# enrichment_results

indicator: 80.67.224.26
indicator_type: ipv4
source: otx
country: DE
city: Kolbermoor
reverse_dns: zimbra01.bitpoint.de
queried_at: 2026-03-10T06:11:53.096699
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Kolbermoor", "asn": "AS20791 bitpoint ag", "indicator": "80.67.224.26", "tags": [], "pulses": [], "malware_count": 1, "passive_dns_count": 1, "malware_samples": ["e65262b5bf1f69efe07c296c2d1bc961acc682963cce24a0c00085da688fd6d2"], "passive_dns": ["zimbra01.bitpoint.de"]}


indicator: 80.73.89.78
indicator_type: ipv4
source: otx
country: RU
city: Yakutsk
queried_at: 2026-03-10T06:11:54.649546
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": "Yakutsk", "asn": "AS21487 pjsc rostelecom", "indicator": "80.73.89.78", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 80.78.24.116
indicator_type: ipv4
source: otx
country: SE
hosting_provider: Nextray,cyber security,malicious,phishing,ioc
queried_at: 2026-03-10T06:12:04.749036
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Sweden", "country_code": "SE", "city": null, "asn": "AS39287 ab stract", "indicator": "80.78.24.116", "tags": ["Nextray", "cyber security", "malicious", "phishing", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS_i_am)", "HIVE", "

reverse_dns:
  the-haba.com,cryptotechmag.com,santasgarden.freemyip.com,santasgarden.top,exit.relay.love,nordsfreevpn.com


indicator: 80.78.25.185
indicator_type: ipv4
source: otx
country: SE
reverse_dns: shoerift.net
hosting_provider: ,malware,ransomware
queried_at: 2026-03-10T06:12:06.334342
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Sweden", "country_code": "SE", "city": null, "asn": "AS39287 ab stract", "indicator": "80.78.25.185", "tags": ["", "malware", "ransomware"], "pulses": ["ThreatFix", "Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["shoerift.net"]}


indicator: 80.78.28.74
indicator_type: ipv4
source: otx
country: SE
reverse_dns: xfr.bet,api-gatewaytools.org,pump-airdrops.fun
queried_at: 2026-03-10T06:12:07.974767
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Sweden", "country_code": "SE", "city": null, "asn": "AS39287 ab stract", "indicator": "80.78.28.74", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["xfr.bet", "api-gatewaytools.org", "pump-airdrops.fun"]}


indicator: 80.85.154.56
indicator_type: ipv4
source: otx
country: RU
reverse_dns: dietcentral.lol,se-natbanken.com
hosting_provider: Nextray,cyber security,malicious,phishing,ioc
queried_at: 2026-03-10T06:12:10.213588
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS44493 chelyabinsk-signal llc", "indicator": "80.85.154.56", "tags": ["Nextray", "cyber security", "malicious", "phishing", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created


indicator: 80.88.128.40
indicator_type: ipv4
source: otx
country: DK
queried_at: 2026-03-10T06:12:11.727564
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Denmark", "country_code": "DK", "city": null, "asn": "ASNone ", "indicator": "80.88.128.40", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 4, "passive_dns_count": 0, "malware_samples": ["c199a741d41fd35527afee3614b3e98317c4dceef2ec15eeea185ada6ab01dcc", "d0cbecffb64ac1519db1c2cfd8db79879cbd49b3ec1fe9e1667c953e3747e491", "69d1f6907f216206428d4176ede6884510be96a3964abc54fd31ee05211f3020", "8c622bc0a1269758ba8ea5e9125ea1c3d9ce


indicator: 81.149.70.25
indicator_type: ipv4
source: otx
country: GB
city: Totteridge
queried_at: 2026-03-10T06:12:13.271637
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": "Totteridge", "asn": "AS2856 british telecommunications plc", "indicator": "81.149.70.25", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 81.16.177.142
indicator_type: ipv4
source: otx
country: DE
hosting_provider: Nextray,cyber security,malicious,phishing,ioc
queried_at: 2026-03-10T06:12:15.534768
raw_data:
  {"pulse_count": 30, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS212027 daniel james jackson", "indicator": "81.16.177.142", "tags": ["Nextray", "cyber security", "malicious", "phishing", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS_i_a

reverse_dns:
  www.mezcalegadoancestral.com,www.dreamhomeproperty.net,earthhead.org,www.earthhead.org,suburbresearchhouse.com,artchitechdesignlife.com,www.artchitechdesignlife.com,thecovemc.net,test.treebohosting.com


indicator: 81.17.24.234
indicator_type: ipv4
source: otx
country: CH
city: Zurich
hosting_provider: ,malware,honeypot,tpot19,la-safe.org,tsec,ransomware
queried_at: 2026-03-10T06:12:17.128629
raw_data:
  {"pulse_count": 5, "reputation": 0, "country": "Switzerland", "country_code": "CH", "city": "Zurich", "asn": "AS51852 private layer inc", "indicator": "81.17.24.234", "tags": ["", "malware", "honeypot", "tpot19", "la-safe.org", "tsec", "ransomware"], "pulses": ["Tor Exit Node", "ThreatFix", "Threatfox Recent Additions", "LCIA:HoneyNet:2022", "LCIA:HoneyNet:August 2022"], "malware_count": 1, "passive_dns_count": 0, "malware_samples": ["1c29decba98e21438d678b84740cd4f0db1d31c8fd992a2143a0d436a116a


indicator: 81.170.128.221
indicator_type: ipv4
source: otx
country: SE
city: Umeå
reverse_dns: colenax.com,bokad.net,cloud.bokad.net,home.oscar.bohlin.se,nextcloud.colenax.com,new.colenax.com
hosting_provider: Nextray,cyber security,malicious,phishing,ioc
queried_at: 2026-03-10T06:12:18.803318
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Sweden", "country_code": "SE", "city": "Ume\u00e5", "asn": "AS8473 bahnhof", "indicator": "81.170.128.221", "tags": ["Nextray", "cyber security", "malicious", "phishing", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS_i_am)", "HI


indicator: 81.171.5.4
indicator_type: ipv4
source: otx
country: NL
city: Naarden
reverse_dns: patron.servers.luxe,pay.servers.luxe,filefossil.com
hosting_provider: Nextray,cyber security,malicious,phishing,ioc
queried_at: 2026-03-10T06:12:21.006745
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Netherlands", "country_code": "NL", "city": "Naarden", "asn": "AS60781 leaseweb netherlands b.v.", "indicator": "81.171.5.4", "tags": ["Nextray", "cyber security", "malicious", "phishing", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created 


indicator: 81.177.215.30
indicator_type: ipv4
source: otx
country: RU
city: Tolyatti
queried_at: 2026-03-10T06:12:22.767508
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": "Tolyatti", "asn": "AS8439 jsc aist", "indicator": "81.177.215.30", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 81.177.6.63
indicator_type: ipv4
source: otx
country: RU
city: Lyubertsy
queried_at: 2026-03-10T06:12:24.588839
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": "Lyubertsy", "asn": "AS8342 jsc rtcomm.ru", "indicator": "81.177.6.63", "tags": [], "pulses": [], "malware_count": 1, "passive_dns_count": 30, "malware_samples": ["880aef83008dd69a5d749efbbb8200780e7f644f7cbbd52baf05ac7fe992454a"], "passive_dns": ["vot-obed.ru", "mia-models.ru", "vip-days.ru", "www.power-data.ru", "power-data.ru", "trikam.ru", "elonmusk-btc.fun", "elon-btc.fun", "official-elon.site

reverse_dns:
  vot-obed.ru,mia-models.ru,vip-days.ru,www.power-data.ru,power-data.ru,trikam.ru,elonmusk-btc.fun,elon-btc.fun,official-elon.site,elonmusk-giveaway.space


indicator: 81.184.154.233
indicator_type: ipv4
source: otx
country: ES
city: Mataró
queried_at: 2026-03-10T06:12:26.088758
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Spain", "country_code": "ES", "city": "Matar\u00f3", "asn": "AS6739 vodafone ono  s.a.", "indicator": "81.184.154.233", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 1, "passive_dns_count": 0, "malware_samples": ["36ac66d3f729eeab7b3cc3c82a06b7c7915e79eac74ef87f38f24e8fc46d4a84"], "passive_dns": []}


indicator: 81.19.131.153
indicator_type: ipv4
source: otx
country: RU
reverse_dns: www.focalba.nl,focalba.nl,wassibe.eu,www.wassibe.eu
queried_at: 2026-03-10T06:12:30.709106
raw_data:
  {"pulse_count": 5, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS207967 anton mamaev", "indicator": "81.19.131.153", "tags": ["venomrat", "startup", "vhd", "powershell", "phishing", "aes decryption", "aes encryption", "rats", "keylogger", "tcp connection", "figure", "compromise", "image", "iocs", "persistence", "base64", "obfuscation", "pastebin", "VenomRAT", "opens"], "pulses": ["VHDs Used to Distribute VenomRAT and Other Malware", "Threatfox Re

hosting_provider:
  venomrat,startup,vhd,powershell,phishing,aes decryption,aes encryption,rats,keylogger,tcp connection


indicator: 81.19.131.86
indicator_type: ipv4
source: otx
country: RU
reverse_dns: isehantick.com,promotiondelightful.website
hosting_provider: Dcrat,Hak5_Cloud_C2,Havoc,Interactsh,Sliver,Mythic,Qakbot,Pegasus,Deimos,DanaBot
queried_at: 2026-03-10T06:12:33.386725
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS207967 anton mamaev", "indicator": "81.19.131.86", "tags": ["Dcrat", "Hak5_Cloud_C2", "Havoc", "Interactsh", "Sliver", "Mythic", "Qakbot", "Pegasus", "Deimos", "DanaBot", "Hookbot", "AsyncRAT", "CobaltStrike", "NetSupportRAT", "Covenant", "C2", "Remcos"], "pulses": ["Threatfox Recent Additions", "Twitter Feed - drb_ra - 12-04-2025"], "malware_count": 9, "passive_dns_count": 2, "malw


indicator: 81.19.131.95
indicator_type: ipv4
source: otx
country: RU
hosting_provider: footer,msi,elf,powershell,path,dll sideloading,donutloader,zip file,download,hajime
queried_at: 2026-03-10T06:12:36.765418
raw_data:
  {"pulse_count": 14, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS207967 anton mamaev", "indicator": "81.19.131.95", "tags": ["footer", "msi", "elf", "powershell", "path", "dll sideloading", "donutloader", "zip file", "download", "hajime", "Supplys", "copy", "Gh0stRAT", "vbs", "remcos backdoor", "cisco secure", "ua-wget", "mirai", "find", "contact", "cobaltstrike", "CopyrightViolation", "Mozi", "opendir", "rev-base64-loader", "write", "access", "

reverse_dns:
  gearingin.net,globatech.xyz,flexitime.shop,capitallioin.com,gainandguild.com,debugontime.com,clevercapitalinsights.com,enlightenix.com,riseridgeedge.com,fungiblein.com


indicator: 81.19.136.61
indicator_type: ipv4
source: otx
country: RU
reverse_dns: rikopt.org
queried_at: 2026-03-10T06:12:38.270848
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS24658 information & computing center  ltd.", "indicator": "81.19.136.61", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["rikopt.org"]}


indicator: 81.19.139.76
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-03-10T06:12:40.048916
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS207713 tim windelschmidt", "indicator": "81.19.139.76", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 81.19.216.134
indicator_type: ipv4
source: otx
country: GB
queried_at: 2026-03-10T06:12:43.155462
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": null, "asn": "AS1299 telia company ab", "indicator": "81.19.216.134", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 81.197.106.126
indicator_type: ipv4
source: otx
country: FI
city: Järvenpää
hosting_provider: Nextray,cyber security,malicious,phishing,ioc
queried_at: 2026-03-10T06:12:44.889971
raw_data:
  {"pulse_count": 30, "reputation": 0, "country": "Finland", "country_code": "FI", "city": "J\u00e4rvenp\u00e4\u00e4", "asn": "AS719 lanlink -elisa oyj", "indicator": "81.197.106.126", "tags": ["Nextray", "cyber security", "malicious", "phishing", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse 


indicator: 81.198.113.138
indicator_type: ipv4
source: otx
country: LV
city: Ikšķile
queried_at: 2026-03-10T06:12:46.448562
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Latvia", "country_code": "LV", "city": "Ik\u0161\u0137ile", "asn": "AS12578 sia lattelekom", "indicator": "81.198.113.138", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 81.230.52.105
indicator_type: ipv4
source: otx
country: SE
city: Surte
queried_at: 2026-03-10T06:12:48.081698
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Sweden", "country_code": "SE", "city": "Surte", "asn": "AS3301 telia company ab", "indicator": "81.230.52.105", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 81.29.131.193
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-03-10T06:12:49.627849
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS12555 data-center imaqliq ltd.", "indicator": "81.29.131.193", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 81.30.196.146
indicator_type: ipv4
source: otx
country: RU
city: Ufa
hosting_provider: gs2519131,gorillabot,Scanning,botnet mirai,xmrig,ddos,gs2518122,gs2513862,things,gs2519126
queried_at: 2026-03-10T06:12:51.197543
raw_data:
  {"pulse_count": 4, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": "Ufa", "asn": "AS24955 ojsc ufanet", "indicator": "81.30.196.146", "tags": ["gs2519131", "gorillabot", "Scanning", "botnet mirai", "xmrig", "ddos", "gs2518122", "gs2513862", "things", "gs2519126", "outlaw", "gs2519129", "twitter", "mirai botnet", "botnet iocs", "malware", "gs25181222", "mirai", "gs251387", "mirai internet", "gs2518120", "iocs", "ipv4", "gs2519125", "gs251386", "linux"], "pulses": [


indicator: 8.48.85.83
indicator_type: ipv4
source: abuseipdb
country: US
city: 0
hosting_provider: Level 3 Parent, LLC
queried_at: 2026-03-10T06:12:51.898725
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "US", "isp": "Level 3 Parent, LLC", "domain": "lumen.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 80.151.36.96
indicator_type: ipv4
source: abuseipdb
country: DE
city: 0
hosting_provider: Deutsche Telekom AG
queried_at: 2026-03-10T06:13:08.455960
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "DE", "isp": "Deutsche Telekom AG", "domain": "telekom.de", "usage_type": "Fixed Line ISP", "last_reported": "2024-11-01T00:30:45+00:00", "categories": []}


indicator: 80.180.123.169
indicator_type: ipv4
source: abuseipdb
country: IT
city: 0
hosting_provider: Telecom Italia S.p.A. TIN EASY LITE
queried_at: 2026-03-10T06:13:10.302027
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "IT", "isp": "Telecom Italia S.p.A. TIN EASY LITE", "domain": "tim.it", "usage_type": "Fixed Line ISP", "last_reported": null, "categories": []}


indicator: 80.255.6.5
indicator_type: ipv4
source: abuseipdb
country: DE
city: 0
hosting_provider: Core-Backbone GmbH
queried_at: 2026-03-10T06:13:13.853472
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "DE", "isp": "Core-Backbone GmbH", "domain": "core-backbone.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 80.46.100.166
indicator_type: ipv4
source: abuseipdb
country: GB
city: 0
hosting_provider: TalkTalk Communications Limited
queried_at: 2026-03-10T06:13:15.600282
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "GB", "isp": "TalkTalk Communications Limited", "domain": "talktalkplc.com", "usage_type": "Fixed Line ISP", "last_reported": null, "categories": []}


indicator: 80.66.66.197
indicator_type: ipv4
source: abuseipdb
country: BG
city: 10
hosting_provider: SOLDATOV ALEXEY VALEREVICH
queried_at: 2026-03-10T06:13:17.385362
raw_data:
  {"abuse_confidence": 12, "total_reports": 10, "is_public": true, "is_tor": false, "country": "BG", "isp": "SOLDATOV ALEXEY VALEREVICH", "domain": "hostup.kz", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-03-05T05:39:20+00:00", "categories": [18, 21, 15]}


indicator: 80.67.224.26
indicator_type: ipv4
source: abuseipdb
country: DE
city: 0
hosting_provider: BitPoint AG
queried_at: 2026-03-10T06:13:19.145485
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "DE", "isp": "BitPoint AG", "domain": "bitpoint.de", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 80.73.89.78
indicator_type: ipv4
source: abuseipdb
country: RU
city: 0
hosting_provider: PJSC Rostelecom
queried_at: 2026-03-10T06:13:20.966317
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RU", "isp": "PJSC Rostelecom", "domain": "rt.ru", "usage_type": "Fixed Line ISP", "last_reported": "2025-12-19T09:12:03+00:00", "categories": []}


indicator: 80.78.24.116
indicator_type: ipv4
source: abuseipdb
country: DK
city: 0
hosting_provider: Materialism s.r.l.
queried_at: 2026-03-10T06:13:22.713370
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "DK", "isp": "Materialism s.r.l.", "domain": "materiali.sm", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 80.78.25.185
indicator_type: ipv4
source: abuseipdb
country: DK
city: 0
hosting_provider: Materialism s.r.l.
queried_at: 2026-03-10T06:13:24.511482
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "DK", "isp": "Materialism s.r.l.", "domain": "materiali.sm", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-05-28T12:37:40+00:00", "categories": []}


indicator: 8.48.85.83
indicator_type: ipv4
source: virustotal
country: US
hosting_provider: Zhejiang Taobao Network Co.,Ltd
queried_at: 2026-03-10T06:13:28.065307
raw_data:
  {"malicious": 7, "suspicious": 0, "harmless": 55, "undetected": 32, "reputation": -1, "country": "US", "as_owner": "Zhejiang Taobao Network Co.,Ltd", "asn": 24429, "network": "8.48.85.0/24", "last_analysis_date": 1772942316}


indicator: 80.131.233.194
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: Deutsche Telekom AG
queried_at: 2026-03-10T06:13:48.572895
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "DE", "as_owner": "Deutsche Telekom AG", "asn": 3320, "network": "80.128.0.0/12", "last_analysis_date": 1730080354}


indicator: 80.132.197.234
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: Deutsche Telekom AG
queried_at: 2026-03-10T06:14:08.908453
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "DE", "as_owner": "Deutsche Telekom AG", "asn": 3320, "network": "80.128.0.0/12", "last_analysis_date": 1730080365}


indicator: 80.133.247.104
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: Deutsche Telekom AG
queried_at: 2026-03-10T06:14:29.240521
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "DE", "as_owner": "Deutsche Telekom AG", "asn": 3320, "network": "80.128.0.0/12", "last_analysis_date": 1730080366}


indicator: 80.140.4.126
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: Deutsche Telekom AG
queried_at: 2026-03-10T06:14:49.446278
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "DE", "as_owner": "Deutsche Telekom AG", "asn": 3320, "network": "80.128.0.0/12", "last_analysis_date": 1730080385}


indicator: 80.144.166.121
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: Deutsche Telekom AG
queried_at: 2026-03-10T06:15:09.685534
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "DE", "as_owner": "Deutsche Telekom AG", "asn": 3320, "network": "80.144.0.0/13", "last_analysis_date": 1730080383}


indicator: 80.144.166.164
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: Deutsche Telekom AG
queried_at: 2026-03-10T06:15:29.921122
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "DE", "as_owner": "Deutsche Telekom AG", "asn": 3320, "network": "80.144.0.0/13", "last_analysis_date": 1730080385}


