_date": 1772495956}


indicator: 185.20.224.218
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T19:53:23.855662
raw_data:
  {"malicious": 6, "suspicious": 0, "harmless": 55, "undetected": 33, "reputation": 0, "country": "RU", "as_owner": "Domain names registrar REG.RU, Ltd", "asn": 197695, "network": "185.20.224.0/22", "last_analysis_date": 1767797706}


indicator: 185.20.225.35
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T19:53:34.217317
raw_data:
  {"malicious": 2, "suspicious": 0, "harmless": 58, "undetected": 34, "reputation": 0, "country": "RU", "as_owner": "Domain names registrar REG.RU, Ltd", "asn": 197695, "network": "185.20.224.0/22", "last_analysis_date": 1774614661}


indicator: 185.20.226.9
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T19:53:44.355181
raw_data:
  {"malicious": 6, "suspicious": 0, "harmless": 54, "undetected": 34, "reputation": 0, "country": "RU", "as_owner": "Domain names registrar REG.RU, Ltd", "asn": 197695, "network": "185.20.224.0/22", "last_analysis_date": 1767797660}


indicator: 185.225.19.16
indicator_type: ipv4
source: virustotal
country: RO
hosting_provider: MivoCloud SRL
queried_at: 2026-04-02T19:53:54.721370
raw_data:
  {"malicious": 5, "suspicious": 0, "harmless": 56, "undetected": 33, "reputation": 0, "country": "RO", "as_owner": "MivoCloud SRL", "asn": 39798, "network": "185.225.16.0/22", "last_analysis_date": 1774166244}


indicator: 185.251.91.137
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Sprinthost.ru LLC
queried_at: 2026-04-02T19:54:04.914788
raw_data:
  {"malicious": 8, "suspicious": 0, "harmless": 51, "undetected": 35, "reputation": 0, "country": "RU", "as_owner": "Sprinthost.ru LLC", "asn": 35278, "network": "185.251.88.0/22", "last_analysis_date": 1773356158}


indicator: 185.46.10.143
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T19:54:15.783935
raw_data:
  {"malicious": 8, "suspicious": 0, "harmless": 50, "undetected": 36, "reputation": 0, "country": "RU", "as_owner": "Domain names registrar REG.RU, Ltd", "asn": 197695, "network": "185.46.8.0/22", "last_analysis_date": 1773069662}


indicator: 185.46.10.17
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T19:54:25.513464
raw_data:
  {"malicious": 2, "suspicious": 0, "harmless": 56, "undetected": 36, "reputation": 0, "country": "RU", "as_owner": "Domain names registrar REG.RU, Ltd", "asn": 197695, "network": "185.46.8.0/22", "last_analysis_date": 1773777967}


indicator: 185.46.10.230
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T19:54:36.291823
raw_data:
  {"malicious": 4, "suspicious": 0, "harmless": 56, "undetected": 34, "reputation": 0, "country": "RU", "as_owner": "Domain names registrar REG.RU, Ltd", "asn": 197695, "network": "185.46.8.0/22", "last_analysis_date": 1767663511}


indicator: 185.46.10.250
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T19:54:46.025380
raw_data:
  {"malicious": 5, "suspicious": 1, "harmless": 54, "undetected": 34, "reputation": 0, "country": "RU", "as_owner": "Domain names registrar REG.RU, Ltd", "asn": 197695, "network": "185.46.8.0/22", "last_analysis_date": 1774126803}


indicator: 185.46.10.28
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T19:54:57.256400
raw_data:
  {"malicious": 8, "suspicious": 0, "harmless": 51, "undetected": 35, "reputation": 0, "country": "RU", "as_owner": "Domain names registrar REG.RU, Ltd", "asn": 197695, "network": "185.46.8.0/22", "last_analysis_date": 1771902001}


indicator: 185.46.10.73
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T19:55:06.655106
raw_data:
  {"malicious": 7, "suspicious": 0, "harmless": 53, "undetected": 34, "reputation": 0, "country": "RU", "as_owner": "Domain names registrar REG.RU, Ltd", "asn": 197695, "network": "185.46.8.0/22", "last_analysis_date": 1773777541}


indicator: 185.46.10.86
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T19:55:17.747257
raw_data:
  {"malicious": 1, "suspicious": 0, "harmless": 59, "undetected": 34, "reputation": 0, "country": "RU", "as_owner": "Domain names registrar REG.RU, Ltd", "asn": 197695, "network": "185.46.8.0/22", "last_analysis_date": 1768661921}


indicator: 185.46.11.115
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T19:55:27.719426
raw_data:
  {"malicious": 7, "suspicious": 0, "harmless": 49, "undetected": 38, "reputation": 0, "country": "RU", "as_owner": "Domain names registrar REG.RU, Ltd", "asn": 197695, "network": "185.46.8.0/22", "last_analysis_date": 1772495838}


indicator: 185.46.11.71
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T19:55:38.468476
raw_data:
  {"malicious": 1, "suspicious": 0, "harmless": 57, "undetected": 36, "reputation": 0, "country": "RU", "as_owner": "Domain names registrar REG.RU, Ltd", "asn": 197695, "network": "185.46.8.0/22", "last_analysis_date": 1748441114}


indicator: 185.46.11.72
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T19:55:48.518208
raw_data:
  {"malicious": 8, "suspicious": 0, "harmless": 50, "undetected": 36, "reputation": 0, "country": "RU", "as_owner": "Domain names registrar REG.RU, Ltd", "asn": 197695, "network": "185.46.8.0/22", "last_analysis_date": 1772495814}


indicator: 185.46.8.12
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T19:56:09.015767
raw_data:
  {"malicious": 8, "suspicious": 0, "harmless": 51, "undetected": 35, "reputation": 0, "country": "RU", "as_owner": "Domain names registrar REG.RU, Ltd", "asn": 197695, "network": "185.46.8.0/22", "last_analysis_date": 1772578772}


indicator: 185.46.9.133
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T19:56:19.933181
raw_data:
  {"malicious": 7, "suspicious": 0, "harmless": 51, "undetected": 36, "reputation": 0, "country": "RU", "as_owner": "Domain names registrar REG.RU, Ltd", "asn": 197695, "network": "185.46.8.0/22", "last_analysis_date": 1771493806}


indicator: 185.46.9.173
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T19:56:29.572436
raw_data:
  {"malicious": 1, "suspicious": 0, "harmless": 60, "undetected": 33, "reputation": 0, "country": "RU", "as_owner": "Domain names registrar REG.RU, Ltd", "asn": 197695, "network": "185.46.8.0/22", "last_analysis_date": 1767187739}


indicator: 185.46.9.81
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T19:56:40.425541
raw_data:
  {"malicious": 8, "suspicious": 0, "harmless": 53, "undetected": 33, "reputation": 0, "country": "RU", "as_owner": "Domain names registrar REG.RU, Ltd", "asn": 197695, "network": "185.46.8.0/22", "last_analysis_date": 1773514578}


indicator: 188.166.247.34
indicator_type: ipv4
source: virustotal
country: SG
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:56:50.161021
raw_data:
  {"malicious": 2, "suspicious": 1, "harmless": 55, "undetected": 36, "reputation": 0, "country": "SG", "as_owner": "DigitalOcean, LLC", "asn": 14061, "network": "188.166.0.0/16", "last_analysis_date": 1772974693}


indicator: 188.166.43.183
indicator_type: ipv4
source: virustotal
country: NL
hosting_provider: DigitalOcean, LLC
queried_at: 2026-04-02T19:57:00.969015
raw_data:
  {"malicious": 2, "suspicious": 0, "harmless": 60, "undetected": 32, "reputation": -1, "country": "NL", "as_owner": "DigitalOcean, LLC", "asn": 14061, "network": "188.166.0.0/16", "last_analysis_date": 1774843248}


indicator: 188.225.25.132
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Jsc timeweb
queried_at: 2026-04-02T19:57:11.650758
raw_data:
  {"malicious": 8, "suspicious": 0, "harmless": 52, "undetected": 34, "reputation": 0, "country": "RU", "as_owner": "Jsc timeweb", "asn": 9123, "network": "188.225.16.0/20", "last_analysis_date": 1773360040}


indicator: 188.225.42.206
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Jsc timeweb
queried_at: 2026-04-02T19:57:21.544299
raw_data:
  {"malicious": 8, "suspicious": 0, "harmless": 51, "undetected": 35, "reputation": 0, "country": "RU", "as_owner": "Jsc timeweb", "asn": 9123, "network": "188.225.32.0/20", "last_analysis_date": 1773705684}


indicator: 188.225.43.174
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Jsc timeweb
queried_at: 2026-04-02T19:57:32.254951
raw_data:
  {"malicious": 8, "suspicious": 0, "harmless": 50, "undetected": 36, "reputation": 0, "country": "RU", "as_owner": "Jsc timeweb", "asn": 9123, "network": "188.225.32.0/20", "last_analysis_date": 1772855933}


indicator: 188.225.44.138
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Jsc timeweb
queried_at: 2026-04-02T19:57:42.027300
raw_data:
  {"malicious": 8, "suspicious": 0, "harmless": 51, "undetected": 35, "reputation": 0, "country": "RU", "as_owner": "Jsc timeweb", "asn": 9123, "network": "188.225.32.0/20", "last_analysis_date": 1773291355}


indicator: 188.225.44.181
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Jsc timeweb
queried_at: 2026-04-02T19:57:52.924100
raw_data:
  {"malicious": 6, "suspicious": 0, "harmless": 55, "undetected": 33, "reputation": 0, "country": "RU", "as_owner": "Jsc timeweb", "asn": 9123, "network": "188.225.32.0/20", "last_analysis_date": 1767797706}


indicator: 188.225.44.76
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Jsc timeweb
queried_at: 2026-04-02T19:58:02.628494
raw_data:
  {"malicious": 6, "suspicious": 0, "harmless": 54, "undetected": 34, "reputation": 0, "country": "RU", "as_owner": "Jsc timeweb", "asn": 9123, "network": "188.225.32.0/20", "last_analysis_date": 1773705757}


indicator: 188.225.58.233
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Jsc timeweb
queried_at: 2026-04-02T19:58:13.465142
raw_data:
  {"malicious": 8, "suspicious": 0, "harmless": 52, "undetected": 34, "reputation": 0, "country": "RU", "as_owner": "Jsc timeweb", "asn": 9123, "network": "188.225.56.0/22", "last_analysis_date": 1774094895}


indicator: 188.225.87.166
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Jsc timeweb
queried_at: 2026-04-02T19:58:23.480537
raw_data:
  {"malicious": 10, "suspicious": 0, "harmless": 49, "undetected": 35, "reputation": 0, "country": "RU", "as_owner": "Jsc timeweb", "asn": 9123, "network": "188.225.80.0/21", "last_analysis_date": 1773722053}


indicator: 188.93.210.54
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T19:58:34.195698
raw_data:
  {"malicious": 9, "suspicious": 0, "harmless": 52, "undetected": 33, "reputation": 0, "country": "RU", "as_owner": "Domain names registrar REG.RU, Ltd", "asn": 197695, "network": "188.93.210.0/23", "last_analysis_date": 1773586607}


indicator: 193.124.206.128
indicator_type: ipv4
source: virustotal
country: NL
hosting_provider: Hostkey B.v.
queried_at: 2026-04-02T19:58:43.993289
raw_data:
  {"malicious": 2, "suspicious": 0, "harmless": 56, "undetected": 36, "reputation": 0, "country": "NL", "as_owner": "Hostkey B.v.", "asn": 57043, "network": "193.124.206.0/24", "last_analysis_date": 1767709015}


indicator: 193.164.150.111
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Jsc timeweb
queried_at: 2026-04-02T19:58:54.804963
raw_data:
  {"malicious": 7, "suspicious": 0, "harmless": 53, "undetected": 34, "reputation": 0, "country": "RU", "as_owner": "Jsc timeweb", "asn": 9123, "network": "193.164.150.0/24", "last_analysis_date": 1774655296}


indicator: 193.164.150.121
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Jsc timeweb
queried_at: 2026-04-02T19:59:04.534398
raw_data:
  {"malicious": 7, "suspicious": 0, "harmless": 52, "undetected": 35, "reputation": 0, "country": "RU", "as_owner": "Jsc timeweb", "asn": 9123, "network": "193.164.150.0/24", "last_analysis_date": 1773053852}


indicator: 194.180.174.46
indicator_type: ipv4
source: virustotal
country: MD
hosting_provider: MivoCloud SRL
queried_at: 2026-04-02T19:59:15.454755
raw_data:
  {"malicious": 7, "suspicious": 0, "harmless": 52, "undetected": 35, "reputation": -1, "country": "MD", "as_owner": "MivoCloud SRL", "asn": 39798, "network": "194.180.174.0/24", "last_analysis_date": 1773414049}


indicator: 194.180.191.105
indicator_type: ipv4
source: virustotal
country: MD
hosting_provider: MivoCloud SRL
queried_at: 2026-04-02T19:59:24.994206
raw_data:
  {"malicious": 3, "suspicious": 0, "harmless": 57, "undetected": 34, "reputation": -1, "country": "MD", "as_owner": "MivoCloud SRL", "asn": 39798, "network": "194.180.191.0/24", "last_analysis_date": 1772780015}


indicator: 194.180.191.30
indicator_type: ipv4
source: virustotal
country: MD
hosting_provider: MivoCloud SRL
queried_at: 2026-04-02T19:59:36.100559
raw_data:
  {"malicious": 2, "suspicious": 0, "harmless": 58, "undetected": 34, "reputation": 0, "country": "MD", "as_owner": "MivoCloud SRL", "asn": 39798, "network": "194.180.191.0/24", "last_analysis_date": 1774260632}


indicator: 194.58.103.22
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T19:59:46.006486
raw_data:
  {"malicious": 11, "suspicious": 0, "harmless": 51, "undetected": 32, "reputation": 0, "country": "RU", "as_owner": "Domain names registrar REG.RU, Ltd", "asn": 197695, "network": "194.58.96.0/19", "last_analysis_date": 1775059628}


indicator: 194.58.108.14
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T19:59:56.573668
raw_data:
  {"malicious": 4, "suspicious": 0, "harmless": 54, "undetected": 36, "reputation": 0, "country": "RU", "as_owner": "Domain names registrar REG.RU, Ltd", "asn": 197695, "network": "194.58.96.0/19", "last_analysis_date": 1748441114}


indicator: 194.58.108.140
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T20:00:06.533640
raw_data:
  {"malicious": 2, "suspicious": 0, "harmless": 56, "undetected": 36, "reputation": 0, "country": "RU", "as_owner": "Domain names registrar REG.RU, Ltd", "asn": 197695, "network": "194.58.96.0/19", "last_analysis_date": 1746414337}


indicator: 194.58.111.215
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T20:00:17.179772
raw_data:
  {"malicious": 7, "suspicious": 0, "harmless": 51, "undetected": 36, "reputation": 0, "country": "RU", "as_owner": "Domain names registrar REG.RU, Ltd", "asn": 197695, "network": "194.58.96.0/19", "last_analysis_date": 1772733407}


indicator: 194.58.111.54
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T20:00:28.026822
raw_data:
  {"malicious": 7, "suspicious": 0, "harmless": 54, "undetected": 33, "reputation": -1, "country": "RU", "as_owner": "Domain names registrar REG.RU, Ltd", "asn": 197695, "network": "194.58.96.0/19", "last_analysis_date": 1774569602}


indicator: 194.58.118.14
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T20:00:37.739984
raw_data:
  {"malicious": 2, "suspicious": 0, "harmless": 57, "undetected": 35, "reputation": 0, "country": "RU", "as_owner": "Domain names registrar REG.RU, Ltd", "asn": 197695, "network": "194.58.96.0/19", "last_analysis_date": 1748441114}


indicator: 194.58.119.114
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T20:00:48.791962
raw_data:
  {"malicious": 1, "suspicious": 1, "harmless": 56, "undetected": 36, "reputation": 0, "country": "RU", "as_owner": "Domain names registrar REG.RU, Ltd", "asn": 197695, "network": "194.58.96.0/19", "last_analysis_date": 1746414338}


indicator: 194.58.119.99
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T20:00:58.324170
raw_data:
  {"malicious": 9, "suspicious": 0, "harmless": 52, "undetected": 33, "reputation": 0, "country": "RU", "as_owner": "Domain names registrar REG.RU, Ltd", "asn": 197695, "network": "194.58.96.0/19", "last_analysis_date": 1774411126}


indicator: 194.58.120.207
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T20:01:09.368327
raw_data:
  {"malicious": 7, "suspicious": 0, "harmless": 53, "undetected": 34, "reputation": 0, "country": "RU", "as_owner": "Domain names registrar REG.RU, Ltd", "asn": 197695, "network": "194.58.96.0/19", "last_analysis_date": 1773291344}


indicator: 194.58.121.225
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T20:01:18.856479
raw_data:
  {"malicious": 4, "suspicious": 1, "harmless": 53, "undetected": 36, "reputation": 0, "country": "RU", "as_owner": "Domain names registrar REG.RU, Ltd", "asn": 197695, "network": "194.58.96.0/19", "last_analysis_date": 1773759494}


indicator: 194.58.121.94
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T20:01:29.888649
raw_data:
  {"malicious": 3, "suspicious": 0, "harmless": 57, "undetected": 34, "reputation": 0, "country": "RU", "as_owner": "Domain names registrar REG.RU, Ltd", "asn": 197695, "network": "194.58.96.0/19", "last_analysis_date": 1773770456}


indicator: 194.58.122.110
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T20:01:39.436404
raw_data:
  {"malicious": 1, "suspicious": 0, "harmless": 57, "undetected": 36, "reputation": 0, "country": "RU", "as_owner": "Domain names registrar REG.RU, Ltd", "asn": 197695, "network": "194.58.96.0/19", "last_analysis_date": 1746414310}


indicator: 194.58.122.212
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T20:01:50.489834
raw_data:
  {"malicious": 5, "suspicious": 2, "harmless": 53, "undetected": 34, "reputation": 0, "country": "RU", "as_owner": "Domain names registrar REG.RU, Ltd", "asn": 197695, "network": "194.58.96.0/19", "last_analysis_date": 1774456882}


indicator: 194.58.123.47
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T20:02:00.425965
raw_data:
  {"malicious": 4, "suspicious": 1, "harmless": 56, "undetected": 33, "reputation": 0, "country": "RU", "as_owner": "Domain names registrar REG.RU, Ltd", "asn": 197695, "network": "194.58.96.0/19", "last_analysis_date": 1774731408}


indicator: 194.58.90.120
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T20:02:11.006678
raw_data:
  {"malicious": 8, "suspicious": 0, "harmless": 52, "undetected": 34, "reputation": 0, "country": "RU", "as_owner": "Domain names registrar REG.RU, Ltd", "asn": 197695, "network": "194.58.88.0/21", "last_analysis_date": 1773874731}


indicator: 194.58.92.102
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T20:02:20.908518
raw_data:
  {"malicious": 9, "suspicious": 0, "harmless": 51, "undetected": 34, "reputation": 0, "country": "RU", "as_owner": "Domain names registrar REG.RU, Ltd", "asn": 197695, "network": "194.58.88.0/21", "last_analysis_date": 1771197071}


indicator: 194.58.97.115
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T20:02:31.552969
raw_data:
  {"malicious": 1, "suspicious": 0, "harmless": 58, "undetected": 35, "reputation": 0, "country": "RU", "as_owner": "Domain names registrar REG.RU, Ltd", "asn": 197695, "network": "194.58.96.0/19", "last_analysis_date": 1773676642}


indicator: 194.58.97.245
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T20:02:41.503909
raw_data:
  {"malicious": 5, "suspicious": 0, "harmless": 54, "undetected": 35, "reputation": 0, "country": "RU", "as_owner": "Domain names registrar REG.RU, Ltd", "asn": 197695, "network": "194.58.96.0/19", "last_analysis_date": 1772503008}


indicator: 194.58.98.215
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T20:02:52.008377
raw_data:
  {"malicious": 6, "suspicious": 0, "harmless": 52, "undetected": 36, "reputation": 0, "country": "RU", "as_owner": "Domain names registrar REG.RU, Ltd", "asn": 197695, "network": "194.58.96.0/19", "last_analysis_date": 1774208343}


indicator: 194.67.104.232
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T20:03:02.012204
raw_data:
  {"malicious": 2, "suspicious": 0, "harmless": 56, "undetected": 36, "reputation": 0, "country": "RU", "as_owner": "Domain names registrar REG.RU, Ltd", "asn": 197695, "network": "194.67.104.0/23", "last_analysis_date": 1746414338}


indicator: 194.67.108.168
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T20:03:12.585988
raw_data:
  {"malicious": 5, "suspicious": 1, "harmless": 52, "undetected": 36, "reputation": 0, "country": "RU", "as_owner": "Domain names registrar REG.RU, Ltd", "asn": 197695, "network": "194.67.108.0/22", "last_analysis_date": 1772531906}


indicator: 194.67.109.14
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T20:03:22.505625
raw_data:
  {"malicious": 8, "suspicious": 1, "harmless": 49, "undetected": 36, "reputation": 0, "country": "RU", "as_owner": "Domain names registrar REG.RU, Ltd", "asn": 197695, "network": "194.67.108.0/22", "last_analysis_date": 1773053857}


indicator: 194.67.109.164
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T20:03:33.371514
raw_data:
  {"malicious": 10, "suspicious": 0, "harmless": 51, "undetected": 33, "reputation": 0, "country": "RU", "as_owner": "Domain names registrar REG.RU, Ltd", "asn": 197695, "network": "194.67.108.0/22", "last_analysis_date": 1770337147}


indicator: 194.67.109.191
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T20:03:42.936514
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "RU", "as_owner": "Domain names registrar REG.RU, Ltd", "asn": 197695, "network": "194.67.108.0/22", "last_analysis_date": 1746646046}


indicator: 194.67.109.76
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: Domain names registrar REG.RU, Ltd
queried_at: 2026-04-02T20:03:53.857981
raw_data:
  {"malicious": 7, "suspicious": 0, "harmless": 51, "undetected": 36, "reputation": 0, "country": "RU", "as_owner": "Domain names registrar REG.RU, Ltd", "asn": 197695, "network": "194.67.108.0/22", "last_analysis_date": 1772484947}


indicator: 185.163.45.5
indicator_type: ipv4
source: censys
country: MD
city: Chisinau
hosting_provider: MIVOCLOUD
queried_at: 2026-04-02T20:04:03.777617
raw_data:
  {"ports": [22, 111, 111], "services": ["22/SSH", "111/PORTMAP", "111/PORTMAP"], "os": "", "os_version": "", "asn": 39798, "as_name": "MIVOCLOUD", "country": "MD", "city": "Chisinau", "last_updated": "", "labels": []}


indicator: 185.163.47.177
indicator_type: ipv4
source: censys
country: MD
city: Chisinau
reverse_dns: linux
hosting_provider: MIVOCLOUD
queried_at: 2026-04-02T20:04:07.188065
raw_data:
  {"ports": [22, 80], "services": ["22/SSH", "80/HTTP"], "os": "linux", "os_version": "", "asn": 39798, "as_name": "MIVOCLOUD", "country": "MD", "city": "Chisinau", "last_updated": "", "labels": []}


indicator: 157.20.182.49
indicator_type: ipv4
source: censys
country: NL
city: Naaldwijk
hosting_provider: HOSTER-AS-IN Hosterdaddy Private Limited
queried_at: 2026-04-02T20:04:10.644251
raw_data:
  {"ports": [], "services": [], "os": "", "os_version": "", "asn": 152485, "as_name": "HOSTER-AS-IN Hosterdaddy Private Limited", "country": "NL", "city": "Naaldwijk", "last_updated": "", "labels": []}


indicator: 2.2.2.6
indicator_type: ipv4
source: censys
country: US
city: Austin
queried_at: 2026-04-02T20:04:14.559503
raw_data:
  {"ports": [], "services": [], "os": "", "os_version": "", "asn": 0, "as_name": "", "country": "US", "city": "Austin", "last_updated": "", "labels": []}


indicator: 65.20.97.203
indicator_type: ipv4
source: censys
country: ES
city: Alcobendas
reverse_dns: linux
hosting_provider: AS-VULTR - The Constant Company, LLC
queried_at: 2026-04-02T20:04:17.936481
raw_data:
  {"ports": [22, 53], "services": ["22/SSH", "53/DNS"], "os": "linux", "os_version": "", "asn": 20473, "as_name": "AS-VULTR - The Constant Company, LLC", "country": "ES", "city": "Alcobendas", "last_updated": "", "labels": []}


indicator: 185.163.45.5
indicator_type: ipv4
source: dshield
country: MD
reverse_dns: 185.163.44.0/22
hosting_provider: MIVOCLOUD
queried_at: 2026-04-02T20:04:18.646698
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@mivocloud.com", "as": 39798, "asname": "MIVOCLOUD", "ascountry": "MD", "assource": "", "network": "185.163.44.0/22", "threatfeeds": {"rosti": {"lastseen": "2025-07-02", "firstseen": "2025-07-02"}}}


indicator: 141.105.130.237
indicator_type: ipv4
source: censys
country: UA
city: Sofiyivska Borschagivka
hosting_provider: SPN
queried_at: 2026-04-02T20:04:21.062925
raw_data:
  {"ports": [22, 25, 80, 443, 1234, 3128, 8181], "services": ["22/SSH", "25/SMTP", "80/HTTP", "443/HTTP", "1234/SMTP", "3128/HTTP", "8181/HTTP"], "os": "", "os_version": "", "asn": 214379, "as_name": "SPN", "country": "UA", "city": "Sofiyivska Borschagivka", "last_updated": "", "labels": []}


indicator: 2.2.2.6
indicator_type: ipv4
source: dshield
country: FR
reverse_dns: 2.2.0.0/16
hosting_provider: France Telecom - Orange
queried_at: 2026-04-02T20:04:23.861496
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@orange-business.com", "as": 3215, "asname": "France Telecom - Orange", "ascountry": "FR", "assource": "", "network": "2.2.0.0/16", "threatfeeds": {}}


indicator: 65.20.97.203
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 65.20.96.0/20
hosting_provider: AS-CHOOPA
queried_at: 2026-04-02T20:04:27.192800
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@choopa.com", "as": 20473, "asname": "AS-CHOOPA", "ascountry": "US", "assource": "", "network": "65.20.96.0/20", "threatfeeds": {"rosti": {"lastseen": "2023-12-13", "firstseen": "2023-12-13"}, "threatview": {"lastseen": "2024-01-01", "firstseen": "2024-01-01"}}}


indicator: 157.20.182.49
indicator_type: ipv4
source: dshield
country: XX
hosting_provider: not routed
queried_at: 2026-04-02T20:04:27.948852
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": null, "as": 0, "asname": "not routed", "ascountry": "XX", "assource": "", "network": "", "threatfeeds": {"rosti": {"lastseen": "2026-03-25", "firstseen": "2026-03-25"}}}


indicator: 141.105.130.237
indicator_type: ipv4
source: dshield
country: GB
reverse_dns: 141.105.130.0/24
hosting_provider: MDCLOUD
queried_at: 2026-04-02T20:04:28.483881
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@lovit.ru", "as": 203394, "asname": "MDCLOUD", "ascountry": "GB", "assource": "", "network": "141.105.130.0/24", "threatfeeds": {"rosti": {"lastseen": "2026-03-18", "firstseen": "2026-03-18"}}}


indicator: 1.0.1.1
indicator_type: ipv4
source: dshield
country: XX
hosting_provider: not routed
queried_at: 2026-04-02T20:04:29.240855
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": null, "as": 0, "asname": "not routed", "ascountry": "XX", "assource": "", "network": "", "threatfeeds": {"forumspam": {"lastseen": "2022-01-19", "firstseen": "2022-01-18"}, "mastodon": {"lastseen": "2025-03-26", "firstseen": "2025-03-22"}}}


indicator: 104.238.189.186
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 104.238.188.0/22
hosting_provider: AS-CHOOPA
queried_at: 2026-04-02T20:04:29.797998
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@choopa.com", "as": 20473, "asname": "AS-CHOOPA", "ascountry": "US", "assource": "", "network": "104.238.188.0/22", "threatfeeds": {}}


indicator: 104.248.36.191
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 104.248.32.0/20
hosting_provider: DIGITALOCEAN-ASN
queried_at: 2026-04-02T20:04:30.526449
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@digitalocean.com", "as": 14061, "asname": "DIGITALOCEAN-ASN", "ascountry": "US", "assource": "", "network": "104.248.32.0/20", "threatfeeds": {"ciarmy": {"lastseen": "2025-10-21", "firstseen": "2019-01-14"}, "odin": {"lastseen": "2025-10-21", "firstseen": "2025-10-02"}}}


indicator: 109.200.159.45
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 109.200.128.0/19
hosting_provider: CRELCOM-NET
queried_at: 2026-04-02T20:04:31.099791
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@crelcom.ru", "as": 6789, "asname": "CRELCOM-NET", "ascountry": "RU", "assource": "", "network": "109.200.128.0/19", "threatfeeds": {}}


indicator: 109.234.38.232
indicator_type: ipv4
source: dshield
country: AE
reverse_dns: 109.234.38.0/24
hosting_provider: VDSINA
queried_at: 2026-04-02T20:04:31.827693
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": ">>UNKNOWN<<", "as": 216071, "asname": "VDSINA", "ascountry": "AE", "assource": "", "network": "109.234.38.0/24", "threatfeeds": {"blocklistde22": {"lastseen": "2019-11-29", "firstseen": "2019-11-28"}}}


indicator: 134.0.112.117
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 134.0.112.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:04:32.409747
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "134.0.112.0/24", "threatfeeds": {}}


indicator: 134.122.109.104
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 134.122.96.0/20
hosting_provider: DIGITALOCEAN-ASN
queried_at: 2026-04-02T20:04:33.124669
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@digitalocean.com", "as": 14061, "asname": "DIGITALOCEAN-ASN", "ascountry": "US", "assource": "", "network": "134.122.96.0/20", "threatfeeds": {"blocklistde22": {"lastseen": "2025-06-22", "firstseen": "2020-09-26"}, "ciarmy": {"lastseen": "2025-06-22", "firstseen": "2022-11-12"}, "rosti": {"lastseen": "2025-07-02", "firstseen": "2025-07-02"}}}


indicator: 137.184.116.179
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 137.184.112.0/20
hosting_provider: DIGITALOCEAN-ASN
queried_at: 2026-04-02T20:04:33.711877
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@digitalocean.com", "as": 14061, "asname": "DIGITALOCEAN-ASN", "ascountry": "US", "assource": "", "network": "137.184.112.0/20", "threatfeeds": {"rosti": {"lastseen": "2026-02-03", "firstseen": "2025-07-02"}}}


indicator: 138.68.161.53
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 138.68.160.0/20
hosting_provider: DIGITALOCEAN-ASN
queried_at: 2026-04-02T20:04:34.427460
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@digitalocean.com", "as": 14061, "asname": "DIGITALOCEAN-ASN", "ascountry": "US", "assource": "", "network": "138.68.160.0/20", "threatfeeds": {"rosti": {"lastseen": "2026-03-11", "firstseen": "2025-07-02"}}}


indicator: 139.59.85.26
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 139.59.80.0/20
hosting_provider: DIGITALOCEAN-ASN
queried_at: 2026-04-02T20:04:35.001917
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@digitalocean.com", "as": 14061, "asname": "DIGITALOCEAN-ASN", "ascountry": "US", "assource": "", "network": "139.59.80.0/20", "threatfeeds": {"blocklistde22": {"lastseen": "2025-07-22", "firstseen": "2022-02-21"}, "blocklistdeasterisk": {"lastseen": "2025-07-22", "firstseen": "2022-02-20"}, "ciarmy": {"lastseen": "2025-07-22", "firstseen": "2021-07-29"}, "rosti": {"lastseen": "


indicator: 140.82.29.65
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 140.82.24.0/21
hosting_provider: AS-CHOOPA
queried_at: 2026-04-02T20:04:35.712467
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@choopa.com", "as": 20473, "asname": "AS-CHOOPA", "ascountry": "US", "assource": "", "network": "140.82.24.0/21", "threatfeeds": {"rosti": {"lastseen": "2024-02-22", "firstseen": "2024-02-22"}}}


indicator: 141.164.45.200
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 141.164.32.0/19
hosting_provider: AS-CHOOPA
queried_at: 2026-04-02T20:04:36.286452
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@choopa.com", "as": 20473, "asname": "AS-CHOOPA", "ascountry": "US", "assource": "", "network": "141.164.32.0/19", "threatfeeds": {"blocklistde443": {"lastseen": "2024-08-13", "firstseen": "2024-08-11"}, "blocklistde80": {"lastseen": "2024-08-13", "firstseen": "2024-08-11"}, "blocklistdeapache": {"lastseen": "2024-08-13", "firstseen": "2024-08-11"}, "blocklistdebruteforcelogin":


indicator: 141.98.233.17
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 141.98.233.0/24
hosting_provider: GIR-AS
queried_at: 2026-04-02T20:04:37.007890
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@fionera.de", "as": 207713, "asname": "GIR-AS", "ascountry": "RU", "assource": "", "network": "141.98.233.0/24", "threatfeeds": {"rosti": {"lastseen": "2025-07-02", "firstseen": "2025-07-02"}}}


indicator: 143.110.168.51
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 143.110.160.0/20
hosting_provider: DIGITALOCEAN-ASN
queried_at: 2026-04-02T20:04:37.587465
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@digitalocean.com", "as": 14061, "asname": "DIGITALOCEAN-ASN", "ascountry": "US", "assource": "", "network": "143.110.160.0/20", "threatfeeds": {"rosti": {"lastseen": "2025-07-02", "firstseen": "2025-07-02"}}}


indicator: 143.198.160.45
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 143.198.160.0/20
hosting_provider: DIGITALOCEAN-ASN
queried_at: 2026-04-02T20:04:38.326910
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@digitalocean.com", "as": 14061, "asname": "DIGITALOCEAN-ASN", "ascountry": "US", "assource": "", "network": "143.198.160.0/20", "threatfeeds": {"rosti": {"lastseen": "2025-07-02", "firstseen": "2025-07-02"}}}


indicator: 143.198.216.105
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 143.198.208.0/20
hosting_provider: DIGITALOCEAN-ASN
queried_at: 2026-04-02T20:04:38.876656
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@digitalocean.com", "as": 14061, "asname": "DIGITALOCEAN-ASN", "ascountry": "US", "assource": "", "network": "143.198.208.0/20", "threatfeeds": {"rosti": {"lastseen": "2025-07-02", "firstseen": "2025-07-02"}}}


indicator: 143.244.134.188
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 143.244.128.0/20
hosting_provider: DIGITALOCEAN-ASN
queried_at: 2026-04-02T20:04:39.618462
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@digitalocean.com", "as": 14061, "asname": "DIGITALOCEAN-ASN", "ascountry": "US", "assource": "", "network": "143.244.128.0/20", "threatfeeds": {"blocklistde22": {"lastseen": "2026-01-26", "firstseen": "2022-01-31"}, "blocklistdeasterisk": {"lastseen": "2026-01-26", "firstseen": "2022-02-04"}, "ciarmy": {"lastseen": "2026-01-26", "firstseen": "2023-05-04"}, "rosti": {"lastseen":


indicator: 144.126.218.218
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 144.126.208.0/20
hosting_provider: DIGITALOCEAN-ASN
queried_at: 2026-04-02T20:04:40.166468
raw_data:
  {"count": 4, "attacks": 3, "maxdate": "2026-03-09", "mindate": "2026-03-09", "updated": "2026-03-10 06:41:17", "comment": null, "asabusecontact": "abuse@digitalocean.com", "as": 14061, "asname": "DIGITALOCEAN-ASN", "ascountry": "US", "assource": "", "network": "144.126.208.0/20", "threatfeeds": {"blocklistde110": {"lastseen": "2026-03-09", "firstseen": "2023-05-20"}, "blocklistde143": {"lastseen": "2026-03-09", "firstseen": "2023-05-20"}, "blocklistde25": {"lastseen": "2026-03-09", "firstseen": 


indicator: 146.190.74.132
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 146.190.64.0/20
hosting_provider: DIGITALOCEAN-ASN
queried_at: 2026-04-02T20:04:40.924504
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@digitalocean.com", "as": 14061, "asname": "DIGITALOCEAN-ASN", "ascountry": "US", "assource": "", "network": "146.190.64.0/20", "threatfeeds": {"rosti": {"lastseen": "2025-07-02", "firstseen": "2025-07-02"}}}


indicator: 151.248.114.67
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 151.248.114.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:04:41.457317
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "151.248.114.0/24", "threatfeeds": {}}


indicator: 151.248.116.243
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 151.248.116.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:04:42.757818
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "151.248.116.0/24", "threatfeeds": {}}


indicator: 151.248.117.250
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 151.248.117.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:04:43.506815
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "151.248.117.0/24", "threatfeeds": {}}


indicator: 151.248.121.176
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 151.248.121.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:04:44.056893
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "151.248.121.0/24", "threatfeeds": {}}


indicator: 151.248.125.140
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 151.248.125.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:04:44.788961
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "151.248.125.0/24", "threatfeeds": {}}


indicator: 155.138.138.195
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 155.138.128.0/19
hosting_provider: AS-CHOOPA
queried_at: 2026-04-02T20:04:45.349165
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@choopa.com", "as": 20473, "asname": "AS-CHOOPA", "ascountry": "US", "assource": "", "network": "155.138.128.0/19", "threatfeeds": {}}


indicator: 157.230.108.94
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 157.230.96.0/20
hosting_provider: DIGITALOCEAN-ASN
queried_at: 2026-04-02T20:04:46.087371
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@digitalocean.com", "as": 14061, "asname": "DIGITALOCEAN-ASN", "ascountry": "US", "assource": "", "network": "157.230.96.0/20", "threatfeeds": {"rosti": {"lastseen": "2025-07-02", "firstseen": "2025-07-02"}}}


indicator: 157.230.94.134
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 157.230.80.0/20
hosting_provider: DIGITALOCEAN-ASN
queried_at: 2026-04-02T20:04:46.636204
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@digitalocean.com", "as": 14061, "asname": "DIGITALOCEAN-ASN", "ascountry": "US", "assource": "", "network": "157.230.80.0/20", "threatfeeds": {"rosti": {"lastseen": "2025-07-02", "firstseen": "2025-07-02"}}}


indicator: 157.245.201.196
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 157.245.192.0/20
hosting_provider: DIGITALOCEAN-ASN
queried_at: 2026-04-02T20:04:47.373121
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@digitalocean.com", "as": 14061, "asname": "DIGITALOCEAN-ASN", "ascountry": "US", "assource": "", "network": "157.245.192.0/20", "threatfeeds": {"rosti": {"lastseen": "2025-07-02", "firstseen": "2025-07-02"}}}


indicator: 159.203.14.8
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 159.203.0.0/20
hosting_provider: DIGITALOCEAN-ASN
queried_at: 2026-04-02T20:04:47.920259
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@digitalocean.com", "as": 14061, "asname": "DIGITALOCEAN-ASN", "ascountry": "US", "assource": "", "network": "159.203.0.0/20", "threatfeeds": {"ciarmy": {"lastseen": "2021-01-08", "firstseen": "2021-01-04"}, "rosti": {"lastseen": "2025-07-02", "firstseen": "2025-07-02"}}}


indicator: 159.203.21.16
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 159.203.16.0/20
hosting_provider: DIGITALOCEAN-ASN
queried_at: 2026-04-02T20:04:48.687889
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@digitalocean.com", "as": 14061, "asname": "DIGITALOCEAN-ASN", "ascountry": "US", "assource": "", "network": "159.203.16.0/20", "threatfeeds": {"rosti": {"lastseen": "2026-03-01", "firstseen": "2025-07-02"}}}


indicator: 159.223.152.63
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 159.223.144.0/20
hosting_provider: DIGITALOCEAN-ASN
queried_at: 2026-04-02T20:04:49.225921
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@digitalocean.com", "as": 14061, "asname": "DIGITALOCEAN-ASN", "ascountry": "US", "assource": "", "network": "159.223.144.0/20", "threatfeeds": {"rosti": {"lastseen": "2025-07-02", "firstseen": "2025-07-02"}}}


indicator: 159.223.226.57
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 159.223.224.0/20
hosting_provider: DIGITALOCEAN-ASN
queried_at: 2026-04-02T20:04:49.974570
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@digitalocean.com", "as": 14061, "asname": "DIGITALOCEAN-ASN", "ascountry": "US", "assource": "", "network": "159.223.224.0/20", "threatfeeds": {"rosti": {"lastseen": "2025-12-23", "firstseen": "2025-07-02"}}}


indicator: 159.89.31.49
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 159.89.16.0/20
hosting_provider: DIGITALOCEAN-ASN
queried_at: 2026-04-02T20:04:50.538576
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@digitalocean.com", "as": 14061, "asname": "DIGITALOCEAN-ASN", "ascountry": "US", "assource": "", "network": "159.89.16.0/20", "threatfeeds": {"blocklistde22": {"lastseen": "2018-11-26", "firstseen": "2018-11-25"}}}


indicator: 161.35.106.28
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 161.35.96.0/20
hosting_provider: DIGITALOCEAN-ASN
queried_at: 2026-04-02T20:04:51.271173
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@digitalocean.com", "as": 14061, "asname": "DIGITALOCEAN-ASN", "ascountry": "US", "assource": "", "network": "161.35.96.0/20", "threatfeeds": {"ciarmy": {"lastseen": "2021-12-28", "firstseen": "2021-12-28"}, "rosti": {"lastseen": "2025-07-02", "firstseen": "2025-07-02"}}}


indicator: 161.35.169.180
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 161.35.160.0/20
hosting_provider: DIGITALOCEAN-ASN
queried_at: 2026-04-02T20:04:51.826866
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@digitalocean.com", "as": 14061, "asname": "DIGITALOCEAN-ASN", "ascountry": "US", "assource": "", "network": "161.35.160.0/20", "threatfeeds": {"rosti": {"lastseen": "2025-07-02", "firstseen": "2025-07-02"}}}


indicator: 161.35.185.146
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 161.35.176.0/20
hosting_provider: DIGITALOCEAN-ASN
queried_at: 2026-04-02T20:04:52.564741
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@digitalocean.com", "as": 14061, "asname": "DIGITALOCEAN-ASN", "ascountry": "US", "assource": "", "network": "161.35.176.0/20", "threatfeeds": {"ciarmy": {"lastseen": "2025-07-13", "firstseen": "2022-01-15"}, "rosti": {"lastseen": "2025-07-13", "firstseen": "2025-07-02"}}}


indicator: 164.90.210.128
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 164.90.208.0/20
hosting_provider: DIGITALOCEAN-ASN
queried_at: 2026-04-02T20:04:53.131097
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@digitalocean.com", "as": 14061, "asname": "DIGITALOCEAN-ASN", "ascountry": "US", "assource": "", "network": "164.90.208.0/20", "threatfeeds": {"rosti": {"lastseen": "2025-07-02", "firstseen": "2025-07-02"}}}


indicator: 164.92.115.188
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 164.92.96.0/19
hosting_provider: DIGITALOCEAN-ASN
queried_at: 2026-04-02T20:04:53.873275
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@digitalocean.com", "as": 14061, "asname": "DIGITALOCEAN-ASN", "ascountry": "US", "assource": "", "network": "164.92.96.0/19", "threatfeeds": {"rosti": {"lastseen": "2025-07-02", "firstseen": "2025-07-02"}}}


indicator: 165.22.120.122
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 165.22.112.0/20
hosting_provider: DIGITALOCEAN-ASN
queried_at: 2026-04-02T20:04:54.436604
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@digitalocean.com", "as": 14061, "asname": "DIGITALOCEAN-ASN", "ascountry": "US", "assource": "", "network": "165.22.112.0/20", "threatfeeds": {"rosti": {"lastseen": "2025-07-02", "firstseen": "2025-07-02"}}}


indicator: 165.227.208.207
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 165.227.208.0/20
hosting_provider: DIGITALOCEAN-ASN
queried_at: 2026-04-02T20:04:55.166011
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@digitalocean.com", "as": 14061, "asname": "DIGITALOCEAN-ASN", "ascountry": "US", "assource": "", "network": "165.227.208.0/20", "threatfeeds": {"ciarmy": {"lastseen": "2023-04-06", "firstseen": "2023-04-05"}, "rosti": {"lastseen": "2025-07-02", "firstseen": "2025-07-02"}}}


indicator: 165.232.136.224
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 165.232.128.0/20
hosting_provider: DIGITALOCEAN-ASN
queried_at: 2026-04-02T20:04:55.737254
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@digitalocean.com", "as": 14061, "asname": "DIGITALOCEAN-ASN", "ascountry": "US", "assource": "", "network": "165.232.128.0/20", "threatfeeds": {"ciarmy": {"lastseen": "2025-05-08", "firstseen": "2024-10-12"}, "rosti": {"lastseen": "2025-07-02", "firstseen": "2025-07-02"}}}


indicator: 167.172.139.39
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 167.172.128.0/20
hosting_provider: DIGITALOCEAN-ASN
queried_at: 2026-04-02T20:04:56.481277
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@digitalocean.com", "as": 14061, "asname": "DIGITALOCEAN-ASN", "ascountry": "US", "assource": "", "network": "167.172.128.0/20", "threatfeeds": {"ciarmy": {"lastseen": "2024-11-30", "firstseen": "2023-10-24"}, "rosti": {"lastseen": "2025-07-02", "firstseen": "2025-07-02"}}}


indicator: 167.172.74.200
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 167.172.64.0/20
hosting_provider: DIGITALOCEAN-ASN
queried_at: 2026-04-02T20:04:57.030194
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@digitalocean.com", "as": 14061, "asname": "DIGITALOCEAN-ASN", "ascountry": "US", "assource": "", "network": "167.172.64.0/20", "threatfeeds": {"rosti": {"lastseen": "2025-07-02", "firstseen": "2025-07-02"}}}


indicator: 167.99.127.118
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 167.99.112.0/20
hosting_provider: DIGITALOCEAN-ASN
queried_at: 2026-04-02T20:04:57.781170
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@digitalocean.com", "as": 14061, "asname": "DIGITALOCEAN-ASN", "ascountry": "US", "assource": "", "network": "167.99.112.0/20", "threatfeeds": {"rosti": {"lastseen": "2025-07-02", "firstseen": "2025-07-02"}}}


indicator: 167.99.138.16
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 167.99.128.0/20
hosting_provider: DIGITALOCEAN-ASN
queried_at: 2026-04-02T20:04:58.320354
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@digitalocean.com", "as": 14061, "asname": "DIGITALOCEAN-ASN", "ascountry": "US", "assource": "", "network": "167.99.128.0/20", "threatfeeds": {}}


indicator: 176.118.164.124
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 176.118.164.0/24
hosting_provider: DIGITALENERGY-AS
queried_at: 2026-04-02T20:04:59.076360
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "bogro.es@gmail.com", "as": 43830, "asname": "DIGITALENERGY-AS", "ascountry": "RU", "assource": "", "network": "176.118.164.0/24", "threatfeeds": {}}


indicator: 176.118.164.187
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 176.118.164.0/24
hosting_provider: DIGITALENERGY-AS
queried_at: 2026-04-02T20:05:00.397503
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "bogro.es@gmail.com", "as": 43830, "asname": "DIGITALENERGY-AS", "ascountry": "RU", "assource": "", "network": "176.118.164.0/24", "threatfeeds": {"ciarmy": {"lastseen": "2021-10-27", "firstseen": "2021-10-24"}}}


indicator: 176.118.165.76
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 176.118.165.0/24
hosting_provider: DIGITALENERGY-AS
queried_at: 2026-04-02T20:05:00.929007
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "bogro.es@gmail.com", "as": 43830, "asname": "DIGITALENERGY-AS", "ascountry": "RU", "assource": "", "network": "176.118.165.0/24", "threatfeeds": {}}


indicator: 176.57.208.203
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 176.57.208.0/24
hosting_provider: TIMEWEB-AS
queried_at: 2026-04-02T20:05:01.723711
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@timeweb.ru", "as": 9123, "asname": "TIMEWEB-AS", "ascountry": "RU", "assource": "", "network": "176.57.208.0/24", "threatfeeds": {}}


indicator: 178.128.215.84
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 178.128.208.0/20
hosting_provider: DIGITALOCEAN-ASN
queried_at: 2026-04-02T20:05:02.364542
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@digitalocean.com", "as": 14061, "asname": "DIGITALOCEAN-ASN", "ascountry": "US", "assource": "", "network": "178.128.208.0/20", "threatfeeds": {"blocklistdebots": {"lastseen": "2021-05-10", "firstseen": "2021-05-01"}, "ciarmy": {"lastseen": "2021-06-15", "firstseen": "2021-04-30"}, "rosti": {"lastseen": "2025-07-02", "firstseen": "2025-07-02"}}}


indicator: 178.20.44.214
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 178.20.44.0/24
hosting_provider: VDSINA-AS
queried_at: 2026-04-02T20:05:03.104031
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@mchost.ru", "as": 48282, "asname": "VDSINA-AS", "ascountry": "RU", "assource": "", "network": "178.20.44.0/24", "threatfeeds": {}}


indicator: 178.21.11.23
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 178.21.11.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:05:03.701080
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "178.21.11.0/24", "threatfeeds": {}}


indicator: 185.193.143.11
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 185.193.143.0/24
hosting_provider: DIGITALENERGY-AS
queried_at: 2026-04-02T20:05:04.424716
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "bogro.es@gmail.com", "as": 43830, "asname": "DIGITALENERGY-AS", "ascountry": "RU", "assource": "", "network": "185.193.143.0/24", "threatfeeds": {}}


indicator: 185.20.224.168
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 185.20.224.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:05:05.737772
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "185.20.224.0/24", "threatfeeds": {}}


indicator: 185.20.225.35
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 185.20.225.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:05:07.049805
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "185.20.225.0/24", "threatfeeds": {}}


indicator: 185.20.226.9
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 185.20.226.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:05:07.580521
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "185.20.226.0/24", "threatfeeds": {}}


indicator: 185.225.19.16
indicator_type: ipv4
source: dshield
country: MD
reverse_dns: 185.225.16.0/22
hosting_provider: MIVOCLOUD
queried_at: 2026-04-02T20:05:08.353220
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@mivocloud.com", "as": 39798, "asname": "MIVOCLOUD", "ascountry": "MD", "assource": "", "network": "185.225.16.0/22", "threatfeeds": {"blocklistde22": {"lastseen": "2024-04-06", "firstseen": "2020-07-31"}, "rosti": {"lastseen": "2025-07-02", "firstseen": "2025-07-02"}}}


indicator: 185.251.91.137
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 185.251.88.0/22
hosting_provider: SPRINTHOST
queried_at: 2026-04-02T20:05:08.877132
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@sprinthost.ru", "as": 35278, "asname": "SPRINTHOST", "ascountry": "RU", "assource": "", "network": "185.251.88.0/22", "threatfeeds": {}}


indicator: 185.46.10.143
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 185.46.10.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:05:09.643913
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "185.46.10.0/24", "threatfeeds": {}}


indicator: 185.46.11.115
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 185.46.11.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:05:14.162549
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "185.46.11.0/24", "threatfeeds": {}}


indicator: 185.46.8.12
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 185.46.8.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:05:16.760889
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "185.46.8.0/24", "threatfeeds": {}}


indicator: 185.46.9.133
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 185.46.9.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:05:17.597454
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": "IP may participate in DDoS against russian websites (3/3/2022)", "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "185.46.9.0/24", "threatfeeds": {"forumspam": {"lastseen": "2022-01-15", "firstseen": "2022-01-03"}}}


indicator: 185.46.9.173
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 185.46.9.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:05:18.083806
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "185.46.9.0/24", "threatfeeds": {"blocklistde22": {"lastseen": "2026-02-13", "firstseen": "2022-07-27"}}}


indicator: 185.46.9.81
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 185.46.9.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:05:18.910622
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "185.46.9.0/24", "threatfeeds": {}}


indicator: 188.166.247.34
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 188.166.240.0/20
hosting_provider: DIGITALOCEAN-ASN
queried_at: 2026-04-02T20:05:19.390523
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@digitalocean.com", "as": 14061, "asname": "DIGITALOCEAN-ASN", "ascountry": "US", "assource": "", "network": "188.166.240.0/20", "threatfeeds": {"rosti": {"lastseen": "2025-07-02", "firstseen": "2025-07-02"}}}


indicator: 188.166.43.183
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 188.166.0.0/18
hosting_provider: DIGITALOCEAN-ASN
queried_at: 2026-04-02T20:05:20.229169
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@digitalocean.com", "as": 14061, "asname": "DIGITALOCEAN-ASN", "ascountry": "US", "assource": "", "network": "188.166.0.0/18", "threatfeeds": {}}


indicator: 188.225.25.132
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 188.225.25.0/24
hosting_provider: TIMEWEB-AS
queried_at: 2026-04-02T20:05:20.699776
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@timeweb.ru", "as": 9123, "asname": "TIMEWEB-AS", "ascountry": "RU", "assource": "", "network": "188.225.25.0/24", "threatfeeds": {}}


indicator: 188.225.42.206
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 188.225.42.0/24
hosting_provider: TIMEWEB-AS
queried_at: 2026-04-02T20:05:21.519241
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@timeweb.ru", "as": 9123, "asname": "TIMEWEB-AS", "ascountry": "RU", "assource": "", "network": "188.225.42.0/24", "threatfeeds": {}}


indicator: 188.225.43.174
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 188.225.43.0/24
hosting_provider: TIMEWEB-AS
queried_at: 2026-04-02T20:05:21.999627
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@timeweb.ru", "as": 9123, "asname": "TIMEWEB-AS", "ascountry": "RU", "assource": "", "network": "188.225.43.0/24", "threatfeeds": {}}


indicator: 188.225.44.138
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 188.225.44.0/24
hosting_provider: TIMEWEB-AS
queried_at: 2026-04-02T20:05:22.817220
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@timeweb.ru", "as": 9123, "asname": "TIMEWEB-AS", "ascountry": "RU", "assource": "", "network": "188.225.44.0/24", "threatfeeds": {}}


indicator: 188.225.58.233
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 188.225.58.0/24
hosting_provider: TIMEWEB-AS
queried_at: 2026-04-02T20:05:24.611012
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@timeweb.ru", "as": 9123, "asname": "TIMEWEB-AS", "ascountry": "RU", "assource": "", "network": "188.225.58.0/24", "threatfeeds": {}}


indicator: 188.225.87.166
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 188.225.87.0/24
hosting_provider: TIMEWEB-AS
queried_at: 2026-04-02T20:05:25.476443
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@timeweb.ru", "as": 9123, "asname": "TIMEWEB-AS", "ascountry": "RU", "assource": "", "network": "188.225.87.0/24", "threatfeeds": {}}


indicator: 188.93.210.54
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 188.93.210.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:05:25.893136
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "188.93.210.0/24", "threatfeeds": {}}


indicator: 193.124.206.128
indicator_type: ipv4
source: dshield
country: LT
reverse_dns: 193.124.206.0/24
hosting_provider: INTERNET-6
queried_at: 2026-04-02T20:05:26.765181
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": ">>UNKNOWN<<", "as": 212609, "asname": "INTERNET-6", "ascountry": "LT", "assource": "", "network": "193.124.206.0/24", "threatfeeds": {}}


indicator: 193.164.150.111
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 193.164.150.0/24
hosting_provider: TIMEWEB-AS
queried_at: 2026-04-02T20:05:27.177848
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@timeweb.ru", "as": 9123, "asname": "TIMEWEB-AS", "ascountry": "RU", "assource": "", "network": "193.164.150.0/24", "threatfeeds": {}}


indicator: 194.180.174.46
indicator_type: ipv4
source: dshield
country: MD
reverse_dns: 194.180.174.0/24
hosting_provider: MIVOCLOUD
queried_at: 2026-04-02T20:05:28.466041
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@mivocloud.com", "as": 39798, "asname": "MIVOCLOUD", "ascountry": "MD", "assource": "", "network": "194.180.174.0/24", "threatfeeds": {}}


indicator: 194.180.191.30
indicator_type: ipv4
source: dshield
country: MD
reverse_dns: 194.180.191.0/24
hosting_provider: MIVOCLOUD
queried_at: 2026-04-02T20:05:29.791444
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@mivocloud.com", "as": 39798, "asname": "MIVOCLOUD", "ascountry": "MD", "assource": "", "network": "194.180.191.0/24", "threatfeeds": {"ciarmy": {"lastseen": "2024-07-16", "firstseen": "2024-07-11"}, "rosti": {"lastseen": "2025-07-02", "firstseen": "2025-07-02"}}}


indicator: 194.58.103.22
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 194.58.103.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:05:30.666804
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "194.58.103.0/24", "threatfeeds": {}}


indicator: 194.58.108.14
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 194.58.108.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:05:31.111526
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "194.58.108.0/24", "threatfeeds": {}}


indicator: 194.58.111.215
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 194.58.111.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:05:32.424420
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "194.58.111.0/24", "threatfeeds": {}}


indicator: 194.58.118.14
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 194.58.118.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:05:33.722406
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "194.58.118.0/24", "threatfeeds": {}}


indicator: 194.58.119.114
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 194.58.119.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:05:34.576023
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "194.58.119.0/24", "threatfeeds": {}}


indicator: 194.58.120.207
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 194.58.120.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:05:35.876375
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "194.58.120.0/24", "threatfeeds": {}}


indicator: 194.58.121.225
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 194.58.121.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:05:36.371240
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "194.58.121.0/24", "threatfeeds": {}}


indicator: 194.58.122.110
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 194.58.122.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:05:37.685059
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "194.58.122.0/24", "threatfeeds": {}}


indicator: 194.58.123.47
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 194.58.123.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:05:38.990957
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "194.58.123.0/24", "threatfeeds": {}}


indicator: 194.58.90.120
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 194.58.90.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:05:39.843329
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "194.58.90.0/24", "threatfeeds": {}}


indicator: 194.58.92.102
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 194.58.92.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:05:40.328500
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "194.58.92.0/24", "threatfeeds": {}}


indicator: 194.58.97.115
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 194.58.97.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:05:41.131381
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "194.58.97.0/24", "threatfeeds": {}}


indicator: 194.58.97.245
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 194.58.97.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:05:41.612193
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "194.58.97.0/24", "threatfeeds": {"blocklistde22": {"lastseen": "2020-04-21", "firstseen": "2020-04-18"}}}


indicator: 194.58.98.215
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 194.58.98.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:05:42.417648
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "194.58.98.0/24", "threatfeeds": {}}


indicator: 194.67.104.232
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 194.67.104.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:05:42.967240
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "194.67.104.0/24", "threatfeeds": {}}


indicator: 194.67.108.168
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 194.67.108.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:05:43.706216
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "194.67.108.0/24", "threatfeeds": {}}


indicator: 194.67.109.14
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 194.67.109.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:05:44.274051
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "194.67.109.0/24", "threatfeeds": {}}


indicator: 194.67.110.89
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 194.67.110.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:05:47.632752
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "194.67.110.0/24", "threatfeeds": {}}


indicator: 194.67.111.121
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 194.67.111.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:05:48.171620
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "194.67.111.0/24", "threatfeeds": {}}


indicator: 194.67.113.120
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 194.67.113.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:05:48.923996
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "194.67.113.0/24", "threatfeeds": {}}


indicator: 194.67.113.99
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 194.67.113.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:05:50.748560
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "194.67.113.0/24", "threatfeeds": {"blocklistde22": {"lastseen": "2021-01-19", "firstseen": "2021-01-15"}}}


indicator: 194.67.116.180
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 194.67.116.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:05:51.493149
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "194.67.116.0/24", "threatfeeds": {}}


indicator: 194.67.116.81
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 194.67.116.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:05:54.079808
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "194.67.116.0/24", "threatfeeds": {"blocklistde22": {"lastseen": "2024-08-30", "firstseen": "2024-08-29"}}}


indicator: 194.67.71.4
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 194.67.71.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:05:54.642610
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "194.67.71.0/24", "threatfeeds": {}}


indicator: 194.67.71.55
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 194.67.71.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:05:55.408734
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "194.67.71.0/24", "threatfeeds": {"mastodon": {"lastseen": "2025-02-20", "firstseen": "2025-02-20"}}}


indicator: 194.67.86.167
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 194.67.86.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:05:55.923320
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "194.67.86.0/24", "threatfeeds": {}}


indicator: 194.67.87.29
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 194.67.87.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:05:57.997380
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "194.67.87.0/24", "threatfeeds": {"blocklistde22": {"lastseen": "2019-07-27", "firstseen": "2019-07-26"}}}


indicator: 194.67.90.15
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 194.67.90.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:05:58.515557
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "194.67.90.0/24", "threatfeeds": {}}


indicator: 194.67.93.85
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 194.67.93.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:06:00.613416
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "194.67.93.0/24", "threatfeeds": {}}


indicator: 195.133.88.128
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 195.133.88.0/24
hosting_provider: GIR-AS
queried_at: 2026-04-02T20:06:01.144843
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@fionera.de", "as": 207713, "asname": "GIR-AS", "ascountry": "RU", "assource": "", "network": "195.133.88.0/24", "threatfeeds": {"rosti": {"lastseen": "2025-07-02", "firstseen": "2025-07-02"}}}


indicator: 195.140.146.128
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 195.140.146.0/23
hosting_provider: RU-JSCIOT
queried_at: 2026-04-02T20:06:01.943459
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@abusehost.ru", "as": 29182, "asname": "RU-JSCIOT", "ascountry": "RU", "assource": "", "network": "195.140.146.0/23", "threatfeeds": {}}


indicator: 195.62.53.63
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 195.62.52.0/23
hosting_provider: IPSERVER-RU-NET Fiord
queried_at: 2026-04-02T20:06:02.513374
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ipserver.su", "as": 44812, "asname": "IPSERVER-RU-NET Fiord", "ascountry": "RU", "assource": "", "network": "195.62.52.0/23", "threatfeeds": {"blocklistde443": {"lastseen": "2017-03-13", "firstseen": "2017-03-10"}, "blocklistde80": {"lastseen": "2017-03-13", "firstseen": "2017-03-10"}, "blocklistdeapache": {"lastseen": "2017-03-13", "firstseen": "2017-03-10"}, "blocklistdebrute


indicator: 199.247.14.64
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 199.247.8.0/21
hosting_provider: AS-CHOOPA
queried_at: 2026-04-02T20:06:03.271354
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@choopa.com", "as": 20473, "asname": "AS-CHOOPA", "ascountry": "US", "assource": "", "network": "199.247.8.0/21", "threatfeeds": {}}


indicator: 206.172.194.0
indicator_type: ipv4
source: dshield
country: CA
reverse_dns: 206.172.0.0/16
hosting_provider: BACOM
queried_at: 2026-04-02T20:06:03.813804
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@bell.ca", "as": 577, "asname": "BACOM", "ascountry": "CA", "assource": "", "network": "206.172.0.0/16", "threatfeeds": {}}