indicator: 80.144.217.151
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: Deutsche Telekom AG
queried_at: 2026-03-10T06:15:50.173669
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "DE", "as_owner": "Deutsche Telekom AG", "asn": 3320, "network": "80.144.0.0/13", "last_analysis_date": 1730080373}


indicator: 80.147.22.137
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: Deutsche Telekom AG
queried_at: 2026-03-10T06:16:10.703741
raw_data:
  {"malicious": 1, "suspicious": 0, "harmless": 62, "undetected": 31, "reputation": 0, "country": "DE", "as_owner": "Deutsche Telekom AG", "asn": 3320, "network": "80.144.0.0/13", "last_analysis_date": 1772635938}


indicator: 80.151.36.96
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: Deutsche Telekom AG
queried_at: 2026-03-10T06:16:31.049779
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "DE", "as_owner": "Deutsche Telekom AG", "asn": 3320, "network": "80.144.0.0/13", "last_analysis_date": 1748571235}


indicator: 8.48.85.83
indicator_type: ipv4
source: dshield
country: CN
reverse_dns: 8.48.85.0/24
hosting_provider: TAOBAO Zhejiang Taobao Network Co.,Ltd
queried_at: 2026-03-10T06:16:51.378834
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "ipas@cnnic.cn", "as": 24429, "asname": "TAOBAO Zhejiang Taobao Network Co.,Ltd", "ascountry": "CN", "assource": "", "network": "8.48.85.0/24", "threatfeeds": {}}


indicator: 80.131.233.194
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 80.128.0.0/12
hosting_provider: DTAG Internet service provider operations
queried_at: 2026-03-10T06:16:52.697830
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "auftrag@nic.telekom.de", "as": 3320, "asname": "DTAG Internet service provider operations", "ascountry": "DE", "assource": "", "network": "80.128.0.0/12", "threatfeeds": {}}


indicator: 80.144.166.121
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 80.144.0.0/13
hosting_provider: DTAG Internet service provider operations
queried_at: 2026-03-10T06:16:58.023397
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "auftrag@nic.telekom.de", "as": 3320, "asname": "DTAG Internet service provider operations", "ascountry": "DE", "assource": "", "network": "80.144.0.0/13", "threatfeeds": {}}


indicator: 80.151.36.96
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 80.144.0.0/13
hosting_provider: DTAG Internet service provider operations
queried_at: 2026-03-10T06:17:03.337062
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "auftrag@nic.telekom.de", "as": 3320, "asname": "DTAG Internet service provider operations", "ascountry": "DE", "assource": "", "network": "80.144.0.0/13", "threatfeeds": {"alltor": {"lastseen": "2025-02-12", "firstseen": "2025-02-04"}}}


indicator: 80.180.123.169
indicator_type: ipv4
source: dshield
country: IT
reverse_dns: 80.180.0.0/16
hosting_provider: ASN-IBSNAZ
queried_at: 2026-03-10T06:17:04.637415
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@business.telecomitalia.it", "as": 3269, "asname": "ASN-IBSNAZ", "ascountry": "IT", "assource": "", "network": "80.180.0.0/16", "threatfeeds": {}}


indicator: 80.182.36.252
indicator_type: ipv4
source: dshield
country: IT
reverse_dns: 80.182.0.0/16
hosting_provider: ASN-IBSNAZ
queried_at: 2026-03-10T06:17:05.979614
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@business.telecomitalia.it", "as": 3269, "asname": "ASN-IBSNAZ", "ascountry": "IT", "assource": "", "network": "80.182.0.0/16", "threatfeeds": {}}


indicator: 80.255.6.5
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 80.255.0.0/20
hosting_provider: CORE-BACKBONE CORE-BACKBONE GMBH GLOBAL NETWORK
queried_at: 2026-03-10T06:17:07.320834
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "info@as33891.net", "as": 201011, "asname": "CORE-BACKBONE CORE-BACKBONE GMBH GLOBAL NETWORK", "ascountry": "DE", "assource": "", "network": "80.255.0.0/20", "threatfeeds": {}}


indicator: 80.46.100.166
indicator_type: ipv4
source: dshield
country: GB
reverse_dns: 80.44.0.0/14
hosting_provider: TISCALI-UK TalkTalk Communications Limited
queried_at: 2026-03-10T06:17:08.643878
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@talktalkplc.com", "as": 9105, "asname": "TISCALI-UK TalkTalk Communications Limited", "ascountry": "GB", "assource": "", "network": "80.44.0.0/14", "threatfeeds": {}}


indicator: 80.66.66.197
indicator_type: ipv4
source: dshield
country: FI
reverse_dns: 80.66.66.0/24
hosting_provider: CREANOVA-AS Oy Creanova Hosting Solutions Ltd.
queried_at: 2026-03-10T06:17:09.966563
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@creanova.org", "as": 51765, "asname": "CREANOVA-AS Oy Creanova Hosting Solutions Ltd.", "ascountry": "FI", "assource": "", "network": "80.66.66.0/24", "threatfeeds": {"blocklistde443": {"lastseen": "2026-03-06", "firstseen": "2024-09-25"}, "blocklistde80": {"lastseen": "2026-03-06", "firstseen": "2024-09-25"}, "blocklistdeapache": {"lastseen": "2026-03-06", "firstseen": "2024-0


indicator: 80.67.224.26
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 80.67.224.0/20
hosting_provider: BITPOINT-AS
queried_at: 2026-03-10T06:17:11.167108
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "netmaster@bitpoint.de", "as": 20791, "asname": "BITPOINT-AS", "ascountry": "DE", "assource": "", "network": "80.67.224.0/20", "threatfeeds": {}}


indicator: 80.73.89.78
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 80.73.80.0/20
hosting_provider: PJSC Rostelecom Yakutsk City
queried_at: 2026-03-10T06:17:12.494872
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@rt.ru", "as": 21487, "asname": "PJSC Rostelecom Yakutsk City", "ascountry": "RU", "assource": "", "network": "80.73.80.0/20", "threatfeeds": {}}


indicator: 80.78.24.116
indicator_type: ipv4
source: dshield
country: FI
reverse_dns: 80.78.16.0/20
hosting_provider: ABSTRACT
queried_at: 2026-03-10T06:17:13.837776
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@shelter.st", "as": 39287, "asname": "ABSTRACT", "ascountry": "FI", "assource": "", "network": "80.78.16.0/20", "threatfeeds": {"torexit": {"lastseen": "2022-10-20", "firstseen": "2022-10-07"}}}


indicator: 80.78.25.185
indicator_type: ipv4
source: dshield
country: FI
reverse_dns: 80.78.16.0/20
hosting_provider: ABSTRACT
queried_at: 2026-03-10T06:17:15.157982
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@shelter.st", "as": 39287, "asname": "ABSTRACT", "ascountry": "FI", "assource": "", "network": "80.78.16.0/20", "threatfeeds": {}}


indicator: 80.85.154.56
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 80.85.154.0/24
hosting_provider: CHELYABINSK-SIGNAL-AS
queried_at: 2026-03-10T06:17:17.800577
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@profitserver.ru", "as": 44493, "asname": "CHELYABINSK-SIGNAL-AS", "ascountry": "RU", "assource": "", "network": "80.85.154.0/24", "threatfeeds": {}}


indicator: 80.88.128.40
indicator_type: ipv4
source: dshield
country: DK
reverse_dns: 80.88.128.0/20
hosting_provider: GLOBALCONNECT-AS31027
queried_at: 2026-03-10T06:17:19.000280
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@nianet.dk", "as": 31027, "asname": "GLOBALCONNECT-AS31027", "ascountry": "DK", "assource": "", "network": "80.88.128.0/20", "threatfeeds": {}}


indicator: 81.149.70.25
indicator_type: ipv4
source: dshield
country: GB
reverse_dns: 81.128.0.0/11
hosting_provider: BT-UK-AS BTnet UK Regional network
queried_at: 2026-03-10T06:17:20.346614
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@bt.com", "as": 2856, "asname": "BT-UK-AS BTnet UK Regional network", "ascountry": "GB", "assource": "", "network": "81.128.0.0/11", "threatfeeds": {}}


indicator: 81.16.177.142
indicator_type: ipv4
source: dshield
country: GB
reverse_dns: 81.16.177.0/24
hosting_provider: PEBBLEHOST
queried_at: 2026-03-10T06:17:21.705417
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": ">>UNKNOWN<<", "as": 212027, "asname": "PEBBLEHOST", "ascountry": "GB", "assource": "", "network": "81.16.177.0/24", "threatfeeds": {"blocklistde22": {"lastseen": "2025-06-12", "firstseen": "2022-10-16"}, "forumspam": {"lastseen": "2025-06-12", "firstseen": "2022-10-14"}, "torexit": {"lastseen": "2025-06-12", "firstseen": "2022-10-11"}}}


indicator: 81.17.24.234
indicator_type: ipv4
source: dshield
country: PA
reverse_dns: 81.17.16.0/20
hosting_provider: PLI-AS
queried_at: 2026-03-10T06:17:23.023465
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@privatelayer.com", "as": 51852, "asname": "PLI-AS", "ascountry": "PA", "assource": "", "network": "81.17.16.0/20", "threatfeeds": {"torexit": {"lastseen": "2026-01-09", "firstseen": "2026-01-07"}}}


indicator: 81.170.128.221
indicator_type: ipv4
source: dshield
country: SE
reverse_dns: 81.170.128.0/17
hosting_provider: BAHNHOF
queried_at: 2026-03-10T06:17:24.391917
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@bahnhof.net", "as": 8473, "asname": "BAHNHOF", "ascountry": "SE", "assource": "", "network": "81.170.128.0/17", "threatfeeds": {}}


indicator: 81.171.5.4
indicator_type: ipv4
source: dshield
country: NL
reverse_dns: 81.171.0.0/19
hosting_provider: LEASEWEB-NL-AMS-01 Netherlands
queried_at: 2026-03-10T06:17:25.744376
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@nl.leaseweb.com", "as": 60781, "asname": "LEASEWEB-NL-AMS-01 Netherlands", "ascountry": "NL", "assource": "", "network": "81.171.0.0/19", "threatfeeds": {}}


indicator: 81.177.215.30
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 81.177.208.0/20
hosting_provider: AIST Togliatti, Russia
queried_at: 2026-03-10T06:17:27.055045
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@aist.net.ru", "as": 8439, "asname": "AIST Togliatti, Russia", "ascountry": "RU", "assource": "", "network": "81.177.208.0/20", "threatfeeds": {}}


indicator: 81.177.6.63
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 81.177.0.0/19
hosting_provider: RTCOMM-AS
queried_at: 2026-03-10T06:17:28.384922
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@rtcomm.ru", "as": 8342, "asname": "RTCOMM-AS", "ascountry": "RU", "assource": "", "network": "81.177.0.0/19", "threatfeeds": {}}


indicator: 81.184.154.233
indicator_type: ipv4
source: dshield
country: ES
reverse_dns: 81.184.0.0/16
hosting_provider: ONO-AS Cableuropa - ONO
queried_at: 2026-03-10T06:17:29.702275
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@corp.vodafone.es", "as": 6739, "asname": "ONO-AS Cableuropa - ONO", "ascountry": "ES", "assource": "", "network": "81.184.0.0/16", "threatfeeds": {}}


indicator: 81.19.131.153
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 81.19.131.0/24
hosting_provider: AS-GLOBALTELEHOST
queried_at: 2026-03-10T06:17:31.026373
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "info@globaltelehost.com", "as": 63023, "asname": "AS-GLOBALTELEHOST", "ascountry": "US", "assource": "", "network": "81.19.131.0/24", "threatfeeds": {"rosti": {"lastseen": "2025-03-24", "firstseen": "2025-03-24"}}}


indicator: 81.19.131.86
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 81.19.131.0/24
hosting_provider: AS-GLOBALTELEHOST
queried_at: 2026-03-10T06:17:32.341484
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "info@globaltelehost.com", "as": 63023, "asname": "AS-GLOBALTELEHOST", "ascountry": "US", "assource": "", "network": "81.19.131.0/24", "threatfeeds": {}}


indicator: 81.19.131.95
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 81.19.131.0/24
hosting_provider: AS-GLOBALTELEHOST
queried_at: 2026-03-10T06:17:33.653002
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "info@globaltelehost.com", "as": 63023, "asname": "AS-GLOBALTELEHOST", "ascountry": "US", "assource": "", "network": "81.19.131.0/24", "threatfeeds": {"forumspam": {"lastseen": "2021-12-11", "firstseen": "2021-12-11"}, "rosti": {"lastseen": "2025-03-28", "firstseen": "2025-03-28"}}}


indicator: 81.19.136.61
indicator_type: ipv4
source: dshield
country: SC
reverse_dns: 81.19.136.0/24
hosting_provider: AS-ALVIVA
queried_at: 2026-03-10T06:17:34.977777
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": ">>UNKNOWN<<", "as": 209272, "asname": "AS-ALVIVA", "ascountry": "SC", "assource": "", "network": "81.19.136.0/24", "threatfeeds": {}}


indicator: 81.19.139.76
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 81.19.139.0/24
hosting_provider: GIR-AS
queried_at: 2026-03-10T06:17:36.311803
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@fionera.de", "as": 207713, "asname": "GIR-AS", "ascountry": "RU", "assource": "", "network": "81.19.139.0/24", "threatfeeds": {}}


indicator: 81.19.216.134
indicator_type: ipv4
source: dshield
country: GB
reverse_dns: 81.19.216.0/24
hosting_provider: BANDWIDTH-AS
queried_at: 2026-03-10T06:17:37.643074
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@zare.com", "as": 25369, "asname": "BANDWIDTH-AS", "ascountry": "GB", "assource": "", "network": "81.19.216.0/24", "threatfeeds": {}}


indicator: 81.197.106.126
indicator_type: ipv4
source: dshield
country: FI
reverse_dns: 81.197.0.0/16
hosting_provider: ELISA-AS Helsinki, Finland
queried_at: 2026-03-10T06:17:38.962134
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@elisa.fi", "as": 719, "asname": "ELISA-AS Helsinki, Finland", "ascountry": "FI", "assource": "", "network": "81.197.0.0/16", "threatfeeds": {}}


indicator: 81.198.113.138
indicator_type: ipv4
source: dshield
country: LV
reverse_dns: 81.198.0.0/16
hosting_provider: APOLLO-AS Latvia
queried_at: 2026-03-10T06:17:40.284050
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@lattelecom.lv", "as": 12578, "asname": "APOLLO-AS Latvia", "ascountry": "LV", "assource": "", "network": "81.198.0.0/16", "threatfeeds": {}}


indicator: 81.230.52.105
indicator_type: ipv4
source: dshield
country: SE
reverse_dns: 81.224.0.0/12
hosting_provider: TELIANET-SWEDEN Telia Company
queried_at: 2026-03-10T06:17:41.611537
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@telia.com", "as": 3301, "asname": "TELIANET-SWEDEN Telia Company", "ascountry": "SE", "assource": "", "network": "81.224.0.0/12", "threatfeeds": {}}


indicator: 81.29.131.193
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 81.29.128.0/20
hosting_provider: IMAQLIQ iqdata.center
queried_at: 2026-03-10T06:17:42.951199
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@iqdata.center", "as": 12555, "asname": "IMAQLIQ iqdata.center", "ascountry": "RU", "assource": "", "network": "81.29.128.0/20", "threatfeeds": {}}


indicator: 81.30.196.146
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 81.30.196.0/22
hosting_provider: UBN-AS
queried_at: 2026-03-10T06:17:44.282736
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ufanet.ru", "as": 24955, "asname": "UBN-AS", "ascountry": "RU", "assource": "", "network": "81.30.196.0/22", "threatfeeds": {}}


indicator: 81.4.110.80
indicator_type: ipv4
source: dshield
country: NL
reverse_dns: 81.4.108.0/22
hosting_provider: ASN-ROUTELABEL
queried_at: 2026-03-10T06:17:45.593067
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@routelabel.net", "as": 198203, "asname": "ASN-ROUTELABEL", "ascountry": "NL", "assource": "", "network": "81.4.108.0/22", "threatfeeds": {}}


indicator: 81.70.21.198
indicator_type: ipv4
source: dshield
country: CN
reverse_dns: 81.70.0.0/18
hosting_provider: TENCENT-NET-AP Shenzhen Tencent Computer Systems Company Limited
queried_at: 2026-03-10T06:17:46.923036
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "ipas@cnnic.cn", "as": 45090, "asname": "TENCENT-NET-AP Shenzhen Tencent Computer Systems Company Limited", "ascountry": "CN", "assource": "", "network": "81.70.0.0/18", "threatfeeds": {}}


indicator: 82.1.96.53
indicator_type: ipv4
source: dshield
country: GB
reverse_dns: 82.0.0.0/13
hosting_provider: NTL
queried_at: 2026-03-10T06:17:48.245656
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@virginmedia.com", "as": 5089, "asname": "NTL", "ascountry": "GB", "assource": "", "network": "82.0.0.0/13", "threatfeeds": {}}


indicator: 82.115.223.11
indicator_type: ipv4
source: dshield
country: GB
reverse_dns: 82.115.223.0/24
hosting_provider: WAICORE
queried_at: 2026-03-10T06:17:49.559480
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@atinvest.com.ua", "as": 210281, "asname": "WAICORE", "ascountry": "GB", "assource": "", "network": "82.115.223.0/24", "threatfeeds": {}}


indicator: 82.116.44.82
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 82.116.32.0/19
hosting_provider: RENET-COM-AS RENET COM Autonomous System
queried_at: 2026-03-10T06:17:50.898801
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "tech@renet.ru", "as": 30936, "asname": "RENET-COM-AS RENET COM Autonomous System", "ascountry": "RU", "assource": "", "network": "82.116.32.0/19", "threatfeeds": {}}


indicator: 82.135.73.35
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 82.135.0.0/17
hosting_provider: MNET-AS Germany
queried_at: 2026-03-10T06:17:52.229572
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@m-online.net", "as": 8767, "asname": "MNET-AS Germany", "ascountry": "DE", "assource": "", "network": "82.135.0.0/17", "threatfeeds": {}}


indicator: 82.149.196.90
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 82.149.192.0/19
hosting_provider: ROSNET-AS
queried_at: 2026-03-10T06:17:53.575853
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@rt.ru", "as": 6863, "asname": "ROSNET-AS", "ascountry": "RU", "assource": "", "network": "82.149.192.0/19", "threatfeeds": {}}


indicator: 82.153.134.38
indicator_type: ipv4
source: dshield
country: GB
reverse_dns: 82.152.0.0/15
hosting_provider: EDGE ta GCI Com
queried_at: 2026-03-10T06:17:54.925055
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "ripe@gcicom.net", "as": 8851, "asname": "EDGE ta GCI Com", "ascountry": "GB", "assource": "", "network": "82.152.0.0/15", "threatfeeds": {"rosti": {"lastseen": "2025-03-18", "firstseen": "2025-03-18"}}}


indicator: 82.156.109.142
indicator_type: ipv4
source: dshield
country: CN
reverse_dns: 82.156.64.0/18
hosting_provider: TENCENT-NET-AP Shenzhen Tencent Computer Systems Company Limited
queried_at: 2026-03-10T06:17:56.257260
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "ipas@cnnic.cn", "as": 45090, "asname": "TENCENT-NET-AP Shenzhen Tencent Computer Systems Company Limited", "ascountry": "CN", "assource": "", "network": "82.156.64.0/18", "threatfeeds": {}}


indicator: 82.156.206.199
indicator_type: ipv4
source: dshield
country: CN
reverse_dns: 82.156.192.0/18
hosting_provider: TENCENT-NET-AP Shenzhen Tencent Computer Systems Company Limited
queried_at: 2026-03-10T06:17:58.896723
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "ipas@cnnic.cn", "as": 45090, "asname": "TENCENT-NET-AP Shenzhen Tencent Computer Systems Company Limited", "ascountry": "CN", "assource": "", "network": "82.156.192.0/18", "threatfeeds": {}}


indicator: 82.157.44.254
indicator_type: ipv4
source: dshield
country: CN
reverse_dns: 82.157.0.0/18
hosting_provider: TENCENT-NET-AP Shenzhen Tencent Computer Systems Company Limited
queried_at: 2026-03-10T06:18:00.231200
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "ipas@cnnic.cn", "as": 45090, "asname": "TENCENT-NET-AP Shenzhen Tencent Computer Systems Company Limited", "ascountry": "CN", "assource": "", "network": "82.157.0.0/18", "threatfeeds": {}}


indicator: 82.157.65.122
indicator_type: ipv4
source: dshield
country: CN
reverse_dns: 82.157.64.0/18
hosting_provider: TENCENT-NET-AP Shenzhen Tencent Computer Systems Company Limited
queried_at: 2026-03-10T06:18:01.549311
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "ipas@cnnic.cn", "as": 45090, "asname": "TENCENT-NET-AP Shenzhen Tencent Computer Systems Company Limited", "ascountry": "CN", "assource": "", "network": "82.157.64.0/18", "threatfeeds": {}}


indicator: 82.160.220.20
indicator_type: ipv4
source: dshield
country: PL
reverse_dns: 82.160.220.0/24
hosting_provider: RONI-AS Rusinek Edmund Marcin RONI Firma Handlowo-Uslugowa Wroniecka Telewizja Kablowa
queried_at: 2026-03-10T06:18:02.878899
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "biuro@roni.com.pl", "as": 199891, "asname": "RONI-AS Rusinek Edmund Marcin RONI Firma Handlowo-Uslugowa Wroniecka Telewizja Kablowa", "ascountry": "PL", "assource": "", "network": "82.160.220.0/24", "threatfeeds": {}}


indicator: 82.165.101.234
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 82.165.0.0/16
queried_at: 2026-03-10T06:18:04.217180
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@oneandone.net", "as": 8560, "asname": "IONOS-AS This is the joint network for IONOS, Fasthosts, Arsys, 1&1 Mail and Media and 1&1 Telecom. Formerly known as 1&1 Internet SE.", "ascountry": "DE", "assource": "", "network": "82.165.0.0/16", "threatfeeds": {"alltor": {"lastseen": "2026-01-31", "firstseen": "2025-02-04"}}}

hosting_provider:
[cell repeats an earlier one in this file: 134 characters]


indicator: 82.165.179.45
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 82.165.0.0/16
queried_at: 2026-03-10T06:18:05.530088
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@oneandone.net", "as": 8560, "asname": "IONOS-AS This is the joint network for IONOS, Fasthosts, Arsys, 1&1 Mail and Media and 1&1 Telecom. Formerly known as 1&1 Internet SE.", "ascountry": "DE", "assource": "", "network": "82.165.0.0/16", "threatfeeds": {}}

hosting_provider:
[cell repeats an earlier one in this file: 134 characters]


indicator: 82.202.138.242
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 82.202.138.0/24
hosting_provider: SITENETWORK-AS Sakhalin, Russia
queried_at: 2026-03-10T06:18:06.848177
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "lir@sitenetwork.ru", "as": 30745, "asname": "SITENETWORK-AS Sakhalin, Russia", "ascountry": "RU", "assource": "", "network": "82.202.138.0/24", "threatfeeds": {}}


indicator: 82.21.151.21
indicator_type: ipv4
source: dshield
country: GB
reverse_dns: 82.16.0.0/13
hosting_provider: NTL
queried_at: 2026-03-10T06:18:08.186195
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@virginmedia.com", "as": 5089, "asname": "NTL", "ascountry": "GB", "assource": "", "network": "82.16.0.0/13", "threatfeeds": {}}


indicator: 82.223.20.104
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 82.223.0.0/16
queried_at: 2026-03-10T06:18:09.476476
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@oneandone.net", "as": 8560, "asname": "IONOS-AS This is the joint network for IONOS, Fasthosts, Arsys, 1&1 Mail and Media and 1&1 Telecom. Formerly known as 1&1 Internet SE.", "ascountry": "DE", "assource": "", "network": "82.223.0.0/16", "threatfeeds": {}}

hosting_provider:
[cell repeats an earlier one in this file: 134 characters]


indicator: 82.24.145.39
indicator_type: ipv4
source: dshield
country: GB
reverse_dns: 82.24.0.0/13
hosting_provider: NTL
queried_at: 2026-03-10T06:18:10.777824
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@virginmedia.com", "as": 5089, "asname": "NTL", "ascountry": "GB", "assource": "", "network": "82.24.0.0/13", "threatfeeds": {}}


indicator: 82.242.243.50
indicator_type: ipv4
source: dshield
country: FR
reverse_dns: 82.240.0.0/12
hosting_provider: PROXAD
queried_at: 2026-03-10T06:18:12.098864
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@proxad.net", "as": 12322, "asname": "PROXAD", "ascountry": "FR", "assource": "", "network": "82.240.0.0/12", "threatfeeds": {}}


indicator: 82.65.242.204
indicator_type: ipv4
source: dshield
country: FR
reverse_dns: 82.64.0.0/14
hosting_provider: PROXAD
queried_at: 2026-03-10T06:18:14.770785
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@proxad.net", "as": 12322, "asname": "PROXAD", "ascountry": "FR", "assource": "", "network": "82.64.0.0/14", "threatfeeds": {}}


indicator: 82.68.2.174
indicator_type: ipv4
source: dshield
country: GB
reverse_dns: 82.68.0.0/14
hosting_provider: ZEN-AS Zen Internet - UK
queried_at: 2026-03-10T06:18:17.395261
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@zen.co.uk", "as": 13037, "asname": "ZEN-AS Zen Internet - UK", "ascountry": "GB", "assource": "", "network": "82.68.0.0/14", "threatfeeds": {}}


indicator: 82.74.227.253
indicator_type: ipv4
source: dshield
country: NL
reverse_dns: 82.74.0.0/15
hosting_provider: TNF-AS
queried_at: 2026-03-10T06:18:20.058605
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "esabuse.nl@vodafone.com", "as": 33915, "asname": "TNF-AS", "ascountry": "NL", "assource": "", "network": "82.74.0.0/15", "threatfeeds": {}}


indicator: 82.77.177.206
indicator_type: ipv4
source: dshield
country: RO
reverse_dns: 82.76.0.0/14
hosting_provider: RCS-RDS 73-75 Dr. Staicovici
queried_at: 2026-03-10T06:18:21.406586
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@rcs-rds.ro", "as": 8708, "asname": "RCS-RDS 73-75 Dr. Staicovici", "ascountry": "RO", "assource": "", "network": "82.76.0.0/14", "threatfeeds": {}}


indicator: 83.106.157.111
indicator_type: ipv4
source: dshield
country: GB
reverse_dns: 83.104.0.0/14
hosting_provider: Vodafone
queried_at: 2026-03-10T06:18:22.730819
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "ipabuse@vodafone.co.uk", "as": 5378, "asname": "Vodafone", "ascountry": "GB", "assource": "", "network": "83.104.0.0/14", "threatfeeds": {}}


indicator: 83.135.196.133
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 83.135.192.0/20
hosting_provider: VERSATEL
queried_at: 2026-03-10T06:18:24.048201
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@versatel.de", "as": 8881, "asname": "VERSATEL", "ascountry": "DE", "assource": "", "network": "83.135.192.0/20", "threatfeeds": {}}


indicator: 83.135.205.167
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 83.135.192.0/20
hosting_provider: VERSATEL
queried_at: 2026-03-10T06:18:26.733280
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@versatel.de", "as": 8881, "asname": "VERSATEL", "ascountry": "DE", "assource": "", "network": "83.135.192.0/20", "threatfeeds": {"blocklistde22": {"lastseen": "2018-12-27", "firstseen": "2018-12-25"}}}


indicator: 83.135.88.105
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 83.135.64.0/19
hosting_provider: VERSATEL
queried_at: 2026-03-10T06:18:28.074038
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@versatel.de", "as": 8881, "asname": "VERSATEL", "ascountry": "DE", "assource": "", "network": "83.135.64.0/19", "threatfeeds": {}}


indicator: 83.147.240.230
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 83.147.240.0/24
hosting_provider: EVOCATIVE-GLOBAL
queried_at: 2026-03-10T06:18:29.399338
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "admin-arin@vpls.com", "as": 4213, "asname": "EVOCATIVE-GLOBAL", "ascountry": "US", "assource": "", "network": "83.147.240.0/24", "threatfeeds": {}}


indicator: 83.150.218.113
indicator_type: ipv4
source: dshield
country: FR
reverse_dns: 83.150.218.0/24
hosting_provider: YORKHOST
queried_at: 2026-03-10T06:18:32.402305
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": ">>UNKNOWN<<", "as": 199415, "asname": "YORKHOST", "ascountry": "FR", "assource": "", "network": "83.150.218.0/24", "threatfeeds": {}}


indicator: 83.166.240.217
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 83.166.240.0/20
hosting_provider: RIM2000M-AS 2, Odesskaya str.
queried_at: 2026-03-10T06:18:33.748880
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "lukina@rim2000.ru", "as": 24936, "asname": "RIM2000M-AS 2, Odesskaya str.", "ascountry": "RU", "assource": "", "network": "83.166.240.0/20", "threatfeeds": {}}


indicator: 83.168.69.59
indicator_type: ipv4
source: dshield
country: PL
reverse_dns: 83.168.64.0/21
hosting_provider: ESPOL-AS
queried_at: 2026-03-10T06:18:35.088353
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@tstd.pl", "as": 31304, "asname": "ESPOL-AS", "ascountry": "PL", "assource": "", "network": "83.168.64.0/21", "threatfeeds": {}}


indicator: 83.205.197.139
indicator_type: ipv4
source: dshield
country: FR
reverse_dns: 83.205.0.0/16
hosting_provider: France Telecom - Orange
queried_at: 2026-03-10T06:18:36.433089
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@orange-business.com", "as": 3215, "asname": "France Telecom - Orange", "ascountry": "FR", "assource": "", "network": "83.205.0.0/16", "threatfeeds": {}}


indicator: 83.212.67.49
indicator_type: ipv4
source: dshield
country: GR
reverse_dns: 83.212.64.0/22
hosting_provider: Athens Egaleo GREECE
queried_at: 2026-03-10T06:18:37.764107
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "noc@teiath.gr", "as": 9069, "asname": "Athens Egaleo GREECE", "ascountry": "GR", "assource": "", "network": "83.212.64.0/22", "threatfeeds": {}}


indicator: 83.217.209.87
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 83.217.208.0/20
hosting_provider: INF-NET-AS
queried_at: 2026-03-10T06:18:39.080769
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "lirmaster@unitline.ru", "as": 31514, "asname": "INF-NET-AS", "ascountry": "RU", "assource": "", "network": "83.217.208.0/20", "threatfeeds": {}}


indicator: 83.219.250.119
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 83.219.224.0/19
hosting_provider: OBLCOM-AS 117393, Moscow, Russia
queried_at: 2026-03-10T06:18:40.424490
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@obl-com.ru", "as": 31225, "asname": "OBLCOM-AS 117393, Moscow, Russia", "ascountry": "RU", "assource": "", "network": "83.219.224.0/19", "threatfeeds": {}}


indicator: 83.22.9.8
indicator_type: ipv4
source: dshield
country: PL
reverse_dns: 83.16.0.0/13
hosting_provider: TPNET
queried_at: 2026-03-10T06:18:41.768729
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@tpnet.pl", "as": 5617, "asname": "TPNET", "ascountry": "PL", "assource": "", "network": "83.16.0.0/13", "threatfeeds": {}}


indicator: 83.222.191.50
indicator_type: ipv4
source: dshield
country: BG
reverse_dns: 83.222.160.0/19
hosting_provider: GCN-AS GCN AD - Sofia, Bulgaria
queried_at: 2026-03-10T06:18:43.088617
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "noc@gcn.bg", "as": 12615, "asname": "GCN-AS GCN AD - Sofia, Bulgaria", "ascountry": "BG", "assource": "", "network": "83.222.160.0/19", "threatfeeds": {}}


indicator: 83.229.87.11
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 83.229.87.0/24
hosting_provider: CLOUDWEBMANAGE-IL-FR
queried_at: 2026-03-10T06:18:47.724441
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@cloudwm.com", "as": 204548, "asname": "CLOUDWEBMANAGE-IL-FR", "ascountry": "US", "assource": "", "network": "83.229.87.0/24", "threatfeeds": {}}


indicator: 83.238.212.60
indicator_type: ipv4
source: dshield
country: PL
reverse_dns: 83.238.0.0/16
hosting_provider: AS-NETIA Warszawa 02-822
queried_at: 2026-03-10T06:18:49.060266
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@inetia.pl", "as": 12741, "asname": "AS-NETIA Warszawa 02-822", "ascountry": "PL", "assource": "", "network": "83.238.0.0/16", "threatfeeds": {}}


indicator: 83.38.16.1
indicator_type: ipv4
source: dshield
country: ES
reverse_dns: 83.38.0.0/16
hosting_provider: TELEFONICA_DE_ESPANA
queried_at: 2026-03-10T06:18:50.370527
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "nemesys@telefonica.com", "as": 3352, "asname": "TELEFONICA_DE_ESPANA", "ascountry": "ES", "assource": "", "network": "83.38.0.0/16", "threatfeeds": {}}


indicator: 83.49.90.149
indicator_type: ipv4
source: dshield
country: ES
reverse_dns: 83.49.0.0/16
hosting_provider: TELEFONICA_DE_ESPANA
queried_at: 2026-03-10T06:18:51.682286
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "nemesys@telefonica.com", "as": 3352, "asname": "TELEFONICA_DE_ESPANA", "ascountry": "ES", "assource": "", "network": "83.49.0.0/16", "threatfeeds": {}}


indicator: 83.9.138.195
indicator_type: ipv4
source: dshield
country: PL
reverse_dns: 83.8.0.0/13
hosting_provider: TPNET
queried_at: 2026-03-10T06:18:53.011321
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@tpnet.pl", "as": 5617, "asname": "TPNET", "ascountry": "PL", "assource": "", "network": "83.8.0.0/13", "threatfeeds": {"forumspam": {"lastseen": "2013-04-12", "firstseen": "2013-04-11"}}}


indicator: 83.9.154.131
indicator_type: ipv4
source: dshield
country: PL
reverse_dns: 83.8.0.0/13
hosting_provider: TPNET
queried_at: 2026-03-10T06:18:54.323257
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@tpnet.pl", "as": 5617, "asname": "TPNET", "ascountry": "PL", "assource": "", "network": "83.8.0.0/13", "threatfeeds": {}}


indicator: 83.99.154.203
indicator_type: ipv4
source: dshield
country: LV
reverse_dns: 83.99.128.0/17
hosting_provider: LVBALTICOM-AS
queried_at: 2026-03-10T06:18:55.650710
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@balticom.lv", "as": 24651, "asname": "LVBALTICOM-AS", "ascountry": "LV", "assource": "", "network": "83.99.128.0/17", "threatfeeds": {}}


indicator: 84.0.120.143
indicator_type: ipv4
source: dshield
country: HU
reverse_dns: 84.0.0.0/14
hosting_provider: MAGYAR-TELEKOM-MAIN-AS Magyar Telekom Nyrt.
queried_at: 2026-03-10T06:18:56.869669
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@telekom.hu", "as": 5483, "asname": "MAGYAR-TELEKOM-MAIN-AS Magyar Telekom Nyrt.", "ascountry": "HU", "assource": "", "network": "84.0.0.0/14", "threatfeeds": {}}


indicator: 84.113.167.151
indicator_type: ipv4
source: dshield
country: AT
reverse_dns: 84.112.0.0/15
hosting_provider: TMA Magenta Telekom
queried_at: 2026-03-10T06:18:58.206187
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@t-mobile.at", "as": 8412, "asname": "TMA Magenta Telekom", "ascountry": "AT", "assource": "", "network": "84.112.0.0/15", "threatfeeds": {}}


indicator: 84.132.21.41
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 84.128.0.0/10
hosting_provider: DTAG Internet service provider operations
queried_at: 2026-03-10T06:18:59.541189
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "auftrag@nic.telekom.de", "as": 3320, "asname": "DTAG Internet service provider operations", "ascountry": "DE", "assource": "", "network": "84.128.0.0/10", "threatfeeds": {}}


indicator: 84.149.79.77
indicator_type: ipv4
source: shodan
reverse_dns: p54954f4d.dip0.t-ipconnect.de
queried_at: 2026-03-10T06:35:59.954465
raw_data:
  {"ports": [8089], "vulns": [], "hostnames": ["p54954f4d.dip0.t-ipconnect.de"], "tags": [], "cpes": []}


indicator: 84.150.238.145
indicator_type: ipv4
source: shodan
reverse_dns: p5496ee91.dip0.t-ipconnect.de
queried_at: 2026-03-10T06:36:03.349453
raw_data:
  {"ports": [8089], "vulns": [], "hostnames": ["p5496ee91.dip0.t-ipconnect.de"], "tags": [], "cpes": []}


indicator: 84.165.125.121
indicator_type: ipv4
source: shodan
reverse_dns: p54a57d79.dip0.t-ipconnect.de
queried_at: 2026-03-10T06:36:18.632188
raw_data:
  {"ports": [5060], "vulns": [], "hostnames": ["p54a57d79.dip0.t-ipconnect.de"], "tags": [], "cpes": []}


indicator: 84.166.210.87
indicator_type: ipv4
source: shodan
reverse_dns: p54a6d257.dip0.t-ipconnect.de
queried_at: 2026-03-10T06:36:22.041155
raw_data:
  {"ports": [8089], "vulns": [], "hostnames": ["p54a6d257.dip0.t-ipconnect.de"], "tags": [], "cpes": []}


indicator: 84.170.134.171
indicator_type: ipv4
source: shodan
reverse_dns: p54aa86ab.dip0.t-ipconnect.de
queried_at: 2026-03-10T06:36:25.383817
raw_data:
  {"ports": [8089], "vulns": [], "hostnames": ["p54aa86ab.dip0.t-ipconnect.de"], "tags": [], "cpes": []}


indicator: 84.174.230.109
indicator_type: ipv4
source: shodan
reverse_dns: p54aee66d.dip0.t-ipconnect.de
queried_at: 2026-03-10T06:36:28.791335
raw_data:
  {"ports": [5060], "vulns": [], "hostnames": ["p54aee66d.dip0.t-ipconnect.de"], "tags": [], "cpes": []}


indicator: 84.200.17.29
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: cw.paradisebet.club
queried_at: 2026-03-10T06:36:38.684020
raw_data:
  {"ports": [22, 80, 443, 3000], "vulns": ["CVE-2025-23419", "CVE-2023-44487"], "hostnames": ["cw.paradisebet.club"], "tags": ["eol-product"], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:9.6p1", "cpe:/a:f5:nginx:1.24.0", "cpe:/o:canonical:ubuntu_linux"]}