indicator: 206.81.0.182
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 206.81.0.0/20
hosting_provider: DIGITALOCEAN-ASN
queried_at: 2026-04-02T20:06:04.563795
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@digitalocean.com", "as": 14061, "asname": "DIGITALOCEAN-ASN", "ascountry": "US", "assource": "", "network": "206.81.0.0/20", "threatfeeds": {}}


indicator: 209.97.165.187
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 209.97.160.0/20
hosting_provider: DIGITALOCEAN-ASN
queried_at: 2026-04-02T20:06:08.065613
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@digitalocean.com", "as": 14061, "asname": "DIGITALOCEAN-ASN", "ascountry": "US", "assource": "", "network": "209.97.160.0/20", "threatfeeds": {"rosti": {"lastseen": "2025-07-02", "firstseen": "2025-07-02"}}}


indicator: 212.18.104.56
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 212.18.104.0/24
hosting_provider: GIR-AS
queried_at: 2026-04-02T20:06:09.747622
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@fionera.de", "as": 207713, "asname": "GIR-AS", "ascountry": "RU", "assource": "", "network": "212.18.104.0/24", "threatfeeds": {"rosti": {"lastseen": "2025-07-02", "firstseen": "2025-07-02"}}}


indicator: 209.38.97.36
indicator_type: ipv4
source: dshield
country: XX
hosting_provider: not routed
queried_at: 2026-04-02T20:06:12.644869
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": null, "as": 0, "asname": "not routed", "ascountry": "XX", "assource": "", "network": "", "threatfeeds": {"rosti": {"lastseen": "2025-12-02", "firstseen": "2025-07-02"}}}


indicator: 213.182.204.71
indicator_type: ipv4
source: dshield
country: XX
hosting_provider: not routed
queried_at: 2026-04-02T20:06:12.869026
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": null, "as": 0, "asname": "not routed", "ascountry": "XX", "assource": "", "network": "", "threatfeeds": {"rosti": {"lastseen": "2025-07-02", "firstseen": "2025-07-02"}}}


indicator: 216.238.69.137
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 216.238.64.0/19
hosting_provider: AS-CHOOPA
queried_at: 2026-04-02T20:06:14.535998
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@choopa.com", "as": 20473, "asname": "AS-CHOOPA", "ascountry": "US", "assource": "", "network": "216.238.64.0/19", "threatfeeds": {}}


indicator: 217.25.89.191
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 217.25.89.0/24
hosting_provider: TIMEWEB-AS
queried_at: 2026-04-02T20:06:15.325962
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@timeweb.ru", "as": 9123, "asname": "TIMEWEB-AS", "ascountry": "RU", "assource": "", "network": "217.25.89.0/24", "threatfeeds": {"blocklistde25": {"lastseen": "2021-02-06", "firstseen": "2021-02-04"}}}


indicator: 217.69.0.35
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 217.69.0.0/20
hosting_provider: AS-CHOOPA
queried_at: 2026-04-02T20:06:15.837140
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@choopa.com", "as": 20473, "asname": "AS-CHOOPA", "ascountry": "US", "assource": "", "network": "217.69.0.0/20", "threatfeeds": {}}


indicator: 23.42.150.172
indicator_type: ipv4
source: dshield
country: NL
reverse_dns: 23.42.150.0/24
hosting_provider: AKAMAI-ASN1
queried_at: 2026-04-02T20:06:17.105903
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@akamai.com", "as": 20940, "asname": "AKAMAI-ASN1", "ascountry": "NL", "assource": "", "network": "23.42.150.0/24", "threatfeeds": {}}


indicator: 31.31.203.17
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 31.31.203.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:06:17.909733
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "31.31.203.0/24", "threatfeeds": {}}


indicator: 31.31.203.219
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 31.31.203.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:06:18.376013
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "31.31.203.0/24", "threatfeeds": {"ciarmy": {"lastseen": "2021-12-02", "firstseen": "2021-12-02"}}}


indicator: 31.40.251.145
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 31.40.251.0/24
hosting_provider: DIGITALENERGY-AS
queried_at: 2026-04-02T20:06:19.654375
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "bogro.es@gmail.com", "as": 43830, "asname": "DIGITALENERGY-AS", "ascountry": "RU", "assource": "", "network": "31.40.251.0/24", "threatfeeds": {}}


indicator: 37.140.195.137
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 37.140.195.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:06:20.968195
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "37.140.195.0/24", "threatfeeds": {"threatview": {"lastseen": "2024-05-17", "firstseen": "2024-03-26"}}}


indicator: 37.140.197.206
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 37.140.197.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:06:21.734062
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "37.140.197.0/24", "threatfeeds": {}}


indicator: 37.140.199.20
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 37.140.199.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:06:23.004356
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "37.140.199.0/24", "threatfeeds": {}}


indicator: 37.140.199.224
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 37.140.199.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:06:23.803170
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "37.140.199.0/24", "threatfeeds": {"blocklistde22": {"lastseen": "2022-04-27", "firstseen": "2022-04-25"}}}


indicator: 38.54.12.3
indicator_type: ipv4
source: dshield
country: HK
reverse_dns: 38.54.12.0/23
hosting_provider: KAOPU-HK Kaopu Cloud HK Limited
queried_at: 2026-04-02T20:06:24.654506
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "zhangyx@kaopuyun.com", "as": 138915, "asname": "KAOPU-HK Kaopu Cloud HK Limited", "ascountry": "HK", "assource": "", "network": "38.54.12.0/23", "threatfeeds": {"rosti": {"lastseen": "2025-07-02", "firstseen": "2025-07-02"}}}


indicator: 45.134.255.131
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 45.134.255.0/24
hosting_provider: DIGITALENERGY-AS
queried_at: 2026-04-02T20:06:25.408722
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "bogro.es@gmail.com", "as": 43830, "asname": "DIGITALENERGY-AS", "ascountry": "RU", "assource": "", "network": "45.134.255.0/24", "threatfeeds": {}}


indicator: 45.32.149.8
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 45.32.144.0/21
hosting_provider: AS-CHOOPA
queried_at: 2026-04-02T20:06:25.927075
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@choopa.com", "as": 20473, "asname": "AS-CHOOPA", "ascountry": "US", "assource": "", "network": "45.32.144.0/21", "threatfeeds": {}}


indicator: 45.77.11.107
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 45.77.8.0/21
hosting_provider: AS-CHOOPA
queried_at: 2026-04-02T20:06:26.707315
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@choopa.com", "as": 20473, "asname": "AS-CHOOPA", "ascountry": "US", "assource": "", "network": "45.77.8.0/21", "threatfeeds": {}}


indicator: 45.77.229.187
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 45.77.224.0/21
hosting_provider: AS-CHOOPA
queried_at: 2026-04-02T20:06:27.207906
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@choopa.com", "as": 20473, "asname": "AS-CHOOPA", "ascountry": "US", "assource": "", "network": "45.77.224.0/21", "threatfeeds": {}}


indicator: 46.29.234.46
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 46.29.234.0/24
hosting_provider: GIR-AS
queried_at: 2026-04-02T20:06:28.112958
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@fionera.de", "as": 207713, "asname": "GIR-AS", "ascountry": "RU", "assource": "", "network": "46.29.234.0/24", "threatfeeds": {"blocklistde443": {"lastseen": "2015-10-02", "firstseen": "2015-10-01"}, "blocklistde80": {"lastseen": "2015-10-03", "firstseen": "2015-10-01"}, "blocklistdeapache": {"lastseen": "2015-10-03", "firstseen": "2015-10-01"}, "blocklistdebruteforcelogin": {"


indicator: 5.181.156.109
indicator_type: ipv4
source: dshield
country: MD
reverse_dns: 5.181.156.0/24
hosting_provider: MIVOCLOUD
queried_at: 2026-04-02T20:06:28.471458
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@mivocloud.com", "as": 39798, "asname": "MIVOCLOUD", "ascountry": "MD", "assource": "", "network": "5.181.156.0/24", "threatfeeds": {"rosti": {"lastseen": "2025-07-02", "firstseen": "2025-07-02"}}}


indicator: 5.252.178.140
indicator_type: ipv4
source: dshield
country: MD
reverse_dns: 5.252.178.0/24
hosting_provider: MIVOCLOUD
queried_at: 2026-04-02T20:06:29.366838
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@mivocloud.com", "as": 39798, "asname": "MIVOCLOUD", "ascountry": "MD", "assource": "", "network": "5.252.178.0/24", "threatfeeds": {"rosti": {"lastseen": "2025-07-02", "firstseen": "2025-07-02"}}}


indicator: 5.63.152.233
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 5.63.152.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:06:29.738536
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "5.63.152.0/24", "threatfeeds": {}}


indicator: 5.63.154.128
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 5.63.154.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:06:30.647667
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "5.63.154.0/24", "threatfeeds": {}}


indicator: 5.63.154.19
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 5.63.154.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:06:31.017798
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "5.63.154.0/24", "threatfeeds": {"ciarmy": {"lastseen": "2021-10-30", "firstseen": "2021-10-30"}}}


indicator: 5.63.158.179
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 5.63.158.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:06:31.908566
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "5.63.158.0/24", "threatfeeds": {}}


indicator: 5.63.158.238
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 5.63.158.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:06:33.159401
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "5.63.158.0/24", "threatfeeds": {"forumspam": {"lastseen": "2013-07-21", "firstseen": "2013-06-18"}}}


indicator: 62.133.62.73
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 62.133.62.0/24
hosting_provider: GIR-AS
queried_at: 2026-04-02T20:06:33.567520
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@fionera.de", "as": 207713, "asname": "GIR-AS", "ascountry": "RU", "assource": "", "network": "62.133.62.0/24", "threatfeeds": {"rosti": {"lastseen": "2025-07-02", "firstseen": "2025-07-02"}}}


indicator: 64.227.139.249
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 64.227.128.0/19
hosting_provider: DIGITALOCEAN-ASN
queried_at: 2026-04-02T20:06:34.457368
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@digitalocean.com", "as": 14061, "asname": "DIGITALOCEAN-ASN", "ascountry": "US", "assource": "", "network": "64.227.128.0/19", "threatfeeds": {"rosti": {"lastseen": "2025-08-28", "firstseen": "2025-07-02"}}}


indicator: 64.227.172.243
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 64.227.160.0/20
hosting_provider: DIGITALOCEAN-ASN
queried_at: 2026-04-02T20:06:34.848170
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@digitalocean.com", "as": 14061, "asname": "DIGITALOCEAN-ASN", "ascountry": "US", "assource": "", "network": "64.227.160.0/20", "threatfeeds": {"rosti": {"lastseen": "2026-02-04", "firstseen": "2025-07-02"}}}


indicator: 67.205.160.237
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 67.205.160.0/20
hosting_provider: DIGITALOCEAN-ASN
queried_at: 2026-04-02T20:06:35.756023
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@digitalocean.com", "as": 14061, "asname": "DIGITALOCEAN-ASN", "ascountry": "US", "assource": "", "network": "67.205.160.0/20", "threatfeeds": {"ciarmy": {"lastseen": "2022-11-11", "firstseen": "2022-11-10"}, "rosti": {"lastseen": "2025-07-02", "firstseen": "2025-07-02"}}}


indicator: 68.183.2.92
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 68.183.0.0/20
hosting_provider: DIGITALOCEAN-ASN
queried_at: 2026-04-02T20:06:36.144123
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@digitalocean.com", "as": 14061, "asname": "DIGITALOCEAN-ASN", "ascountry": "US", "assource": "", "network": "68.183.0.0/20", "threatfeeds": {"binaryedge": {"lastseen": "2024-01-06", "firstseen": "2022-04-17"}, "ciarmy": {"lastseen": "2024-01-06", "firstseen": "2022-04-17"}, "rosti": {"lastseen": "2025-07-02", "firstseen": "2025-07-02"}}}


indicator: 70.34.194.123
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 70.34.192.0/19
hosting_provider: AS-CHOOPA
queried_at: 2026-04-02T20:06:37.056153
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@choopa.com", "as": 20473, "asname": "AS-CHOOPA", "ascountry": "US", "assource": "", "network": "70.34.192.0/19", "threatfeeds": {}}


indicator: 80.78.240.210
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 80.78.240.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:06:43.514630
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "80.78.240.0/24", "threatfeeds": {}}


indicator: 80.78.241.253
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 80.78.241.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:06:43.895665
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "80.78.241.0/24", "threatfeeds": {}}


indicator: 80.78.244.124
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 80.78.244.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:06:45.173480
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "80.78.244.0/24", "threatfeeds": {}}


indicator: 80.78.245.223
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 80.78.245.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:06:46.462355
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "80.78.245.0/24", "threatfeeds": {}}


indicator: 80.78.245.89
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 80.78.245.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:06:47.741490
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "80.78.245.0/24", "threatfeeds": {"forumspam": {"lastseen": "2012-02-18", "firstseen": "2011-12-30"}}}


indicator: 80.78.248.167
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 80.78.248.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:06:48.689934
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "80.78.248.0/24", "threatfeeds": {}}


indicator: 80.78.251.191
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 80.78.251.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:06:50.325408
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "80.78.251.0/24", "threatfeeds": {}}


indicator: 80.78.253.196
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 80.78.253.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:06:53.277237
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "80.78.253.0/24", "threatfeeds": {}}


indicator: 80.78.254.238
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 80.78.254.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:06:55.299472
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "80.78.254.0/24", "threatfeeds": {}}


indicator: 80.90.181.107
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 80.90.181.0/24
hosting_provider: TIMEWEB-AS
queried_at: 2026-04-02T20:06:55.851114
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@timeweb.ru", "as": 9123, "asname": "TIMEWEB-AS", "ascountry": "RU", "assource": "", "network": "80.90.181.0/24", "threatfeeds": {"rosti": {"lastseen": "2025-07-02", "firstseen": "2025-07-02"}}}


indicator: 82.146.39.104
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 82.146.38.0/23
hosting_provider: RU-JSCIOT
queried_at: 2026-04-02T20:06:56.597084
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@abusehost.ru", "as": 29182, "asname": "RU-JSCIOT", "ascountry": "RU", "assource": "", "network": "82.146.38.0/23", "threatfeeds": {}}


indicator: 87.249.49.103
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 87.249.49.0/24
hosting_provider: TIMEWEB-AS
queried_at: 2026-04-02T20:06:59.713332
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@timeweb.ru", "as": 9123, "asname": "TIMEWEB-AS", "ascountry": "RU", "assource": "", "network": "87.249.49.0/24", "threatfeeds": {}}


indicator: 89.108.102.37
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 89.108.102.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:07:00.479755
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "89.108.102.0/24", "threatfeeds": {}}


indicator: 89.108.114.11
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 89.108.114.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:07:01.786344
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "89.108.114.0/24", "threatfeeds": {}}


indicator: 89.108.115.206
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 89.108.115.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:07:02.328501
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "89.108.115.0/24", "threatfeeds": {}}


indicator: 89.108.65.157
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 89.108.65.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:07:06.939447
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "89.108.65.0/24", "threatfeeds": {}}


indicator: 89.108.70.22
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 89.108.70.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:07:07.504065
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "89.108.70.0/24", "threatfeeds": {"blocklistde22": {"lastseen": "2016-12-15", "firstseen": "2016-11-23"}}}


indicator: 89.108.70.223
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 89.108.70.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:07:08.249054
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "89.108.70.0/24", "threatfeeds": {}}


indicator: 89.108.71.205
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 89.108.71.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:07:08.803729
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "89.108.71.0/24", "threatfeeds": {}}


indicator: 89.108.76.135
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 89.108.76.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:07:09.540957
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "89.108.76.0/24", "threatfeeds": {}}


indicator: 89.108.77.133
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 89.108.77.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:07:12.111549
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "89.108.77.0/24", "threatfeeds": {}}


indicator: 89.108.78.126
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 89.108.78.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:07:13.972525
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "89.108.78.0/24", "threatfeeds": {}}


indicator: 89.108.79.13
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 89.108.79.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:07:17.427524
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "89.108.79.0/24", "threatfeeds": {}}


indicator: 89.108.81.106
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 89.108.81.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:07:18.718556
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "89.108.81.0/24", "threatfeeds": {}}


indicator: 89.108.83.23
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 89.108.83.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:07:22.620880
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "89.108.83.0/24", "threatfeeds": {}}


indicator: 89.108.88.15
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 89.108.88.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:07:23.916532
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "89.108.88.0/24", "threatfeeds": {}}


indicator: 89.108.88.174
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 89.108.88.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:07:24.329928
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "89.108.88.0/24", "threatfeeds": {"ciarmy": {"lastseen": "2022-06-12", "firstseen": "2022-06-04"}}}


indicator: 89.108.98.101
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 89.108.98.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:07:26.504382
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "89.108.98.0/24", "threatfeeds": {"blocklistde22": {"lastseen": "2022-07-04", "firstseen": "2022-07-02"}}}


indicator: 89.108.98.113
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 89.108.98.0/24
hosting_provider: AS-REG
queried_at: 2026-04-02T20:07:26.899484
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@reg.ru", "as": 197695, "asname": "AS-REG", "ascountry": "RU", "assource": "", "network": "89.108.98.0/24", "threatfeeds": {}}


indicator: 89.185.84.141
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 89.185.84.0/24
hosting_provider: GIR-AS
queried_at: 2026-04-02T20:07:29.085368
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@fionera.de", "as": 207713, "asname": "GIR-AS", "ascountry": "RU", "assource": "", "network": "89.185.84.0/24", "threatfeeds": {}}


indicator: 89.185.84.204
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 89.185.84.0/24
hosting_provider: GIR-AS
queried_at: 2026-04-02T20:07:29.464906
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@fionera.de", "as": 207713, "asname": "GIR-AS", "ascountry": "RU", "assource": "", "network": "89.185.84.0/24", "threatfeeds": {"rosti": {"lastseen": "2025-07-02", "firstseen": "2025-07-02"}}}


indicator: 89.19.209.154
indicator_type: ipv4
source: dshield
country: PL
reverse_dns: 89.19.209.0/24
hosting_provider: ARTNET2
queried_at: 2026-04-02T20:07:30.383186
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@artnet.pl", "as": 200088, "asname": "ARTNET2", "ascountry": "PL", "assource": "", "network": "89.19.209.0/24", "threatfeeds": {"rosti": {"lastseen": "2025-07-02", "firstseen": "2025-07-02"}}}


indicator: 89.23.107.188
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 89.23.107.0/24
hosting_provider: GIR-AS
queried_at: 2026-04-02T20:07:31.663970
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@fionera.de", "as": 207713, "asname": "GIR-AS", "ascountry": "RU", "assource": "", "network": "89.23.107.0/24", "threatfeeds": {"rosti": {"lastseen": "2025-07-02", "firstseen": "2025-07-02"}}}


indicator: 91.188.222.50
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 91.188.222.0/24
hosting_provider: SERV-TECH
queried_at: 2026-04-02T20:07:32.028532
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@serv-tech.ru", "as": 208626, "asname": "SERV-TECH", "ascountry": "RU", "assource": "", "network": "91.188.222.0/24", "threatfeeds": {}}


indicator: 91.200.148.232
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 91.200.148.0/24
hosting_provider: TIMEWEB-AS
queried_at: 2026-04-02T20:07:32.969045
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@timeweb.ru", "as": 9123, "asname": "TIMEWEB-AS", "ascountry": "RU", "assource": "", "network": "91.200.148.0/24", "threatfeeds": {"rosti": {"lastseen": "2025-07-02", "firstseen": "2025-07-02"}}}


indicator: 92.242.62.186
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 92.242.62.0/23
hosting_provider: DILMAX
queried_at: 2026-04-02T20:07:35.545392
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "support@neoserver.site", "as": 201192, "asname": "DILMAX", "ascountry": "US", "assource": "", "network": "92.242.62.0/23", "threatfeeds": {"blocklistde110": {"lastseen": "2019-11-17", "firstseen": "2019-11-15"}, "blocklistde143": {"lastseen": "2019-11-17", "firstseen": "2019-11-15"}, "blocklistde25": {"lastseen": "2019-11-16", "firstseen": "2019-11-15"}, "blocklistde993": {"lastseen"


indicator: 92.242.62.45
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 92.242.62.0/23
hosting_provider: DILMAX
queried_at: 2026-04-02T20:07:36.833230
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "support@neoserver.site", "as": 201192, "asname": "DILMAX", "ascountry": "US", "assource": "", "network": "92.242.62.0/23", "threatfeeds": {"blocklistde110": {"lastseen": "2019-02-09", "firstseen": "2019-02-08"}, "blocklistde143": {"lastseen": "2019-02-09", "firstseen": "2019-02-08"}, "blocklistde25": {"lastseen": "2019-02-09", "firstseen": "2019-02-08"}, "blocklistde993": {"lastseen"


indicator: 92.255.76.169
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 92.255.76.0/24
hosting_provider: TIMEWEB-AS
queried_at: 2026-04-02T20:07:38.137686
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@timeweb.ru", "as": 9123, "asname": "TIMEWEB-AS", "ascountry": "RU", "assource": "", "network": "92.255.76.0/24", "threatfeeds": {}}


indicator: 92.53.97.145
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 92.53.97.0/24
hosting_provider: TIMEWEB-AS
queried_at: 2026-04-02T20:07:38.511775
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@timeweb.ru", "as": 9123, "asname": "TIMEWEB-AS", "ascountry": "RU", "assource": "", "network": "92.53.97.0/24", "threatfeeds": {}}


indicator: 94.228.120.181
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 94.228.120.0/24
hosting_provider: TIMEWEB-AS
queried_at: 2026-04-02T20:07:39.419374
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@timeweb.ru", "as": 9123, "asname": "TIMEWEB-AS", "ascountry": "RU", "assource": "", "network": "94.228.120.0/24", "threatfeeds": {}}


indicator: 94.250.251.39
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 94.250.250.0/23
hosting_provider: RU-JSCIOT
queried_at: 2026-04-02T20:07:39.792161
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@abusehost.ru", "as": 29182, "asname": "RU-JSCIOT", "ascountry": "RU", "assource": "", "network": "94.250.250.0/23", "threatfeeds": {}}


indicator: 95.179.216.77
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 95.179.208.0/20
hosting_provider: AS-CHOOPA
queried_at: 2026-04-02T20:07:40.713472
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@choopa.com", "as": 20473, "asname": "AS-CHOOPA", "ascountry": "US", "assource": "", "network": "95.179.208.0/20", "threatfeeds": {}}


indicator: 1.53.11.141
indicator_type: ipv4
source: dshield
country: VN
reverse_dns: 1.53.10.0/23
hosting_provider: FPT-AS-AP FPT Telecom Company
queried_at: 2026-04-02T20:07:43.258495
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "hm-changed@vnnic.vn", "as": 18403, "asname": "FPT-AS-AP FPT Telecom Company", "ascountry": "VN", "assource": "", "network": "1.53.10.0/23", "threatfeeds": {}}


indicator: 106.51.89.49
indicator_type: ipv4
source: dshield
country: IN
reverse_dns: 106.51.64.0/19
hosting_provider: CABLELITE-AS-AP Atria Convergence Technologies Pvt. Ltd. Broadband Internet Service Provider INDIA
queried_at: 2026-04-02T20:07:43.660325
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "apnic@acttv.in", "as": 24309, "asname": "CABLELITE-AS-AP Atria Convergence Technologies Pvt. Ltd. Broadband Internet Service Provider INDIA", "ascountry": "IN", "assource": "", "network": "106.51.64.0/19", "threatfeeds": {}}


indicator: 109.169.15.73
indicator_type: ipv4
source: dshield
country: GB
reverse_dns: 109.169.0.0/18
hosting_provider: IOMART-AS
queried_at: 2026-04-02T20:07:44.560898
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@iomart.com", "as": 20860, "asname": "IOMART-AS", "ascountry": "GB", "assource": "", "network": "109.169.0.0/18", "threatfeeds": {}}


indicator: 121.127.232.250
indicator_type: ipv4
source: dshield
country: SG
reverse_dns: 121.127.232.0/24
hosting_provider: BCPL-SG BGPNET Global ASN
queried_at: 2026-04-02T20:07:45.862433
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@bgp.net", "as": 64050, "asname": "BCPL-SG BGPNET Global ASN", "ascountry": "SG", "assource": "", "network": "121.127.232.0/24", "threatfeeds": {"blocklistde21": {"lastseen": "2022-11-16", "firstseen": "2022-11-14"}}}


indicator: 130.61.233.105
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 130.61.128.0/17
hosting_provider: ORACLE-BMC-31898
queried_at: 2026-04-02T20:07:47.512588
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "network-contact_ww_grp@oracle.com", "as": 31898, "asname": "ORACLE-BMC-31898", "ascountry": "US", "assource": "", "network": "130.61.128.0/17", "threatfeeds": {}}


indicator: 144.126.202.227
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 144.126.192.0/20
hosting_provider: DIGITALOCEAN-ASN
queried_at: 2026-04-02T20:07:48.220232
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@digitalocean.com", "as": 14061, "asname": "DIGITALOCEAN-ASN", "ascountry": "US", "assource": "", "network": "144.126.192.0/20", "threatfeeds": {}}


indicator: 178.32.251.98
indicator_type: ipv4
source: dshield
country: FR
reverse_dns: 178.32.0.0/15
hosting_provider: OVH
queried_at: 2026-04-02T20:07:48.805194
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ovh.net", "as": 16276, "asname": "OVH", "ascountry": "FR", "assource": "", "network": "178.32.0.0/15", "threatfeeds": {}}


indicator: 184.95.51.172
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 184.95.32.0/19
hosting_provider: SSASN2
queried_at: 2026-04-02T20:07:49.510840
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@phoenixnap.com", "as": 20454, "asname": "SSASN2", "ascountry": "US", "assource": "", "network": "184.95.32.0/19", "threatfeeds": {}}


indicator: 185.141.63.103
indicator_type: ipv4
source: dshield
country: BG
reverse_dns: 185.141.63.0/24
hosting_provider: BELCLOUD
queried_at: 2026-04-02T20:07:50.120905
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@belcloud.net", "as": 44901, "asname": "BELCLOUD", "ascountry": "BG", "assource": "", "network": "185.141.63.0/24", "threatfeeds": {}}


indicator: 185.236.25.119
indicator_type: ipv4
source: dshield
country: ES
reverse_dns: 185.236.24.0/22
hosting_provider: SERPAIO
queried_at: 2026-04-02T20:07:50.823038
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": ">>UNKNOWN<<", "as": 210876, "asname": "SERPAIO", "ascountry": "ES", "assource": "", "network": "185.236.24.0/22", "threatfeeds": {"rosti": {"lastseen": "2026-03-20", "firstseen": "2026-03-20"}}}


indicator: 193.70.80.214
indicator_type: ipv4
source: dshield
country: FR
reverse_dns: 193.70.0.0/17
hosting_provider: OVH
queried_at: 2026-04-02T20:07:54.064024
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ovh.net", "as": 16276, "asname": "OVH", "ascountry": "FR", "assource": "", "network": "193.70.0.0/17", "threatfeeds": {}}


indicator: 203.161.50.145
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 203.161.32.0/19
hosting_provider: NAMECHEAP-NET
queried_at: 2026-04-02T20:07:55.368265
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@namecheaphosting.com", "as": 22612, "asname": "NAMECHEAP-NET", "ascountry": "US", "assource": "", "network": "203.161.32.0/19", "threatfeeds": {"rosti": {"lastseen": "2026-03-16", "firstseen": "2026-03-16"}}}


indicator: 209.74.87.100
indicator_type: ipv4
source: dshield
country: XX
hosting_provider: not routed
queried_at: 2026-04-02T20:07:58.402154
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": null, "as": 0, "asname": "not routed", "ascountry": "XX", "assource": "", "network": "", "threatfeeds": {"rosti": {"lastseen": "2026-03-20", "firstseen": "2026-03-20"}}}


indicator: 213.159.79.56
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 213.159.64.0/20
hosting_provider: CTINET-AS CTINET Autonomous System
queried_at: 2026-04-02T20:07:58.830619
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "noc@ctinet.ru", "as": 13078, "asname": "CTINET-AS CTINET Autonomous System", "ascountry": "RU", "assource": "", "network": "213.159.64.0/20", "threatfeeds": {}}


indicator: 217.146.67.241
indicator_type: ipv4
source: dshield
country: EE
reverse_dns: 217.146.64.0/20
hosting_provider: ZONE Zone Media OU
queried_at: 2026-04-02T20:07:59.695921
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@zone.eu", "as": 49604, "asname": "ZONE Zone Media OU", "ascountry": "EE", "assource": "", "network": "217.146.64.0/20", "threatfeeds": {}}


indicator: 3.20.6.1
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 3.20.0.0/14
hosting_provider: AMAZON-02
queried_at: 2026-04-02T20:08:00.080678
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "3.20.0.0/14", "threatfeeds": {}}


indicator: 38.180.206.61
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 38.0.0.0/8
hosting_provider: COGENT-174
queried_at: 2026-04-02T20:08:01.382308
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@cogentco.com", "as": 174, "asname": "COGENT-174", "ascountry": "US", "assource": "", "network": "38.0.0.0/8", "threatfeeds": {"rosti": {"lastseen": "2025-01-13", "firstseen": "2025-01-13"}}}


indicator: 38.180.239.161
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 38.0.0.0/8
hosting_provider: COGENT-174
queried_at: 2026-04-02T20:08:02.675919
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@cogentco.com", "as": 174, "asname": "COGENT-174", "ascountry": "US", "assource": "", "network": "38.0.0.0/8", "threatfeeds": {"rosti": {"lastseen": "2026-03-30", "firstseen": "2026-03-30"}}}


indicator: 78.142.19.114
indicator_type: ipv4
source: dshield
country: BG
reverse_dns: 78.142.19.0/24
hosting_provider: LIFOET-AS
queried_at: 2026-04-02T20:08:03.977936
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "lifoet.lir@gmail.com", "as": 57705, "asname": "LIFOET-AS", "ascountry": "BG", "assource": "", "network": "78.142.19.0/24", "threatfeeds": {"blocklistde22": {"lastseen": "2019-05-29", "firstseen": "2019-05-20"}}}


indicator: 8.208.178.52
indicator_type: ipv4
source: dshield
country: CN
reverse_dns: 8.208.128.0/17
hosting_provider: ALIBABA-CN-NET Alibaba US Technology Co., Ltd.
queried_at: 2026-04-02T20:08:04.838812
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "ipas@cnnic.cn", "as": 45102, "asname": "ALIBABA-CN-NET Alibaba US Technology Co., Ltd.", "ascountry": "CN", "assource": "", "network": "8.208.128.0/17", "threatfeeds": {}}


indicator: 92.243.65.243
indicator_type: ipv4
source: dshield
country: SI
reverse_dns: 92.243.65.0/24
hosting_provider: AKTON-AS Akton Autonomous System
queried_at: 2026-04-02T20:08:07.795645
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@akton.net", "as": 25467, "asname": "AKTON-AS Akton Autonomous System", "ascountry": "SI", "assource": "", "network": "92.243.65.0/24", "threatfeeds": {}}


indicator: 94.131.121.56
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 94.131.120.0/21
hosting_provider: NJIX
queried_at: 2026-04-02T20:08:08.607451
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": ">>UNKNOWN<<", "as": 53856, "asname": "NJIX", "ascountry": "US", "assource": "", "network": "94.131.120.0/21", "threatfeeds": {}}