hosting_provider:
[cell repeats an earlier one in this file: 107 characters]


indicator: 84.200.24.152
indicator_type: ipv4
source: shodan
city: starttls,self-signed
reverse_dns: hrvatskatehnologija.com
hosting_provider: cpe:/a:f5:nginx,cpe:/a:pureftpd:pure-ftpd
queried_at: 2026-03-10T06:36:41.958454
raw_data:
  {"ports": [21, 80, 443], "vulns": [], "hostnames": ["hrvatskatehnologija.com"], "tags": ["starttls", "self-signed"], "cpes": ["cpe:/a:f5:nginx", "cpe:/a:pureftpd:pure-ftpd"]}


indicator: 84.221.192.200
indicator_type: ipv4
source: shodan
reverse_dns: dynamic-adsl-84-221-192-200.clienti.tiscali.it
queried_at: 2026-03-10T06:36:48.739883
raw_data:
  {"ports": [7170], "vulns": [], "hostnames": ["dynamic-adsl-84-221-192-200.clienti.tiscali.it"], "tags": [], "cpes": []}


indicator: 84.32.190.92
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: ip-84-32-190-92.009.ptr.cherryservers.net
queried_at: 2026-03-10T06:36:55.417664
raw_data:
  {"ports": [22, 80, 444], "vulns": ["CVE-2025-23419", "CVE-2023-44487"], "hostnames": ["ip-84-32-190-92.009.ptr.cherryservers.net"], "tags": ["eol-product"], "cpes": ["cpe:/o:canonical:ubuntu_linux", "cpe:/o:linux:linux_kernel", "cpe:/a:f5:nginx:1.24.0", "cpe:/a:openbsd:openssh:9.6p1"]}

hosting_provider:
  cpe:/o:canonical:ubuntu_linux,cpe:/o:linux:linux_kernel,cpe:/a:f5:nginx:1.24.0,cpe:/a:openbsd:openssh:9.6p1


indicator: 84.32.231.72
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: ip-84-32-231-72.005.ptr.cherryservers.net,walletcoinmetro.net
queried_at: 2026-03-10T06:36:58.787396
raw_data:
  {"ports": [22, 80, 443], "vulns": [], "hostnames": ["ip-84-32-231-72.005.ptr.cherryservers.net", "walletcoinmetro.net"], "tags": ["eol-product"], "cpes": ["cpe:/a:expressjs:express", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx", "cpe:/a:nodejs:node.js", "cpe:/a:openbsd:openssh:9.6p1", "cpe:/a:f5:nginx:1.26.3"]}

hosting_provider:
  cpe:/a:expressjs:express,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx,cpe:/a:nodejs:node.js,cpe:/a:openbsd:openssh:9.6p1,cpe:/a:f5:nginx:1.26.3


indicator: 84.32.9.223
indicator_type: ipv4
source: shodan
reverse_dns: ip-84-32-9-223.004.ptr.cherryservers.net
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-03-10T06:37:00.420327
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["ip-84-32-9-223.004.ptr.cherryservers.net"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 84.148.250.245
indicator_type: ipv4
source: otx
country: DE
city: Mönchengladbach
hosting_provider: ioc,cyber security,Nextray,malicious,phishing
queried_at: 2026-03-10T06:37:06.372813
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "M\u00f6nchengladbach", "asn": "AS3320 deutsche telekom ag", "indicator": "84.148.250.245", "tags": ["ioc", "cyber security", "Nextray", "malicious", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse cr


indicator: 84.149.69.252
indicator_type: ipv4
source: otx
country: DE
city: Klein Offenseth-Sparrieshoop
hosting_provider: ioc,cyber security,Nextray,malicious,phishing
queried_at: 2026-03-10T06:37:10.066943
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Klein Offenseth-Sparrieshoop", "asn": "AS3320 deutsche telekom ag", "indicator": "84.149.69.252", "tags": ["ioc", "cyber security", "Nextray", "malicious", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (P


indicator: 84.149.79.77
indicator_type: ipv4
source: otx
country: DE
city: Elmshorn
hosting_provider: ioc,cyber security,Nextray,malicious,phishing
queried_at: 2026-03-10T06:37:12.198195
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Elmshorn", "asn": "AS3320 deutsche telekom ag", "indicator": "84.149.79.77", "tags": ["ioc", "cyber security", "Nextray", "malicious", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS_i


indicator: 84.150.225.12
indicator_type: ipv4
source: otx
country: DE
city: Oldenburg
hosting_provider: ioc,cyber security,Nextray,malicious,phishing
queried_at: 2026-03-10T06:37:16.795099
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Oldenburg", "asn": "AS3320 deutsche telekom ag", "indicator": "84.150.225.12", "tags": ["ioc", "cyber security", "Nextray", "malicious", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS


indicator: 84.150.238.145
indicator_type: ipv4
source: otx
country: DE
city: Oldenburg
hosting_provider: ioc,cyber security,Nextray,malicious,phishing
queried_at: 2026-03-10T06:37:19.209281
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Oldenburg", "asn": "AS3320 deutsche telekom ag", "indicator": "84.150.238.145", "tags": ["ioc", "cyber security", "Nextray", "malicious", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RV


indicator: 84.154.119.178
indicator_type: ipv4
source: otx
country: DE
city: Mechernich
queried_at: 2026-03-10T06:37:22.332281
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Mechernich", "asn": "AS3320 deutsche telekom ag", "indicator": "84.154.119.178", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 84.155.117.153
indicator_type: ipv4
source: otx
country: DE
city: Kiel
hosting_provider: ioc,cyber security,Nextray,malicious,phishing
queried_at: 2026-03-10T06:37:25.600255
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Kiel", "asn": "AS3320 deutsche telekom ag", "indicator": "84.155.117.153", "tags": ["ioc", "cyber security", "Nextray", "malicious", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS_i_a


indicator: 84.155.145.56
indicator_type: ipv4
source: otx
country: DE
city: Weiterstadt
reverse_dns: tbcloud.goip.de
hosting_provider: ioc,cyber security,Nextray,malicious,phishing
queried_at: 2026-03-10T06:37:27.548725
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Weiterstadt", "asn": "AS3320 deutsche telekom ag", "indicator": "84.155.145.56", "tags": ["ioc", "cyber security", "Nextray", "malicious", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by R


indicator: 84.157.69.182
indicator_type: ipv4
source: otx
country: DE
city: Frankfurt am Main
reverse_dns: pc-synology-mahr.direct.quickconnect.to
hosting_provider: ioc,cyber security,Nextray,malicious,phishing
queried_at: 2026-03-10T06:37:31.691762
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Frankfurt am Main", "asn": "AS3320 deutsche telekom ag", "indicator": "84.157.69.182", "tags": ["ioc", "cyber security", "Nextray", "malicious", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse create


indicator: 84.157.78.140
indicator_type: ipv4
source: otx
country: DE
city: Frankfurt am Main
hosting_provider: ioc,cyber security,Nextray,malicious,phishing
queried_at: 2026-03-10T06:37:33.263430
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Frankfurt am Main", "asn": "AS3320 deutsche telekom ag", "indicator": "84.157.78.140", "tags": ["ioc", "cyber security", "Nextray", "malicious", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse create


indicator: 84.158.120.247
indicator_type: ipv4
source: otx
country: DE
city: Heilbronn
hosting_provider: ioc,cyber security,Nextray,malicious,phishing
queried_at: 2026-03-10T06:37:37.279479
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Heilbronn", "asn": "AS3320 deutsche telekom ag", "indicator": "84.158.120.247", "tags": ["ioc", "cyber security", "Nextray", "malicious", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RV


indicator: 84.165.118.101
indicator_type: ipv4
source: otx
country: DE
city: Sparneck
reverse_dns: kw5vq84nq2yvua1p.myfritz.net
hosting_provider: ioc,cyber security,Nextray,malicious,phishing
queried_at: 2026-03-10T06:37:40.486701
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Sparneck", "asn": "AS3320 deutsche telekom ag", "indicator": "84.165.118.101", "tags": ["ioc", "cyber security", "Nextray", "malicious", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS


indicator: 84.165.122.122
indicator_type: ipv4
source: otx
country: DE
city: Munchberg
reverse_dns: y7frm4nnrqdsmbyn.myfritz.net
hosting_provider: ioc,cyber security,Nextray,malicious,phishing
queried_at: 2026-03-10T06:37:43.595560
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Munchberg", "asn": "AS3320 deutsche telekom ag", "indicator": "84.165.122.122", "tags": ["ioc", "cyber security", "Nextray", "malicious", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RV


indicator: 84.165.125.121
indicator_type: ipv4
source: otx
country: DE
city: Gefrees
reverse_dns: pq2ybqupsbpnr1ok.myfritz.net
hosting_provider: ioc,cyber security,Nextray,malicious,phishing
queried_at: 2026-03-10T06:37:45.476839
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Gefrees", "asn": "AS3320 deutsche telekom ag", "indicator": "84.165.125.121", "tags": ["ioc", "cyber security", "Nextray", "malicious", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS_


indicator: 84.166.210.13
indicator_type: ipv4
source: otx
country: DE
city: Schmitten
hosting_provider: ioc,cyber security,Nextray,malicious,phishing
queried_at: 2026-03-10T06:37:48.254940
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Schmitten", "asn": "AS3320 deutsche telekom ag", "indicator": "84.166.210.13", "tags": ["ioc", "cyber security", "Nextray", "malicious", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS


indicator: 84.166.210.87
indicator_type: ipv4
source: otx
country: DE
city: Schmitten
hosting_provider: ioc,cyber security,Nextray,malicious,phishing
queried_at: 2026-03-10T06:37:51.537522
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Schmitten", "asn": "AS3320 deutsche telekom ag", "indicator": "84.166.210.87", "tags": ["ioc", "cyber security", "Nextray", "malicious", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS


indicator: 84.166.218.56
indicator_type: ipv4
source: otx
country: DE
city: Schmitten
hosting_provider: ioc,cyber security,Nextray,malicious,phishing
queried_at: 2026-03-10T06:37:53.437936
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Schmitten", "asn": "AS3320 deutsche telekom ag", "indicator": "84.166.218.56", "tags": ["ioc", "cyber security", "Nextray", "malicious", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS


indicator: 84.170.134.171
indicator_type: ipv4
source: otx
country: DE
city: Dresden
reverse_dns: vcn9n0rcr9soduu1.myfritz.net,egmswomveyk4cwlc.myfritz.net
hosting_provider: ioc,cyber security,Nextray,malicious,phishing
queried_at: 2026-03-10T06:37:56.403031
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Dresden", "asn": "AS3320 deutsche telekom ag", "indicator": "84.170.134.171", "tags": ["ioc", "cyber security", "Nextray", "malicious", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS_


indicator: 84.174.141.198
indicator_type: ipv4
source: otx
country: DE
city: Magdeburg
hosting_provider: ioc,cyber security,Nextray,malicious,phishing
queried_at: 2026-03-10T06:38:03.428038
raw_data:
  {"pulse_count": 34, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Magdeburg", "asn": "AS3320 deutsche telekom ag", "indicator": "84.174.141.198", "tags": ["ioc", "cyber security", "Nextray", "malicious", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RV


indicator: 84.174.230.109
indicator_type: ipv4
source: otx
country: DE
city: Flammersfeld
hosting_provider: ioc,cyber security,Nextray,malicious,phishing
queried_at: 2026-03-10T06:38:05.375791
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Flammersfeld", "asn": "AS3320 deutsche telekom ag", "indicator": "84.174.230.109", "tags": ["ioc", "cyber security", "Nextray", "malicious", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by


indicator: 84.178.155.104
indicator_type: ipv4
source: otx
country: DE
city: Hassloch
hosting_provider: ioc,cyber security,Nextray,malicious,phishing
queried_at: 2026-03-10T06:38:07.670465
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Hassloch", "asn": "AS3320 deutsche telekom ag", "indicator": "84.178.155.104", "tags": ["ioc", "cyber security", "Nextray", "malicious", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS


indicator: 84.191.165.42
indicator_type: ipv4
source: otx
country: DE
city: Kempten (Allgaeu)
hosting_provider: ioc,cyber security,Nextray,malicious,phishing
queried_at: 2026-03-10T06:38:09.303034
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Kempten (Allgaeu)", "asn": "AS3320 deutsche telekom ag", "indicator": "84.191.165.42", "tags": ["ioc", "cyber security", "Nextray", "malicious", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse create


indicator: 84.196.9.26
indicator_type: ipv4
source: otx
country: BE
city: Turnhout
hosting_provider: ioc,cyber security,Nextray,malicious,phishing
queried_at: 2026-03-10T06:38:11.480108
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Belgium", "country_code": "BE", "city": "Turnhout", "asn": "AS6848 telenet bvba", "indicator": "84.196.9.26", "tags": ["ioc", "cyber security", "Nextray", "malicious", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS_i_am)", "

reverse_dns:
  home.andrethemac.be,www.andrethemac.be,andrethemac.be,site.andrethemac.one,andrethemac.one,www.andrethemac.one,home.andrethemac.one


indicator: 84.200.154.113
indicator_type: ipv4
source: otx
country: DE
queried_at: 2026-03-10T06:38:15.530148
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS44066 accelerated it services & consulting gmbh", "indicator": "84.200.154.113", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 84.200.17.247
indicator_type: ipv4
source: otx
country: DE
reverse_dns: serviceintshares.xyz
hosting_provider: Deimos,CobaltStrike,Bianlian,EvilGoPhish,Sliver,Interactsh,Brute_Ratel_C4,Mythic,Evilginx,Remcos
queried_at: 2026-03-10T06:38:17.056990
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS44066 accelerated it services & consulting gmbh", "indicator": "84.200.17.247", "tags": ["Deimos", "CobaltStrike", "Bianlian", "EvilGoPhish", "Sliver", "Interactsh", "Brute_Ratel_C4", "Mythic", "Evilginx", "Remcos", "Hak5_Cloud_C2", "C2", "NetSupportRAT", "Havoc"], "pulses": ["Threatfox Recent Additions", "Twitter Feed - drb_ra - 07-03-2025"], "malware_count": 0, "passive_dns_count": 1, "malwa


indicator: 84.200.17.29
indicator_type: ipv4
source: otx
country: DE
queried_at: 2026-03-10T06:38:19.097778
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS44066 accelerated it services & consulting gmbh", "indicator": "84.200.17.29", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 54, "malware_samples": [], "passive_dns": ["hormontaires.com", "easiert.com", "efu7sqzes6x.click", "cg6eg4evl8hl110t6imu1xf.vintagecleaningservice.com", "63tnqotec1iis6jzoasqqzn.amateurlogin.com", "vitahealthrich.com", "7v

reverse_dns:
  hormontaires.com,easiert.com,efu7sqzes6x.click,cg6eg4evl8hl110t6imu1xf.vintagecleaningservice.com,63tnqotec1iis6jzoasqqzn.amateurlogin.com,vitahealthrich.com,7ve9yb99q6hsjr6rpc54pit.vitahealthrich.com,cfprufnsmjae79p0m4wkrht.vintagecleaningservice.com,5nx3z102u17w0jo1kj1v2zf.vintageautobodyworks.com,vo9yoj69grvb6b6eiueb47i533653831c6552a1fd10c6d831fd08759.tristarlimochicago.com


indicator: 84.200.2.12
indicator_type: ipv4
source: otx
country: DE
hosting_provider: office,0day,sofacy,GAMEFISH,NETWIRE,fireeye,turla,apt28
queried_at: 2026-03-10T06:38:22.757838
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS44066 accelerated it services & consulting gmbh", "indicator": "84.200.2.12", "tags": ["office", "0day", "sofacy", "GAMEFISH", "NETWIRE", "fireeye", "turla", "apt28"], "pulses": ["EPS Processing Zero-Days Exploited by Multiple Threat Actors"], "malware_count": 1, "passive_dns_count": 0, "malware_samples": ["2b2668fa5331ffa99fc11d881fbce91927bfac1a8ec5705b6412c7903543116a"], "passive_dns": []}


indicator: 84.200.24.152
indicator_type: ipv4
source: otx
country: DE
hosting_provider: ipv4 port,domains,sha256,domain port,combinations,tcp/23,mirai,compromise ipv4,sha1,telnet
queried_at: 2026-03-10T06:38:24.986379
raw_data:
  {"pulse_count": 6, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS44066 accelerated it services & consulting gmbh", "indicator": "84.200.24.152", "tags": ["ipv4 port", "domains", "sha256", "domain port", "combinations", "tcp/23", "mirai", "compromise ipv4", "sha1", "telnet", "botnet", "linux", "port 23"], "pulses": ["IP Addresses Logged by the Rosethorn PotNet", "Threatfox Recent Additions", "Honeypot Visitors (TCP/23) - 2025-04-06", "[GS-25-1173] Mirai Botn

reverse_dns:
  hrvatskatehnologija.com,versatile-onyx-armadillo.84-200-24-152.cpanel.site,www.versatile-onyx-armadillo.84-200-24-152.cpanel.site,www.illuminarebusiness.com,www.zenithalbusiness.com,mail.illuminarebusiness.com,mail.zenithalbusiness.com,zenithalbusiness.com,illuminarebusiness.com


indicator: 84.201.174.9
indicator_type: ipv4
source: otx
country: RU
reverse_dns: app.tagilchanin.84.201.174.9.nip.io,www.explore-news.gq,explore-news.gq
queried_at: 2026-03-10T06:38:26.972290
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS200350 yandex.cloud llc", "indicator": "84.201.174.9", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["app.tagilchanin.84.201.174.9.nip.io", "www.explore-news.gq", "explore-news.gq"]}


indicator: 84.201.181.69
indicator_type: ipv4
source: otx
country: RU
reverse_dns: alertmanager.jumse.ru,e-kassir.com
queried_at: 2026-03-10T06:38:29.428347
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS200350 yandex.cloud llc", "indicator": "84.201.181.69", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["alertmanager.jumse.ru", "e-kassir.com"]}


indicator: 84.212.255.36
indicator_type: ipv4
source: otx
country: NO
city: Stavanger
hosting_provider: ioc,cyber security,Nextray,malicious,phishing
queried_at: 2026-03-10T06:38:33.231890
raw_data:
  {"pulse_count": 35, "reputation": 0, "country": "Norway", "country_code": "NO", "city": "Stavanger", "asn": "AS41164 telia norge as", "indicator": "84.212.255.36", "tags": ["ioc", "cyber security", "Nextray", "malicious", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS_i_am


indicator: 84.221.192.200
indicator_type: ipv4
source: otx
country: IT
city: Treviso
hosting_provider: ioc,cyber security,Nextray,malicious,phishing
queried_at: 2026-03-10T06:38:34.988276
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Italy", "country_code": "IT", "city": "Treviso", "asn": "AS8612 tiscali italia s.p.a.", "indicator": "84.221.192.200", "tags": ["ioc", "cyber security", "Nextray", "malicious", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS_


indicator: 84.236.6.89
indicator_type: ipv4
source: otx
country: HU
city: Budapest
hosting_provider: ioc,cyber security,Nextray,malicious,phishing
queried_at: 2026-03-10T06:38:38.648788
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Hungary", "country_code": "HU", "city": "Budapest", "asn": "AS20845 digi tavkozlesi es szolgaltato kft.", "indicator": "84.236.6.89", "tags": ["ioc", "cyber security", "Nextray", "malicious", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse 


indicator: 84.242.31.209
indicator_type: ipv4
source: otx
country: DE
city: Hamburg
hosting_provider: ioc,cyber security,Nextray,malicious,phishing
queried_at: 2026-03-10T06:38:42.962375
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Hamburg", "asn": "AS15943 wilhelm.tel gmbh", "indicator": "84.242.31.209", "tags": ["ioc", "cyber security", "Nextray", "malicious", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS_i_a


indicator: 84.247.148.70
indicator_type: ipv4
source: otx
country: NO
hosting_provider: ,malware,ransomware
queried_at: 2026-03-10T06:38:44.772096
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Norway", "country_code": "NO", "city": null, "asn": "AS29286 skylogic s.p.a.", "indicator": "84.247.148.70", "tags": ["", "malware", "ransomware"], "pulses": ["ThreatFix", "Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 84.32.190.92
indicator_type: ipv4
source: otx
country: LT
reverse_dns: 84.32.190.92.sslip.io,internationalview.info
hosting_provider: Evilginx,Remcos,Havoc,Qakbot,CobaltStrike,Sliver,Interactsh,Hookbot,Supershell,C2
queried_at: 2026-03-10T06:38:47.196350
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Lithuania", "country_code": "LT", "city": null, "asn": "AS59642 uab cherry servers", "indicator": "84.32.190.92", "tags": ["Evilginx", "Remcos", "Havoc", "Qakbot", "CobaltStrike", "Sliver", "Interactsh", "Hookbot", "Supershell", "C2", "Deimos", "AsyncRAT", "Pegasus", "Bianlian", "EvilGoPhish", "Reverse_SSH", "Brute_Ratel_C4", "Mythic", "NetSupportRAT"], "pulses": ["Threatfox Recent Additions", "Twitter Feed - drb_ra - 28-03-2025"], "malware_count":


indicator: 84.32.220.50
indicator_type: ipv4
source: otx
country: LT
hosting_provider: ,malware,ransomware
queried_at: 2026-03-10T06:38:49.464705
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Lithuania", "country_code": "LT", "city": null, "asn": "ASNone ", "indicator": "84.32.220.50", "tags": ["", "malware", "ransomware"], "pulses": ["ThreatFix", "Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 84.32.231.72
indicator_type: ipv4
source: otx
country: LT
queried_at: 2026-03-10T06:38:51.874036
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Lithuania", "country_code": "LT", "city": null, "asn": "ASNone ", "indicator": "84.32.231.72", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 1, "passive_dns_count": 0, "malware_samples": ["bf2ab7698435155636ecd6008170ff933a367fe019961a84aec08efe1b2a6492"], "passive_dns": []}


indicator: 84.32.9.223
indicator_type: ipv4
source: otx
country: LT
queried_at: 2026-03-10T06:38:53.639630
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Lithuania", "country_code": "LT", "city": null, "asn": "AS7029 windstream communications llc", "indicator": "84.32.9.223", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 84.38.129.21
indicator_type: ipv4
source: otx
country: NL
city: Meppel
queried_at: 2026-03-10T06:38:58.952219
raw_data:
  {"pulse_count": 10, "reputation": 0, "country": "Netherlands", "country_code": "NL", "city": "Meppel", "asn": "AS203557 dataclub s.a.", "indicator": "84.38.129.21", "tags": ["userprofile", "credentials theft", "koivm", "mimikatz", "meshagent", "job seeker targeting", "modeloader", "modeloader hxxp", "c2", "andariel", "andariel group", "stealer", "andarloader", "systemdirectory", "lazarus", "cryptocurrency", "keylogger", "cve-2021-34527", "north korea", "cyber espionage", "infrastructure monitori

hosting_provider:
  userprofile,credentials theft,koivm,mimikatz,meshagent,job seeker targeting,modeloader,modeloader hxxp,c2,andariel


indicator: 84.38.129.34
indicator_type: ipv4
source: otx
country: NL
city: Meppel
hosting_provider: ,malware,ransomware
queried_at: 2026-03-10T06:39:02.372255
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Netherlands", "country_code": "NL", "city": "Meppel", "asn": "AS203557 dataclub s.a.", "indicator": "84.38.129.34", "tags": ["", "malware", "ransomware"], "pulses": ["ThreatFix", "Threatfox Recent Additions"], "malware_count": 3, "passive_dns_count": 0, "malware_samples": ["693641437447002305e9b524d100e8ca6c6da8971c869a77c58d602fbf847f00", "3fe1ba218da996bffaa9224ec0f45e76c0200a979bba342e35283feff1801512", "ce402b1cf5e51710ad4e261399db77d4163277690


indicator: 84.148.250.245
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: Deutsche Telekom AG
queried_at: 2026-03-10T06:39:40.920282
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "DE", "as_owner": "Deutsche Telekom AG", "asn": 3320, "network": "84.144.0.0/12", "last_analysis_date": 1755134698}


indicator: 84.149.69.252
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: Deutsche Telekom AG
queried_at: 2026-03-10T06:40:01.275750
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "DE", "as_owner": "Deutsche Telekom AG", "asn": 3320, "network": "84.144.0.0/12", "last_analysis_date": 1730080415}


indicator: 84.149.79.77
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: Deutsche Telekom AG
queried_at: 2026-03-10T06:40:21.497123
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "DE", "as_owner": "Deutsche Telekom AG", "asn": 3320, "network": "84.144.0.0/12", "last_analysis_date": 1730080430}


indicator: 84.150.225.12
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: Deutsche Telekom AG
queried_at: 2026-03-10T06:40:41.720983
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "DE", "as_owner": "Deutsche Telekom AG", "asn": 3320, "network": "84.144.0.0/12", "last_analysis_date": 1730080431}


indicator: 84.150.238.145
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: Deutsche Telekom AG
queried_at: 2026-03-10T06:41:02.126840
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "DE", "as_owner": "Deutsche Telekom AG", "asn": 3320, "network": "84.144.0.0/12", "last_analysis_date": 1730080421}


indicator: 84.154.119.178
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: Deutsche Telekom AG
queried_at: 2026-03-10T06:41:22.392161
raw_data:
  {"malicious": 2, "suspicious": 1, "harmless": 58, "undetected": 33, "reputation": -1, "country": "DE", "as_owner": "Deutsche Telekom AG", "asn": 3320, "network": "84.144.0.0/12", "last_analysis_date": 1770331484}


indicator: 84.155.117.153
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: Deutsche Telekom AG
queried_at: 2026-03-10T06:41:42.684164
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "DE", "as_owner": "Deutsche Telekom AG", "asn": 3320, "network": "84.144.0.0/12", "last_analysis_date": 1730080420}


indicator: 84.155.145.56
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: Deutsche Telekom AG
queried_at: 2026-03-10T06:42:02.895320
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "DE", "as_owner": "Deutsche Telekom AG", "asn": 3320, "network": "84.144.0.0/12", "last_analysis_date": 1730080429}


indicator: 84.157.78.140
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: Deutsche Telekom AG
queried_at: 2026-03-10T06:42:43.793583
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "DE", "as_owner": "Deutsche Telekom AG", "asn": 3320, "network": "84.144.0.0/12", "last_analysis_date": 1750688919}


indicator: 84.149.69.252
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 84.128.0.0/10
hosting_provider: DTAG Internet service provider operations
queried_at: 2026-03-10T06:43:05.484770
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "auftrag@nic.telekom.de", "as": 3320, "asname": "DTAG Internet service provider operations", "ascountry": "DE", "assource": "", "network": "84.128.0.0/10", "threatfeeds": {"forumspam": {"lastseen": "2013-01-24", "firstseen": "2013-01-23"}}}


indicator: 84.196.9.26
indicator_type: ipv4
source: dshield
country: BE
reverse_dns: 84.192.0.0/13
hosting_provider: TELENET-AS
queried_at: 2026-03-10T06:43:33.676730
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@pandora.be", "as": 6848, "asname": "TELENET-AS", "ascountry": "BE", "assource": "", "network": "84.192.0.0/13", "threatfeeds": {}}


indicator: 84.200.154.113
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 84.200.0.0/16
hosting_provider: DE-FIRSTCOLO www.first-colo.net
queried_at: 2026-03-10T06:43:35.019717
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@first-colo.de", "as": 44066, "asname": "DE-FIRSTCOLO www.first-colo.net", "ascountry": "DE", "assource": "", "network": "84.200.0.0/16", "threatfeeds": {}}


indicator: 84.201.174.9
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 84.201.128.0/18
hosting_provider: YANDEXCLOUD
queried_at: 2026-03-10T06:43:41.681349
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@yandex.ru", "as": 200350, "asname": "YANDEXCLOUD", "ascountry": "RU", "assource": "", "network": "84.201.128.0/18", "threatfeeds": {}}


indicator: 84.212.255.36
indicator_type: ipv4
source: dshield
country: NO
reverse_dns: 84.212.128.0/17
hosting_provider: GET-NO GET Norway
queried_at: 2026-03-10T06:43:44.343569
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@get.no", "as": 41164, "asname": "GET-NO GET Norway", "ascountry": "NO", "assource": "", "network": "84.212.128.0/17", "threatfeeds": {}}


indicator: 84.221.192.200
indicator_type: ipv4
source: dshield
country: IT
reverse_dns: 84.221.0.0/16
hosting_provider: TISCALI-
queried_at: 2026-03-10T06:43:45.683935
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@tiscali.it", "as": 8612, "asname": "TISCALI-", "ascountry": "IT", "assource": "", "network": "84.221.0.0/16", "threatfeeds": {}}


indicator: 84.236.6.89
indicator_type: ipv4
source: dshield
country: HU
reverse_dns: 84.236.0.0/17
hosting_provider: DIGICABLE
queried_at: 2026-03-10T06:43:47.042872
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@hdsnet.hu", "as": 20845, "asname": "DIGICABLE", "ascountry": "HU", "assource": "", "network": "84.236.0.0/17", "threatfeeds": {}}


indicator: 84.242.31.209
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 84.242.16.0/20
hosting_provider: WTNET-AS wilhelm.tel GmbH
queried_at: 2026-03-10T06:43:48.390795
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@wtnet.de", "as": 15943, "asname": "WTNET-AS wilhelm.tel GmbH", "ascountry": "DE", "assource": "", "network": "84.242.16.0/20", "threatfeeds": {}}


indicator: 84.32.190.92
indicator_type: ipv4
source: dshield
country: LT
reverse_dns: 84.32.188.0/22
hosting_provider: CHERRYSERVERS2-AS
queried_at: 2026-03-10T06:43:51.335635
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@cherryservers.com", "as": 59642, "asname": "CHERRYSERVERS2-AS", "ascountry": "LT", "assource": "", "network": "84.32.188.0/22", "threatfeeds": {}}


indicator: 84.32.220.50
indicator_type: ipv4
source: dshield
country: TR
reverse_dns: 84.32.220.0/24
hosting_provider: OMER-FARUK-DEMIRCI
queried_at: 2026-03-10T06:43:52.663484
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@vodafone.net.tr", "as": 47436, "asname": "OMER-FARUK-DEMIRCI", "ascountry": "TR", "assource": "", "network": "84.32.220.0/24", "threatfeeds": {}}


indicator: 84.32.231.72
indicator_type: ipv4
source: dshield
country: TR
reverse_dns: 84.32.231.0/24
hosting_provider: OMER-FARUK-DEMIRCI
queried_at: 2026-03-10T06:43:54.007370
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@vodafone.net.tr", "as": 47436, "asname": "OMER-FARUK-DEMIRCI", "ascountry": "TR", "assource": "", "network": "84.32.231.0/24", "threatfeeds": {}}


indicator: 84.32.9.223
indicator_type: ipv4
source: dshield
country: NL
reverse_dns: 84.32.9.0/24
hosting_provider: SPECTRAIP SpectraIP B.V.
queried_at: 2026-03-10T06:43:55.349601
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@spectraip.net", "as": 62068, "asname": "SPECTRAIP SpectraIP B.V.", "ascountry": "NL", "assource": "", "network": "84.32.9.0/24", "threatfeeds": {}}


indicator: 84.38.129.21
indicator_type: ipv4
source: dshield
country: BZ
reverse_dns: 84.38.129.0/24
hosting_provider: DATACLUB-NL
queried_at: 2026-03-10T06:43:56.691906
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@dataclub.eu", "as": 203557, "asname": "DATACLUB-NL", "ascountry": "BZ", "assource": "", "network": "84.38.129.0/24", "threatfeeds": {"blocklistde25": {"lastseen": "2017-04-20", "firstseen": "2017-04-19"}, "rosti": {"lastseen": "2024-03-19", "firstseen": "2024-03-19"}}}


indicator: 84.38.129.34
indicator_type: ipv4
source: dshield
country: BZ
reverse_dns: 84.38.129.0/24
hosting_provider: DATACLUB-NL
queried_at: 2026-03-10T06:43:58.093360
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@dataclub.eu", "as": 203557, "asname": "DATACLUB-NL", "ascountry": "BZ", "assource": "", "network": "84.38.129.0/24", "threatfeeds": {}}


indicator: 84.38.130.82
indicator_type: ipv4
source: dshield
country: BZ
reverse_dns: 84.38.130.0/24
hosting_provider: DATACLUB
queried_at: 2026-03-10T06:43:59.294163
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@dataclub.eu", "as": 52048, "asname": "DATACLUB", "ascountry": "BZ", "assource": "", "network": "84.38.130.0/24", "threatfeeds": {}}


indicator: 84.38.185.139
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 84.38.184.0/23
hosting_provider: SELECTEL
queried_at: 2026-03-10T06:44:00.657449
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@selectel.ru", "as": 49505, "asname": "SELECTEL", "ascountry": "RU", "assource": "", "network": "84.38.184.0/23", "threatfeeds": {}}


indicator: 84.42.171.173
indicator_type: ipv4
source: dshield
country: CZ
reverse_dns: 84.42.128.0/17
hosting_provider: VODAFONE-CZ-AS
queried_at: 2026-03-10T06:44:01.997822
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@vodafone.cz", "as": 16019, "asname": "VODAFONE-CZ-AS", "ascountry": "CZ", "assource": "", "network": "84.42.128.0/17", "threatfeeds": {}}


indicator: 84.46.239.239
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 84.46.239.0/24
hosting_provider: LIMESTONENETWORKS
queried_at: 2026-03-10T06:44:03.332573
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@limestonenetworks.com", "as": 46475, "asname": "LIMESTONENETWORKS", "ascountry": "US", "assource": "", "network": "84.46.239.0/24", "threatfeeds": {}}


indicator: 84.52.125.113
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 84.52.64.0/18
hosting_provider: WESTCALL-SPB-AS
queried_at: 2026-03-10T06:44:06.022599
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@westcall.spb.ru", "as": 25408, "asname": "WESTCALL-SPB-AS", "ascountry": "RU", "assource": "", "network": "84.52.64.0/18", "threatfeeds": {}}


indicator: 84.54.51.107
indicator_type: ipv4
source: dshield
country: GB
reverse_dns: 84.54.51.0/24
hosting_provider: AS-PFCLOUD
queried_at: 2026-03-10T06:44:07.374226
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "tittuvi@gmail.com", "as": 202685, "asname": "AS-PFCLOUD", "ascountry": "GB", "assource": "", "network": "84.54.51.0/24", "threatfeeds": {}}


indicator: 84.67.89.127
indicator_type: ipv4
source: dshield
country: GB
reverse_dns: 84.64.0.0/13
hosting_provider: Vodafone
queried_at: 2026-03-10T06:44:08.717467
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "ipabuse@vodafone.co.uk", "as": 5378, "asname": "Vodafone", "ascountry": "GB", "assource": "", "network": "84.64.0.0/13", "threatfeeds": {}}


indicator: 84.91.113.119
indicator_type: ipv4
source: dshield
country: PT
reverse_dns: 84.90.0.0/15
hosting_provider: AS13156 Palmela
queried_at: 2026-03-10T06:44:10.044692
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@netvisao.pt", "as": 13156, "asname": "AS13156 Palmela", "ascountry": "PT", "assource": "", "network": "84.90.0.0/15", "threatfeeds": {}}


indicator: 85.16.45.219
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 85.16.0.0/16
hosting_provider: EWETEL Cloppenburger Strasse 310
queried_at: 2026-03-10T06:44:11.264643
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ewetel.de", "as": 9145, "asname": "EWETEL Cloppenburger Strasse 310", "ascountry": "DE", "assource": "", "network": "85.16.0.0/16", "threatfeeds": {}}


indicator: 85.17.136.169
indicator_type: ipv4
source: dshield
country: NL
reverse_dns: 85.17.0.0/16
hosting_provider: LEASEWEB-NL-AMS-01 Netherlands
queried_at: 2026-03-10T06:44:12.615366
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@nl.leaseweb.com", "as": 60781, "asname": "LEASEWEB-NL-AMS-01 Netherlands", "ascountry": "NL", "assource": "", "network": "85.17.0.0/16", "threatfeeds": {}}


indicator: 85.208.85.202
indicator_type: ipv4
source: dshield
country: GB
reverse_dns: 85.208.85.0/24
hosting_provider: BTTGROUP-AS
queried_at: 2026-03-10T06:44:18.245565
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@mastertel.ru", "as": 35830, "asname": "BTTGROUP-AS", "ascountry": "GB", "assource": "", "network": "85.208.85.0/24", "threatfeeds": {}}


indicator: 85.214.165.61
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 85.214.0.0/15
hosting_provider: STRATO STRATO AG
queried_at: 2026-03-10T06:44:29.859391
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@strato.de", "as": 6724, "asname": "STRATO STRATO AG", "ascountry": "DE", "assource": "", "network": "85.214.0.0/15", "threatfeeds": {"openresolver": {"lastseen": "2026-03-10", "firstseen": "2022-11-11"}}}


indicator: 85.214.220.11
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 85.214.0.0/15
hosting_provider: STRATO STRATO AG
queried_at: 2026-03-10T06:44:31.062661
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@strato.de", "as": 6724, "asname": "STRATO STRATO AG", "ascountry": "DE", "assource": "", "network": "85.214.0.0/15", "threatfeeds": {}}


indicator: 85.214.28.55
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 85.214.0.0/15
hosting_provider: STRATO STRATO AG
queried_at: 2026-03-10T06:44:32.388397
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@strato.de", "as": 6724, "asname": "STRATO STRATO AG", "ascountry": "DE", "assource": "", "network": "85.214.0.0/15", "threatfeeds": {"blocklistde22": {"lastseen": "2016-06-19", "firstseen": "2016-06-18"}}}


indicator: 85.216.30.19
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 85.216.0.0/18
hosting_provider: VODANET International IP-Backbone of Vodafone
queried_at: 2026-03-10T06:44:35.023978
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@arcor-ip.de", "as": 3209, "asname": "VODANET International IP-Backbone of Vodafone", "ascountry": "DE", "assource": "", "network": "85.216.0.0/18", "threatfeeds": {}}


indicator: 85.217.170.214
indicator_type: ipv4
source: dshield
country: BG
reverse_dns: 85.217.170.0/24
hosting_provider: BELCLOUD
queried_at: 2026-03-10T06:44:36.376122
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@belcloud.net", "as": 44901, "asname": "BELCLOUD", "ascountry": "BG", "assource": "", "network": "85.217.170.0/24", "threatfeeds": {}}