indicator: 94.198.40.4
indicator_type: ipv4
source: dshield
country: RO
reverse_dns: 94.198.40.0/24
hosting_provider: M247
queried_at: 2026-04-02T20:08:09.074347
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@m247.com", "as": 9009, "asname": "M247", "ascountry": "RO", "assource": "", "network": "94.198.40.0/24", "threatfeeds": {"rosti": {"lastseen": "2024-06-21", "firstseen": "2024-06-21"}, "threatview": {"lastseen": "2024-10-02", "firstseen": "2024-06-25"}}}


indicator: 157.20.182.49
indicator_type: ipv4
source: firehol
reverse_dns: 157.20.182.0/23
queried_at: 2026-04-02T20:10:56.874774
raw_data:
  {"listed": true, "matched_networks": ["157.20.182.0/23"], "match_count": 1, "lists_checked": 4, "total_networks": 200944}


indicator: 143.244.134.188
indicator_type: ipv4
source: firehol
reverse_dns: 143.244.134.188/32
queried_at: 2026-04-02T20:11:02.995037
raw_data:
  {"listed": true, "matched_networks": ["143.244.134.188/32"], "match_count": 1, "lists_checked": 4, "total_networks": 200944}


indicator: 92.242.62.112
indicator_type: ipv4
source: firehol
reverse_dns: 92.242.62.0/24
queried_at: 2026-04-02T20:11:58.485322
raw_data:
  {"listed": true, "matched_networks": ["92.242.62.0/24"], "match_count": 1, "lists_checked": 4, "total_networks": 200944}


indicator: 185.163.47.177
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:07.731229
raw_data:
  {"hostnames_checked": ["thermicplastic.uk", "185-163-47-177.mivocloud.com", "www.thermicplastic.uk", "process-client-issuance.online"], "hostnames_count": 4, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 157.20.182.49
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:07.751376
raw_data:
  {"hostnames_checked": ["backondswitch.com", "mail1.bestnewslettersclub.com", "maistgroup.com"], "hostnames_count": 3, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 2.2.2.6
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:07.770919
raw_data:
  {"hostnames_checked": ["magas.bslrpg.com", "nathanyao.shop"], "hostnames_count": 2, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 2.2.3.6
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:07.792397
raw_data:
  {"hostnames_checked": ["www.dns-exercise.dev"], "hostnames_count": 1, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 65.20.97.203
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:07.812909
raw_data:
  {"hostnames_checked": ["mongo.licitador.es"], "hostnames_count": 1, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 185.163.45.5
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:07.833036
raw_data:
  {"hostnames_checked": ["6385data925.xyz", "185-163-45-5.mivocloud.com", "bakingsupplies.xyz", "logchase.online", "koperst.pl", "bantamchickens.xyz", "sverset.pl", "barnplans.xyz", "logtochase.online"], "hostnames_count": 9, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 141.105.130.237
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:07.841057
raw_data:
  {"hostnames_checked": ["sqwas.shapelie.com", "line24.sbs", "sertyki.com"], "hostnames_count": 3, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 1.0.1.1
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:07.860112
raw_data:
  {"hostnames_checked": ["planetven.us", "traefik.heatherward.dev", "deathegg.win", "bloreblat.com", "get.datamate.org", "www.kevinolson.com", "www.49v.icu", "nocodb.bloreblat.com", "vpn.dev.rjpalombo.com", "ha.dataedgelabs.online", "veibell.com", "vpn.int.sysad.dev", "home.dataedgelabs.online", "kituo.dpdns.org", "vpn.london.murrayweb.ca", "api.vpn.playa.delcar.men", "nftelligence.app", "dashboard.vpn.playa.delcar.men", "jodoky.com", "apmac.us"], "hostnames_count": 20, "matched_domains": [], "mat


indicator: 104.238.189.186
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:07.871205
raw_data:
  {"hostnames_checked": [], "hostnames_count": 0, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 104.248.36.191
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:07.876968
raw_data:
  {"hostnames_checked": ["jonas71.bushiko.ru", "delicious71.kolopartor.ru", "71department.silvicolas.ru", "deceptive1.alabarda.ru", "jacket71.sikoshi.ru", "visible.agaricuso.ru", "each.metallicas.ru", "aaa.stratist.ru", "deceptive.alabarda.ru"], "hostnames_count": 9, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 109.200.159.45
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:07.886873
raw_data:
  {"hostnames_checked": ["ip45-159-200-109.crelcom.ru"], "hostnames_count": 1, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 109.234.38.232
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:07.896129
raw_data:
  {"hostnames_checked": ["wa.me", "www.vipescortsingapore.com", "www.7noch.ru", "www.myladyescort.ru", "www.beijinghotelmassage.net", "whatsapp.com", "nehaindependentescort.com", "beijinghotelmassage.net", "myces.ru", "www.pensacolamassagecenter.com", "7noch.ru", "elektroraduga.direct.quickconnect.to", "v444379.hosted-by-vdsina.com", "myladyescort.ru", "www.diamondtantramassage.com", "www.backtohealthmassage.org", "vipescortsingapore.com", "www.riga-escort.com", "backtohealthmassage.org", "pensaco


indicator: 134.0.112.117
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:07.903688
raw_data:
  {"hostnames_checked": ["xn----7sbabc6bog4clj8c.xn--p1ai", "zoom-project.pw", "goodtap.pw", "www.goodtap.pw", "equlent.pw", "www.xn----7sbabc6bog4clj8c.xn--p1ai", "aidev.fun", "gradientmedia.ru", "www.gradientmedia.ru", "www.equlent.pw", "new.apple-rent.ru", "www.aidev.fun", "api.goodtap.pw", "www.zoom-project.pw"], "hostnames_count": 14, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 134.122.109.104
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:07.912426
raw_data:
  {"hostnames_checked": ["www.wellsfargoverify.mymom.info", "wellsfargoverify.qhigh.com", "www.134-122-109-104.cprapid.com", "mail.auguryanalytics.club", "www.wellsfargoverifyssssssss.fartit.com", "v83glmjhjsw.c.updraftclone.com", "www.wellsfargoverify.qhigh.com", "wellsfargoverify.mymom.info", "scambaiting2020.3cx.co.uk", "wellsfargoverifyssssssss.fartit.com"], "hostnames_count": 10, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 137.184.116.179
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:07.921248
raw_data:
  {"hostnames_checked": ["test.ojrek.com", "rimsamerica.com"], "hostnames_count": 2, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 138.68.161.53
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:07.928425
raw_data:
  {"hostnames_checked": ["138-68-161-53.ipv4.nknlabs.io", "dev-tests.psychiatry-uk.com", "e2e-dbaas-mongodb-lqx53-e5ca1bd7.mongo.ondigitalocean.com"], "hostnames_count": 3, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 139.59.85.26
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:07.944711
raw_data:
  {"hostnames_checked": ["www.travellershome.in", "c6pto6csbotwyyqp362.cleavrdev.space", "flowkana.bloomstack.io", "demo.bloomstack.io", "krrish.cleavrdev.space", "dipak.cleavrdev.space", "yo7k31vuq6vywz6v362.cleavrdev.space", "aviupbombon.com", "signals.in", "manufacturing.bloomstack.io"], "hostnames_count": 10, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 140.82.29.65
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:07.963886
raw_data:
  {"hostnames_checked": ["penknife45.quyenzo.ru", "bid.navigation63.quyenzo.ru", "interface.alter95.quyenzo.ru", "sample.penknife85.quyenzo.ru", "navigation7.quyenzo.ru", "140.82.29.65.vultrusercontent.com", "interface.alter29.quyenzo.ru", "salary48.minhizo.ru", "sincro.armandoqs.com", "penknife59.quyenzo.ru", "festiva.tech", "vagif.shop", "sought.sorry89.quyenzo.ru", "destroy.asierdo.ru", "intercourse20.cavalierso.ru", "ntx.tshsuport.ml", "bike.intercourse20.cavalierso.ru", "alter77.quyenzo.ru", 


indicator: 141.164.45.200
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:07.979885
raw_data:
  {"hostnames_checked": ["postrif.ru", "shivati.ru", "jacket71.sikoshi.ru", "nishito.ru", "despite.lotorgas.ru", "jonas71.bushiko.ru", "mortifa.ru", "aaa.stratist.ru", "sikotu.ru", "sikoshi.ru", "kuroshu.ru", "akinot.ru", "growind.ru", "matsuro.ru", "mushiko.ru", "mamuto.ru", "kolporast.ru", "stratist.ru", "murokashi.ru", "shikato.ru"], "hostnames_count": 20, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 141.98.233.17
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:07.996612
raw_data:
  {"hostnames_checked": ["gesul-ba.pro", "www.gesul-ba.pro", "117130.ip-ptr.tech"], "hostnames_count": 3, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 143.110.168.51
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:08.014733
raw_data:
  {"hostnames_checked": ["www.bitflo.io", "www.ryanwelch.me", "gitops.ryanwelch.co.uk", "ryanwelch.me", "lyre-group-bitflo-frontend.ci.ryanwelch.co.uk", "le-36955211.ci.ryanwelch.co.uk", "ryantwr-transaction-sync-frontend-staging.ci.ryanwelch.co.uk", "www.ryanwelch.co.uk", "ryantwr-butea-site-staging.ci.ryanwelch.co.uk", "ryantwr-butea-site.ci.ryanwelch.co.uk", "ryanwelch.co.uk", "www.butea.co.uk", "butea.co.uk", "bitflo.io", "staging.ryanwelch.co.uk", "le-22489223.ci.ryanwelch.co.uk", "le-1757212


indicator: 143.198.160.45
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:08.024625
raw_data:
  {"hostnames_checked": ["freezerpro.com", "libenet.online", "143-198-160-45.ipv4.nknlabs.io"], "hostnames_count": 3, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 143.198.216.105
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:08.033751
raw_data:
  {"hostnames_checked": ["match.vldtt.com", "enroll-be.kantipurinfotech.com", "www.enroll-be.kantipurinfotech.com"], "hostnames_count": 3, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 143.244.134.188
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:08.040131
raw_data:
  {"hostnames_checked": ["mistert.lk", "aswathywrites.com", "mcapi.mehar.io", "hrm.mistert.lk"], "hostnames_count": 4, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 144.126.218.218
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:08.050152
raw_data:
  {"hostnames_checked": ["lesson.classest.com", "trezrstart.com"], "hostnames_count": 2, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 146.190.74.132
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:08.056396
raw_data:
  {"hostnames_checked": ["remote21.apk-online.fr"], "hostnames_count": 1, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 151.248.114.67
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:08.065969
raw_data:
  {"hostnames_checked": ["cyrestinae.ru", "acetobacter.online", "fortias.ru", "limenitis.ru", "nematoceras.ru", "coleopteras.online", "baryo.ru", "fusari.ru", "marmosettoken.com", "limenitidinae.online", "gromphadorhina.ru", "maniola.online", "debarys.ru", "dipteran.ru", "lovers.semara.ru", "ariuma.ru", "tubercur.ru", "graphosoma.ru", "merostomata.ru", "mamberis.ru"], "hostnames_count": 20, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 151.248.114.88
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:08.073348
raw_data:
  {"hostnames_checked": ["lovers.semara.ru", "tubercur.ru", "support2.yvgrishin.ru", "support2.rbs-net.ru", "kilogar.ru", "preyai.site", "my.yvgrishin.ru", "hurama.ru", "oderas.ru", "eurypterida.online", "www.support2.rbs-net.ru", "showroom.preyai.site", "fortias.ru", "gromphadorhina.online", "cyrestinae.online", "asilidae.ru", "alloy.vadilops.ru", "heliconiinae.online", "chelicerata.online", "merostomata.online"], "hostnames_count": 20, "matched_domains": [], "match_count": 0, "blocklist_size": 9


indicator: 151.248.116.243
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:08.081631
raw_data:
  {"hostnames_checked": ["ecomoney.icu", "getyourwork.icu", "goldenmoney.icu", "xn--80aaah3ajhdqggh1e5b.xn--p1ai", "clickmoney.icu", "carneymoney.icu", "mimoney.icu", "myces.ru", "krashand.ru", "chainoftrust.space", "3dlokator.ru", "teroba.ru", "www.3dlocator.ru", "www.3dlokator.ru", "3dlocator.ru", "libertyeducation.ru", "comoney.icu", "corkwork.icu", "greatwork.icu", "moneyalli.icu"], "hostnames_count": 20, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 151.248.117.250
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:08.091237
raw_data:
  {"hostnames_checked": ["limulusa.online", "storiesmoscow.ru", "libellulat.online", "lycaenidae.online", "haromo.ru", "dahmke.ru", "coleopteras.online", "megatos.online", "cholerd.ru", "acrididae.online", "debarys.ru", "shermano.ru", "mantidae.online", "www.storiesmoscow.ru", "fanniidae.online", "blaberidae.online", "apaturinae.online", "limenitidinae.online", "151-248-117-250.cloudvps.regruhosting.ru", "mamberis.ru", "biblidinae.online"], "hostnames_count": 21, "matched_domains": [], "match_coun


indicator: 151.248.121.176
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:08.097250
raw_data:
  {"hostnames_checked": ["acetobacter.online", "cholerd.ru", "lophacris.online", "apidaet.online", "cdn.onlyplanks.fun", "api.onlyplanks.fun", "dahmke.ru", "papiliot.online", "oderas.ru", "onlyplanks.ru", "fanniidae.online", "limenitidinae.online", "maniola.online", "onlyplanks.fun", "blaberidae.online", "hymenoptera.online", "gonepteryx.online", "megatos.online", "arachnidas.online", "api.onlyplanks.ru", "151-248-121-176.cloudvps.regruhosting.ru", "shermano.ru", "kallima.online"], "hostnames_coun


indicator: 151.248.125.140
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:08.106916
raw_data:
  {"hostnames_checked": ["horoton.ru", "akunir.ru", "integer.relative.protimas.ru", "printing65.luck.ouichi.ru", "priest30.allen.gribata.ru", "country33.salary.nemoiti.ru", "counter.vositra.ru", "salt.utrado.ru", "salmon12.perfume.warau.ru", "timerto.ru", "bokujanai.ru", "country77.salary.nemoiti.ru", "jipitor.ru", "voranfi.ru", "bortogat.ru", "prevented.registration.pirovot.ru", "alvarados.ru", "kozikra.ru", "go9.regret.warau.ru", "kiesoud.ru"], "hostnames_count": 20, "matched_domains": [], "matc


indicator: 155.138.138.195
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:08.112947
raw_data:
  {"hostnames_checked": ["www.maiar.biz", "www2.becoya.com", "155.138.138.195.vultrusercontent.com", "bgaccountinggroup.com", "myaccountec.com"], "hostnames_count": 5, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 157.230.94.134
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:08.142038
raw_data:
  {"hostnames_checked": ["skuudle-shopify.thegenielab.com", "holdmyguns.org", "dev.knightsquad2server.com", "nc.thepauler.me"], "hostnames_count": 4, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 159.203.21.16
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:08.163813
raw_data:
  {"hostnames_checked": ["crm.pardonsandwaivers.com", "prd.pardonsandwaivers.com"], "hostnames_count": 2, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 161.35.106.28
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:08.193238
raw_data:
  {"hostnames_checked": ["captain.development.datasource.r8rite.com", "secure08b-verify.duckdns.org", "7-ph.com", "www.secure08b-verify.duckdns.org", "connect.detechtiva.com", "pusher.detechtiva.com"], "hostnames_count": 6, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 161.35.185.146
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:08.224818
raw_data:
  {"hostnames_checked": ["com-secofs.info", "actsm.online", "edgely.bet"], "hostnames_count": 3, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 164.90.210.128
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:08.240340
raw_data:
  {"hostnames_checked": ["mrs-bot.dev.bsx.co.il", "baby.dev.bsx.co.il", "www.immobiliareopla.it", "immobiliareopla.it", "memo.dev.bsx.co.il"], "hostnames_count": 5, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 165.227.208.207
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:08.293922
raw_data:
  {"hostnames_checked": ["www.supersaversguide.com", "supersaversguide.com", "www.serrageral.net.br", "cloudwaysapps.com", "serrageral.net.br", "staging-smart.web-experto.com.ar", "chayellerose.com", "1185188.cloudwaysapps.com"], "hostnames_count": 8, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 165.232.136.224
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:08.304892
raw_data:
  {"hostnames_checked": ["www.165-232-136-224.cprapid.com", "manage.dungeonbuds.com", "spotlightgrowth.com", "165-232-136-224.cprapid.com", "monitor.dungeonbuds.com", "play.dungeonbuds.com", "puianase.oazoas.com", "recipecoupons.ml"], "hostnames_count": 8, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 167.172.139.39
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:08.310394
raw_data:
  {"hostnames_checked": ["bitplusvpn.net", "masterb.net", "ccubeacademy.com"], "hostnames_count": 3, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 167.99.127.118
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:08.345662
raw_data:
  {"hostnames_checked": ["api.detailxperts.net", "growyourgiftmusic.com", "www.oprisks.com", "www.growyourgiftmusic.com", "oprisks.com"], "hostnames_count": 5, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 167.99.138.16
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:08.357648
raw_data:
  {"hostnames_checked": ["monitor.bogozi.com", "molodosto.ru", "mamuto.ru", "www.bogozi.com", "nishito.ru", "despise71.kolopartor.ru", "shikato.ru", "matsuro.ru", "bushiko.ru", "bogozi.com", "murokashi.ru", "jacket71.sikoshi.ru", "kuroshu.ru", "bihitras.ru", "defiant71.kolopartor.ru", "kolporast.ru", "james.joke.artisola.ru", "mortifa.ru", "despite.lotorgas.ru", "delicious71.kolopartor.ru", "kolopartor.ru"], "hostnames_count": 21, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 176.118.164.187
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:08.400496
raw_data:
  {"hostnames_checked": ["cyrestinae.ru", "kilogar.ru", "acrididae.ru", "fortias.ru", "sparkasse-verwaltung.com", "securego-vr.com", "codes-nordea.com", "libellulidae.ru", "bestsign-verwaltung.com", "lepidopteras.ru", "apaturinae.ru", "raiffeisen-verwaltung.com", "blaberidae.ru", "fanniidae.ru", "alloy.vadilops.ru", "lovers.semara.ru", "tubercur.ru", "alert-volksbank.com", "bestsign-alert.com", "coliadinae.ru"], "hostnames_count": 20, "matched_domains": [], "match_count": 0, "blocklist_size": 9197


indicator: 176.57.208.203
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:08.437181
raw_data:
  {"hostnames_checked": ["l3af685e.justinstalledpanel.com", "www.sneakersafe.us", "www.humobot.tk", "www.allikesneakers.com", "artmarker.com.ua", "www.booccca.com", "humobot.tk", "ddtxlmya.2woik27n0xly.ch", "sneakersafe.us", "allikesneakers.com", "booccca.com", "www.artmarker.com.ua", "vds-cg56388.timeweb.ru"], "hostnames_count": 13, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 178.128.215.84
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:08.447250
raw_data:
  {"hostnames_checked": ["stag-api.mynzuni.com"], "hostnames_count": 1, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 178.20.44.214
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:08.453214
raw_data:
  {"hostnames_checked": ["simtech.bitwolff.com"], "hostnames_count": 1, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 178.21.11.23
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:08.471942
raw_data:
  {"hostnames_checked": ["port.maxiark.ru", "arkphys.online", "post-ch.site", "autocraft-sakh.ru", "www.post-ch.site", "via-ceramics.ru", "static.maxiark.ru", "wp.maxiark.ru", "dmitry-bondarenko.xyz"], "hostnames_count": 9, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 185.20.225.35
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:08.512532
raw_data:
  {"hostnames_checked": ["delusion.teasagaki.ru", "source68.alternate.vadilops.ru", "deluge.degrade.teasagaki.ru", "amid89.luxury.clank.nomukou.ru", "185-20-225-35.cloudvps.regruhosting.ru", "relax.elitoras.ru", "wokoras.ru", "lumber5.am.sumikko.ru", "stoop13.performed.pride.nomukou.ru", "amazing.garbani.ru", "neat.trobona.ru", "miwosaga.ru", "pzles.ru", "navigation33.countries.hibigaru.ru", "www.pzles.ru", "l11fc91a.justinstalledpanel.com", "luxury.clank.nomukou.ru", "designer.fishardo.ru", "inte


indicator: 185.20.226.9
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:08.518762
raw_data:
  {"hostnames_checked": ["heteroptera.ru", "hurama.ru", "ovinus.ru", "chelicerata.ru", "noctuidaes.online", "nematoceras.ru", "morphon.online", "lycaenidae.online", "cerambycidae.online", "gromphadorhina.ru", "arctiidae.ru", "anisoptera.ru", "empusidae.ru", "debarys.ru", "dipteran.ru", "megascolias.online", "merostomata.ru", "polyphemus.ru", "coliadinae.online", "asilidae.ru"], "hostnames_count": 20, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 185.46.10.143
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:08.561335
raw_data:
  {"hostnames_checked": ["teroba.ru", "krashand.ru", "myces.ru", "learnms.ru"], "hostnames_count": 4, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 185.46.10.17
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:08.566350
raw_data:
  {"hostnames_checked": ["dionysi.online", "acrididae.online", "cholerd.ru", "apidaet.online", "apaturinae.online", "185-46-10-17.cloudvps.regruhosting.ru", "secure-coplogic.com", "papiliot.online", "oderas.ru", "coleopteras.online", "fanniidae.online", "cerambycidae.online", "limulusa.online", "maniola.online", "gonepteryx.online", "ariuma.ru", "arachnidas.online", "shermano.ru", "coliadinae.online", "mamberis.ru"], "hostnames_count": 20, "matched_domains": [], "match_count": 0, "blocklist_size":


indicator: 185.46.10.28
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:08.615759
raw_data:
  {"hostnames_checked": ["gonepteryx.ru", "nematoceras.online", "mucora.ru", "sporog.ru", "metcalfas.online", "xiphosura.online", "brachycera.online", "fortias.ru", "limenitis.ru", "libellulidae.ru", "baryo.ru", "lepidopteras.ru", "dipteran.online", "arachnidas.ru", "libellulat.ru", "fanniidae.ru", "megatos.online", "tubercur.ru", "agaricusa.ru", "coliadinae.ru"], "hostnames_count": 20, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 185.46.10.73
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:08.633297
raw_data:
  {"hostnames_checked": ["hurama.ru", "mucora.ru", "fortias.ru", "libellulidae.online", "limenitis.ru", "nematoceras.ru", "libellulidae.ru", "morphon.online", "baryo.ru", "lycaenidae.online", "fusari.ru", "lepidopteras.ru", "nymphalidaes.online", "libellulat.ru", "debarys.ru", "alloy.vadilops.ru", "ez-up.fun", "tomond.ru", "megascolias.online", "aerogenosa.ru"], "hostnames_count": 20, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 185.46.10.86
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:08.643412
raw_data:
  {"hostnames_checked": ["alfaspace.xyz", "xn--b1afa1aggq.xn--p1ai", "www.alfaspace.xyz", "www.xn--b1afa1aggq.xn--p1ai", "limenitis.ru", "lovers.semara.ru", "tubercur.ru", "kilogar.ru", "gromphadorhina.ru", "hurama.ru", "mucora.ru", "coliadinae.ru", "heteroptera.ru", "ovinus.ru", "fortias.ru", "avezaim.ru", "dipteran.ru", "merostomata.ru", "alloy.vadilops.ru", "baryo.ru"], "hostnames_count": 20, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 185.46.11.72
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:08.675864
raw_data:
  {"hostnames_checked": ["www.niceexpert.ru", "daynice.ru", "libellulat.ru", "libellulidae.ru", "lepidopteras.ru", "hurama.ru", "megascolias.online", "mucora.ru", "www.nicecentr.ru", "www.niceonline.ru", "niceexpert.ru", "nicecentr.ru", "morphon.online", "niceonline.ru", "fortias.ru", "www.daynice.ru", "www.pronice.ru", "alloy.vadilops.ru", "baryo.ru", "pronice.ru"], "hostnames_count": 20, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 185.46.8.12
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:08.698877
raw_data:
  {"hostnames_checked": ["cholerd.ru", "lophacris.online", "kilogar.ru", "proteug.ru", "sporog.ru", "aerogenosa.ru", "erati.ru", "papiliot.online", "biblidinae.online", "limulusa.online", "maniola.online", "cyrestinae.online", "megatos.online", "lovers.semara.ru", "tubercur.ru", "arachnidas.online", "false.grafitto.ru", "haromo.ru", "mamberis.ru", "kallima.online"], "hostnames_count": 20, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 185.46.9.133
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:08.715512
raw_data:
  {"hostnames_checked": ["dionysi.online", "hierodula.online", "nematoceras.online", "lepidopteras.online", "putrif.ru", "lophacris.online", "apidaet.online", "lexer.fountcore.tech", "fountcore.tech", "hesperiidae.online", "erati.ru", "git.askogr.ru", "www.askogr.ru", "papiliot.online", "oderas.ru", "golintras.site", "limenitidinae.online", "www.fountcore.tech", "blaberidae.online", "askogr.ru"], "hostnames_count": 20, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 185.46.9.173
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:08.734300
raw_data:
  {"hostnames_checked": ["185-46-9-173.cloudvps.regruhosting.ru", "api.fortio.io"], "hostnames_count": 2, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 185.46.9.81
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:08.744662
raw_data:
  {"hostnames_checked": ["hamadryas.online", "chelicerata.online", "blattodea.online", "dipteran.online", "apidaet.online", "dersagers.com", "crypto-webtg.ddnsking.com", "putrif.ru", "cerambycidae.online", "cholerd.ru", "biblidinae.online", "box.dersagers.com"], "hostnames_count": 12, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 188.225.25.132
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:08.766696
raw_data:
  {"hostnames_checked": ["l5bc7a82.justinstalledpanel.com", "www.glecbu.ru", "glecbu.ru", "www.orientalschool.uz", "orientalschool.uz", "www.winsbu.ru", "albukhariuniversity.uz", "www.albukhariuniversity.uz", "krashand.ru", "winsbu.ru"], "hostnames_count": 10, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 188.225.44.138
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:08.790926
raw_data:
  {"hostnames_checked": ["ophisaurusis.xyz", "blockpost.space", "coleopteras.ru", "myces.ru", "teroba.ru", "danainae.ru", "bacilluse.ru", "firasto.ru", "phymateus.ru", "apusa.xyz", "myrrhan.xyz", "circulas.ru"], "hostnames_count": 12, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 188.225.44.181
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:08.796260
raw_data:
  {"hostnames_checked": ["1357577-cu17374.tw1.ru"], "hostnames_count": 1, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 188.225.58.233
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:08.810917
raw_data:
  {"hostnames_checked": ["static.mgimo.wwdev.ru", "crmfastrans.ru", "etc.d.grb.agency", "billing.webway.ru", "confluence.avangardus.ru", "test.d.grb.agency", "emd.d.grb.agency", "traefik.d.grb.agency", "la.d.grb.agency", "s.d.grb.agency", "crocushall.wwdev.ru", "oceanarium.wwdev.ru", "dashboard.taras.io", "jira.avangardus.ru", "fourth.d.grb.agency", "538645-cd89829.tmweb.ru", "api.emd.d.grb.agency", "avangardus.ru", "docs.avangardus.ru", "first.d.grb.agency"], "hostnames_count": 20, "matched_domai


indicator: 188.225.87.166
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:08.826355
raw_data:
  {"hostnames_checked": ["www.exam-z.ru", "teroba.ru", "www.market.exam-z.ru", "ophisaurusis.xyz", "29kolperty.ga", "exam-z.ru", "www.erp.bbrc.ru", "427727-ck80981.tmweb.ru", "myrrhan.xyz", "erp.bbrc.ru", "myces.ru", "market.exam-z.ru", "krashand.ru", "apusa.xyz"], "hostnames_count": 14, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 193.124.206.128
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:08.860193
raw_data:
  {"hostnames_checked": ["geografteach.ru", "acetobacter.online", "cholerd.ru", "nematoceras.online", "i.s-microsoft.com", "mantidae.online", "blattodea.ru", "metcalfas.online", "morphinaes.online", "chelicerata.online", "l9dff363.justinstalledpanel.com", "microsoft.com", "wwwqa.microsoft.com", "c.s-microsoft.com", "eurypterida.online", "limenitidinae.online", "staticview.microsoft.com", "nymphalidaes.online", "cyrestinae.online", "hamadryas.online", "gonepteryx.online", "www.microsoft.com", "ariu


indicator: 193.164.150.111
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:08.870093
raw_data:
  {"hostnames_checked": ["ophisaurusis.xyz", "www.royls.ru", "myces.ru", "apusa.xyz", "teroba.ru", "royls.ru", "www.epatagik.com", "myrrhan.xyz", "epatagik.com"], "hostnames_count": 9, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 193.164.150.121
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:08.875499
raw_data:
  {"hostnames_checked": ["657799-cg79226.tmweb.ru"], "hostnames_count": 1, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 194.180.174.46
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:08.891739
raw_data:
  {"hostnames_checked": ["tender-dhawan.194-180-174-46.plesk.page", "ecstatic-babbage.194-180-174-46.plesk.page", "n-etflix.com", "www.naughty-payne.194-180-174-46.plesk.page", "lucid-lumiere.194-180-174-46.plesk.page", "civitacastellana.live", "naughty-payne.194-180-174-46.plesk.page", "roundcherry.com"], "hostnames_count": 8, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 194.180.191.105
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:08.909455
raw_data:
  {"hostnames_checked": ["no-rdns.mivocloud.com"], "hostnames_count": 1, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 194.58.103.22
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:08.925275
raw_data:
  {"hostnames_checked": ["800degrees.ru"], "hostnames_count": 1, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 194.58.108.140
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:08.941458
raw_data:
  {"hostnames_checked": ["acrididae.online", "acetobacter.online", "hierodula.online", "nematoceras.online", "lepidopteras.online", "apidaet.online", "sporog.ru", "194-58-108-140.cloudvps.regruhosting.ru", "papiliot.online", "mesant.online", "fusari.ru", "mantodeas.online", "maniola.online", "cyrestinae.online", "disco.r2-x2.ru", "megatos.online", "ariuma.ru", "meandrusas.online", "tomond.ru", "apoxipodes.online", "mamberis.ru"], "hostnames_count": 21, "matched_domains": [], "match_count": 0, "blo


indicator: 194.58.118.14
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:08.966005
raw_data:
  {"hostnames_checked": ["graphiuma.online", "false.grafitto.ru", "metcalfas.online", "asilidae.online", "osher.tech", "dahmke.ru", "hamadryas.online", "coleopteras.online", "dipteran.online", "sporog.ru", "nymphalidaes.online", "papiliot.online", "fusari.ru", "erati.ru", "apidaet.online", "fanniidae.online", "arachnidas.online", "www.osher.tech", "mamberis.ru", "tomond.ru"], "hostnames_count": 20, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 194.58.119.114
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:08.973308
raw_data:
  {"hostnames_checked": ["194-58-119-114.cloudvps.regruhosting.ru", "community.smartholdem.io"], "hostnames_count": 2, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 194.58.119.99
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:08.991448
raw_data:
  {"hostnames_checked": ["acrididae.online", "cholerd.ru", "hierodula.online", "kilogar.ru", "proteug.ru", "hesperiidae.online", "brachycera.online", "oderas.ru", "fanniidae.online", "golintras.site", "limenitidinae.online", "cyrestinae.online", "oldys3.xyz", "debarys.ru", "alloy.vadilops.ru", "megatos.online", "lovers.semara.ru", "tubercur.ru", "false.grafitto.ru", "aerogenosa.ru"], "hostnames_count": 20, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 194.58.121.225
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.017386
raw_data:
  {"hostnames_checked": ["194-58-121-225.cloudvps.regruhosting.ru", "www.furyboost.net", "test.thair.ru", "furyboost.net"], "hostnames_count": 4, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 194.58.121.94
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.022627
raw_data:
  {"hostnames_checked": ["www.public-soft.ru", "www.publicsoft.ru", "dokfilm24.ru", "www.federaltorg.ru", "www.111.federaltorg.ru", "www.dev.dokfilm24.ru", "www.look-lit.ru", "dev.dokfilm24.ru", "kukuha.ru", "public-soft.ru", "111.federaltorg.ru", "www.krasnodar.federaltorg.ru", "ivilica.pro", "federaltorg.ru", "publicsoft.ru", "www.ivilica.pro", "look-lit.ru", "krasnodar.federaltorg.ru", "www.kukuha.ru", "www.dokfilm24.ru"], "hostnames_count": 20, "matched_domains": [], "match_count": 0, "blockli


indicator: 194.58.122.110
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.037954
raw_data:
  {"hostnames_checked": ["lepidopteras.online", "crm.norbekov.online", "api.norbekov.ru", "hesperiidae.online", "criocash.fun", "empusidae.online", "erp.norbekov.online", "api.norbekov.online", "cerambycidae.online", "norbekov.ru", "nrb.ayurvedarussia.online", "biblidinae.online", "libellulat.online", "maniola.online", "cyrestinae.online", "blaberidae.online", "megatos.online", "false.grafitto.ru", "coliadinae.online", "mamberis.ru"], "hostnames_count": 20, "matched_domains": [], "match_count": 0,


indicator: 194.58.122.212
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.053059
raw_data:
  {"hostnames_checked": ["hierodula.online", "lophacris.online", "mantidae.online", "worx.am", "sporog.ru", "korpusnyak.ru", "aerogenosa.ru", "morphinaes.online", "www.korpusnyak.ru", "papiliot.online", "prinfix.ru", "mesant.online", "api.davmar.am", "cyrestinae.online", "mparadiso.ru", "davmar.am", "www.davmar.am", "tomond.ru", "www.mparadiso.ru", "haromo.ru"], "hostnames_count": 20, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 194.58.123.47
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.070341
raw_data:
  {"hostnames_checked": ["heteroptera.ru", "hurama.ru", "cholerd.ru", "mantidae.online", "www.autoserviscrm.ru", "sporog.ru", "telegrme.ru", "autoserviscrm.ru", "194-58-123-47.cloudvps.regruhosting.ru", "nematoceras.ru", "dahmke.ru", "morphon.online", "oderas.ru", "ssl.autoserviscrm.ru", "gromphadorhina.ru", "www.ssl.autoserviscrm.ru", "hymenoptera.online", "megascolias.online", "aerogenosa.ru", "melitaeas.online"], "hostnames_count": 20, "matched_domains": [], "match_count": 0, "blocklist_size": 


indicator: 194.58.90.120
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.079839
raw_data:
  {"hostnames_checked": ["194-58-90-120.cloudvps.regruhosting.ru", "haromo.ru", "maniola.online", "hamadryas.online", "dahmke.ru", "miragenails.ru", "coleopteras.online", "megatos.online", "sporog.ru", "libellulidae.online", "nymphalidaes.online", "papiliot.online", "test2.tpopractice.online", "blattodea.online", "btrx.tpopractice.online", "blattodea.ru", "apaturinae.online", "kallima.online", "ariuma.ru", "biblidinae.online"], "hostnames_count": 20, "matched_domains": [], "match_count": 0, "block


indicator: 194.58.92.102
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.085063
raw_data:
  {"hostnames_checked": ["5qcvpxsbtj2thebu.jolotras.ru", "0xibtllmqln.jolotras.ru", "5x6tmceskjfa.jolotras.ru", "8sh7ssik1icsfkqdm13ja.jolotras.ru", "ef0lvjovzzdnz.jolotras.ru", "aesz0zbeln2i7o.moolin.ru", "esports-team.com", "tfvlwjyu.jolotras.ru", "etdfio9xcgft9.jolotras.ru", "aaaaaa.krashand.ru", "a.bokuwai.ru", "pmghrklyf67.jolotras.ru", "bokuwai.ru", "ezvz5lpwubmtqnyttq.jolotras.ru", "rchi9vryn2aev.moolin.ru", "wwxnv7n2g4eat.jolotras.ru", "tpjlj6wdw.jolotras.ru", "aaaa.krashand.ru", "p6eyuf3y


indicator: 194.58.97.115
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.100715
raw_data:
  {"hostnames_checked": ["dionysi.online", "promo.bestcourse.pro", "bestcourse.pro", "www.xn--e1ajpfcja6ek.xn--p1ai", "watchsports.ru", "www.watchsports.ru", "owa.xn--e1ajpfcja6ek.xn--p1ai", "limenitis.online", "lycaenidae.online", "cerambycidae.online", "libellulat.online", "api.effort.advase.digital", "hymenoptera.online", "cadence.fishing", "www.cadence.fishing", "false.grafitto.ru", "www.nviot.space", "nviot.space", "xn--e1ajpfcja6ek.xn--p1ai", "coliadinae.online"], "hostnames_count": 20, "mat


indicator: 194.58.98.215
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.134228
raw_data:
  {"hostnames_checked": ["s5.cdntv.online", "vrn.vasha-voda.ru", "vasha-voda.ru", "teroba.ru", "194-58-98-215.cloudvps.regruhosting.ru", "www.vasha-voda.ru", "dfpfnen.su", "myces.ru"], "hostnames_count": 8, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 194.67.108.168
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.148418
raw_data:
  {"hostnames_checked": ["zxzbabe.ru", "apaturinae.online", "id.bonusfix.ru", "bonusfix.ru", "blattodea.online", "arachnidas.online", "zxzdroch.ru", "194-67-108-168.cloudvps.regruhosting.ru", "www.linkmedia.digital", "apidaet.online", "oldys4.xyz", "linkmedia.digital"], "hostnames_count": 12, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 194.67.109.14
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.163593
raw_data:
  {"hostnames_checked": ["acrididae.online", "forvpsult.online", "www.medvedkovo.olimpic-fit.ru", "informpanton.online", "anisoptera.online", "medvedkovo.olimpic-fit.ru", "apidaet.online", "proteug.ru", "informpanton.site", "194-67-109-14.cloudvps.regruhosting.ru", "mycodar.ru", "informpanton.space", "babushkinskaya.olimpic-fit.ru", "erati.ru", "dahmke.ru", "oderas.ru", "fusari.ru", "www.babushkinskaya.olimpic-fit.ru", "megatos.online", "graphiuma.online", "haromo.ru"], "hostnames_count": 21, "mat


indicator: 194.67.109.164
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.173836
raw_data:
  {"hostnames_checked": ["2uvh.moolin.ru", "xfqfmo.moolin.ru", "lvdar49kcr.moolin.ru", "ml5gll.moolin.ru", "phymateus.ru", "zgsabtluknpapo.moolin.ru", "eukkx9cnsogih.moolin.ru", "ngxlrex.moolin.ru", "firasto.ru", "nonimak.ru", "dxr7fhmldd13gnltx1i.moolin.ru", "6hhbhqt.moolin.ru", "ryncm4q.moolin.ru", "g9lkosqfeq.moolin.ru", "ptvr5otdau.moolin.ru", "aaa.nonimak.ru", "mieemmrgl.moolin.ru", "aaaaaa.bokuwai.ru", "1levnzee.moolin.ru", "rprszzqep6htj.moolin.ru"], "hostnames_count": 20, "matched_domains"


indicator: 194.67.109.76
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.193119
raw_data:
  {"hostnames_checked": ["acetobacter.online", "cholerd.ru", "lophacris.online", "lepidopteras.online", "mucora.ru", "fortias.ru", "melitaeas.online", "limenitis.ru", "startap.space", "libellulidae.ru", "oderas.ru", "baryo.ru", "mantodeas.online", "lepidopteras.ru", "libellulat.ru", "alloy.vadilops.ru", "haromo.ru", "tomond.ru", "aerogenosa.ru", "mamberis.ru"], "hostnames_count": 20, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 194.67.109.90
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.208642
raw_data:
  {"hostnames_checked": ["putrif.ru", "anisoptera.online", "apidaet.online", "mantidae.online", "bishbody.com", "www.sozodanie.ru", "aerogenosa.ru", "morphinaes.online", "empusidae.online", "dahmke.ru", "papiliot.online", "sozodanie.ru", "l9a956e5.justinstalledpanel.com", "mantodeas.online", "eurypterida.online", "didux.ru", "meandrusas.online", "tomond.ru", "false.grafitto.ru", "coliadinae.online"], "hostnames_count": 20, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 194.67.111.121
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.239699
raw_data:
  {"hostnames_checked": ["hurama.ru", "kilogar.ru", "blag.vitahit.ru", "fortias.ru", "empusidae.online", "libellulidae.online", "uss.vitahit.ru", "opt.vitahit.ru", "irk.vitahit.ru", "nn.vitahit.ru", "alex.vitahit.ru", "blaberidae.ru", "alloy.vadilops.ru", "www.vitahit.ru", "vitahit.ru", "tubercur.ru", "lovers.semara.ru", "franchise.vitahit.ru", "aerogenosa.ru", "khv.vitahit.ru"], "hostnames_count": 20, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 194.67.113.120
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.256919
raw_data:
  {"hostnames_checked": ["acetobacter.online", "cholerd.ru", "lophacris.online", "nematoceras.online", "apidaet.online", "metcalfas.online", "apaturinae.online", "libellulidae.online", "dahmke.ru", "mx.ipmbisultanova.ru", "oderas.ru", "fanniidae.online", "limenitidinae.online", "biblidinae.online", "dipteran.online", "limulusa.online", "megatos.online", "arachnidas.online", "graphiuma.online", "haromo.ru"], "hostnames_count": 20, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 194.67.113.186
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.267195
raw_data:
  {"hostnames_checked": ["morphinaes.online", "graphiuma.online", "asilidae.online", "libellulat.online", "dahmke.ru", "coleopteras.online", "megatos.online", "polyphemus.online", "papiliot.online", "gonepteryx.online", "limenitis.online", "zarkino.online", "blattodea.ru", "putrif.ru", "194-67-113-186.cloudvps.regruhosting.ru", "www.primextula.ru", "blaberidae.online", "primextula.ru", "dionysi.online", "nematoceras.online", "tomond.ru"], "hostnames_count": 21, "matched_domains": [], "match_count"


indicator: 194.67.113.50
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.272621
raw_data:
  {"hostnames_checked": ["194-67-113-50.cloudvps.regruhosting.ru", "sfmai.ru"], "hostnames_count": 2, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 194.67.113.99
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.281792
raw_data:
  {"hostnames_checked": ["anisoptera.online", "morphinaes.online", "libellulat.online", "lycaenidae.online", "coleopteras.online", "sporog.ru", "cholerd.ru", "coliadinae.online", "nymphalidaes.online", "limenitis.online", "acrididae.online", "debarys.ru", "erati.ru", "lepidopteras.online", "putrif.ru", "shermano.ru", "blaberidae.online", "brachycera.online", "acetobacter.online", "apoxipodes.online"], "hostnames_count": 20, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 194.67.116.51
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.301717
raw_data:
  {"hostnames_checked": ["acetobacter.online", "nematoceras.online", "lophacris.online", "coliadinae.online", "proteug.ru", "sporog.ru", "blattodea.ru", "metcalfas.online", "noctuidaes.online", "empusidae.online", "oderas.ru", "cerambycidae.online", "gorimana.site", "dipteran.online", "debarys.ru", "hamadryas.online", "gonepteryx.online", "ariuma.ru", "false.grafitto.ru", "apoxipodes.online"], "hostnames_count": 20, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 194.67.116.67
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.311767
raw_data:
  {"hostnames_checked": ["www.glebm.xyz", "hellyheyner.space", "glebm.xyz", "www.hellyheyner.space"], "hostnames_count": 4, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 194.67.116.81
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.316725
raw_data:
  {"hostnames_checked": ["194-67-116-81.cloudvps.regruhosting.ru"], "hostnames_count": 1, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 194.67.86.167
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.341829
raw_data:
  {"hostnames_checked": ["mesant.online", "nematoceras.ru", "limenitis.ru", "lovers.semara.ru", "tubercur.ru", "kilogar.ru", "mycodar.ru", "aerogenosa.ru", "hurama.ru", "mucora.ru", "proteug.ru", "polyphemus.ru", "heteroptera.ru", "erati.ru", "blattodea.ru", "putrif.ru", "gonepteryx.ru", "alloy.vadilops.ru", "baryo.ru", "tomond.ru"], "hostnames_count": 20, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 194.67.86.240
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.356628
raw_data:
  {"hostnames_checked": ["194-67-86-240.cloudvps.regruhosting.ru"], "hostnames_count": 1, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 194.67.87.29
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.361556
raw_data:
  {"hostnames_checked": ["194-67-87-29.cloudvps.regruhosting.ru"], "hostnames_count": 1, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 194.67.90.215
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.376402
raw_data:
  {"hostnames_checked": ["www.nikecontractor.xyz", "ur-time.ru", "www.testzakaz.ru", "bbb.ishkola.com", "gakhramanov.site", "lb96aeac.justinstalledpanel.com", "deshar.ishkola.com", "nikecontractor.xyz", "testzakaz.ru", "www.ur-time.ru"], "hostnames_count": 10, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 195.133.88.128
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.426955
raw_data:
  {"hostnames_checked": ["relay.karlov.family"], "hostnames_count": 1, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 195.62.53.63
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.460899
raw_data:
  {"hostnames_checked": ["www.semena-baza.ru", "semena-baza.ru", "blockpost.site", "crm.semena-baza.ru", "blockpost.space", "ophisaurusis.xyz", "fionar.xyz", "adblocked.space", "adblock.co.in", "adblock.host", "myrrhan.xyz", "blockpost.website", "alaska-service.ru", "apusa.xyz"], "hostnames_count": 14, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 206.81.0.182
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.510781
raw_data:
  {"hostnames_checked": ["ee.atoztheatrical.com", "tapunyacintauntuk.nyamamatgoberkeun.podlalengitan.com", "obatnabikintunduh.jadiwehsyaree.tunduhteukuat.com", "turbov.internetdigital.xyz", "www.xn--bbanetcashs-uhb.com", "meq12.brtwer.xyz", "www.blbvanetcahs.com", "gesbeakdeui.kuduradadiseutokeun.gelasbelahtilu.com"], "hostnames_count": 8, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 209.97.165.187
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.542562
raw_data:
  {"hostnames_checked": ["pg.api789.work"], "hostnames_count": 1, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 216.238.69.137
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.576892
raw_data:
  {"hostnames_checked": ["216.238.69.137.vultrusercontent.com"], "hostnames_count": 1, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 217.69.0.35
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.591606
raw_data:
  {"hostnames_checked": ["www.babacoach.fr", "www.babacoach.com", "babacoach.com", "api.babacoach.com", "backoffice.babacoach.com", "visio.babacoach.com", "babacoach.fr"], "hostnames_count": 7, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 23.42.150.172
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.606653
raw_data:
  {"hostnames_checked": ["a23-42-150-172.deploy.static.akamaitechnologies.com", "a248.e.akamai.net"], "hostnames_count": 2, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 31.31.203.17
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.622924
raw_data:
  {"hostnames_checked": ["acetobacter.online", "allqrt.space", "proteug.ru", "allqrt.site", "klarasita.ru", "libellulidae.online", "papiliot.online", "oderas.ru", "fusari.ru", "limenitidinae.online", "libellulat.online", "maniola.online", "31-31-203-17.cloudvps.regruhosting.ru", "allqlt.online", "rosgradusnik.ru", "debarys.ru", "ariuma.ru", "false.grafitto.ru", "mamberis.ru", "kallima.online"], "hostnames_count": 20, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 31.31.203.219
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.640889
raw_data:
  {"hostnames_checked": ["acrididae.online", "hurama.ru", "proguru.space", "mucora.ru", "kilogar.ru", "acrididae.ru", "keitaro.shelbycompany.space", "31-31-203-219.cloudvps.regruhosting.ru", "fortias.ru", "merostomata.online", "www.xn----etb1b.xn--p1ai", "xn----etb1b.xn--p1ai", "shelbycompany.space", "baryo.ru", "empusidae.ru", "alloy.vadilops.ru", "lovers.semara.ru", "tubercur.ru", "lb130473.justinstalledpanel.com", "coliadinae.ru"], "hostnames_count": 20, "matched_domains": [], "match_count": 0,


indicator: 31.40.251.145
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.673653
raw_data:
  {"hostnames_checked": ["royalapproach.ru"], "hostnames_count": 1, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 31.40.251.171
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.683367
raw_data:
  {"hostnames_checked": ["device-client-process.com", "device-client-actions.com", "device-client-approve.com", "device-client-warn.com", "device-client-confirm.com", "device-client-verify.com", "device-client-history.com", "device-confirm-client.com", "device-client-action.com", "device-client-notify.com", "wtv23.6822931.xyz", "device-history-client.com", "device-approve-client.com"], "hostnames_count": 13, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 37.140.195.137
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.688299
raw_data:
  {"hostnames_checked": ["heliconiinae.online", "hurama.ru", "mucora.ru", "lepist.ru", "kilogar.ru", "gromphadorhina.online", "counter.podloka.ru", "skud.skladovka.ru", "lepist.space", "baryo.ru", "37-140-195-137.xen.vps.regruhosting.ru", "37-140-195-137.ovz.vps.regruhosting.ru", "arctiidae.ru", "arachnidas.ru", "libellulat.ru", "alloy.vadilops.ru", "lovers.semara.ru", "tubercur.ru", "37-140-195-137.cloudvps.regruhosting.ru", "37-140-195-137.xs.vps.regruhosting.ru"], "hostnames_count": 20, "matche


indicator: 37.140.197.206
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.698095
raw_data:
  {"hostnames_checked": ["limenitis.ru", "tubercur.ru", "libellulat.ru", "apaturinae.ru", "cholerd.ru", "libellulidae.online", "mucora.ru", "gonepteryx.online", "acrididae.ru", "neural.photophone.site", "apidaet.online", "fortias.ru", "cyrestinae.online", "blaberidae.online", "apaturinae.online", "brachycera.online", "limenitidinae.online", "baryo.ru", "37-140-197-206.cloudvps.regruhosting.ru", "nematoceras.online"], "hostnames_count": 20, "matched_domains": [], "match_count": 0, "blocklist_size":


indicator: 37.140.197.55
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.702814
raw_data:
  {"hostnames_checked": ["cyrestinae.ru", "hurama.ru", "gonepteryx.ru", "kilogar.ru", "wnw02.sectorfinancierociti.com", "libellulidae.ru", "lepidopteras.ru", "mx.ipakachaeva.ru", "apaturinae.ru", "libellulat.ru", "empusidae.ru", "fanniidae.ru", "alloy.vadilops.ru", "dipteran.ru", "lovers.semara.ru", "tubercur.ru", "graphosoma.ru", "37-140-197-55.cloudvps.regruhosting.ru", "scorpiones.online", "coliadinae.ru"], "hostnames_count": 20, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 37.140.199.20
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.718402
raw_data:
  {"hostnames_checked": ["37-140-199-20.cloudvps.regruhosting.ru", "pvh-lodki.ru"], "hostnames_count": 2, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 45.134.255.131
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.760487
raw_data:
  {"hostnames_checked": ["slovorti.ru", "claimed.striman.ru", "false.striman.ru", "bluera.ru", "perfection.baldasha.ru", "nearly.striman.ru", "www.gholam.ru", "necessity.striman.ru", "sand.striman.ru", "gholam.ru", "sally.striman.ru", "percy.striman.ru", "allied.striman.ru", "gloomy.striman.ru", "zeinare.ru", "bicyclelist.baldasha.ru", "clap.vositra.ru", "intercourse.vositra.ru", "principles.vositra.ru", "biblidinae.online"], "hostnames_count": 20, "matched_domains": [], "match_count": 0, "blockli


indicator: 46.29.234.46
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.812575
raw_data:
  {"hostnames_checked": ["alphanetsphere.com"], "hostnames_count": 1, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 5.181.156.109
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.823505
raw_data:
  {"hostnames_checked": ["cm-loginprivate.com", "www.cm-loginprivate.com", "no-rdns.mivocloud.com"], "hostnames_count": 3, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 5.252.178.140
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.830311
raw_data:
  {"hostnames_checked": ["5-252-178-140.mivocloud.com", "nr.globalirishdating.com"], "hostnames_count": 2, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 5.63.152.233
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.838618
raw_data:
  {"hostnames_checked": ["prisonta.ru", "vosita.ru", "poznari.ru", "vostilo.ru", "warau.ru", "wokoras.ru", "volotras.ru", "5-63-152-233.cloudvps.regruhosting.ru", "nmon.wgnet.work", "voranfi.ru", "raidata.ru", "vodagi.ru", "powerton.ru", "vidarri.ru", "vositra.ru", "alloy.vadilops.ru", "portalahr.ru", "wakatteru.ru", "protimas.ru", "status.wgnet.work"], "hostnames_count": 20, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 5.63.154.128
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.845152
raw_data:
  {"hostnames_checked": ["5-63-154-128.cloudvps.regruhosting.ru"], "hostnames_count": 1, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 5.63.154.19
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.853151
raw_data:
  {"hostnames_checked": ["www.smart-obmen.ru", "www.ars-pt.ru", "btc-worm.ru", "dotsatoshi.ru", "lovers.semara.ru", "tubercur.ru", "kilogar.ru", "hurama.ru", "ars-pt.ru", "exchange-key.com", "x-rates.ru", "mucora.ru", "www.x-rates.ru", "www.exchange-key.com", "5-63-154-19.cloudvps.regruhosting.ru", "www.dotsatoshi.ru", "alloy.vadilops.ru", "baryo.ru", "www.btc-worm.ru", "smart-obmen.ru"], "hostnames_count": 20, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 5.63.158.179
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.859868
raw_data:
  {"hostnames_checked": ["hurama.ru", "gonepteryx.ru", "baikalcdn.ru", "5-63-158-179.cloudvps.regruhosting.ru", "kilogar.ru", "mucora.ru", "www.baikalcdn.ru", "morphon.online", "baryo.ru", "arctiidae.ru", "autofides.ru", "glorious.nonima.ru", "libellulat.ru", "fanniidae.ru", "alloy.vadilops.ru", "lovers.semara.ru", "tubercur.ru", "agaricusa.ru", "graphosoma.ru", "asilidae.ru"], "hostnames_count": 20, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 5.63.158.233
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.869414
raw_data:
  {"hostnames_checked": ["api.tringle.work", "www.api.nskiphone-crm.this-is-web.ru", "www.api.tringle.work", "nng.this-is-web.ru", "nskiphone-crm.this-is-web.ru", "nskiphone.this-is-web.ru", "www.nng.this-is-web.ru", "www.wunder.this-is-web.ru", "api.nskiphone-crm.this-is-web.ru", "www.api.nskiphone.this-is-web.ru", "maxwell.this-is-web.ru", "wunder.this-is-web.ru", "test.this-is-web.ru", "api.nskiphone.this-is-web.ru", "www.test.this-is-web.ru", "www.nskiphone-crm.this-is-web.ru", "www.maxwell.th


indicator: 5.63.158.238
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.874329
raw_data:
  {"hostnames_checked": ["mantidae.online", "promokotikbot.ru", "www.promokotikbot.ru", "5-63-158-238.cloudvps.regruhosting.ru", "brachycera.online", "noctuidaes.online", "apaturinae.online", "mycodar.ru", "limenitis.online", "fanniidae.online", "lycaenidae.online", "polyphemus.online", "libellulat.online", "asilidae.online", "hymenoptera.online", "debarys.ru", "meandrusas.online", "false.grafitto.ru", "apoxipodes.online", "melitaeas.online"], "hostnames_count": 20, "matched_domains": [], "match_c


indicator: 62.133.62.73
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.884164
raw_data:
  {"hostnames_checked": ["116762.ip-ptr.tech", "smtp.saberx.tech", "saberx.tech"], "hostnames_count": 3, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 64.227.172.243
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.904075
raw_data:
  {"hostnames_checked": ["makkaldaily.xyz", "munshak.ca.3cx.us", "goldenbricks.3cx.in", "beauty-domain.autos", "www.makkaldaily.xyz", "vobuehcip.com", "api.makkaldaily.xyz"], "hostnames_count": 7, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 67.205.160.237
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.921909
raw_data:
  {"hostnames_checked": ["reozf.net", "cherrygirl.us", "ejgmve.easypanel.host", "upcatalogo-evolution.ejgmve.easypanel.host", "baq360.com", "testftp.statenweb.com"], "hostnames_count": 6, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 70.34.194.123
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.936409
raw_data:
  {"hostnames_checked": ["koncept62yearplan.tempurl.host", "wpmudev.host"], "hostnames_count": 2, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 70.34.197.185
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.961808
raw_data:
  {"hostnames_checked": ["70.34.197.185.vultrusercontent.com", "www.hilex.se", "hilex.se"], "hostnames_count": 3, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 70.34.199.214
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.979000
raw_data:
  {"hostnames_checked": ["www.anyboard.xyz", "myces.ru", "856393-icloud.com", "teroba.ru", "anyboard.xyz", "krashand.ru"], "hostnames_count": 6, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 70.34.204.141
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:09.994784
raw_data:
  {"hostnames_checked": ["70.34.204.141.vultrusercontent.com"], "hostnames_count": 1, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 70.34.208.32
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:10.012021
raw_data:
  {"hostnames_checked": ["70.34.208.32.vultrusercontent.com", "penpen.wavy.ws"], "hostnames_count": 2, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 80.78.240.210
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:10.018928
raw_data:
  {"hostnames_checked": ["80.78.240.210"], "hostnames_count": 1, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 80.78.241.253
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:10.029060
raw_data:
  {"hostnames_checked": ["vbahelpers.ru", "80-78-241-253.cloudvps.regruhosting.ru"], "hostnames_count": 2, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 80.78.241.88
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:10.036039
raw_data:
  {"hostnames_checked": ["heliconiinae.online", "cyrestinae.ru", "private.nat.zone", "gonepteryx.ru", "mucora.ru", "kilogar.ru", "acrididae.ru", "gromphadorhina.online", "fortias.ru", "merostomata.online", "limenitis.ru", "baryo.ru", "apaturinae.ru", "arachnidas.ru", "fanniidae.ru", "alloy.vadilops.ru", "lovers.semara.ru", "tubercur.ru", "agaricusa.ru", "graphosoma.ru", "coliadinae.ru"], "hostnames_count": 21, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 80.78.244.199
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:10.052916
raw_data:
  {"hostnames_checked": ["thefamilymeal.com", "lycaenidae.online", "80-78-244-199.cloudvps.regruhosting.ru", "putrif.ru", "nymphalidaes.online", "anisoptera.online", "work-craft.ru", "www.server-etoro.xyz", "proteug.ru", "server-etoro.xyz", "009.am", "www.work-craft.ru", "melitaeas.online", "metcalfas.online", "mesant.online", "kallima.online", "shiba-telegram.site"], "hostnames_count": 17, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 80.78.245.223
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:10.071240
raw_data:
  {"hostnames_checked": ["80-78-245-223.cloudvps.regruhosting.ru"], "hostnames_count": 1, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 80.78.248.222
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:10.119795
raw_data:
  {"hostnames_checked": ["profdom.ru"], "hostnames_count": 1, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 80.78.251.191
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:10.136899
raw_data:
  {"hostnames_checked": ["acrididae.online", "hierodula.online", "coliadinae.online", "apaturinae.online", "empusidae.online", "80-78-251-191.cloudvps.regruhosting.ru", "ddps-csr.ru", "fanniidae.online", "lycaenidae.online", "limenitidinae.online", "limulusa.online", "libellulat.online", "maniola.online", "cyrestinae.online", "korovin.site", "megatos.online", "ariuma.ru", "shermano.ru", "haromo.ru", "www.ddps-csr.ru"], "hostnames_count": 20, "matched_domains": [], "match_count": 0, "blocklist_size


indicator: 80.78.251.231
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:10.154616
raw_data:
  {"hostnames_checked": ["www.tamos.ru", "80-78-251-231.cloudvps.regruhosting.ru", "tamos.ru"], "hostnames_count": 3, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 80.78.251.4
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:10.171961
raw_data:
  {"hostnames_checked": ["acetobacter.online", "apidaet.online", "80-78-251-4.cloudvps.regruhosting.ru", "mycodar.ru", "coleopteras.online", "oderas.ru", "npp-trigla.ru", "alexandr-demchenko.ru", "polyphemus.online", "limenitidinae.online", "dipteran.online", "limulusa.online", "hamadryas.online", "megatos.online", "meandrusas.online", "tomond.ru", "false.grafitto.ru", "graphiuma.online", "www.alexandr-demchenko.ru", "kallima.online"], "hostnames_count": 20, "matched_domains": [], "match_count": 0


indicator: 80.78.253.196
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:10.193028
raw_data:
  {"hostnames_checked": ["apidaet.online", "sporog.ru", "web.ust-land.ru", "www.ust-land.ru", "sqlpp1.xrbh.ru", "apaturinae.online", "www.pp1.xrbh.ru", "pp1.xrbh.ru", "www.sqlpp1.xrbh.ru", "www.crm.ust-land.ru", "ad.ust-land.ru", "crm.ust-land.ru", "fastpp1.xrbh.ru", "www.web.ust-land.ru", "limulusa.online", "www.widget.xrbh.ru", "www.ad.ust-land.ru", "80-78-253-196.cloudvps.regruhosting.ru", "ust-land.ru", "widget.xrbh.ru"], "hostnames_count": 20, "matched_domains": [], "match_count": 0, "blockli


indicator: 80.78.253.86
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:10.224644
raw_data:
  {"hostnames_checked": ["acrididae.online", "acetobacter.online", "lophacris.online", "coliadinae.online", "kilogar.ru", "80-78-253-86.cloudvps.regruhosting.ru", "sporog.ru", "telegrambotshopsodax64.site", "smtp.telegrambotshopsodax64.site", "mycodar.ru", "coleopteras.online", "oderas.ru", "tc.yeel.studio", "td-ledavto.ru", "libellulat.online", "01.fastpostsender.ru", "lovers.semara.ru", "shermano.ru", "aerogenosa.ru", "mamberis.ru"], "hostnames_count": 20, "matched_domains": [], "match_count": 0