indicator: 85.217.184.73
indicator_type: ipv4
source: dshield
country: CH
reverse_dns: 85.217.184.0/23
hosting_provider: EXOSCALE
queried_at: 2026-03-10T06:44:37.690323
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@exoscale.ch", "as": 61098, "asname": "EXOSCALE", "ascountry": "CH", "assource": "", "network": "85.217.184.0/23", "threatfeeds": {}}


indicator: 85.218.144.213
indicator_type: ipv4
source: dshield
country: DK
reverse_dns: 85.218.128.0/17
hosting_provider: NORLYS
queried_at: 2026-03-10T06:44:39.023530
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@stofanet.dk", "as": 39642, "asname": "NORLYS", "ascountry": "DK", "assource": "", "network": "85.218.128.0/17", "threatfeeds": {}}


indicator: 85.228.183.121
indicator_type: ipv4
source: dshield
country: NO
reverse_dns: 85.224.0.0/13
hosting_provider: TELENOR-NEXTEL Telenor Norge AS
queried_at: 2026-03-10T06:44:40.368405
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@telenor.net", "as": 2119, "asname": "TELENOR-NEXTEL Telenor Norge AS", "ascountry": "NO", "assource": "", "network": "85.224.0.0/13", "threatfeeds": {}}


indicator: 85.23.46.61
indicator_type: ipv4
source: dshield
country: FI
reverse_dns: 85.23.0.0/16
hosting_provider: DNA
queried_at: 2026-03-10T06:44:43.028989
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@dnaip.fi", "as": 16086, "asname": "DNA", "ascountry": "FI", "assource": "", "network": "85.23.0.0/16", "threatfeeds": {}}


indicator: 85.239.151.121
indicator_type: ipv4
source: dshield
country: BG
reverse_dns: 85.239.151.0/24
hosting_provider: EUROCRYPT-AS
queried_at: 2026-03-10T06:44:48.702449
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "support@evro.net", "as": 25211, "asname": "EUROCRYPT-AS", "ascountry": "BG", "assource": "", "network": "85.239.151.0/24", "threatfeeds": {}}


indicator: 85.239.34.236
indicator_type: ipv4
source: dshield
country: MD
reverse_dns: 85.239.34.0/24
hosting_provider: ALEXHOST
queried_at: 2026-03-10T06:44:50.030011
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@alexhost.com", "as": 200019, "asname": "ALEXHOST", "ascountry": "MD", "assource": "", "network": "85.239.34.0/24", "threatfeeds": {}}


indicator: 85.239.53.12
indicator_type: ipv4
source: dshield
country: EE
reverse_dns: 85.239.53.0/24
hosting_provider: BV-EU-AS
queried_at: 2026-03-10T06:44:51.357638
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@adts.ro", "as": 62005, "asname": "BV-EU-AS", "ascountry": "EE", "assource": "", "network": "85.239.53.0/24", "threatfeeds": {"blocklistde22": {"lastseen": "2022-10-20", "firstseen": "2022-10-18"}, "forumspam": {"lastseen": "2022-10-20", "firstseen": "2022-10-14"}, "openresolver": {"lastseen": "2026-03-10", "firstseen": "2023-03-15"}, "torexit": {"lastseen": "2022-10-31", "first


indicator: 85.239.63.130
indicator_type: ipv4
source: dshield
country: GB
reverse_dns: 85.239.60.0/22
hosting_provider: CLOUVIDER Clouvider - Global ASN
queried_at: 2026-03-10T06:44:52.736912
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@clouvider.net", "as": 62240, "asname": "CLOUVIDER Clouvider - Global ASN", "ascountry": "GB", "assource": "", "network": "85.239.60.0/22", "threatfeeds": {}}


indicator: 85.240.64.119
indicator_type: ipv4
source: dshield
country: PT
reverse_dns: 85.240.0.0/13
hosting_provider: MEO-RESIDENCIAL
queried_at: 2026-03-10T06:44:54.097590
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@mail.telepac.pt", "as": 3243, "asname": "MEO-RESIDENCIAL", "ascountry": "PT", "assource": "", "network": "85.240.0.0/13", "threatfeeds": {}}


indicator: 85.25.203.29
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 85.25.200.0/22
hosting_provider: GD-EMEA-DC-SXB1
queried_at: 2026-03-10T06:44:56.774133
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@hosteurope.de", "as": 8972, "asname": "GD-EMEA-DC-SXB1", "ascountry": "DE", "assource": "", "network": "85.25.200.0/22", "threatfeeds": {}}


indicator: 85.31.231.183
indicator_type: ipv4
source: dshield
country: CY
reverse_dns: 85.31.228.0/22
hosting_provider: AS-HOSTINGER
queried_at: 2026-03-10T06:44:58.114427
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@hostinger.com", "as": 47583, "asname": "AS-HOSTINGER", "ascountry": "CY", "assource": "", "network": "85.31.228.0/22", "threatfeeds": {"rosti": {"lastseen": "2025-02-17", "firstseen": "2025-02-17"}}}


indicator: 85.58.184.149
indicator_type: ipv4
source: dshield
country: ES
reverse_dns: 85.48.0.0/12
hosting_provider: UNI2-AS
queried_at: 2026-03-10T06:44:59.443634
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@orange.es", "as": 12479, "asname": "UNI2-AS", "ascountry": "ES", "assource": "", "network": "85.48.0.0/12", "threatfeeds": {}}


indicator: 85.81.5.153
indicator_type: ipv4
source: dshield
country: DK
reverse_dns: 85.80.0.0/14
hosting_provider: TELENOR_DANMARK_AS
queried_at: 2026-03-10T06:45:00.803627
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@telenor.dk", "as": 9158, "asname": "TELENOR_DANMARK_AS", "ascountry": "DK", "assource": "", "network": "85.80.0.0/14", "threatfeeds": {}}


indicator: 85.99.30.220
indicator_type: ipv4
source: dshield
country: TR
reverse_dns: 85.99.0.0/17
hosting_provider: TTNET
queried_at: 2026-03-10T06:45:02.133437
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ttnet.com.tr", "as": 9121, "asname": "TTNET", "ascountry": "TR", "assource": "", "network": "85.99.0.0/17", "threatfeeds": {}}


indicator: 86.104.72.130
indicator_type: ipv4
source: dshield
country: XX
hosting_provider: not routed
queried_at: 2026-03-10T06:45:03.860627
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": null, "as": 0, "asname": "not routed", "ascountry": "XX", "assource": "", "network": "", "threatfeeds": {"rosti": {"lastseen": "2025-06-19", "firstseen": "2025-06-19"}}}


indicator: 86.106.131.177
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 86.106.131.0/24
hosting_provider: TTM
queried_at: 2026-03-10T06:45:05.192926
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@23media.com", "as": 47447, "asname": "TTM", "ascountry": "DE", "assource": "", "network": "86.106.131.0/24", "threatfeeds": {}}


indicator: 86.110.169.38
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 86.110.168.0/22
hosting_provider: TTK-RTL Retail
queried_at: 2026-03-10T06:45:06.528092
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ttk.ru", "as": 15774, "asname": "TTK-RTL Retail", "ascountry": "RU", "assource": "", "network": "86.110.168.0/22", "threatfeeds": {}}


indicator: 86.122.23.45
indicator_type: ipv4
source: dshield
country: RO
reverse_dns: 86.120.0.0/13
hosting_provider: RCS-RDS 73-75 Dr. Staicovici
queried_at: 2026-03-10T06:45:07.895470
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@rcs-rds.ro", "as": 8708, "asname": "RCS-RDS 73-75 Dr. Staicovici", "ascountry": "RO", "assource": "", "network": "86.120.0.0/13", "threatfeeds": {"blocklistde443": {"lastseen": "2019-03-24", "firstseen": "2019-03-22"}, "blocklistde80": {"lastseen": "2019-03-24", "firstseen": "2019-03-22"}, "blocklistdeapache": {"lastseen": "2019-03-24", "firstseen": "2019-03-23"}, "blocklistdeb


indicator: 86.124.30.127
indicator_type: ipv4
source: dshield
country: RO
reverse_dns: 86.120.0.0/13
hosting_provider: RCS-RDS 73-75 Dr. Staicovici
queried_at: 2026-03-10T06:45:09.243177
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@rcs-rds.ro", "as": 8708, "asname": "RCS-RDS 73-75 Dr. Staicovici", "ascountry": "RO", "assource": "", "network": "86.120.0.0/13", "threatfeeds": {}}


indicator: 86.140.159.76
indicator_type: ipv4
source: dshield
country: GB
reverse_dns: 86.128.0.0/12
hosting_provider: BT-UK-AS BTnet UK Regional network
queried_at: 2026-03-10T06:45:11.944009
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@bt.com", "as": 2856, "asname": "BT-UK-AS BTnet UK Regional network", "ascountry": "GB", "assource": "", "network": "86.128.0.0/12", "threatfeeds": {}}


indicator: 86.18.242.248
indicator_type: ipv4
source: dshield
country: GB
reverse_dns: 86.16.0.0/13
hosting_provider: NTL
queried_at: 2026-03-10T06:45:13.283981
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@virginmedia.com", "as": 5089, "asname": "NTL", "ascountry": "GB", "assource": "", "network": "86.16.0.0/13", "threatfeeds": {}}


indicator: 86.190.166.154
indicator_type: ipv4
source: dshield
country: GB
reverse_dns: 86.128.0.0/10
hosting_provider: BT-UK-AS BTnet UK Regional network
queried_at: 2026-03-10T06:45:14.608262
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@bt.com", "as": 2856, "asname": "BT-UK-AS BTnet UK Regional network", "ascountry": "GB", "assource": "", "network": "86.128.0.0/10", "threatfeeds": {}}


indicator: 86.252.134.168
indicator_type: ipv4
source: dshield
country: FR
reverse_dns: 86.252.0.0/16
hosting_provider: France Telecom - Orange
queried_at: 2026-03-10T06:45:15.952497
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@orange-business.com", "as": 3215, "asname": "France Telecom - Orange", "ascountry": "FR", "assource": "", "network": "86.252.0.0/16", "threatfeeds": {}}


indicator: 86.38.225.152
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 86.38.225.0/24
hosting_provider: MAJESTIC-HOSTING-01
queried_at: 2026-03-10T06:45:17.144643
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": null, "as": 396073, "asname": "MAJESTIC-HOSTING-01", "ascountry": "US", "assource": "", "network": "86.38.225.0/24", "threatfeeds": {}}


indicator: 86.48.19.90
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 86.48.16.0/22
hosting_provider: NL-811-40021
queried_at: 2026-03-10T06:45:19.821323
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "hostmaster@norcalmutual.com", "as": 40021, "asname": "NL-811-40021", "ascountry": "US", "assource": "", "network": "86.48.16.0/22", "threatfeeds": {}}


indicator: 86.76.24.22
indicator_type: ipv4
source: dshield
country: FR
reverse_dns: 86.64.0.0/12
hosting_provider: LDCOMNET
queried_at: 2026-03-10T06:45:21.162567
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@gaoland.net", "as": 15557, "asname": "LDCOMNET", "ascountry": "FR", "assource": "", "network": "86.64.0.0/12", "threatfeeds": {}}


indicator: 86.8.233.113
indicator_type: ipv4
source: dshield
country: GB
reverse_dns: 86.8.0.0/16
hosting_provider: NTL
queried_at: 2026-03-10T06:45:22.502801
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@virginmedia.com", "as": 5089, "asname": "NTL", "ascountry": "GB", "assource": "", "network": "86.8.0.0/16", "threatfeeds": {}}


indicator: 86.89.232.66
indicator_type: ipv4
source: dshield
country: NL
reverse_dns: 86.80.0.0/12
hosting_provider: KPN KPN National
queried_at: 2026-03-10T06:45:23.825419
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@kpn.com", "as": 1136, "asname": "KPN KPN National", "ascountry": "NL", "assource": "", "network": "86.80.0.0/12", "threatfeeds": {}}


indicator: 87.0.58.111
indicator_type: ipv4
source: dshield
country: IT
reverse_dns: 87.0.0.0/16
hosting_provider: ASN-IBSNAZ
queried_at: 2026-03-10T06:45:25.148706
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@business.telecomitalia.it", "as": 3269, "asname": "ASN-IBSNAZ", "ascountry": "IT", "assource": "", "network": "87.0.0.0/16", "threatfeeds": {}}


indicator: 87.120.166.174
indicator_type: ipv4
source: shodan
reverse_dns: www.github.com,github.com
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-03-10T07:02:12.668517
raw_data:
  {"ports": [22, 443, 1701], "vulns": [], "hostnames": ["www.github.com", "github.com"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 87.121.105.102
indicator_type: ipv4
source: shodan
city: self-signed,starttls
queried_at: 2026-03-10T07:02:14.576624
raw_data:
  {"ports": [21, 22, 80], "vulns": [], "hostnames": [], "tags": ["self-signed", "starttls"], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/a:pureftpd:pure-ftpd", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx"]}

hosting_provider:
  cpe:/a:openbsd:openssh:9.6p1,cpe:/a:pureftpd:pure-ftpd,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx


indicator: 87.121.79.75
indicator_type: ipv4
source: shodan
city: starttls,self-signed
reverse_dns: www.octochems.com,enableauth.org,snowcore.io,octochems.com
hosting_provider: cpe:/a:f5:nginx,cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux,cpe:/a:postfix:postfix
queried_at: 2026-03-10T07:02:18.135634
raw_data:
  {"ports": [22, 443, 587, 995, 3000], "vulns": [], "hostnames": ["www.octochems.com", "enableauth.org", "snowcore.io", "octochems.com"], "tags": ["starttls", "self-signed"], "cpes": ["cpe:/a:f5:nginx", "cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:postfix:postfix"]}


indicator: 87.123.47.232
indicator_type: ipv4
source: shodan
city: vpn
reverse_dns: i577B2FE8.versanet.de
queried_at: 2026-03-10T07:02:38.768701
raw_data:
  {"ports": [1194, 5060], "vulns": [], "hostnames": ["i577B2FE8.versanet.de"], "tags": ["vpn"], "cpes": []}


indicator: 87.163.155.181
indicator_type: ipv4
source: shodan
reverse_dns: p57a39bb5.dip0.t-ipconnect.de
queried_at: 2026-03-10T07:02:40.584932
raw_data:
  {"ports": [8089], "vulns": [], "hostnames": ["p57a39bb5.dip0.t-ipconnect.de"], "tags": [], "cpes": []}


indicator: 87.249.44.41
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: api.buzaa.ru,741903-co01240.tmweb.ru
hosting_provider: cpe:/a:f5:nginx:1.20.1
queried_at: 2026-03-10T07:02:52.408526
raw_data:
  {"ports": [80, 443], "vulns": ["CVE-2025-23419", "CVE-2021-3618", "CVE-2023-44487"], "hostnames": ["api.buzaa.ru", "741903-co01240.tmweb.ru"], "tags": ["eol-product"], "cpes": ["cpe:/a:f5:nginx:1.20.1"]}


indicator: 87.249.53.178
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: www.panoramavillage.ru,panoramavillage.ru
queried_at: 2026-03-10T07:02:57.493976
raw_data:
  {"ports": [22, 443, 8080], "vulns": ["CVE-2025-23419", "CVE-2023-44487"], "hostnames": ["www.panoramavillage.ru", "panoramavillage.ru"], "tags": ["eol-product"], "cpes": ["cpe:/o:canonical:ubuntu_linux", "cpe:/o:linux:linux_kernel", "cpe:/a:f5:nginx:1.24.0", "cpe:/a:openbsd:openssh:9.6p1"]}

hosting_provider:
  cpe:/o:canonical:ubuntu_linux,cpe:/o:linux:linux_kernel,cpe:/a:f5:nginx:1.24.0,cpe:/a:openbsd:openssh:9.6p1


indicator: 87.249.53.216
indicator_type: ipv4
source: shodan
city: eol-product,self-signed,database,starttls
reverse_dns: 672275-cy21415.tmweb.ru
queried_at: 2026-03-10T07:02:59.165208
raw_data:
  {"ports": [22, 25, 80, 110, 443, 465, 587, 993, 995, 3306, 8000, 8002], "vulns": ["CVE-2019-9637", "CVE-2018-19396", "CVE-2023-51385", "CVE-2013-2220", "CVE-2019-6110", "CVE-2019-9638", "CVE-2020-14145", "CVE-2023-51767", "CVE-2022-31628", "CVE-2007-2768", "CVE-2017-7272", "CVE-2019-6111", "CVE-2020-15778", "CVE-2017-15906", "CVE-2023-48795", "CVE-2017-8923", "CVE-2007-3205", "CVE-2024-25117", "CVE-2022-4900", "CVE-2020-11579", "CVE-2022-31629", "CVE-2017-7963", "CVE-2015-9253", "CVE-2021-36368"

hosting_provider:
  cpe:/a:dovecot:dovecot,cpe:/a:f5:nginx,cpe:/a:openbsd:openssh:7.4,cpe:/a:oracle:mysql,cpe:/a:php:php:5.6.40


indicator: 87.251.78.226
indicator_type: ipv4
source: shodan
city: self-signed
queried_at: 2026-03-10T07:03:02.400489
raw_data:
  {"ports": [445, 3389, 5985, 47001], "vulns": ["CVE-2020-0796"], "hostnames": [], "tags": ["self-signed"], "cpes": []}


indicator: 88.119.171.167
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: 35880-60173.bacloud.info
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/a:f5:nginx
queried_at: 2026-03-10T07:03:09.133064
raw_data:
  {"ports": [22, 80, 8083], "vulns": [], "hostnames": ["35880-60173.bacloud.info"], "tags": ["self-signed"], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/a:f5:nginx"]}


indicator: 87.120.166.174
indicator_type: ipv4
source: otx
country: BG
queried_at: 2026-03-10T07:03:23.295004
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Bulgaria", "country_code": "BG", "city": null, "asn": "AS209850 burdenis", "indicator": "87.120.166.174", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 87.121.105.102
indicator_type: ipv4
source: otx
country: BG
city: Sofia
reverse_dns: riverockauto.com,angelo-garage.com,kopeckyroads.com,classics-garagemotors.com
queried_at: 2026-03-10T07:03:25.427156
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Bulgaria", "country_code": "BG", "city": "Sofia", "asn": "AS8866 bulgarian telecommunications company plc.", "indicator": "87.121.105.102", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 4, "malware_samples": [], "passive_dns": ["riverockauto.com", "angelo-garage.com", "kopeckyroads.com", "classics-garagemotors.com"]}


indicator: 87.121.52.152
indicator_type: ipv4
source: otx
country: BG
reverse_dns: luwsa.com,trustadapt.com,www.trustadapt.com,gaypride.at,et-cad-8854.live,et-ca-4463.live
queried_at: 2026-03-10T07:03:26.972280
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Bulgaria", "country_code": "BG", "city": null, "asn": "AS34224 neterra ltd.", "indicator": "87.121.52.152", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 6, "malware_samples": [], "passive_dns": ["luwsa.com", "trustadapt.com", "www.trustadapt.com", "gaypride.at", "et-cad-8854.live", "et-ca-4463.live"]}


indicator: 87.121.79.75
indicator_type: ipv4
source: otx
country: BG
queried_at: 2026-03-10T07:03:28.689577
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Bulgaria", "country_code": "BG", "city": null, "asn": "AS34224 neterra ltd.", "indicator": "87.121.79.75", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 1, "passive_dns_count": 0, "malware_samples": ["7b79046511bb3e926c5c91db54dae79c06bc19f7d7cdfcfe6df9627eb257cac7"], "passive_dns": []}