indicator: 80.78.254.238
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:10.240429
raw_data:
  {"hostnames_checked": ["esdgroup.ru", "www.esdgroup.ru", "sousourcelink.online", "80-78-254-238.ovz.vps.regruhosting.ru", "80-78-254-238.cloudvps.regruhosting.ru", "alono.ru", "red55188.rdock.ru"], "hostnames_count": 7, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 82.146.39.104
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:10.275001
raw_data:
  {"hostnames_checked": ["webengincs.com", "techmaster.makeup", "l11bb0d2.justinstalledpanel.com", "www.kolizey78.ru", "kolizey78.ru", "psklg-dom.ru", "ezambiablog.click", "www.psklg-dom.ru"], "hostnames_count": 8, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 83.166.247.185
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:10.301517
raw_data:
  {"hostnames_checked": ["ophisaurusis.xyz", "blockpost.space", "www.xn----8sbfcuhnlliceeigh0be5o7b.xn--p1ai", "apusa.xyz", "myrrhan.xyz", "xn----8sbfcuhnlliceeigh0be5o7b.xn--p1ai"], "hostnames_count": 6, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 87.249.49.103
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:10.316793
raw_data:
  {"hostnames_checked": ["www.info24servisplus.ru", "info24servisplus.ru"], "hostnames_count": 2, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 89.108.102.37
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:10.325241
raw_data:
  {"hostnames_checked": ["lepidopteras.online", "nematoceras.online", "kilogar.ru", "proteug.ru", "sporog.ru", "brachycera.online", "morphinaes.online", "fortias.ru", "blattodea.online", "mycodar.ru", "erati.ru", "fusari.ru", "limulusa.online", "nymphalidaes.online", "lovers.semara.ru", "tubercur.ru", "tomond.ru", "false.grafitto.ru", "aerogenosa.ru", "mamberis.ru"], "hostnames_count": 20, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 89.108.102.57
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:10.332646
raw_data:
  {"hostnames_checked": ["false.grafitto.ru", "limenitis.ru", "stamina-online.com", "gromphadorhina.ru", "chelicerata.ru", "lycaenidae.online", "libellulat.online", "maniola.online", "oderas.ru", "mamberis.ru", "coleopteras.online", "libellulidae.online", "hierodula.online", "acrididae.online", "fortias.ru", "mantidae.online", "acetobacter.online", "dionysi.online", "baryo.ru", "ariuma.ru"], "hostnames_count": 20, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 89.108.114.11
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:10.340926
raw_data:
  {"hostnames_checked": ["heliconiinae.online", "gonepteryx.ru", "nematoceras.online", "mucora.ru", "gromphadorhina.online", "xiphosura.online", "fortias.ru", "limenitis.ru", "libellulidae.ru", "baryo.ru", "apidaet.ru", "lepidopteras.ru", "arachnidas.ru", "libellulat.ru", "blaberidae.ru", "fanniidae.ru", "tubercur.ru", "agaricusa.ru", "graphiuma.online", "coliadinae.ru"], "hostnames_count": 20, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 89.108.115.206
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:10.347834
raw_data:
  {"hostnames_checked": ["acrididae.online", "thewiz.ru", "diler.online", "www.bash-apteka.ru", "bash-apteka.ru", "www.thewiz.ru", "www.diler.online"], "hostnames_count": 7, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 89.108.115.225
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:10.355941
raw_data:
  {"hostnames_checked": ["wiki.clevertec.ru", "domfoodshop.ru", "rusfoodstroy.ru", "travel.endwork.today", "myfoodforum.ru", "postnet-dev.selftech.ru", "www.rusfoodstroy.ru", "yourfavorite.property", "www.rusfoodtorg.ru", "postamates.spatiality.website", "business.spatiality.website", "rusfoodtorg.ru", "domfoodstroy.ru", "www.domfoodstroy.ru", "www.domfoodshop.ru", "www.rusfoodforum.ru", "www.myfoodforum.ru", "rusfoodforum.ru", "property.spatiality.website", "dit.spatiality.website"], "hostnames_c


indicator: 89.108.115.232
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:10.363484
raw_data:
  {"hostnames_checked": ["anisoptera.online", "morphinaes.online", "haromo.ru", "amid89.luxury.clank.nomukou.ru", "oderas.ru", "dahmke.ru", "dipteran.online", "lophacris.online", "stoop13.performed.pride.nomukou.ru", "polyphemus.online", "papiliot.online", "webinar.reutdent.ru", "lepidopteras.online", "putrif.ru", "shermano.ru", "hesperiidae.online", "luxury.clank.nomukou.ru", "acetobacter.online", "kallima.online", "biblidinae.online"], "hostnames_count": 20, "matched_domains": [], "match_count":


indicator: 89.108.115.234
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:10.370639
raw_data:
  {"hostnames_checked": ["dionysi.online", "acetobacter.online", "hierodula.online", "lophacris.online", "empusidae.online", "blattodea.online", "papiliot.online", "coleopteras.online", "limenitis.online", "lycaenidae.online", "clostri.ru", "www.dipteran.online", "maniola.online", "cyrestinae.online", "blaberidae.online", "debarys.ru", "ariuma.ru", "false.grafitto.ru", "mamberis.ru", "kallima.online"], "hostnames_count": 20, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 89.108.115.235
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:10.379351
raw_data:
  {"hostnames_checked": ["lk.kfsamara.com", "nobug.store", "oderas.ru", "domkuhon.ru", "povar.kukme.ru", "89-108-115-235.cloudvps.regruhosting.ru", "lk.kfsamara.store", "www.kfsamara.com", "kfsamara.com", "ivaservis.ru", "www.iva-servise.ru", "112z.ru", "www.kfbiz.online", "www.povar.kukme.ru", "iva-servise.ru", "www.lk.kfsamara.store", "repairfl.com", "www.domkuhon.ru", "www.lk.kfsamara.com", "www.nobug.store", "kfbiz.online"], "hostnames_count": 21, "matched_domains": [], "match_count": 0, "bloc


indicator: 89.108.115.241
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:10.403200
raw_data:
  {"hostnames_checked": ["ending.amieteku.ru", "deer-mouse.ssinapa.ru", "naughty.volotras.ru", "jeer.zamaniwa.ru", "jealousy.zamaniwa.ru", "jean.zamaniwa.ru", "kimige.ru", "analyticselmikeev.ru", "volotras.ru", "deep-settled.ssinapa.ru", "machic.ru", "deep-versed.ssinapa.ru", "deep-rootedness.ssinapa.ru", "jumper.zamaniwa.ru", "jessie.zamaniwa.ru", "deep-kiss.ssinapa.ru", "deep-lunged.ssinapa.ru", "zamaniwa.ru", "percent.volotras.ru", "deerstalkers.ssinapa.ru"], "hostnames_count": 20, "matched_dom


indicator: 89.108.65.157
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:10.418814
raw_data:
  {"hostnames_checked": ["cholerd.ru", "putrif.ru", "coliadinae.online", "mantidae.online", "89-108-65-157.cloudvps.regruhosting.ru", "noctuidaes.online", "schastye.com", "blattodea.online", "metoshi.site", "mycodar.ru", "dahmke.ru", "oderas.ru", "lycaenidae.online", "gorimana.site", "dipteran.online", "devsite-lst.online", "hymenoptera.online", "ariuma.ru", "graphiuma.online", "shermano.ru", "apoxipodes.online"], "hostnames_count": 21, "matched_domains": [], "match_count": 0, "blocklist_size": 91


indicator: 89.108.70.22
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:10.436735
raw_data:
  {"hostnames_checked": ["reject50.released.ruchkalo.ru", "allen4.erostipa.ru", "priest.elitoras.ru", "although.coferto.ru", "getcode.tech", "relax.elitoras.ru", "masshir.ru", "getcodedev.ru", "api.resumeone.ru", "www.staging.getcode.tech", "www.getcode.tech", "resumeone.ru", "www.resumeone.ru", "print.nonima.ru", "lortova.ru", "cliraco.ru", "www.getcodedev.ru", "erostipa.ru", "elitoras.ru", "staging.getcode.tech"], "hostnames_count": 20, "matched_domains": [], "match_count": 0, "blocklist_size": 


indicator: 89.108.70.223
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:10.446641
raw_data:
  {"hostnames_checked": ["just-portfolio.com", "www.just-portfolio.com", "room.megainvest.space", "mycodar.ru", "haromo.ru", "maniola.online", "megatos.online", "lophacris.online", "sporog.ru", "libellulidae.online", "papiliot.online", "proteug.ru", "hierodula.online", "erati.ru", "89-108-70-223.cloudvps.regruhosting.ru", "shermano.ru", "mantidae.online", "acetobacter.online", "kallima.online", "mamberis.ru"], "hostnames_count": 20, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 89.108.71.205
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:10.451665
raw_data:
  {"hostnames_checked": ["acrididae.online", "hierodula.online", "kilogar.ru", "apidaet.online", "proteug.ru", "blattodea.ru", "blattodea.online", "mycodar.ru", "erati.ru", "fusari.ru", "limulusa.online", "megatos.online", "ariuma.ru", "tubercur.ru", "lovers.semara.ru", "tomond.ru", "shermano.ru", "aerogenosa.ru", "mamberis.ru", "moneyear.site"], "hostnames_count": 20, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 89.108.76.135
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:10.469514
raw_data:
  {"hostnames_checked": ["nematoceras.online", "putrif.ru", "proteug.ru", "mantidae.online", "metcalfas.online", "libellulidae.online", "erati.ru", "dahmke.ru", "mesant.online", "fusari.ru", "mantodeas.online", "limenitidinae.online", "libellulat.online", "nymphalidaes.online", "maniola.online", "megatos.online", "ariuma.ru", "false.grafitto.ru", "melitaeas.online", "elastic.panampizza.ru"], "hostnames_count": 20, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 89.108.76.226
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:10.479731
raw_data:
  {"hostnames_checked": ["cyrestinae.ru", "metcalfas.online", "89-108-76-226.cloudvps.regruhosting.ru", "limenitis.ru", "tubercur.ru", "meandrusas.online", "lepidopteras.ru", "oderas.ru", "apaturinae.ru", "mucora.ru", "nymphalidaes.online", "acrididae.ru", "coliadinae.ru", "fusari.ru", "fortias.ru", "gonepteryx.ru", "graphosoma.ru", "baryo.ru", "fanniidae.ru", "mantodeas.online", "nematoceras.online"], "hostnames_count": 21, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 89.108.76.246
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:10.484099
raw_data:
  {"hostnames_checked": ["dionysi.online", "nematoceras.online", "metcalfas.online", "libellulidae.online", "zongri.cn", "dahmke.ru", "mesant.online", "89-108-76-246.cloudvps.regruhosting.ru", "fusari.ru", "mantodeas.online", "eurypterida.online", "corolain.ru", "hymenoptera.online", "megatos.online", "goloser.ru", "danainae.online", "graphiuma.online", "bhack.simplex-software.ru", "www.zongri.cn", "aerogenosa.ru", "melitaeas.online"], "hostnames_count": 21, "matched_domains": [], "match_count": 0


indicator: 89.108.76.95
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:10.501878
raw_data:
  {"hostnames_checked": ["mucora.ru", "kilogar.ru", "proteug.ru", "blattodea.ru", "www.hyundai-gkmir.ru", "hyundai-gkmir.ru", "fortias.ru", "limenitis.ru", "mycodar.ru", "erati.ru", "baryo.ru", "1spaceapi.ru", "fusari.ru", "www.1spaceapi.ru", "asilidae.online", "fanniidae.ru", "lovers.semara.ru", "tubercur.ru", "tomond.ru", "aerogenosa.ru"], "hostnames_count": 20, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 89.108.77.202
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:10.554749
raw_data:
  {"hostnames_checked": ["hierodula.online", "artemmanicureshop.ru", "mantidae.online", "manikureshop.ru", "brachycera.online", "sand79.navy.mudarist.ru", "apaturinae.online", "www.manikureshop.online", "papiliot.online", "fanniidae.online", "lycaenidae.online", "cerambycidae.online", "limenitidinae.online", "maniola.online", "manikureshop.online", "hymenoptera.online", "gonepteryx.online", "megatos.online", "www.manikureshop.ru", "www.artemmanicureshop.ru"], "hostnames_count": 20, "matched_domain


indicator: 89.108.77.204
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:10.574390
raw_data:
  {"hostnames_checked": ["acrididae.online", "cholerd.ru", "hierodula.online", "lophacris.online", "brachycera.online", "interest7.navigation.holotran.ru", "papiliot.online", "oderas.ru", "fanniidae.online", "cerambycidae.online", "www.ruwordie.site", "limulusa.online", "ruwordie.site", "maniola.online", "blaberidae.online", "hymenoptera.online", "debarys.ru", "megatos.online", "ariuma.ru", "kallima.online"], "hostnames_count": 20, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 89.108.79.13
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:10.661589
raw_data:
  {"hostnames_checked": ["acetobacter.online", "devrm.ru", "mantidae.online", "morphinaes.online", "devctl.online", "apaturinae.online", "empusidae.online", "melitaeas.online", "www.devicectl.online", "mycodar.ru", "coleopteras.online", "devicectl.online", "mvrm.ru", "89-108-79-13.cloudvps.regruhosting.ru", "polyphemus.online", "www.devctl.ru", "devctl.ru", "alloy.vadilops.ru", "tomond.ru", "false.grafitto.ru", "mamberis.ru"], "hostnames_count": 21, "matched_domains": [], "match_count": 0, "blockl


indicator: 89.108.79.91
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:10.681451
raw_data:
  {"hostnames_checked": ["bigtraff.tech", "nitkiplus.ru", "www.nitkiplus.ru", "ty.bvoltaa.ru"], "hostnames_count": 4, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 89.108.81.210
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:10.717248
raw_data:
  {"hostnames_checked": ["heteroptera.ru", "hurama.ru", "eurypterida.ru", "ovinus.ru", "chelicerata.ru", "89-108-81-210.cloudvps.regruhosting.ru", "nematoceras.ru", "morphon.online", "coleopteras.online", "gromphadorhina.ru", "arctiidae.ru", "anisoptera.ru", "nymphalidaes.online", "empusidae.ru", "alloy.vadilops.ru", "dipteran.ru", "megascolias.online", "merostomata.ru", "polyphemus.ru", "asilidae.ru"], "hostnames_count": 20, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 89.108.81.30
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:10.735309
raw_data:
  {"hostnames_checked": ["89-108-81-30.cloudvps.regruhosting.ru"], "hostnames_count": 1, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 89.108.81.77
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:10.755284
raw_data:
  {"hostnames_checked": ["89-108-81-77.cloudvps.regruhosting.ru"], "hostnames_count": 1, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 89.108.81.8
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:10.764933
raw_data:
  {"hostnames_checked": ["ensaving.ru"], "hostnames_count": 1, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 89.108.88.15
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:10.788742
raw_data:
  {"hostnames_checked": ["cyrestinae.ru", "static.yourhotelapp.ru", "kilogar.ru", "acrididae.ru", "apidaet.online", "blattodea.ru", "brachycera.online", "morphinaes.online", "empusidae.online", "merostomata.online", "ws.yourhotelapp.ru", "apaturinae.ru", "hamadryas.online", "media.yourhotelapp.ru", "alloy.vadilops.ru", "lovers.semara.ru", "graphosoma.ru", "shermano.ru", "scorpiones.online", "melitaeas.online"], "hostnames_count": 20, "matched_domains": [], "match_count": 0, "blocklist_size": 91978


indicator: 89.108.88.6
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:10.805640
raw_data:
  {"hostnames_checked": ["89-108-88-6.cloudvps.regruhosting.ru"], "hostnames_count": 1, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 89.108.98.101
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:10.837461
raw_data:
  {"hostnames_checked": ["heliconiinae.online", "cyrestinae.ru", "hurama.ru", "mucora.ru", "kilogar.ru", "acrididae.ru", "gromphadorhina.online", "xiphosura.online", "merostomata.online", "nematoceras.ru", "libellulidae.ru", "arctiidae.ru", "apaturinae.ru", "arachnidas.ru", "libellulat.ru", "alloy.vadilops.ru", "lovers.semara.ru", "tubercur.ru", "polyphemus.ru", "scorpiones.online"], "hostnames_count": 20, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 89.108.98.125
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:10.873142
raw_data:
  {"hostnames_checked": ["b.clkey.com", "l706de22.justinstalledpanel.com"], "hostnames_count": 2, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 89.185.84.141
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:10.900771
raw_data:
  {"hostnames_checked": ["183430.ip-ptr.tech"], "hostnames_count": 1, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 89.185.84.204
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:10.918923
raw_data:
  {"hostnames_checked": ["london5.chebak.pro", "28450.ip-ptr.tech"], "hostnames_count": 2, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 89.19.209.154
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:10.947266
raw_data:
  {"hostnames_checked": ["2038305-cv46851.twc1.net"], "hostnames_count": 1, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 89.223.123.121
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:10.958102
raw_data:
  {"hostnames_checked": ["575769-cn46171.tmweb.ru"], "hostnames_count": 1, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 89.23.107.188
indicator_type: ipv4
source: stevenblack
reverse_dns: uedata.amazon.com
queried_at: 2026-04-02T20:12:10.985711
raw_data:
  {"hostnames_checked": ["www.amazon.co.jp", "edgeflow-dp.aero.47cf2c8c9-frontier.amazon.com", "origin-www.amazon.co.uk", "34834.ip-ptr.tech", "vz99betvn.com", "origin-www.amazon.de", "www.amazon.com.au", "sekabeting.com", "amazon.co.jp", "yp.amazon.com", "lesnoygaff.ru", "www.amazon.de", "corporate.amazon.com", "edgeflow-dp.aero.04f01a85e-frontier.amazon.com.au", "edgeflow.aero.abe2c2f23-frontier.amazon.de", "uedata.amazon.co.uk", "amazon.jp", "www.amzn.com", "amazon.co.uk", "ufaclubs.com", "edge


indicator: 91.188.222.50
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:10.999143
raw_data:
  {"hostnames_checked": ["bitsbfree.com", "la6c6a02.justinstalledpanel.com", "mail.bitsbfree.com"], "hostnames_count": 3, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 92.242.62.112
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:11.053639
raw_data:
  {"hostnames_checked": ["mysussdtc.com", "myokkoshhhh.com", "ipureksjes.com", "myspurelmera.com", "myreditreskres.com", "myakshhpp.com", "mywoprelkes.com", "myces.ru", "krashand.ru", "teroba.ru", "newsihundred.site", "youthful-fermat.92-242-62-112.plesk.page", "myakoreklshdad.com", "rfitarmail.online", "mail.com-update.mysussdtc.com", "mypoloekrese.com", "servic-notifsecure.com", "kalllojolos.com", "myasrekantopres.com", "mail.web-service.com-verify.mysrpeksereemanre.com"], "hostnames_count": 20,


indicator: 92.242.62.132
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:11.077072
raw_data:
  {"hostnames_checked": ["trade-coinbase.servicesectorupdate.com", "signinaccountscoinbase.com", "scirelinks.com", "92-242-62-132.cprapid.com", "www.trade-coinbase.servicesectorupdate.com", "payple.com.managerupdate.top", "amzn.com.managerupdate.top", "webdisk.scirelinks.top", "noreplyservice0009.top", "scirelinks.top", "amzonx.com.scirelinks.top", "managerupdate.top", "www.92-242-62-132.cprapid.com", "www.amzn.com.managerupdate.top", "www.payple.com.managerupdate.top", "www.noreplyservice0009.top


indicator: 92.242.62.186
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:11.095437
raw_data:
  {"hostnames_checked": ["onlinenewshot.pro", "teroba.ru", "monexelent.shop", "stefany.club", "myces.ru", "krashand.ru", "offerfollowing.life"], "hostnames_count": 7, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 92.242.62.254
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:11.112998
raw_data:
  {"hostnames_checked": ["makedell.xyz", "teroba.ru", "bestdomain.click", "tralosp.shop", "makedell.yachts", "microsoftware.net", "regisedmade.monster", "myces.ru", "krashand.ru"], "hostnames_count": 9, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 92.242.62.45
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:11.131811
raw_data:
  {"hostnames_checked": ["vaudevilless.live", "andcaster.lat", "mushroomlilly.com"], "hostnames_count": 3, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 92.242.62.96
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:11.150406
raw_data:
  {"hostnames_checked": ["payple.com.manage-srvicse-updateds.com", "payple.com.limited-svrvice-notif.net", "www.pypl.com.mngerupdte-verify-accnt.com", "www.payple.com.verfiyupdte-mngeraccount.com", "www.payple.com.limited-svrvice-notif.net", "payple.com.managers-verify-authrs-services.com", "manage-auths-securdes.com", "payple.com.verfiyupdte-mngeraccount.com", "doilyrete.site", "payple.com.managers-verify-auths-accnts.com", "www.payple.com.managers-verify-authrs-services.com", "www.payple.com.man


indicator: 92.255.76.169
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:11.161006
raw_data:
  {"hostnames_checked": ["devpanel.beautyone.me", "jokyprod.com", "www.jokyprod.com", "icecream.jokyprod.com", "howtosl.com", "dev.beautyone.me", "anna.jokyprod.com"], "hostnames_count": 7, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 94.228.120.181
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:11.178236
raw_data:
  {"hostnames_checked": ["l61eb776.justinstalledpanel.com"], "hostnames_count": 1, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 95.179.221.114
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:11.224501
raw_data:
  {"hostnames_checked": ["95.179.221.114.vultrusercontent.com", "argus-radio.ovh", "www.argus-radio.ovh"], "hostnames_count": 3, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 95.179.221.147
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:11.243525
raw_data:
  {"hostnames_checked": ["formations.preprod.hunkaar.fr", "formations.hunkaar.fr", "hangout.street-hypnose.fr", "teroba.ru", "jec.hunkaar.fr", "www.hunkaar.fr", "animesamadlapk.xyz", "preprod.hunkaar.fr", "www.street-hypnose.fr", "95.179.221.147.vultrusercontent.com", "cyberdek.xyz", "hunkaar.fr", "myces.ru", "krashand.ru", "street-hypnose.fr"], "hostnames_count": 15, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 106.51.89.49
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:11.270396
raw_data:
  {"hostnames_checked": ["106.51.89.49.actcorp.in"], "hostnames_count": 1, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 121.127.232.250
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:11.298932
raw_data:
  {"hostnames_checked": ["vsinapp.com", "us-binance.net", "cntdg.com", "jinsupermars.hk200.wshost.cc", "ww.hk200.wsdns.cc"], "hostnames_count": 5, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 130.61.233.105
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:11.306237
raw_data:
  {"hostnames_checked": ["web-glow.online"], "hostnames_count": 1, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 184.95.51.172
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:11.329218
raw_data:
  {"hostnames_checked": ["sitemap.pumadventuresperu.com", "liruiheng.com", "pumadventuresperu.com", "whm.pumadventuresperu.com", "184.95.51.172", "mta-sts.liruiheng.com", "liveserviceonedrive.com", "www.liruiheng.com", "www.jenkins.pumadventuresperu.com"], "hostnames_count": 9, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 185.76.79.125
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:11.351805
raw_data:
  {"hostnames_checked": ["justweb.click", "girlsbags.shop", "retseptik.info", "lecturegenieltd.pro", "ntcx.pro", "125.79.76.185.in-addr.arpa"], "hostnames_count": 6, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 2.58.15.158
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:11.366966
raw_data:
  {"hostnames_checked": ["background-services.net", "summerfieldstudy.com"], "hostnames_count": 2, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 203.161.50.145
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:11.373976
raw_data:
  {"hostnames_checked": ["docs.goog1e.com.spreadsheets.d.1ipevana4hglaeksstshboujdk.zhblz.com", "zhblz.com", "mail.zhblz.com"], "hostnames_count": 3, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 209.74.87.100
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:11.381606
raw_data:
  {"hostnames_checked": ["whup-spurlet.vpsrdns.web-hosting.com"], "hostnames_count": 1, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 217.146.67.241
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:11.397115
raw_data:
  {"hostnames_checked": ["backend.keevitusboss.ee", "uvn-67-241.tll01.zonevs.eu"], "hostnames_count": 2, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 3.20.6.1
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:11.403556
raw_data:
  {"hostnames_checked": ["api.deepvue.com", "ec2-3-20-6-1.us-east-2.compute.amazonaws.com", "api.cluster-qsvdr.qsvdr.example.opentlc.com", "pimiteoui-dev.ottodock.com", "pimiteoui.ottodock.com"], "hostnames_count": 5, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 38.180.239.161
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:11.434624
raw_data:
  {"hostnames_checked": ["web14.info", "menclub.lt", "footballfans.asia", "anythingshere.shop", "cside.site", "musiclivetrack.website", "stone110.store"], "hostnames_count": 7, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 92.243.65.243
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:11.506471
raw_data:
  {"hostnames_checked": ["cywofio2.pro", "243.65.243.92.in-addr.arpa", "garbagecollector.site", "footballclub.sbs", "phoneaccessory.site", "luckywavez.shop", "findbesthotels.info", "mancpr.icu", "formacja.info", "fashionmodels.site"], "hostnames_count": 10, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 94.131.121.56
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:11.511912
raw_data:
  {"hostnames_checked": ["vm15467373.example.com"], "hostnames_count": 1, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 94.198.40.4
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-02T20:12:11.521833
raw_data:
  {"hostnames_checked": ["img.krdtele.com", "www.cra-101.ca", "matbet239.com", "isonic-int.com", "login.pnmukkcp0byonvbeirhkryzrr.ml", "handphonearena.com", "boom.asamerla.live", "app.turkmensk.org", "find.sppwoods.com", "travelkhatlon.com", "www.pnmukkcp0byonvbeirhkryzrr.ml"], "hostnames_count": 11, "matched_domains": [], "match_count": 0, "blocklist_size": 91978}


indicator: 157.20.182.49
indicator_type: ipv4
source: c2tracker
queried_at: 2026-04-02T20:12:11.666915
raw_data:
  {"listed": true, "c2_frameworks": ["unknown", "sliver"], "matched_feeds": ["c2tracker", "c2tracker_sliver"], "match_count": 2}


indicator: 176.65.144.100
indicator_type: ipv4
source: shodan
reverse_dns: depsearch.sbs,www.depsearch.sbs
hosting_provider: cpe:/a:f5:nginx
queried_at: 2026-04-06T00:04:02.330753
raw_data:
  {"ports": [80, 443], "vulns": [], "hostnames": ["depsearch.sbs", "www.depsearch.sbs"], "tags": [], "cpes": ["cpe:/a:f5:nginx"]}


indicator: 176.65.144.24
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: ch.snowfalls.top
queried_at: 2026-04-06T00:04:04.175847
raw_data:
  {"ports": [22, 443, 1443, 3001], "vulns": ["CVE-2023-44487", "CVE-2025-23419"], "hostnames": ["ch.snowfalls.top"], "tags": ["eol-product"], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx:1.24.0", "cpe:/a:openbsd:openssh:9.6p1"]}

hosting_provider:
[cell repeats an earlier one in this file: 107 characters]


indicator: 176.65.144.71
indicator_type: ipv4
source: shodan
city: eol-product
queried_at: 2026-04-06T00:04:05.923631
raw_data:
  {"ports": [22, 1443, 3001], "vulns": ["CVE-2025-23419", "CVE-2023-44487"], "hostnames": [], "tags": ["eol-product"], "cpes": ["cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx:1.24.0", "cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:9.6p1"]}

hosting_provider:
  cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx:1.24.0,cpe:/o:linux:linux_kernel,cpe:/a:openbsd:openssh:9.6p1


indicator: 176.65.144.124
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: ch.snowfalls.top
queried_at: 2026-04-06T00:04:07.672847
raw_data:
  {"ports": [22, 443, 3001], "vulns": ["CVE-2023-44487", "CVE-2025-23419"], "hostnames": ["ch.snowfalls.top"], "tags": ["eol-product"], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx:1.24.0", "cpe:/a:openbsd:openssh:9.6p1"]}

hosting_provider:
[cell repeats an earlier one in this file: 107 characters]


indicator: 176.65.144.108
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: 7814952987-27-03-2026.dedik.io
queried_at: 2026-04-06T00:04:09.474021
raw_data:
  {"ports": [22, 443, 465, 993], "vulns": ["CVE-2023-42114", "CVE-2024-39929", "CVE-2023-42115", "CVE-2022-3620", "CVE-2023-42116", "CVE-2022-3559", "CVE-2023-42119", "CVE-2023-42117", "CVE-2025-67896", "CVE-2022-37451", "CVE-2023-51766"], "hostnames": ["7814952987-27-03-2026.dedik.io"], "tags": ["self-signed"], "cpes": ["cpe:/a:f5:nginx:1.28.3", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:exim:exim:4.95", "cpe:/a:openbsd:openssh:8.9p1"]}

hosting_provider:
  cpe:/a:f5:nginx:1.28.3,cpe:/o:canonical:ubuntu_linux,cpe:/a:exim:exim:4.95,cpe:/a:openbsd:openssh:8.9p1


indicator: 176.65.144.25
indicator_type: ipv4
source: shodan
city: self-signed,starttls
reverse_dns: ollie.cosmeticosonlinebrasil.com
queried_at: 2026-04-06T00:04:11.213215
raw_data:
  {"ports": [21, 22, 80, 443], "vulns": [], "hostnames": ["ollie.cosmeticosonlinebrasil.com"], "tags": ["self-signed", "starttls"], "cpes": ["cpe:/a:pureftpd:pure-ftpd", "cpe:/a:openbsd:openssh:9.6p1", "cpe:/a:f5:nginx", "cpe:/o:canonical:ubuntu_linux"]}

hosting_provider:
  cpe:/a:pureftpd:pure-ftpd,cpe:/a:openbsd:openssh:9.6p1,cpe:/a:f5:nginx,cpe:/o:canonical:ubuntu_linux


indicator: 176.65.144.73
indicator_type: ipv4
source: shodan
city: self-signed,starttls
hosting_provider: cpe:/a:pureftpd:pure-ftpd
queried_at: 2026-04-06T00:04:12.953774
raw_data:
  {"ports": [21, 443, 8443], "vulns": [], "hostnames": [], "tags": ["self-signed", "starttls"], "cpes": ["cpe:/a:pureftpd:pure-ftpd"]}


indicator: 176.65.144.96
indicator_type: ipv4
source: shodan
city: self-signed,starttls
queried_at: 2026-04-06T00:04:14.695603
raw_data:
  {"ports": [21, 22, 25, 80, 110, 443, 993, 995, 8083], "vulns": [], "hostnames": [], "tags": ["self-signed", "starttls"], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/a:pureftpd:pure-ftpd", "cpe:/a:f5:nginx", "cpe:/o:canonical:ubuntu_linux"]}

hosting_provider:
  cpe:/a:openbsd:openssh:8.9p1,cpe:/a:pureftpd:pure-ftpd,cpe:/a:f5:nginx,cpe:/o:canonical:ubuntu_linux


indicator: 176.65.144.74
indicator_type: ipv4
source: shodan
reverse_dns: identityportal.info
queried_at: 2026-04-06T00:04:18.179157
raw_data:
  {"ports": [22, 80, 443, 3000, 8001, 8080], "vulns": [], "hostnames": ["identityportal.info"], "tags": [], "cpes": ["cpe:/a:nodejs:node.js", "cpe:/a:golang:go", "cpe:/a:expressjs:express", "cpe:/o:debian:debian_linux", "cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:9.2p1", "cpe:/a:caddyserver:caddy"]}

hosting_provider:
  cpe:/a:nodejs:node.js,cpe:/a:golang:go,cpe:/a:expressjs:express,cpe:/o:debian:debian_linux,cpe:/o:linux:linux_kernel,cpe:/a:openbsd:openssh:9.2p1,cpe:/a:caddyserver:caddy


indicator: 194.85.250.98
indicator_type: ipv4
source: shodan
city: database
queried_at: 2026-04-06T00:04:19.919625
raw_data:
  {"ports": [2222, 3306, 6379], "vulns": [], "hostnames": [], "tags": ["database"], "cpes": ["cpe:/a:mariadb:mariadb", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:openbsd:openssh:8.2p1", "cpe:/a:redislabs:redis"]}

hosting_provider:
  cpe:/a:mariadb:mariadb,cpe:/o:canonical:ubuntu_linux,cpe:/a:openbsd:openssh:8.2p1,cpe:/a:redislabs:redis


indicator: 194.85.250.99
indicator_type: ipv4
source: shodan
city: database
reverse_dns: s1.c9things.eu,smart.c9things.eu,log.c9things.eu
queried_at: 2026-04-06T00:04:21.704964
raw_data:
  {"ports": [443, 2222, 3306, 6379], "vulns": [], "hostnames": ["s1.c9things.eu", "smart.c9things.eu", "log.c9things.eu"], "tags": ["database"], "cpes": ["cpe:/o:canonical:ubuntu_linux", "cpe:/a:mariadb:mariadb", "cpe:/a:redislabs:redis", "cpe:/a:f5:nginx", "cpe:/a:openbsd:openssh:8.2p1"]}

hosting_provider:
  cpe:/o:canonical:ubuntu_linux,cpe:/a:mariadb:mariadb,cpe:/a:redislabs:redis,cpe:/a:f5:nginx,cpe:/a:openbsd:openssh:8.2p1


indicator: 194.85.250.100
indicator_type: ipv4
source: shodan
city: database
reverse_dns: s1.c9things.eu,smart.c9things.eu,log.c9things.eu
hosting_provider: cpe:/a:f5:nginx,cpe:/o:canonical:ubuntu_linux,cpe:/a:openbsd:openssh:8.2p1,cpe:/a:mariadb:mariadb
queried_at: 2026-04-06T00:04:23.489019
raw_data:
  {"ports": [443, 2222, 3306], "vulns": [], "hostnames": ["s1.c9things.eu", "smart.c9things.eu", "log.c9things.eu"], "tags": ["database"], "cpes": ["cpe:/a:f5:nginx", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:openbsd:openssh:8.2p1", "cpe:/a:mariadb:mariadb"]}


indicator: 194.85.250.26
indicator_type: ipv4
source: shodan
city: starttls
reverse_dns: vps220.zmr.serverion.com
hosting_provider: cpe:/a:f5:nginx,cpe:/a:postfix:postfix,cpe:/a:openbsd:openssh
queried_at: 2026-04-06T00:04:28.625480
raw_data:
  {"ports": [21, 22, 25, 53, 80, 110, 143, 443, 465, 993, 995, 8880], "vulns": [], "hostnames": ["vps220.zmr.serverion.com"], "tags": ["starttls"], "cpes": ["cpe:/a:f5:nginx", "cpe:/a:postfix:postfix", "cpe:/a:openbsd:openssh"]}


indicator: 194.85.250.27
indicator_type: ipv4
source: shodan
city: starttls
reverse_dns: vps220.zmr.serverion.com
hosting_provider: cpe:/a:f5:nginx,cpe:/a:postfix:postfix,cpe:/a:openbsd:openssh:7.4
queried_at: 2026-04-06T00:04:30.391485
raw_data:
  {"ports": [21, 22, 25, 53, 80, 110, 143, 443, 465, 993, 995, 8443, 8880], "vulns": ["CVE-2025-26465", "CVE-2008-3844", "CVE-2007-2768", "CVE-2025-32728", "CVE-2023-38408", "CVE-2018-15919", "CVE-2019-6111", "CVE-2023-51385", "CVE-2020-14145", "CVE-2021-36368", "CVE-2018-20685", "CVE-2023-51767", "CVE-2019-6110", "CVE-2016-20012", "CVE-2021-41617", "CVE-2023-48795", "CVE-2020-15778", "CVE-2017-15906", "CVE-2019-6109", "CVE-2018-15473"], "hostnames": ["vps220.zmr.serverion.com"], "tags": ["starttl


indicator: 194.85.250.28
indicator_type: ipv4
source: shodan
city: eol-product,starttls
hosting_provider: cpe:/a:f5:nginx,cpe:/a:postfix:postfix,cpe:/a:php:php:8.0.30,cpe:/a:openbsd:openssh:7.4
queried_at: 2026-04-06T00:04:32.141964
raw_data:
  {"ports": [21, 22, 25, 53, 80, 110, 143, 443, 465, 993, 995, 8880], "vulns": ["CVE-2025-26465", "CVE-2008-3844", "CVE-2007-2768", "CVE-2025-32728", "CVE-2023-38408", "CVE-2018-15919", "CVE-2019-6111", "CVE-2023-51385", "CVE-2020-14145", "CVE-2007-3205", "CVE-2021-36368", "CVE-2018-15473", "CVE-2018-20685", "CVE-2023-51767", "CVE-2019-6110", "CVE-2016-20012", "CVE-2021-41617", "CVE-2024-3566", "CVE-2023-48795", "CVE-2020-15778", "CVE-2013-2220", "CVE-2017-15906", "CVE-2019-6109", "CVE-2024-5458"]

reverse_dns:
  uwmooidrenthemakelaar.nl,vps220.zmr.serverion.com,webmail.uwmooidrenthemakelaar.nl,www.uwmooidrenthemakelaar.nl


indicator: 194.85.250.29
indicator_type: ipv4
source: shodan
city: starttls
reverse_dns: vps220.zmr.serverion.com
hosting_provider: cpe:/a:openbsd:openssh:7.4,cpe:/a:f5:nginx,cpe:/a:postfix:postfix
queried_at: 2026-04-06T00:04:33.924047
raw_data:
  {"ports": [21, 22, 25, 53, 80, 110, 143, 443, 465, 993, 995, 8443, 8880], "vulns": ["CVE-2025-32728", "CVE-2021-36368", "CVE-2018-15473", "CVE-2018-15919", "CVE-2023-51385", "CVE-2008-3844", "CVE-2021-41617", "CVE-2023-51767", "CVE-2020-15778", "CVE-2019-6111", "CVE-2025-26465", "CVE-2019-6110", "CVE-2018-20685", "CVE-2020-14145", "CVE-2023-38408", "CVE-2019-6109", "CVE-2007-2768", "CVE-2017-15906", "CVE-2023-48795", "CVE-2016-20012"], "hostnames": ["vps220.zmr.serverion.com"], "tags": ["starttl


indicator: 194.85.250.30
indicator_type: ipv4
source: shodan
city: starttls
reverse_dns: vps220.zmr.serverion.com
hosting_provider: cpe:/a:f5:nginx,cpe:/a:postfix:postfix
queried_at: 2026-04-06T00:04:35.678490
raw_data:
  {"ports": [21, 22, 25, 53, 80, 110, 995, 8443], "vulns": [], "hostnames": ["vps220.zmr.serverion.com"], "tags": ["starttls"], "cpes": ["cpe:/a:f5:nginx", "cpe:/a:postfix:postfix"]}


indicator: 176.65.144.100
indicator_type: ipv4
source: otx
country: DE
queried_at: 2026-04-06T00:04:39.291380
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "ASNone ", "indicator": "176.65.144.100", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 176.65.144.24
indicator_type: ipv4
source: otx
country: DE
reverse_dns: ch.snowfalls.top,gluseranalytics.com
queried_at: 2026-04-06T00:04:50.159168
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "ASNone ", "indicator": "176.65.144.24", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["ch.snowfalls.top", "gluseranalytics.com"]}


indicator: 176.65.144.71
indicator_type: ipv4
source: otx
country: DE
reverse_dns: ch.snowfalls.top
queried_at: 2026-04-06T00:04:55.228099
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "ASNone ", "indicator": "176.65.144.71", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["ch.snowfalls.top"]}


indicator: 176.65.144.124
indicator_type: ipv4
source: otx
country: DE
reverse_dns: ch.snowfalls.top,mijnbs.com,pushtan-erneuern.com
queried_at: 2026-04-06T00:04:57.509821
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "ASNone ", "indicator": "176.65.144.124", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["ch.snowfalls.top", "mijnbs.com", "pushtan-erneuern.com"]}


indicator: 176.65.144.108
indicator_type: ipv4
source: otx
country: DE
reverse_dns: novaloop202pf.top
queried_at: 2026-04-06T00:05:00.578179
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "ASNone ", "indicator": "176.65.144.108", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["novaloop202pf.top"]}


indicator: 176.65.144.25
indicator_type: ipv4
source: otx
country: DE
queried_at: 2026-04-06T00:05:04.124774
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "ASNone ", "indicator": "176.65.144.25", "tags": [], "pulses": [], "malware_count": 1, "passive_dns_count": 19, "malware_samples": ["170656bdfd095fc6aff0f2b756f55d6a56c6e727c4740deefea406d3798fd01a"], "passive_dns": ["artesanosreunidos.xyz", "xtream-play.top", "rohotmail.cdn-domain.net", "mytest.cdn-domain.com", "press.cdn-domain.com", "chp.cat12.eu", "calcio.cdn-domain.com", "base.cdn-domain.net

reverse_dns:
  artesanosreunidos.xyz,xtream-play.top,rohotmail.cdn-domain.net,mytest.cdn-domain.com,press.cdn-domain.com,chp.cat12.eu,calcio.cdn-domain.com,base.cdn-domain.net,sfr.cdn-domain.net,cdn102.cdn-rtzhx13.online


indicator: 176.65.144.73
indicator_type: ipv4
source: otx
country: DE
queried_at: 2026-04-06T00:05:21.307808
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "ASNone ", "indicator": "176.65.144.73", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 176.65.144.96
indicator_type: ipv4
source: otx
country: DE
hosting_provider: portscan,32-bit,elf,twitter,iocs,ClickFix,mirai,ClearFake,SmartLoader,AgentTesla
queried_at: 2026-04-06T00:05:24.007541
raw_data:
  {"pulse_count": 4, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "ASNone ", "indicator": "176.65.144.96", "tags": ["portscan", "32-bit", "elf", "twitter", "iocs", "ClickFix", "mirai", "ClearFake", "SmartLoader", "AgentTesla", "arm", "ps1", "Formbook", "HijackLoader", "Loki", "rat", "Encoded", "msi", "exe", "doc", "dll", "powershell", "base64-loader", "AsyncRAT", "meterpreter", "GuLoader", "gs25181222", "censys", "Vidar", "ddos", "hta", "gs2519125", "xloader", 


indicator: 176.65.144.39
indicator_type: ipv4
source: otx
country: DE
hosting_provider: 2026-02,OpenCTI,Automated
queried_at: 2026-04-06T00:05:26.473696
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "ASNone ", "indicator": "176.65.144.39", "tags": ["2026-02", "OpenCTI", "Automated"], "pulses": ["OpenCTI_Export_2026-02"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 176.65.144.74
indicator_type: ipv4
source: otx
country: DE
queried_at: 2026-04-06T00:05:43.950156
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "ASNone ", "indicator": "176.65.144.74", "tags": [], "pulses": ["Malicious IP Addresses"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 194.85.250.98
indicator_type: ipv4
source: otx
country: DE
queried_at: 2026-04-06T00:06:01.149328
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS399471 serverion llc", "indicator": "194.85.250.98", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 194.85.250.99
indicator_type: ipv4
source: otx
country: DE
queried_at: 2026-04-06T00:06:18.057424
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS399471 serverion llc", "indicator": "194.85.250.99", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 194.85.250.100
indicator_type: ipv4
source: otx
country: DE
reverse_dns: turnwarn.ru.com,dawnstab.sa.com,pacecream.co
queried_at: 2026-04-06T00:06:21.321690
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS399471 serverion llc", "indicator": "194.85.250.100", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["turnwarn.ru.com", "dawnstab.sa.com", "pacecream.co"]}


indicator: 194.85.250.101
indicator_type: ipv4
source: otx
country: DE
queried_at: 2026-04-06T00:06:38.985526
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS399471 serverion llc", "indicator": "194.85.250.101", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 194.85.250.102
indicator_type: ipv4
source: otx
country: DE
queried_at: 2026-04-06T00:06:55.912594
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS399471 serverion llc", "indicator": "194.85.250.102", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 194.85.250.26
indicator_type: ipv4
source: otx
country: DE
queried_at: 2026-04-06T00:07:19.454613
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS399471 serverion llc", "indicator": "194.85.250.26", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 6, "malware_samples": [], "passive_dns": ["allesoversportvoeding.be", "www.allesoversportvoeding.be", "dierenklinieklabes.nl", "www.dierenklinieklabes.nl", "massagepraktijkleef.nl", "www.massagepraktijkleef.nl"]}

reverse_dns:
  allesoversportvoeding.be,www.allesoversportvoeding.be,dierenklinieklabes.nl,www.dierenklinieklabes.nl,massagepraktijkleef.nl,www.massagepraktijkleef.nl


indicator: 194.85.250.27
indicator_type: ipv4
source: otx
country: DE
queried_at: 2026-04-06T00:07:36.549535
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS399471 serverion llc", "indicator": "194.85.250.27", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 194.85.250.29
indicator_type: ipv4
source: otx
country: DE
queried_at: 2026-04-06T00:08:23.946296
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS399471 serverion llc", "indicator": "194.85.250.29", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0}


indicator: 194.85.250.30
indicator_type: ipv4
source: otx
country: DE
reverse_dns: www.thgfinancieringen.nl,thgfinancieringen.nl,www.grenzenloosfestival.nl,grenzenloosfestival.nl
queried_at: 2026-04-06T00:08:27.267057
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS399471 serverion llc", "indicator": "194.85.250.30", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 4, "malware_samples": [], "passive_dns": ["www.thgfinancieringen.nl", "thgfinancieringen.nl", "www.grenzenloosfestival.nl", "grenzenloosfestival.nl"]}


indicator: 176.65.144.24
indicator_type: ipv4
source: abuseipdb
country: CH
city: 1
hosting_provider: DEDIK SERVICES LIMITED
queried_at: 2026-04-06T00:08:29.828542
raw_data:
  {"abuse_confidence": 0, "total_reports": 1, "is_public": true, "is_tor": false, "country": "CH", "isp": "DEDIK SERVICES LIMITED", "domain": "dedik.io", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-02-08T06:10:01+00:00", "categories": [21]}


indicator: 176.65.144.25
indicator_type: ipv4
source: abuseipdb
country: CH
city: 0
hosting_provider: DEDIK SERVICES LIMITED
queried_at: 2026-04-06T00:08:36.849888
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "CH", "isp": "DEDIK SERVICES LIMITED", "domain": "dedik.io", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-02-07T01:01:08+00:00", "categories": []}


indicator: 176.65.144.73
indicator_type: ipv4
source: abuseipdb
country: CH
city: 0
hosting_provider: DEDIK SERVICES LIMITED
queried_at: 2026-04-06T00:08:38.609441
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "CH", "isp": "DEDIK SERVICES LIMITED", "domain": "dedik.io", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-02-24T09:19:23+00:00", "categories": []}


indicator: 176.65.144.39
indicator_type: ipv4
source: abuseipdb
country: CH
city: 32
hosting_provider: DEDIK SERVICES LIMITED
queried_at: 2026-04-06T00:08:42.171671
raw_data:
  {"abuse_confidence": 30, "total_reports": 32, "is_public": true, "is_tor": false, "country": "CH", "isp": "DEDIK SERVICES LIMITED", "domain": "dedik.io", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-02-26T00:04:18+00:00", "categories": [11, 14, 15, 17, 18, 19, 20, 21, 22]}


indicator: 176.65.144.74
indicator_type: ipv4
source: abuseipdb
country: CH
city: 0
hosting_provider: DEDIK SERVICES LIMITED
queried_at: 2026-04-06T00:08:43.922966
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "CH", "isp": "DEDIK SERVICES LIMITED", "domain": "dedik.io", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-01-04T19:29:31+00:00", "categories": []}


indicator: 194.85.250.28
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: RCS Technologies FZE LLC
queried_at: 2026-04-06T00:08:45.959954
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "RCS Technologies FZE LLC", "domain": "rcstech.ae", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 194.85.250.99
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: RCS Technologies FZE LLC
queried_at: 2026-04-06T00:08:49.598851
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "RCS Technologies FZE LLC", "domain": "rcstech.ae", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2022-08-15T13:06:20+00:00", "categories": []}


indicator: 194.85.250.100
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: RCS Technologies FZE LLC
queried_at: 2026-04-06T00:08:51.474875
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "RCS Technologies FZE LLC", "domain": "rcstech.ae", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2022-08-15T13:06:18+00:00", "categories": []}


indicator: 194.85.250.101
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: RCS Technologies FZE LLC
queried_at: 2026-04-06T00:08:53.457800
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "RCS Technologies FZE LLC", "domain": "rcstech.ae", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2022-08-15T14:05:53+00:00", "categories": []}


indicator: 194.85.250.102
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: RCS Technologies FZE LLC
queried_at: 2026-04-06T00:08:55.223433
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "RCS Technologies FZE LLC", "domain": "rcstech.ae", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2022-08-15T14:05:55+00:00", "categories": []}


indicator: 176.65.144.100
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: Dedik Services Limited
queried_at: 2026-04-06T00:09:05.099751
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "DE", "as_owner": "Dedik Services Limited", "asn": 209413, "network": "176.65.144.0/24", "last_analysis_date": 1773485289}


indicator: 176.65.144.24
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: Dedik Services Limited
queried_at: 2026-04-06T00:09:25.603658
raw_data:
  {"malicious": 2, "suspicious": 1, "harmless": 54, "undetected": 37, "reputation": 0, "country": "DE", "as_owner": "Dedik Services Limited", "asn": 209413, "network": "176.65.144.0/24", "last_analysis_date": 1773843148}


indicator: 176.65.144.71
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: Dedik Services Limited
queried_at: 2026-04-06T00:09:46.062515
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 55, "undetected": 39, "reputation": 0, "country": "DE", "as_owner": "Dedik Services Limited", "asn": 209413, "network": "176.65.144.0/24", "last_analysis_date": 1774570580}


indicator: 176.65.144.124
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: Dedik Services Limited
queried_at: 2026-04-06T00:10:06.676483
raw_data:
  {"malicious": 1, "suspicious": 0, "harmless": 59, "undetected": 34, "reputation": 0, "country": "DE", "as_owner": "Dedik Services Limited", "asn": 209413, "network": "176.65.144.0/24", "last_analysis_date": 1774033409}


indicator: 176.65.144.108
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: Dedik Services Limited
queried_at: 2026-04-06T00:10:27.264103
raw_data:
  {"malicious": 11, "suspicious": 1, "harmless": 50, "undetected": 32, "reputation": -11, "country": "DE", "as_owner": "Dedik Services Limited", "asn": 209413, "network": "176.65.144.0/24", "last_analysis_date": 1775413822}


indicator: 176.65.144.25
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: Dedik Services Limited
queried_at: 2026-04-06T00:10:47.744112
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 58, "undetected": 36, "reputation": 0, "country": "DE", "as_owner": "Dedik Services Limited", "asn": 209413, "network": "176.65.144.0/24", "last_analysis_date": 1774460333}


indicator: 176.65.144.73
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: Dedik Services Limited
queried_at: 2026-04-06T00:11:08.241612
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "DE", "as_owner": "Dedik Services Limited", "asn": 209413, "network": "176.65.144.0/24", "last_analysis_date": 1775376730}


indicator: 176.65.144.96
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: Dedik Services Limited
queried_at: 2026-04-06T00:11:28.768144
raw_data:
  {"malicious": 15, "suspicious": 0, "harmless": 44, "undetected": 35, "reputation": -1, "country": "DE", "as_owner": "Dedik Services Limited", "asn": 209413, "network": "176.65.144.0/24", "last_analysis_date": 1775040152}


indicator: 176.65.144.39
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: Dedik Services Limited
queried_at: 2026-04-06T00:11:49.286175
raw_data:
  {"malicious": 5, "suspicious": 2, "harmless": 54, "undetected": 33, "reputation": 0, "country": "DE", "as_owner": "Dedik Services Limited", "asn": 209413, "network": "176.65.144.0/24", "last_analysis_date": 1771704803}


indicator: 176.65.144.74
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: Dedik Services Limited
queried_at: 2026-04-06T00:12:09.833919
raw_data:
  {"malicious": 0, "suspicious": 1, "harmless": 57, "undetected": 36, "reputation": 0, "country": "DE", "as_owner": "Dedik Services Limited", "asn": 209413, "network": "176.65.144.0/24", "last_analysis_date": 1773826778}


indicator: 194.85.250.98
indicator_type: ipv4
source: virustotal
country: NL
hosting_provider: Des Equity LLC
queried_at: 2026-04-06T00:12:30.591451
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 58, "undetected": 36, "reputation": 0, "country": "NL", "as_owner": "Des Equity LLC", "asn": 399471, "network": "194.85.250.0/24", "last_analysis_date": 1769914958}


indicator: 194.85.250.99
indicator_type: ipv4
source: virustotal
country: NL
hosting_provider: Des Equity LLC
queried_at: 2026-04-06T00:12:51.293127
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "NL", "as_owner": "Des Equity LLC", "asn": 399471, "network": "194.85.250.0/24", "last_analysis_date": 1663531870}


indicator: 194.85.250.100
indicator_type: ipv4
source: virustotal
country: NL
hosting_provider: Des Equity LLC
queried_at: 2026-04-06T00:13:11.699358
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "NL", "as_owner": "Des Equity LLC", "asn": 399471, "network": "194.85.250.0/24", "last_analysis_date": 1663578292}


indicator: 194.85.250.101
indicator_type: ipv4
source: virustotal
country: NL
hosting_provider: Des Equity LLC
queried_at: 2026-04-06T00:13:32.230870
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "NL", "as_owner": "Des Equity LLC", "asn": 399471, "network": "194.85.250.0/24", "last_analysis_date": 1663581873}


indicator: 194.85.250.102
indicator_type: ipv4
source: virustotal
country: NL
hosting_provider: Des Equity LLC
queried_at: 2026-04-06T00:13:52.861597
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "NL", "as_owner": "Des Equity LLC", "asn": 399471, "network": "194.85.250.0/24", "last_analysis_date": 1769887232}


indicator: 194.85.250.26
indicator_type: ipv4
source: virustotal
country: NL
hosting_provider: Des Equity LLC
queried_at: 2026-04-06T00:14:13.798292
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "NL", "as_owner": "Des Equity LLC", "asn": 399471, "network": "194.85.250.0/24", "last_analysis_date": 1764463112}


indicator: 194.85.250.27
indicator_type: ipv4
source: virustotal
country: NL
hosting_provider: Des Equity LLC
queried_at: 2026-04-06T00:14:34.261032
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "NL", "as_owner": "Des Equity LLC", "asn": 399471, "network": "194.85.250.0/24", "last_analysis_date": 1775379833}


indicator: 194.85.250.28
indicator_type: ipv4
source: virustotal
country: NL
hosting_provider: Des Equity LLC
queried_at: 2026-04-06T00:14:54.738505
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "NL", "as_owner": "Des Equity LLC", "asn": 399471, "network": "194.85.250.0/24", "last_analysis_date": 1774800873}


indicator: 194.85.250.29
indicator_type: ipv4
source: virustotal
country: NL
hosting_provider: Des Equity LLC
queried_at: 2026-04-06T00:15:15.448406
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "NL", "as_owner": "Des Equity LLC", "asn": 399471, "network": "194.85.250.0/24", "last_analysis_date": 1775321759}


indicator: 194.85.250.30
indicator_type: ipv4
source: virustotal
country: NL
hosting_provider: Des Equity LLC
queried_at: 2026-04-06T00:15:35.880246
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "NL", "as_owner": "Des Equity LLC", "asn": 399471, "network": "194.85.250.0/24", "last_analysis_date": 1664388227}


indicator: 176.65.144.100
indicator_type: ipv4
source: censys
country: CH
city: Lugano
hosting_provider: DEDIK-CH
queried_at: 2026-04-06T00:15:56.983717
raw_data:
  {"ports": [80, 443], "services": ["80/HTTP", "443/HTTP"], "os": "", "os_version": "", "asn": 209413, "as_name": "DEDIK-CH", "country": "CH", "city": "Lugano", "last_updated": "", "labels": []}


indicator: 176.65.144.24
indicator_type: ipv4
source: censys
country: CH
city: Lugano
reverse_dns: linux
hosting_provider: DEDIK-CH
queried_at: 2026-04-06T00:16:00.578064
raw_data:
  {"ports": [22, 443, 3001], "services": ["22/SSH", "443/HTTP", "3001/UNKNOWN"], "os": "linux", "os_version": "", "asn": 209413, "as_name": "DEDIK-CH", "country": "CH", "city": "Lugano", "last_updated": "", "labels": []}


indicator: 176.65.144.108
indicator_type: ipv4
source: censys
country: CH
city: Lugano
reverse_dns: linux
hosting_provider: DEDIK-CH
queried_at: 2026-04-06T00:16:11.514361
raw_data:
  {"ports": [21, 22, 25, 80, 110, 143, 443, 465, 587, 993, 995, 7777, 8888, 9000], "services": ["21/FTP", "22/SSH", "25/SMTP", "80/HTTP", "110/POP3", "143/IMAP", "443/HTTP", "465/SMTP", "587/SMTP", "993/IMAP", "995/POP3", "7777/HTTP", "8888/HTTP", "9000/HTTP"], "os": "linux", "os_version": "", "asn": 209413, "as_name": "DEDIK-CH", "country": "CH", "city": "Lugano", "last_updated": "", "labels": []}


indicator: 176.65.144.25
indicator_type: ipv4
source: censys
country: CH
city: Lugano
reverse_dns: linux
hosting_provider: DEDIK-CH
queried_at: 2026-04-06T00:16:15.582405
raw_data:
  {"ports": [21, 22, 80, 443, 888, 15976], "services": ["21/FTP", "22/SSH", "80/HTTP", "443/HTTP", "888/HTTP", "15976/HTTP"], "os": "linux", "os_version": "", "asn": 209413, "as_name": "DEDIK-CH", "country": "CH", "city": "Lugano", "last_updated": "", "labels": []}


indicator: 176.65.144.73
indicator_type: ipv4
source: censys
country: CH
city: Lugano
hosting_provider: DEDIK-CH
queried_at: 2026-04-06T00:16:18.954604
raw_data:
  {"ports": [21, 80, 443, 888, 8443], "services": ["21/FTP", "80/UNKNOWN", "443/HTTP", "888/HTTP", "8443/HTTP"], "os": "", "os_version": "", "asn": 209413, "as_name": "DEDIK-CH", "country": "CH", "city": "Lugano", "last_updated": "", "labels": []}


indicator: 176.65.144.96
indicator_type: ipv4
source: censys
country: CH
city: Lugano
reverse_dns: linux
hosting_provider: DEDIK-CH
queried_at: 2026-04-06T00:16:22.844206
raw_data:
  {"ports": [21, 22, 80, 443, 888, 8083], "services": ["21/FTP", "22/SSH", "80/HTTP", "443/HTTP", "888/HTTP", "8083/HTTP"], "os": "linux", "os_version": "", "asn": 209413, "as_name": "DEDIK-CH", "country": "CH", "city": "Lugano", "last_updated": "", "labels": []}


indicator: 176.65.144.39
indicator_type: ipv4
source: censys
country: CH
city: Lugano
hosting_provider: DEDIK-CH
queried_at: 2026-04-06T00:16:26.579744
raw_data:
  {"ports": [443, 8443], "services": ["443/HTTP", "8443/HTTP"], "os": "", "os_version": "", "asn": 209413, "as_name": "DEDIK-CH", "country": "CH", "city": "Lugano", "last_updated": "", "labels": []}


indicator: 176.65.144.74
indicator_type: ipv4
source: censys
country: CH
city: Lugano
hosting_provider: DEDIK-CH
queried_at: 2026-04-06T00:16:30.519925
raw_data:
  {"ports": [22, 80, 443, 3000, 4491, 5000, 5555, 8001, 8080, 12001], "services": ["22/SSH", "80/HTTP", "443/HTTP", "3000/HTTP", "4491/HTTP", "5000/HTTP", "5555/HTTP", "8001/HTTP", "8080/HTTP", "12001/HTTP"], "os": "", "os_version": "", "asn": 209413, "as_name": "DEDIK-CH", "country": "CH", "city": "Lugano", "last_updated": "", "labels": []}


indicator: 176.65.144.100
indicator_type: ipv4
source: firehol
queried_at: 2026-04-06T00:17:36.896816
raw_data:
  {"listed": false, "matched_networks": [], "match_count": 0, "lists_checked": 4, "total_networks": 198366}


indicator: 194.85.250.98
indicator_type: ipv4
source: firehol
reverse_dns: 194.85.250.0/24
queried_at: 2026-04-06T00:17:37.965492
raw_data:
  {"listed": true, "matched_networks": ["194.85.250.0/24"], "match_count": 1, "lists_checked": 4, "total_networks": 198366}


indicator: 176.65.144.100
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-06T00:17:39.539960
raw_data:
  {"hostnames_checked": ["depsearch.sbs", "www.depsearch.sbs"], "hostnames_count": 2, "matched_domains": [], "match_count": 0, "blocklist_size": 92277}


indicator: 176.65.144.24
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-06T00:17:39.566401
raw_data:
  {"hostnames_checked": ["ch.snowfalls.top", "gluseranalytics.com"], "hostnames_count": 2, "matched_domains": [], "match_count": 0, "blocklist_size": 92277}


indicator: 176.65.144.71
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-06T00:17:39.589365
raw_data:
  {"hostnames_checked": ["ch.snowfalls.top"], "hostnames_count": 1, "matched_domains": [], "match_count": 0, "blocklist_size": 92277}


indicator: 176.65.144.124
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-06T00:17:39.610448
raw_data:
  {"hostnames_checked": ["ch.snowfalls.top", "mijnbs.com", "pushtan-erneuern.com"], "hostnames_count": 3, "matched_domains": [], "match_count": 0, "blocklist_size": 92277}


indicator: 176.65.144.108
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-06T00:17:39.632723
raw_data:
  {"hostnames_checked": ["novaloop202pf.top", "7814952987-27-03-2026.dedik.io"], "hostnames_count": 2, "matched_domains": [], "match_count": 0, "blocklist_size": 92277}


indicator: 176.65.144.25
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-06T00:17:39.652278
raw_data:
  {"hostnames_checked": ["press.cdn-domain.com", "loop.cdn-domain.net", "cloudfront.cdn-domain.net", "cdn102.cdn-rtzhx13.online", "mytest.cdn-domain.com", "sfr.cdn-domain.net", "artesanosreunidos.xyz", "000012222.cdn-domain.com", "chp.cat12.eu", "rohotmail.cdn-domain.net", "ollie.cosmeticosonlinebrasil.com", "09.11.cdn-domain.net", "xxxbs.cdn-domain.net", "ssl.cdn-domain.com", "cdn.cdn-domain.com", "base.cdn-domain.net", "jav1.cdn-domain.net", "xtream-play.top", "calcio.cdn-domain.com", "whatdoyou


indicator: 176.65.144.73
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-06T00:17:39.673360
raw_data:
  {"hostnames_checked": [], "hostnames_count": 0, "matched_domains": [], "match_count": 0, "blocklist_size": 92277}


indicator: 176.65.144.39
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-06T00:17:39.717300
raw_data:
  {"hostnames_checked": ["sw.nnmm.me"], "hostnames_count": 1, "matched_domains": [], "match_count": 0, "blocklist_size": 92277}


indicator: 176.65.144.74
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-06T00:17:39.745670
raw_data:
  {"hostnames_checked": ["identityportal.info"], "hostnames_count": 1, "matched_domains": [], "match_count": 0, "blocklist_size": 92277}


indicator: 194.85.250.99
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-06T00:17:39.786791
raw_data:
  {"hostnames_checked": ["log.c9things.eu", "s1.c9things.eu", "smart.c9things.eu"], "hostnames_count": 3, "matched_domains": [], "match_count": 0, "blocklist_size": 92277}


indicator: 194.85.250.100
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-06T00:17:39.812134
raw_data:
  {"hostnames_checked": ["pacecream.co", "dawnstab.sa.com", "s1.c9things.eu", "turnwarn.ru.com", "smart.c9things.eu", "log.c9things.eu"], "hostnames_count": 6, "matched_domains": [], "match_count": 0, "blocklist_size": 92277}