indicator: 87.122.232.179
indicator_type: ipv4
source: otx
country: DE
city: Frankfurt am Main
reverse_dns: urclqb1oicpe28iv.myfritz.net,72exa7lx98t6lxg0.myfritz.net,0il76tyvnhy5qedp.myfritz.net
hosting_provider: Nextray,phishing,malicious,cyber security,ioc
queried_at: 2026-03-10T07:03:30.309282
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Frankfurt am Main", "asn": "AS8881 1&1 versatel deutschland gmbh", "indicator": "87.122.232.179", "tags": ["Nextray", "phishing", "malicious", "cyber security", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (P


indicator: 87.122.36.47
indicator_type: ipv4
source: otx
country: DE
city: Budenheim
hosting_provider: Nextray,phishing,malicious,cyber security,ioc
queried_at: 2026-03-10T07:03:33.717102
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Budenheim", "asn": "AS8881 1&1 versatel deutschland gmbh", "indicator": "87.122.36.47", "tags": ["Nextray", "phishing", "malicious", "cyber security", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse creat


indicator: 87.122.37.59
indicator_type: ipv4
source: otx
country: DE
city: Budenheim
reverse_dns: stckmnn.duckdns.org,www.penora.de,ssyy7bimqg39olt0.myfritz.net
hosting_provider: Nextray,phishing,malicious,cyber security,ioc
queried_at: 2026-03-10T07:03:35.797318
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Budenheim", "asn": "AS8881 1&1 versatel deutschland gmbh", "indicator": "87.122.37.59", "tags": ["Nextray", "phishing", "malicious", "cyber security", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse creat


indicator: 87.122.38.236
indicator_type: ipv4
source: otx
country: DE
city: Frankfurt am Main
reverse_dns: ajf6uxppajt7geqf.myfritz.net,c00momdnh1mwgb6t.myfritz.net,8svpae5cvw3bpzot.myfritz.net
hosting_provider: Nextray,phishing,malicious,cyber security,ioc
queried_at: 2026-03-10T07:03:37.708443
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Frankfurt am Main", "asn": "AS8881 1&1 versatel deutschland gmbh", "indicator": "87.122.38.236", "tags": ["Nextray", "phishing", "malicious", "cyber security", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pu


indicator: 87.123.100.31
indicator_type: ipv4
source: otx
country: DE
city: Langenhagen
reverse_dns: b51-server.dscloud.me
hosting_provider: Nextray,phishing,malicious,cyber security,ioc
queried_at: 2026-03-10T07:03:39.371877
raw_data:
  {"pulse_count": 34, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Langenhagen", "asn": "AS8881 1&1 versatel deutschland gmbh", "indicator": "87.123.100.31", "tags": ["Nextray", "phishing", "malicious", "cyber security", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse cr


indicator: 87.123.101.177
indicator_type: ipv4
source: otx
country: DE
city: Langenhagen
reverse_dns: danielsds220plus.synology.me,9mk0bzrjzjtjnyqb.myfritz.net
hosting_provider: Nextray,phishing,malicious,cyber security,ioc
queried_at: 2026-03-10T07:03:42.233230
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Langenhagen", "asn": "AS8881 1&1 versatel deutschland gmbh", "indicator": "87.123.101.177", "tags": ["Nextray", "phishing", "malicious", "cyber security", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse c


indicator: 87.123.106.226
indicator_type: ipv4
source: otx
country: DE
city: Langenhagen
reverse_dns: sso.intranet.efsh.de,4muuz44frh9okxkp.myfritz.net,auftrieb.ddns.net,aenxdal0qzcolxk6.myfritz.net
hosting_provider: Nextray,phishing,malicious,cyber security,ioc
queried_at: 2026-03-10T07:03:44.180866
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Langenhagen", "asn": "AS8881 1&1 versatel deutschland gmbh", "indicator": "87.123.106.226", "tags": ["Nextray", "phishing", "malicious", "cyber security", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse c


indicator: 87.123.34.70
indicator_type: ipv4
source: otx
country: DE
city: Wuppertal
reverse_dns: yxuf8318oaway9ez.myfritz.net,weymanns.synology.me
hosting_provider: Nextray,phishing,malicious,cyber security,ioc
queried_at: 2026-03-10T07:03:47.662589
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Wuppertal", "asn": "AS8881 1&1 versatel deutschland gmbh", "indicator": "87.123.34.70", "tags": ["Nextray", "phishing", "malicious", "cyber security", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse creat


indicator: 87.123.40.108
indicator_type: ipv4
source: otx
country: DE
city: Wuppertal
reverse_dns: hxtz77tp1ymrs8w2.myfritz.net,haproxy.home.sebastianmahlke.de
hosting_provider: Nextray,phishing,malicious,cyber security,ioc
queried_at: 2026-03-10T07:03:53.818942
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Wuppertal", "asn": "AS8881 1&1 versatel deutschland gmbh", "indicator": "87.123.40.108", "tags": ["Nextray", "phishing", "malicious", "cyber security", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse crea


indicator: 87.123.47.232
indicator_type: ipv4
source: otx
country: DE
city: Wuppertal
reverse_dns: bitwarden.dieschwedts.de,y38vhpxaqecrgnor.myfritz.net,dzufggvheqn8vv9p.myfritz.net
hosting_provider: Nextray,phishing,malicious,cyber security,ioc
queried_at: 2026-03-10T07:03:57.365537
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Wuppertal", "asn": "AS8881 1&1 versatel deutschland gmbh", "indicator": "87.123.47.232", "tags": ["Nextray", "phishing", "malicious", "cyber security", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse crea


indicator: 87.163.155.181
indicator_type: ipv4
source: otx
country: DE
city: Karlsruhe
hosting_provider: Nextray,phishing,malicious,cyber security,ioc
queried_at: 2026-03-10T07:03:59.089967
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Karlsruhe", "asn": "AS3320 deutsche telekom ag", "indicator": "87.163.155.181", "tags": ["Nextray", "phishing", "malicious", "cyber security", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RV


indicator: 87.168.223.111
indicator_type: ipv4
source: otx
country: DE
city: Essen
hosting_provider: Nextray,phishing,malicious,cyber security,ioc
queried_at: 2026-03-10T07:04:02.047802
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Essen", "asn": "AS3320 deutsche telekom ag", "indicator": "87.168.223.111", "tags": ["Nextray", "phishing", "malicious", "cyber security", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS_i_


indicator: 87.169.220.218
indicator_type: ipv4
source: otx
country: DE
city: Limbach-Oberfrohna
hosting_provider: Nextray,phishing,malicious,cyber security,ioc
queried_at: 2026-03-10T07:04:03.751589
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Limbach-Oberfrohna", "asn": "AS3320 deutsche telekom ag", "indicator": "87.169.220.218", "tags": ["Nextray", "phishing", "malicious", "cyber security", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse crea


indicator: 87.173.15.207
indicator_type: ipv4
source: otx
country: DE
city: Remscheid
reverse_dns: qpd4wofe2crqe9jx.myfritz.net
hosting_provider: Nextray,phishing,malicious,cyber security,ioc
queried_at: 2026-03-10T07:04:05.413164
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Remscheid", "asn": "AS3320 deutsche telekom ag", "indicator": "87.173.15.207", "tags": ["Nextray", "phishing", "malicious", "cyber security", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS


indicator: 87.181.20.103
indicator_type: ipv4
source: otx
country: DE
city: Baunatal
hosting_provider: Nextray,phishing,malicious,cyber security,ioc
queried_at: 2026-03-10T07:04:07.662914
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Baunatal", "asn": "AS3320 deutsche telekom ag", "indicator": "87.181.20.103", "tags": ["Nextray", "phishing", "malicious", "cyber security", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS_


indicator: 87.247.84.230
indicator_type: ipv4
source: otx
country: LT
city: Kaunas
queried_at: 2026-03-10T07:04:09.417546
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Lithuania", "country_code": "LT", "city": "Kaunas", "asn": "AS21412 uab cgates", "indicator": "87.247.84.230", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 87.249.44.220
indicator_type: ipv4
source: otx
country: RU
city: Sestroretsk
hosting_provider: stealer,mstic,custom vbs,service,kernel32,gamaredon,armageddon,vbs file,pterodo,whispergate
queried_at: 2026-03-10T07:04:12.675871
raw_data:
  {"pulse_count": 17, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": "Sestroretsk", "asn": "AS9123 timeweb ltd.", "indicator": "87.249.44.220", "tags": ["stealer", "mstic", "custom vbs", "service", "kernel32", "gamaredon", "armageddon", "vbs file", "pterodo", "whispergate", "install", "runprogram", "russia", "defender", "pe file", "sha256 filename", "vbscript", "palo alto", "virustotal", "geopolitical conflict", "june", "wildfire", "powerpunch", "pteranodon", "augu


indicator: 87.249.44.41
indicator_type: ipv4
source: otx
country: RU
city: Sestroretsk
hosting_provider: stealer,mstic,custom vbs,service,kernel32,gamaredon,armageddon,vbs file,pterodo,whispergate
queried_at: 2026-03-10T07:04:15.057316
raw_data:
  {"pulse_count": 17, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": "Sestroretsk", "asn": "AS9123 timeweb ltd.", "indicator": "87.249.44.41", "tags": ["stealer", "mstic", "custom vbs", "service", "kernel32", "gamaredon", "armageddon", "vbs file", "pterodo", "whispergate", "install", "runprogram", "russia", "defender", "pe file", "sha256 filename", "vbscript", "palo alto", "virustotal", "geopolitical conflict", "june", "wildfire", "powerpunch", "pteranodon", "augus

reverse_dns:
  ramen.03b.ru,panel.buzaa.ru,pay.telefon-ip.ru,rose.telefon-ip.ru,mobileid.telefon-ip.ru,key.telefon-ip.ru,app.telefon-ip.ru,grilaj.buzaa.ru,lobby.buzaa.ru,voyage.buzaa.ru


indicator: 87.249.49.13
indicator_type: ipv4
source: otx
country: RU
city: St Petersburg
hosting_provider: stealer,mstic,custom vbs,service,kernel32,gamaredon,armageddon,vbs file,pterodo,whispergate
queried_at: 2026-03-10T07:04:17.987464
raw_data:
  {"pulse_count": 14, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": "St Petersburg", "asn": "AS9123 timeweb ltd.", "indicator": "87.249.49.13", "tags": ["stealer", "mstic", "custom vbs", "service", "kernel32", "gamaredon", "armageddon", "vbs file", "pterodo", "whispergate", "install", "runprogram", "russia", "defender", "pe file", "sha256 filename", "vbscript", "palo alto", "virustotal", "geopolitical conflict", "june", "wildfire", "powerpunch", "pteranodon", "aug


indicator: 87.249.53.116
indicator_type: ipv4
source: otx
country: RU
city: St Petersburg
hosting_provider: stealer,mstic,custom vbs,service,kernel32,gamaredon,armageddon,vbs file,pterodo,whispergate
queried_at: 2026-03-10T07:04:21.143279
raw_data:
  {"pulse_count": 14, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": "St Petersburg", "asn": "AS9123 timeweb ltd.", "indicator": "87.249.53.116", "tags": ["stealer", "mstic", "custom vbs", "service", "kernel32", "gamaredon", "armageddon", "vbs file", "pterodo", "whispergate", "install", "runprogram", "russia", "defender", "pe file", "sha256 filename", "vbscript", "palo alto", "virustotal", "geopolitical conflict", "june", "wildfire", "powerpunch", "pteranodon", "au


indicator: 87.249.53.178
indicator_type: ipv4
source: otx
country: RU
city: St Petersburg
reverse_dns: panoramavillage.ru,www.panoramavillage.ru,xn----9sbmnje6c.xn--p1ai,www.xn----9sbmnje6c.xn--p1ai
hosting_provider: stealer,mstic,custom vbs,service,kernel32,gamaredon,armageddon,vbs file,pterodo,whispergate
queried_at: 2026-03-10T07:04:25.657310
raw_data:
  {"pulse_count": 14, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": "St Petersburg", "asn": "AS9123 timeweb ltd.", "indicator": "87.249.53.178", "tags": ["stealer", "mstic", "custom vbs", "service", "kernel32", "gamaredon", "armageddon", "vbs file", "pterodo", "whispergate", "install", "runprogram", "russia", "defender", "pe file", "sha256 filename", "vbscript", "palo alto", "virustotal", "geopolitical conflict", "june", "wildfire", "powerpunch", "pteranodon", "au


indicator: 87.249.53.216
indicator_type: ipv4
source: otx
country: RU
city: St Petersburg
hosting_provider: stealer,mstic,custom vbs,service,kernel32,gamaredon,armageddon,vbs file,pterodo,whispergate
queried_at: 2026-03-10T07:04:28.009254
raw_data:
  {"pulse_count": 15, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": "St Petersburg", "asn": "AS9123 timeweb ltd.", "indicator": "87.249.53.216", "tags": ["stealer", "mstic", "custom vbs", "service", "kernel32", "gamaredon", "armageddon", "vbs file", "pterodo", "whispergate", "install", "runprogram", "russia", "defender", "pe file", "sha256 filename", "vbscript", "palo alto", "virustotal", "geopolitical conflict", "june", "wildfire", "powerpunch", "pteranodon", "au

reverse_dns:
  doc.masha.place,www.doc.masha.place,www.masha.place,masha.place,mim-sys-eds-rus.animaccord.site,www.mim-sys-eds-rus.animaccord.site,www.mim-sys-pds-rus.animaccord.site,mim-sys-pds-rus.animaccord.site


indicator: 87.249.54.15
indicator_type: ipv4
source: otx
country: RU
city: St Petersburg
reverse_dns: cyberx71.langame-pr.ru
hosting_provider: stealer,mstic,custom vbs,service,kernel32,gamaredon,armageddon,vbs file,pterodo,whispergate
queried_at: 2026-03-10T07:04:31.536364
raw_data:
  {"pulse_count": 17, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": "St Petersburg", "asn": "AS9123 timeweb ltd.", "indicator": "87.249.54.15", "tags": ["stealer", "mstic", "custom vbs", "service", "kernel32", "gamaredon", "armageddon", "vbs file", "pterodo", "whispergate", "install", "runprogram", "russia", "defender", "pe file", "sha256 filename", "vbscript", "palo alto", "virustotal", "geopolitical conflict", "june", "wildfire", "powerpunch", "pteranodon", "aug


indicator: 87.251.78.226
indicator_type: ipv4
source: otx
country: RU
hosting_provider: ,ransomware,malware,Malicious
queried_at: 2026-03-10T07:04:33.619391
raw_data:
  {"pulse_count": 3, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS212461 nemtcov nikolai alexandrovich", "indicator": "87.251.78.226", "tags": ["", "ransomware", "malware", "Malicious"], "pulses": ["ThreatFix", "Threatfox Recent Additions", "Malicious Object (IP / Hash / URL)"], "malware_count": 0, "passive_dns_count": 7, "malware_samples": [], "passive_dns": ["few.needfart.ru", "needfart.ru", "finger36.info", "busy.xn--h1an.com", "busy.2x9.ru", "

reverse_dns:
  few.needfart.ru,needfart.ru,finger36.info,busy.xn--h1an.com,busy.2x9.ru,busy.programfrom.com,flora226.info


indicator: 87.251.78.30
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-03-10T07:04:35.186565
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS212461 nemtcov nikolai alexandrovich", "indicator": "87.251.78.30", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 9, "malware_samples": [], "passive_dns": ["loboxoa.xyz", "glittering-madness-surest.ru", "artist.glittering-madness-surest.ru", "boot.alpineauto.ru", "alpineauto.ru", "extension212.info", "tip.2x9.ru", "tip.programfrom.com

reverse_dns:
  loboxoa.xyz,glittering-madness-surest.ru,artist.glittering-madness-surest.ru,boot.alpineauto.ru,alpineauto.ru,extension212.info,tip.2x9.ru,tip.programfrom.com,dog30.info


indicator: 87.26.121.157
indicator_type: ipv4
source: otx
country: IT
city: Alfano
queried_at: 2026-03-10T07:04:36.765572
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Italy", "country_code": "IT", "city": "Alfano", "asn": "AS3269 telecom italia s.p.a.", "indicator": "87.26.121.157", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 88.112.168.157
indicator_type: ipv4
source: otx
country: FI
city: Helsinki
queried_at: 2026-03-10T07:04:39.239411
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Finland", "country_code": "FI", "city": "Helsinki", "asn": "AS719 lanlink -elisa oyj", "indicator": "88.112.168.157", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 88.119.171.167
indicator_type: ipv4
source: otx
country: NL
city: Amsterdam
hosting_provider: ,ransomware,malware
queried_at: 2026-03-10T07:04:40.810779
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Netherlands", "country_code": "NL", "city": "Amsterdam", "asn": "AS61272 informacines sistemos ir technologijos  uab", "indicator": "88.119.171.167", "tags": ["", "ransomware", "malware"], "pulses": ["ThreatFix", "Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 12, "malware_samples": [], "passive_dns": ["my-ru.info", "youwebmaster.com", "luxurydesignbags.top", "www.luxurydesignbags.top", "soluxuryfashionbag.top", "www.soluxur

reverse_dns:
  my-ru.info,youwebmaster.com,luxurydesignbags.top,www.luxurydesignbags.top,soluxuryfashionbag.top,www.soluxuryfashionbag.top,luxurydesignbags.com,www.glasses-rb.com,glasses-rb.com,mavoirs.com


indicator: 88.130.20.124
indicator_type: ipv4
source: otx
country: DE
city: Mainz
hosting_provider: Nextray,phishing,malicious,cyber security,ioc
queried_at: 2026-03-10T07:04:42.505493
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Mainz", "asn": "AS8881 1&1 versatel deutschland gmbh", "indicator": "88.130.20.124", "tags": ["Nextray", "phishing", "malicious", "cyber security", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created 


indicator: 88.130.20.86
indicator_type: ipv4
source: otx
country: DE
city: Mainz
reverse_dns: 3cyfmfbwfohu89md.myfritz.net
hosting_provider: Nextray,phishing,malicious,cyber security,ioc
queried_at: 2026-03-10T07:04:44.304432
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Mainz", "asn": "AS8881 1&1 versatel deutschland gmbh", "indicator": "88.130.20.86", "tags": ["Nextray", "phishing", "malicious", "cyber security", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created b


indicator: 88.130.21.130
indicator_type: ipv4
source: otx
country: DE
city: Mainz
reverse_dns: knoxonk.xonk.de
hosting_provider: Nextray,phishing,malicious,cyber security,ioc
queried_at: 2026-03-10T07:04:45.947938
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Mainz", "asn": "AS8881 1&1 versatel deutschland gmbh", "indicator": "88.130.21.130", "tags": ["Nextray", "phishing", "malicious", "cyber security", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created 


indicator: 88.151.195.221
indicator_type: ipv4
source: otx
country: AZ
reverse_dns: theclassifiedsonline.com
queried_at: 2026-03-10T07:04:47.646956
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Azerbaijan", "country_code": "AZ", "city": null, "asn": "AS398343 baxet group inc.", "indicator": "88.151.195.221", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["theclassifiedsonline.com"]}