indicator: 194.85.250.26
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-06T00:17:39.891715
raw_data:
  {"hostnames_checked": ["massagepraktijkleef.nl", "www.dierenklinieklabes.nl", "www.allesoversportvoeding.be", "www.massagepraktijkleef.nl", "vps220.zmr.serverion.com", "dierenklinieklabes.nl", "allesoversportvoeding.be"], "hostnames_count": 7, "matched_domains": [], "match_count": 0, "blocklist_size": 92277}


indicator: 194.85.250.27
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-06T00:17:39.913828
raw_data:
  {"hostnames_checked": ["vps220.zmr.serverion.com"], "hostnames_count": 1, "matched_domains": [], "match_count": 0, "blocklist_size": 92277}


indicator: 194.85.250.28
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-06T00:17:39.935377
raw_data:
  {"hostnames_checked": ["webmail.uwmooidrenthemakelaar.nl", "www.uwmooidrenthemakelaar.nl", "vps220.zmr.serverion.com", "uwmooidrenthemakelaar.nl"], "hostnames_count": 4, "matched_domains": [], "match_count": 0, "blocklist_size": 92277}


indicator: 194.85.250.30
indicator_type: ipv4
source: stevenblack
queried_at: 2026-04-06T00:17:39.972867
raw_data:
  {"hostnames_checked": ["thgfinancieringen.nl", "www.grenzenloosfestival.nl", "vps220.zmr.serverion.com", "grenzenloosfestival.nl", "www.thgfinancieringen.nl"], "hostnames_count": 5, "matched_domains": [], "match_count": 0, "blocklist_size": 92277}


indicator: 5.226.137.151
indicator_type: ipv4
source: shodan
reverse_dns: 151.137.226.5.baremetal.zare.com
queried_at: 2026-04-08T06:01:34.486366
raw_data:
  {"ports": [53], "vulns": [], "hostnames": ["151.137.226.5.baremetal.zare.com"], "tags": [], "cpes": []}


indicator: 5.226.137.230
indicator_type: ipv4
source: shodan
reverse_dns: 230.137.226.5.baremetal.zare.com
queried_at: 2026-04-08T06:01:36.228903
raw_data:
  {"ports": [53], "vulns": [], "hostnames": ["230.137.226.5.baremetal.zare.com"], "tags": [], "cpes": []}


indicator: 5.226.137.231
indicator_type: ipv4
source: shodan
reverse_dns: 231.137.226.5.baremetal.zare.com
queried_at: 2026-04-08T06:01:37.982463
raw_data:
  {"ports": [53], "vulns": [], "hostnames": ["231.137.226.5.baremetal.zare.com"], "tags": [], "cpes": []}


indicator: 5.226.137.232
indicator_type: ipv4
source: shodan
reverse_dns: 232.137.226.5.baremetal.zare.com
queried_at: 2026-04-08T06:01:39.744497
raw_data:
  {"ports": [53], "vulns": [], "hostnames": ["232.137.226.5.baremetal.zare.com"], "tags": [], "cpes": []}


indicator: 5.226.137.234
indicator_type: ipv4
source: shodan
reverse_dns: 234.137.226.5.baremetal.zare.com
queried_at: 2026-04-08T06:01:41.513224
raw_data:
  {"ports": [53], "vulns": [], "hostnames": ["234.137.226.5.baremetal.zare.com"], "tags": [], "cpes": []}


indicator: 5.226.137.235
indicator_type: ipv4
source: shodan
reverse_dns: 235.137.226.5.baremetal.zare.com
queried_at: 2026-04-08T06:01:43.285353
raw_data:
  {"ports": [53], "vulns": [], "hostnames": ["235.137.226.5.baremetal.zare.com"], "tags": [], "cpes": []}


indicator: 5.226.137.242
indicator_type: ipv4
source: shodan
reverse_dns: 242.137.226.5.baremetal.zare.com
queried_at: 2026-04-08T06:01:45.026605
raw_data:
  {"ports": [53], "vulns": [], "hostnames": ["242.137.226.5.baremetal.zare.com"], "tags": [], "cpes": []}


indicator: 5.226.137.243
indicator_type: ipv4
source: shodan
reverse_dns: 243.137.226.5.baremetal.zare.com
queried_at: 2026-04-08T06:01:46.759334
raw_data:
  {"ports": [53], "vulns": [], "hostnames": ["243.137.226.5.baremetal.zare.com"], "tags": [], "cpes": []}


indicator: 5.226.137.244
indicator_type: ipv4
source: shodan
reverse_dns: 244.137.226.5.baremetal.zare.com
queried_at: 2026-04-08T06:01:48.562931
raw_data:
  {"ports": [53], "vulns": [], "hostnames": ["244.137.226.5.baremetal.zare.com"], "tags": [], "cpes": []}


indicator: 5.226.137.245
indicator_type: ipv4
source: shodan
reverse_dns: 245.137.226.5.baremetal.zare.com
queried_at: 2026-04-08T06:01:50.296958
raw_data:
  {"ports": [53], "vulns": [], "hostnames": ["245.137.226.5.baremetal.zare.com"], "tags": [], "cpes": []}


indicator: 88.80.148.49
indicator_type: ipv4
source: shodan
city: self-signed,database
hosting_provider: cpe:/a:postgresql:postgresql,cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-04-08T06:06:09.468576
raw_data:
  {"ports": [22, 80, 443, 5432], "vulns": [], "hostnames": [], "tags": ["self-signed", "database"], "cpes": ["cpe:/a:postgresql:postgresql", "cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 88.80.148.53
indicator_type: ipv4
source: shodan
queried_at: 2026-04-08T06:06:11.228702
raw_data:
  {"ports": [22, 80, 443], "vulns": [], "hostnames": [], "tags": [], "cpes": ["cpe:/a:openresty:openresty", "cpe:/a:openbsd:openssh:8.9p1", "cpe:/a:f5:nginx", "cpe:/o:canonical:ubuntu_linux"]}

hosting_provider:
  cpe:/a:openresty:openresty,cpe:/a:openbsd:openssh:8.9p1,cpe:/a:f5:nginx,cpe:/o:canonical:ubuntu_linux


indicator: 103.140.186.148
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/a:openbsd:openssh:8.4p1,cpe:/o:debian:debian_linux,cpe:/o:linux:linux_kernel
queried_at: 2026-04-08T06:06:16.542175
raw_data:
  {"ports": [22], "vulns": [], "hostnames": [], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.4p1", "cpe:/o:debian:debian_linux", "cpe:/o:linux:linux_kernel"]}


indicator: 37.221.64.77
indicator_type: ipv4
source: otx
country: RU
reverse_dns: secure.id.dervisoglusigorta.com
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:06:29.273448
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS200019 alexhost srl", "indicator": "37.221.64.77", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 1, "passive_dns_count": 1, "malware_samples": ["846ea84a16b8def74aa7d864fc0c705dd0a63a6283e5517fc52cb45209626729"], "passive_dns": ["secure.id.dervisoglusigorta.com"]}


indicator: 37.221.64.78
indicator_type: ipv4
source: otx
country: RU
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:06:31.634471
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS200019 alexhost srl", "indicator": "37.221.64.78", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 37.221.64.93
indicator_type: ipv4
source: otx
country: RU
reverse_dns: jumperending.pics,anmoi.com
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:06:46.208655
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS200019 alexhost srl", "indicator": "37.221.64.93", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 1, "passive_dns_count": 2, "malware_samples": ["d32ab9e6756ee5eb17accd106ccc544280784d1b4e0da4a6ae32889c478d3da2"], "passive_dns": ["jumperending.pics", "anmoi.com"]}


indicator: 37.221.64.101
indicator_type: ipv4
source: otx
country: RU
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:06:55.992414
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS200019 alexhost srl", "indicator": "37.221.64.101", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 37.221.64.116
indicator_type: ipv4
source: otx
country: RU
reverse_dns: www.nedavisic.com,nedavisic.com
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:07:00.311874
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS200019 alexhost srl", "indicator": "37.221.64.116", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["www.nedavisic.com", "nedavisic.com"]}


indicator: 37.221.64.131
indicator_type: ipv4
source: otx
country: RU
reverse_dns: skyfilles.com
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:07:02.774883
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS200019 alexhost srl", "indicator": "37.221.64.131", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["skyfilles.com"]}


indicator: 37.221.64.148
indicator_type: ipv4
source: otx
country: RU
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:07:05.159220
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS200019 alexhost srl", "indicator": "37.221.64.148", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 1, "passive_dns_count": 0, "malware_samples": ["0fc9d87158baa3f4b498f72c725b07b2e06102d9c3db1ae11aad9ae6721b0b50"], "passive_dns": []}


indicator: 37.221.64.149
indicator_type: ipv4
source: otx
country: RU
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:07:22.566869
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS200019 alexhost srl", "indicator": "37.221.64.149", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 37.221.64.150
indicator_type: ipv4
source: otx
country: RU
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:07:25.256865
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS200019 alexhost srl", "indicator": "37.221.64.150", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 37.221.64.151
indicator_type: ipv4
source: otx
country: RU
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:07:42.209336
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS200019 alexhost srl", "indicator": "37.221.64.151", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 37.221.64.163
indicator_type: ipv4
source: otx
country: RU
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:07:55.190793
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS200019 alexhost srl", "indicator": "37.221.64.163", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 7, "malware_samples": [], "passive_dns": ["admin.millax.shop", "millax.shop", "www.millax.shop", "leuiton.com", "milesparkglabal.com", "bnstxkr.com", "zumexmedical.com"]}

reverse_dns:
  admin.millax.shop,millax.shop,www.millax.shop,leuiton.com,milesparkglabal.com,bnstxkr.com,zumexmedical.com


indicator: 37.221.64.173
indicator_type: ipv4
source: otx
country: RU
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:07:59.576568
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS200019 alexhost srl", "indicator": "37.221.64.173", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 37.221.64.199
indicator_type: ipv4
source: otx
country: RU
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:08:16.885056
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS200019 alexhost srl", "indicator": "37.221.64.199", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 37.221.64.208
indicator_type: ipv4
source: otx
country: RU
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:08:33.913456
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS200019 alexhost srl", "indicator": "37.221.64.208", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 37.221.64.224
indicator_type: ipv4
source: otx
country: RU
reverse_dns: www.c-ave.co,admin.c-ave.co,c-ave.co
hosting_provider: dns hijacking,SSH,Honeypot,ip address
queried_at: 2026-04-08T06:08:41.435633
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS200019 alexhost srl", "indicator": "37.221.64.224", "tags": ["dns hijacking", "SSH", "Honeypot", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations", "SSH Honeypot IPs 2021 May"], "malware_count": 1, "passive_dns_count": 3, "malware_samples": ["dae58ef1b0c1c8b21b1da392a042f88e8a28931dd6a8df1012a7c0ac3bc3987f"], "passive_dns": ["www.c-ave.co", "


indicator: 37.221.64.254
indicator_type: ipv4
source: otx
country: RU
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:08:58.403388
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS200019 alexhost srl", "indicator": "37.221.64.254", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 5.226.137.151
indicator_type: ipv4
source: otx
country: GB
city: London
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:09:15.605679
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": "London", "asn": "AS25369 hydra communications ltd", "indicator": "5.226.137.151", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 5.226.137.230
indicator_type: ipv4
source: otx
country: GB
city: London
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:09:33.132842
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": "London", "asn": "AS25369 hydra communications ltd", "indicator": "5.226.137.230", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 5.226.137.231
indicator_type: ipv4
source: otx
country: GB
city: London
reverse_dns: pop3.dishjack.net,sot.thruhere.net
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:09:38.272528
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": "London", "asn": "AS25369 hydra communications ltd", "indicator": "5.226.137.231", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["pop3.dishjack.net", "sot.thruhere.net"]}


indicator: 5.226.137.232
indicator_type: ipv4
source: otx
country: GB
city: London
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:09:55.170249
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": "London", "asn": "AS25369 hydra communications ltd", "indicator": "5.226.137.232", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 5.226.137.234
indicator_type: ipv4
source: otx
country: GB
city: London
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:10:12.235484
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": "London", "asn": "AS25369 hydra communications ltd", "indicator": "5.226.137.234", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 5.226.137.235
indicator_type: ipv4
source: otx
country: GB
city: London
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:10:30.194789
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": "London", "asn": "AS25369 hydra communications ltd", "indicator": "5.226.137.235", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 5.226.137.242
indicator_type: ipv4
source: otx
country: GB
city: London
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:10:47.346283
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": "London", "asn": "AS25369 hydra communications ltd", "indicator": "5.226.137.242", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 5.226.137.243
indicator_type: ipv4
source: otx
country: GB
city: London
hosting_provider: ioc,phishing,ip address,Nextray,malicious,dns hijacking,cyber security
queried_at: 2026-04-08T06:11:04.774378
raw_data:
  {"pulse_count": 31, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": "London", "asn": "AS25369 hydra communications ltd", "indicator": "5.226.137.243", "tags": ["ioc", "phishing", "ip address", "Nextray", "malicious", "dns hijacking", "cyber security"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations", "IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IO


indicator: 5.226.137.244
indicator_type: ipv4
source: otx
country: GB
city: London
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:11:36.878913
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": "London", "asn": "AS25369 hydra communications ltd", "indicator": "5.226.137.244", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 0}


indicator: 5.226.137.245
indicator_type: ipv4
source: otx
country: GB
city: London
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:12:09.201642
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": "London", "asn": "AS25369 hydra communications ltd", "indicator": "5.226.137.245", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 0}


indicator: 23.106.120.119
indicator_type: ipv4
source: otx
country: SG
hosting_provider: july,ip address,middle vps,sept,dns hijacking,march
queried_at: 2026-04-08T06:12:39.705486
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Singapore", "country_code": "SG", "city": null, "asn": "AS59253 leaseweb asia pacific pte. ltd.", "indicator": "23.106.120.119", "tags": ["july", "ip address", "middle vps", "sept", "dns hijacking", "march"], "pulses": ["IOC - FrostArmada: All thriller, no (malware) filler", "IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 64.120.31.96
indicator_type: ipv4
source: otx
country: US
hosting_provider: july,ip address,middle vps,sept,dns hijacking,march
queried_at: 2026-04-08T06:12:56.953508
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "AS396362 leaseweb usa  inc.", "indicator": "64.120.31.96", "tags": ["july", "ip address", "middle vps", "sept", "dns hijacking", "march"], "pulses": ["IOC - FrostArmada: All thriller, no (malware) filler", "IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 64.120.31.97
indicator_type: ipv4
source: otx
country: US
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:13:13.899479
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "AS396362 leaseweb usa  inc.", "indicator": "64.120.31.97", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 64.120.31.99
indicator_type: ipv4
source: otx
country: US
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:13:36.772894
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "AS396362 leaseweb usa  inc.", "indicator": "64.120.31.99", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 77.83.197.37
indicator_type: ipv4
source: otx
country: GB
city: London
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:14:24.468871
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": "London", "asn": "AS61046 hz hosting ltd", "indicator": "77.83.197.37", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 0}


indicator: 77.83.197.40
indicator_type: ipv4
source: otx
country: GB
city: London
hosting_provider: star,conti,id use,ta0004,header dropdown,template,trickbot,footer,csirt,copy
queried_at: 2026-04-08T06:15:27.506954
raw_data:
  {"pulse_count": 4, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": "London", "asn": "AS61046 hz hosting ltd", "indicator": "77.83.197.40", "tags": ["star", "conti", "id use", "ta0004", "header dropdown", "template", "trickbot", "footer", "csirt", "copy", "open", "cisa", "cobalt strike", "ip address", "span", "technique title", "zloader", "script", "remote desktop", "button", "enterprise", "dns hijacking", "cert", "cyber security",


indicator: 77.83.197.41
indicator_type: ipv4
source: otx
country: GB
city: London
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:15:59.721703
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": "London", "asn": "AS61046 hz hosting ltd", "indicator": "77.83.197.41", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 0}


indicator: 77.83.197.42
indicator_type: ipv4
source: otx
country: GB
city: London
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:16:31.595738
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": "London", "asn": "AS61046 hz hosting ltd", "indicator": "77.83.197.42", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 0}


indicator: 77.83.197.45
indicator_type: ipv4
source: otx
country: GB
city: London
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:17:34.967627
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": "London", "asn": "AS61046 hz hosting ltd", "indicator": "77.83.197.45", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 0}


indicator: 77.83.197.47
indicator_type: ipv4
source: otx
country: GB
city: London
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:18:07.785399
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": "London", "asn": "AS61046 hz hosting ltd", "indicator": "77.83.197.47", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 77.83.197.48
indicator_type: ipv4
source: otx
country: GB
city: London
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:18:24.442476
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": "London", "asn": "AS61046 hz hosting ltd", "indicator": "77.83.197.48", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 77.83.197.49
indicator_type: ipv4
source: otx
country: GB
city: London
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:18:35.059194
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": "London", "asn": "AS61046 hz hosting ltd", "indicator": "77.83.197.49", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 43, "malware_samples": [], "passive_dns": ["www.ready-padding.xyz", "www.valid-great.xyz", "programming-make.xyz", "innovation-make.xyz

reverse_dns:
  www.ready-padding.xyz,www.valid-great.xyz,programming-make.xyz,innovation-make.xyz,innovation-brains.xyz,valid-great.xyz,gorgeous-mining.xyz,ready-padding.xyz,main-tricky.xyz,www.main-tricky.xyz


indicator: 77.83.197.50
indicator_type: ipv4
source: otx
country: GB
city: London
reverse_dns: sahkoposti17.email,v2.vlike.work
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:18:39.437366
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": "London", "asn": "AS61046 hz hosting ltd", "indicator": "77.83.197.50", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["sahkoposti17.email", "v2.vlike.work"]}


indicator: 77.83.197.51
indicator_type: ipv4
source: otx
country: GB
city: London
hosting_provider: ioc,phishing,ip address,Nextray,malicious,dns hijacking,cyber security
queried_at: 2026-04-08T06:18:57.022138
raw_data:
  {"pulse_count": 30, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": "London", "asn": "AS61046 hz hosting ltd", "indicator": "77.83.197.51", "tags": ["ioc", "phishing", "ip address", "Nextray", "malicious", "dns hijacking", "cyber security"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations", "IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industri


indicator: 77.83.197.52
indicator_type: ipv4
source: otx
country: GB
city: London
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:19:29.891083
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": "London", "asn": "AS61046 hz hosting ltd", "indicator": "77.83.197.52", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 9, "passive_dns": ["autoconfig.planesouthwest.com", "www.planesouthwest.com", "planesouthwest.com", "srnawave.com", "box.srnawave.com",

reverse_dns:
  autoconfig.planesouthwest.com,www.planesouthwest.com,planesouthwest.com,srnawave.com,box.srnawave.com,shoawdenko.com,www.shoawdenko.com,autoconfig.shoawdenko.com,box.shoawdenko.com


indicator: 77.83.197.53
indicator_type: ipv4
source: otx
country: GB
city: London
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:19:50.580967
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": "London", "asn": "AS61046 hz hosting ltd", "indicator": "77.83.197.53", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 8, "passive_dns": ["ftp.interrplex.com", "ubis0tf.com", "ftp.ubis0tf.com", "ftp.standardrnediaindex.com", "standardrnediaindex.com", "a

reverse_dns:
  ftp.interrplex.com,ubis0tf.com,ftp.ubis0tf.com,ftp.standardrnediaindex.com,standardrnediaindex.com,autoconfig.standardrnediaindex.com,www.standardrnediaindex.com,slide-transfer.net


indicator: 77.83.197.54
indicator_type: ipv4
source: otx
country: GB
city: London
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:20:08.055768
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": "London", "asn": "AS61046 hz hosting ltd", "indicator": "77.83.197.54", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 0, "passive_dns": []}


indicator: 77.83.197.55
indicator_type: ipv4
source: otx
country: GB
city: London
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:20:25.207890
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": "London", "asn": "AS61046 hz hosting ltd", "indicator": "77.83.197.55", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 77.83.197.56
indicator_type: ipv4
source: otx
country: GB
city: London
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:20:42.683644
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": "London", "asn": "AS61046 hz hosting ltd", "indicator": "77.83.197.56", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 77.83.197.57
indicator_type: ipv4
source: otx
country: GB
city: London
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:21:00.260227
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": "London", "asn": "AS61046 hz hosting ltd", "indicator": "77.83.197.57", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 77.83.197.59
indicator_type: ipv4
source: otx
country: GB
city: London
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:21:33.088030
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": "London", "asn": "AS61046 hz hosting ltd", "indicator": "77.83.197.59", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 77.83.197.60
indicator_type: ipv4
source: otx
country: GB
city: London
reverse_dns: netwerk22.email
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:21:40.891785
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": "London", "asn": "AS61046 hz hosting ltd", "indicator": "77.83.197.60", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["netwerk22.email"]}


indicator: 79.141.160.78
indicator_type: ipv4
source: otx
country: US
city: Chicago
hosting_provider: cve-2025-61882,cl0p,powershell,clop,zeroday,0day,cve-2023-0669,tinymet,vulnerability,exploit
queried_at: 2026-04-08T06:22:02.473083
raw_data:
  {"pulse_count": 25, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Chicago", "asn": "AS202015 hz hosting ltd", "indicator": "79.141.160.78", "tags": ["cve-2025-61882", "cl0p", "powershell", "clop", "zeroday", "0day", "cve-2023-0669", "tinymet", "vulnerability", "exploit", "cobalt strike", "sql injection", "ip address", "cryptomix", "ip addresses", "middle vps", "movit exploit", "dns hijacking", "oracle ebs", "facebook", "ta505", "group", "azure sql", "rans


indicator: 79.141.161.66
indicator_type: ipv4
source: otx
country: US
city: Chicago
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:22:05.400763
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Chicago", "asn": "AS202015 hz hosting ltd", "indicator": "79.141.161.66", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 79.141.161.67
indicator_type: ipv4
source: otx
country: US
city: Chicago
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:22:08.307974
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Chicago", "asn": "AS202015 hz hosting ltd", "indicator": "79.141.161.67", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 6, "malware_samples": [], "passive_dns": ["besttriphotel.com", "whm.besttriphotel.com", "cheapflightsonline.besttriphotel.com", "www.cheapflightsonline.besttrip

reverse_dns:
  besttriphotel.com,whm.besttriphotel.com,cheapflightsonline.besttriphotel.com,www.cheapflightsonline.besttriphotel.com,whm.cheapflightsonline.net,cheapflightsonline.net


indicator: 79.141.161.68
indicator_type: ipv4
source: otx
country: US
city: Chicago
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:22:25.529454
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Chicago", "asn": "AS202015 hz hosting ltd", "indicator": "79.141.161.68", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 79.141.161.69
indicator_type: ipv4
source: otx
country: US
city: Chicago
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:22:47.625525
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Chicago", "asn": "AS202015 hz hosting ltd", "indicator": "79.141.161.69", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 79.141.161.70
indicator_type: ipv4
source: otx
country: US
city: Chicago
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:23:04.953167
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Chicago", "asn": "AS202015 hz hosting ltd", "indicator": "79.141.161.70", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 79.141.161.71
indicator_type: ipv4
source: otx
country: US
city: Chicago
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:23:07.827300
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Chicago", "asn": "AS202015 hz hosting ltd", "indicator": "79.141.161.71", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 23, "malware_samples": [], "passive_dns": ["www.cn.whattimezone.com", "www.dk.whattimezone.com", "www.cz.whattimezone.com", "www.de.whattimezone.com", "cpcalend

reverse_dns:
  www.cn.whattimezone.com,www.dk.whattimezone.com,www.cz.whattimezone.com,www.de.whattimezone.com,cpcalendars.whattimezone.com,cpcontacts.whattimezone.com,vn.whattimezone.com,se.whattimezone.com,tr.whattimezone.com,pt.whattimezone.com


indicator: 79.141.161.72
indicator_type: ipv4
source: otx
country: US
city: Chicago
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:23:13.966511
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Chicago", "asn": "AS202015 hz hosting ltd", "indicator": "79.141.161.72", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 4, "malware_samples": [], "passive_dns": ["cpcalendars.game-angrybirds.ru", "cpcontacts.game-angrybirds.ru", "whm.game-angrybirds.ru", "game-angrybirds.ru"]}

reverse_dns:
  cpcalendars.game-angrybirds.ru,cpcontacts.game-angrybirds.ru,whm.game-angrybirds.ru,game-angrybirds.ru


indicator: 79.141.161.73
indicator_type: ipv4
source: otx
country: US
city: Chicago
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:23:16.136535
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Chicago", "asn": "AS202015 hz hosting ltd", "indicator": "79.141.161.73", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 79.141.161.74
indicator_type: ipv4
source: otx
country: US
city: Chicago
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:23:18.398917
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Chicago", "asn": "AS202015 hz hosting ltd", "indicator": "79.141.161.74", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 6, "malware_samples": [], "passive_dns": ["cpcontacts.miamicompanies.com", "cpcalendars.miamicompanies.com", "whm.miamicompanies.com", "www.topflcompanies.com.m

reverse_dns:
  cpcontacts.miamicompanies.com,cpcalendars.miamicompanies.com,whm.miamicompanies.com,www.topflcompanies.com.miamicompanies.com,topflcompanies.com,miamicompanies.com


indicator: 79.141.161.75
indicator_type: ipv4
source: otx
country: US
city: Chicago
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:23:20.768173
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Chicago", "asn": "AS202015 hz hosting ltd", "indicator": "79.141.161.75", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 6, "malware_samples": [], "passive_dns": ["whm.portal-gosuslugi.ru", "portal-gosuslugi.ru", "www.udalenie-zuba.com.portal-gosuslugi.ru", "udalenie-zuba.com.port

reverse_dns:
  whm.portal-gosuslugi.ru,portal-gosuslugi.ru,www.udalenie-zuba.com.portal-gosuslugi.ru,udalenie-zuba.com.portal-gosuslugi.ru,whm.udalenie-zuba.com,udalenie-zuba.com


indicator: 79.141.161.76
indicator_type: ipv4
source: otx
country: US
city: Chicago
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:23:22.887422
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Chicago", "asn": "AS202015 hz hosting ltd", "indicator": "79.141.161.76", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 5, "malware_samples": [], "passive_dns": ["cpcalendars.holodnoe-serdce.ru", "cpcontacts.holodnoe-serdce.ru", "ns2.xtrafdns.net", "whm.holodnoe-serdce.ru", "holo

reverse_dns:
  cpcalendars.holodnoe-serdce.ru,cpcontacts.holodnoe-serdce.ru,ns2.xtrafdns.net,whm.holodnoe-serdce.ru,holodnoe-serdce.ru


indicator: 79.141.161.77
indicator_type: ipv4
source: otx
country: US
city: Chicago
reverse_dns: anywho-com-reverse-lookup.phonelookupdirectfd.com
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:23:27.420567
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Chicago", "asn": "AS202015 hz hosting ltd", "indicator": "79.141.161.77", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["anywho-com-reverse-lookup.phonelookupdirectfd.com"]}


indicator: 79.141.161.78
indicator_type: ipv4
source: otx
country: US
city: Chicago
reverse_dns: quick-bd-check.recordsfastfhl.com,virtualcounselorbrowardcountyschools.educationlqx.com
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:23:29.620262
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Chicago", "asn": "AS202015 hz hosting ltd", "indicator": "79.141.161.78", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 1, "passive_dns_count": 2, "malware_samples": ["cd26364b12212d5cf50912f32c9181eac48b943b41afd79c6ab91ba973f2f45e"], "passive_dns": ["quick-bd-check.recordsfastfhl.com", "virtualcounsel


indicator: 79.141.161.79
indicator_type: ipv4
source: otx
country: US
city: Chicago
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:23:32.028132
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Chicago", "asn": "AS202015 hz hosting ltd", "indicator": "79.141.161.79", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 4, "malware_samples": [], "passive_dns": ["affordableextendedcarwarranty.autowarrantygyl.com", "criminal-records-ireland.recordsonlinert.com", "bexarcountyjudic

reverse_dns:
  affordableextendedcarwarranty.autowarrantygyl.com,criminal-records-ireland.recordsonlinert.com,bexarcountyjudicialrecords.brecordsmjq.com,findpeoplecornell.brecordsmjq.com


indicator: 79.141.161.80
indicator_type: ipv4
source: otx
country: US
city: Chicago
reverse_dns: matchtoday.dtyepjjx.com
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:23:34.624046
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Chicago", "asn": "AS202015 hz hosting ltd", "indicator": "79.141.161.80", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["matchtoday.dtyepjjx.com"]}


indicator: 79.141.161.81
indicator_type: ipv4
source: otx
country: US
city: Chicago
reverse_dns: crimereportbyaddress.brecordsjjf.com,singlewomenlookingforwomen.dtyepyjq.com
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:23:36.798042
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Chicago", "asn": "AS202015 hz hosting ltd", "indicator": "79.141.161.81", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["crimereportbyaddress.brecordsjjf.com", "singlewomenlookingforwomen.dtyepyjq.com"]}


indicator: 79.141.161.82
indicator_type: ipv4
source: otx
country: US
city: Chicago
hosting_provider: clop,cl0p,powershell,tinymet,vulnerability,cisa,exploit,cobalt strike,sql injection,ip address
queried_at: 2026-04-08T06:23:41.331999
raw_data:
  {"pulse_count": 9, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Chicago", "asn": "AS202015 hz hosting ltd", "indicator": "79.141.161.82", "tags": ["clop", "cl0p", "powershell", "tinymet", "vulnerability", "cisa", "exploit", "cobalt strike", "sql injection", "ip address", "cryptomix", "enterprise", "movit exploit", "dns hijacking", "ta505", "group", "install", "dewmode", "azure sql", "get2", "ransomware", "flawedammyy", "path", "TA505", "moveit transfer",


indicator: 79.141.161.83
indicator_type: ipv4
source: otx
country: US
city: Chicago
reverse_dns: insgetjgy.com,www.airlineticketspyj.com,airlineticketspyj.com
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:23:43.580022
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Chicago", "asn": "AS202015 hz hosting ltd", "indicator": "79.141.161.83", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 1, "passive_dns_count": 3, "malware_samples": ["5b65c7c2b8253af93b043a63cfd168e665b71002e877aefb756289de1f9ee95b"], "passive_dns": ["insgetjgy.com", "www.airlineticketspyj.com", "airli


indicator: 79.141.161.84
indicator_type: ipv4
source: otx
country: US
city: Chicago
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:23:49.394941
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Chicago", "asn": "AS202015 hz hosting ltd", "indicator": "79.141.161.84", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 11, "malware_samples": [], "passive_dns": ["snoop-dogg-arrest-record.recordseasyrt.com", "otsego-county-criminal-records.recordsnowrt.com", "autowarrantyjgy.com

reverse_dns:
  snoop-dogg-arrest-record.recordseasyrt.com,otsego-county-criminal-records.recordsnowrt.com,autowarrantyjgy.com,chelsea-arrest-records.recordsnowrt.com,recordsnowrt.com,fort-wayne-criminal-records.recordsnowrt.com,criminal-bd-check-maryland.recordsfindfhl.com,chatham-county-recorders-court.recordseasyrt.com,ccap-wisconsin-court-records.recordseasyrt.com,guadalupe-county-arrest-records.recordseasyrt.com


indicator: 79.141.161.85
indicator_type: ipv4
source: otx
country: US
city: Chicago
reverse_dns: securityexv.com
hosting_provider: dns hijacking,ip address
queried_at: 2026-04-08T06:23:51.746463
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Chicago", "asn": "AS202015 hz hosting ltd", "indicator": "79.141.161.85", "tags": ["dns hijacking", "ip address"], "pulses": ["IOC - APT28 exploit routers to enable DNS hijacking operations"], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["securityexv.com"]}