indicator: 88.152.145.245
indicator_type: ipv4
source: otx
country: DE
city: Leverkusen
hosting_provider: Nextray,phishing,malicious,cyber security,ioc
queried_at: 2026-03-10T07:04:49.368805
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Leverkusen", "asn": "AS3209 vodafone gmbh", "indicator": "88.152.145.245", "tags": ["Nextray", "phishing", "malicious", "cyber security", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS_i_a


indicator: 88.175.108.174
indicator_type: ipv4
source: otx
country: FR
queried_at: 2026-03-10T07:04:51.073268
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "France", "country_code": "FR", "city": null, "asn": "AS12322 free sas", "indicator": "88.175.108.174", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 88.202.156.116
indicator_type: ipv4
source: otx
country: GB
city: Northampton
queried_at: 2026-03-10T07:04:53.425544
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": "Northampton", "asn": "AS56329 gigaclear limited", "indicator": "88.202.156.116", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 87.123.34.157
indicator_type: ipv4
source: abuseipdb
country: DE
city: 0
hosting_provider: 1&1 Versatel GmbH
queried_at: 2026-03-10T07:04:55.433675
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "DE", "isp": "1&1 Versatel GmbH", "domain": "1und1.net", "usage_type": "Fixed Line ISP", "last_reported": null, "categories": []}


indicator: 87.120.166.174
indicator_type: ipv4
source: abuseipdb
country: DE
city: 0
hosting_provider: play2go.cloud - Cheap and reliable hosting
queried_at: 2026-03-10T07:04:59.018788
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "DE", "isp": "play2go.cloud - Cheap and reliable hosting", "domain": "play2go.cloud", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 87.121.105.102
indicator_type: ipv4
source: abuseipdb
country: SE
city: 0
hosting_provider: play2go.cloud - Cheap and reliable hosting
queried_at: 2026-03-10T07:05:01.229474
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "SE", "isp": "play2go.cloud - Cheap and reliable hosting", "domain": "play2go.cloud", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 87.121.52.152
indicator_type: ipv4
source: abuseipdb
country: BG
city: 0
hosting_provider: VPS.BG
queried_at: 2026-03-10T07:05:03.273692
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "BG", "isp": "VPS.BG", "domain": "vps.bg", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 87.121.79.75
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: 03AI
queried_at: 2026-03-10T07:05:05.023150
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "03AI", "domain": "03ai.org", "usage_type": "Commercial", "last_reported": "2025-08-29T03:02:45+00:00", "categories": []}


indicator: 87.120.166.174
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: Play2go International Limited
queried_at: 2026-03-10T07:05:34.136486
raw_data:
  {"malicious": 10, "suspicious": 0, "harmless": 52, "undetected": 32, "reputation": -1, "country": "DE", "as_owner": "Play2go International Limited", "asn": 215439, "network": "87.120.166.0/24", "last_analysis_date": 1770504167}


indicator: 87.121.105.102
indicator_type: ipv4
source: virustotal
country: SE
hosting_provider: Play2go International Limited
queried_at: 2026-03-10T07:05:54.395236
raw_data:
  {"malicious": 2, "suspicious": 0, "harmless": 58, "undetected": 34, "reputation": -1, "country": "SE", "as_owner": "Play2go International Limited", "asn": 215439, "network": "87.121.105.0/24", "last_analysis_date": 1769536976}


indicator: 87.121.52.152
indicator_type: ipv4
source: virustotal
country: BG
hosting_provider: Neterra Ltd.
queried_at: 2026-03-10T07:06:14.764327
raw_data:
  {"malicious": 10, "suspicious": 0, "harmless": 52, "undetected": 32, "reputation": -1, "country": "BG", "as_owner": "Neterra Ltd.", "asn": 34224, "network": "87.121.52.0/24", "last_analysis_date": 1770337575}


indicator: 87.121.79.75
indicator_type: ipv4
source: virustotal
country: GB
hosting_provider: 03AI LTD
queried_at: 2026-03-10T07:06:35.439298
raw_data:
  {"malicious": 10, "suspicious": 1, "harmless": 54, "undetected": 29, "reputation": -1, "country": "GB", "as_owner": "03AI LTD", "asn": 213725, "network": "87.121.79.0/24", "last_analysis_date": 1770346809}


indicator: 87.122.232.179
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: 1&1 Versatel GmbH
queried_at: 2026-03-10T07:06:55.839650
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "DE", "as_owner": "1&1 Versatel GmbH", "asn": 8881, "network": "87.122.0.0/16", "last_analysis_date": 1730080434}


indicator: 87.122.36.47
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: 1&1 Versatel GmbH
queried_at: 2026-03-10T07:07:16.186716
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "DE", "as_owner": "1&1 Versatel GmbH", "asn": 8881, "network": "87.122.0.0/16", "last_analysis_date": 1730080449}


indicator: 87.122.37.59
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: 1&1 Versatel GmbH
queried_at: 2026-03-10T07:07:36.510965
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "DE", "as_owner": "1&1 Versatel GmbH", "asn": 8881, "network": "87.122.0.0/16", "last_analysis_date": 1730080453}


indicator: 87.122.38.236
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: 1&1 Versatel GmbH
queried_at: 2026-03-10T07:07:56.833908
raw_data:
  {"malicious": 2, "suspicious": 0, "harmless": 59, "undetected": 33, "reputation": 0, "country": "DE", "as_owner": "1&1 Versatel GmbH", "asn": 8881, "network": "87.122.0.0/16", "last_analysis_date": 1768018993}


indicator: 87.123.100.31
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: 1&1 Versatel GmbH
queried_at: 2026-03-10T07:08:17.160739
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "DE", "as_owner": "1&1 Versatel GmbH", "asn": 8881, "network": "87.123.0.0/17", "last_analysis_date": 1730080529}


indicator: 87.123.101.177
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: 1&1 Versatel GmbH
queried_at: 2026-03-10T07:08:37.512961
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "DE", "as_owner": "1&1 Versatel GmbH", "asn": 8881, "network": "87.123.0.0/17", "last_analysis_date": 1730080444}


indicator: 87.120.166.174
indicator_type: ipv4
source: dshield
country: TR
reverse_dns: 87.120.166.0/24
hosting_provider: SUNUCUN
queried_at: 2026-03-10T07:08:57.963384
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@digiweb.ie", "as": 197450, "asname": "SUNUCUN", "ascountry": "TR", "assource": "", "network": "87.120.166.0/24", "threatfeeds": {}}


indicator: 87.121.105.102
indicator_type: ipv4
source: dshield
country: TR
reverse_dns: 87.121.105.0/24
hosting_provider: AS-TEKNOSOS-INT
queried_at: 2026-03-10T07:08:59.359761
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "info@teknosos.com.tr", "as": 207459, "asname": "AS-TEKNOSOS-INT", "ascountry": "TR", "assource": "", "network": "87.121.105.0/24", "threatfeeds": {}}


indicator: 87.121.52.152
indicator_type: ipv4
source: dshield
country: BG
reverse_dns: 87.121.52.0/24
hosting_provider: NETERRA-AS
queried_at: 2026-03-10T07:09:00.815365
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@neterra.net", "as": 34224, "asname": "NETERRA-AS", "ascountry": "BG", "assource": "", "network": "87.121.52.0/24", "threatfeeds": {}}


indicator: 87.121.79.75
indicator_type: ipv4
source: dshield
country: BG
reverse_dns: 87.121.79.0/24
hosting_provider: NETERRA-AS
queried_at: 2026-03-10T07:09:02.172396
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@neterra.net", "as": 34224, "asname": "NETERRA-AS", "ascountry": "BG", "assource": "", "network": "87.121.79.0/24", "threatfeeds": {"ciarmy": {"lastseen": "2025-02-27", "firstseen": "2025-02-27"}}}


indicator: 87.122.232.179
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 87.122.224.0/19
hosting_provider: VERSATEL
queried_at: 2026-03-10T07:09:03.570492
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@versatel.de", "as": 8881, "asname": "VERSATEL", "ascountry": "DE", "assource": "", "network": "87.122.224.0/19", "threatfeeds": {}}


indicator: 87.122.36.47
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 87.122.32.0/19
hosting_provider: VERSATEL
queried_at: 2026-03-10T07:09:04.901243
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@versatel.de", "as": 8881, "asname": "VERSATEL", "ascountry": "DE", "assource": "", "network": "87.122.32.0/19", "threatfeeds": {}}


indicator: 87.123.100.31
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 87.123.96.0/19
hosting_provider: VERSATEL
queried_at: 2026-03-10T07:09:08.899832
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@versatel.de", "as": 8881, "asname": "VERSATEL", "ascountry": "DE", "assource": "", "network": "87.123.96.0/19", "threatfeeds": {}}


indicator: 87.123.106.226
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 87.123.96.0/19
hosting_provider: VERSATEL
queried_at: 2026-03-10T07:09:11.652405
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@versatel.de", "as": 8881, "asname": "VERSATEL", "ascountry": "DE", "assource": "", "network": "87.123.96.0/19", "threatfeeds": {"mastodon": {"lastseen": "2024-05-07", "firstseen": "2024-05-07"}}}


indicator: 87.123.34.157
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 87.123.32.0/19
hosting_provider: VERSATEL
queried_at: 2026-03-10T07:09:12.991701
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@versatel.de", "as": 8881, "asname": "VERSATEL", "ascountry": "DE", "assource": "", "network": "87.123.32.0/19", "threatfeeds": {}}


indicator: 87.123.47.232
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 87.123.32.0/19
hosting_provider: VERSATEL
queried_at: 2026-03-10T07:09:18.348814
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@versatel.de", "as": 8881, "asname": "VERSATEL", "ascountry": "DE", "assource": "", "network": "87.123.32.0/19", "threatfeeds": {"blocklistde22": {"lastseen": "2020-04-06", "firstseen": "2020-04-05"}}}


indicator: 87.163.155.181
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 87.128.0.0/10
hosting_provider: DTAG Internet service provider operations
queried_at: 2026-03-10T07:09:19.686156
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "auftrag@nic.telekom.de", "as": 3320, "asname": "DTAG Internet service provider operations", "ascountry": "DE", "assource": "", "network": "87.128.0.0/10", "threatfeeds": {}}


indicator: 87.247.84.230
indicator_type: ipv4
source: dshield
country: LT
reverse_dns: 87.247.64.0/18
hosting_provider: CGATES-AS
queried_at: 2026-03-10T07:09:26.470573
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@cgates.lt", "as": 21412, "asname": "CGATES-AS", "ascountry": "LT", "assource": "", "network": "87.247.64.0/18", "threatfeeds": {}}


indicator: 87.249.44.220
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 87.249.44.0/24
hosting_provider: TIMEWEB-AS
queried_at: 2026-03-10T07:09:27.778636
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@timeweb.ru", "as": 9123, "asname": "TIMEWEB-AS", "ascountry": "RU", "assource": "", "network": "87.249.44.0/24", "threatfeeds": {}}


indicator: 87.249.49.13
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 87.249.49.0/24
hosting_provider: TIMEWEB-AS
queried_at: 2026-03-10T07:09:30.438398
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@timeweb.ru", "as": 9123, "asname": "TIMEWEB-AS", "ascountry": "RU", "assource": "", "network": "87.249.49.0/24", "threatfeeds": {"blocklistde22": {"lastseen": "2023-09-17", "firstseen": "2023-09-15"}}}


indicator: 87.249.53.116
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 87.249.53.0/24
hosting_provider: TIMEWEB-AS
queried_at: 2026-03-10T07:09:31.765678
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@timeweb.ru", "as": 9123, "asname": "TIMEWEB-AS", "ascountry": "RU", "assource": "", "network": "87.249.53.0/24", "threatfeeds": {}}


indicator: 87.249.54.15
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 87.249.54.0/24
hosting_provider: TIMEWEB-AS
queried_at: 2026-03-10T07:09:35.766776
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@timeweb.ru", "as": 9123, "asname": "TIMEWEB-AS", "ascountry": "RU", "assource": "", "network": "87.249.54.0/24", "threatfeeds": {}}


indicator: 87.251.78.226
indicator_type: ipv4
source: dshield
country: GB
reverse_dns: 87.251.78.0/24
hosting_provider: CHSN-AS
queried_at: 2026-03-10T07:09:37.085237
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": ">>UNKNOWN<<", "as": 199785, "asname": "CHSN-AS", "ascountry": "GB", "assource": "", "network": "87.251.78.0/24", "threatfeeds": {}}


indicator: 87.26.121.157
indicator_type: ipv4
source: dshield
country: IT
reverse_dns: 87.26.0.0/16
hosting_provider: ASN-IBSNAZ
queried_at: 2026-03-10T07:09:39.580011
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@business.telecomitalia.it", "as": 3269, "asname": "ASN-IBSNAZ", "ascountry": "IT", "assource": "", "network": "87.26.0.0/16", "threatfeeds": {}}


indicator: 88.112.168.157
indicator_type: ipv4
source: dshield
country: FI
reverse_dns: 88.112.0.0/14
hosting_provider: ELISA-AS Helsinki, Finland
queried_at: 2026-03-10T07:09:40.915732
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@elisa.fi", "as": 719, "asname": "ELISA-AS Helsinki, Finland", "ascountry": "FI", "assource": "", "network": "88.112.0.0/14", "threatfeeds": {}}


indicator: 88.119.171.167
indicator_type: ipv4
source: dshield
country: LT
reverse_dns: 88.119.171.0/24
hosting_provider: IST-AS
queried_at: 2026-03-10T07:09:42.231234
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@bacloud.com", "as": 61272, "asname": "IST-AS", "ascountry": "LT", "assource": "", "network": "88.119.171.0/24", "threatfeeds": {}}


indicator: 88.130.20.124
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 88.130.0.0/19
hosting_provider: VERSATEL
queried_at: 2026-03-10T07:09:43.561836
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@versatel.de", "as": 8881, "asname": "VERSATEL", "ascountry": "DE", "assource": "", "network": "88.130.0.0/19", "threatfeeds": {}}


indicator: 88.151.195.221
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 88.151.195.0/24
hosting_provider: ASNET
queried_at: 2026-03-10T07:09:47.527672
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "noc@chilitech.net", "as": 26383, "asname": "ASNET", "ascountry": "US", "assource": "", "network": "88.151.195.0/24", "threatfeeds": {}}


indicator: 88.152.145.245
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 88.152.0.0/16
hosting_provider: VODANET International IP-Backbone of Vodafone
queried_at: 2026-03-10T07:09:48.860745
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@arcor-ip.de", "as": 3209, "asname": "VODANET International IP-Backbone of Vodafone", "ascountry": "DE", "assource": "", "network": "88.152.0.0/16", "threatfeeds": {}}


indicator: 88.175.108.174
indicator_type: ipv4
source: dshield
country: FR
reverse_dns: 88.160.0.0/12
hosting_provider: PROXAD
queried_at: 2026-03-10T07:09:50.181749
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@proxad.net", "as": 12322, "asname": "PROXAD", "ascountry": "FR", "assource": "", "network": "88.160.0.0/12", "threatfeeds": {}}


indicator: 88.202.156.116
indicator_type: ipv4
source: dshield
country: GB
reverse_dns: 88.202.128.0/19
hosting_provider: GIGACLEAR
queried_at: 2026-03-10T07:09:51.493368
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@gigaclear.com", "as": 56329, "asname": "GIGACLEAR", "ascountry": "GB", "assource": "", "network": "88.202.128.0/19", "threatfeeds": {}}


indicator: 88.202.247.87
indicator_type: ipv4
source: dshield
country: GB
reverse_dns: 88.202.240.0/20
hosting_provider: GIGACLEAR
queried_at: 2026-03-10T07:09:52.814864
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@gigaclear.com", "as": 56329, "asname": "GIGACLEAR", "ascountry": "GB", "assource": "", "network": "88.202.240.0/20", "threatfeeds": {}}


indicator: 88.207.122.194
indicator_type: ipv4
source: dshield
country: HR
reverse_dns: 88.207.0.0/17
hosting_provider: DCM-AS Vipnet d.o.o.
queried_at: 2026-03-10T07:09:54.152577
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@vip.hr", "as": 31012, "asname": "DCM-AS Vipnet d.o.o.", "ascountry": "HR", "assource": "", "network": "88.207.0.0/17", "threatfeeds": {}}


indicator: 88.214.57.220
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 88.214.57.0/24
hosting_provider: AUROLOGIC aurologic GmbH
queried_at: 2026-03-10T07:09:56.813724
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@combahton.net", "as": 30823, "asname": "AUROLOGIC aurologic GmbH", "ascountry": "DE", "assource": "", "network": "88.214.57.0/24", "threatfeeds": {}}


indicator: 88.218.93.54
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 88.218.92.0/22
hosting_provider: ENZUINC-
queried_at: 2026-03-10T07:09:58.155946
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@scalabledns.com", "as": 18978, "asname": "ENZUINC-", "ascountry": "US", "assource": "", "network": "88.218.92.0/22", "threatfeeds": {}}


indicator: 88.229.251.194
indicator_type: ipv4
source: dshield
country: TR
reverse_dns: 88.229.128.0/17
hosting_provider: TTNET
queried_at: 2026-03-10T07:09:59.489952
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ttnet.com.tr", "as": 9121, "asname": "TTNET", "ascountry": "TR", "assource": "", "network": "88.229.128.0/17", "threatfeeds": {}}


indicator: 88.232.102.73
indicator_type: ipv4
source: dshield
country: TR
reverse_dns: 88.232.0.0/17
hosting_provider: TTNET
queried_at: 2026-03-10T07:10:00.836564
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ttnet.com.tr", "as": 9121, "asname": "TTNET", "ascountry": "TR", "assource": "", "network": "88.232.0.0/17", "threatfeeds": {}}


indicator: 88.28.37.138
indicator_type: ipv4
source: dshield
country: ES
reverse_dns: 88.28.0.0/16
hosting_provider: TELEFONICA_DE_ESPANA
queried_at: 2026-03-10T07:10:02.177661
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "nemesys@telefonica.com", "as": 3352, "asname": "TELEFONICA_DE_ESPANA", "ascountry": "ES", "assource": "", "network": "88.28.0.0/16", "threatfeeds": {}}


indicator: 88.31.16.17
indicator_type: ipv4
source: dshield
country: ES
reverse_dns: 88.31.0.0/16
hosting_provider: TELEFONICA_DE_ESPANA
queried_at: 2026-03-10T07:10:03.814154
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "nemesys@telefonica.com", "as": 3352, "asname": "TELEFONICA_DE_ESPANA", "ascountry": "ES", "assource": "", "network": "88.31.0.0/16", "threatfeeds": {}}


indicator: 88.74.163.202
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 88.64.0.0/12
hosting_provider: VODANET International IP-Backbone of Vodafone
queried_at: 2026-03-10T07:10:07.842112
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@arcor-ip.de", "as": 3209, "asname": "VODANET International IP-Backbone of Vodafone", "ascountry": "DE", "assource": "", "network": "88.64.0.0/12", "threatfeeds": {}}


indicator: 88.83.203.237
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 88.83.192.0/19
hosting_provider: VSI-AS 35, Revolutsii prosp.
queried_at: 2026-03-10T07:10:10.564733
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@vsi.ru", "as": 21017, "asname": "VSI-AS 35, Revolutsii prosp.", "ascountry": "RU", "assource": "", "network": "88.83.192.0/19", "threatfeeds": {}}


indicator: 88.9.142.178
indicator_type: ipv4
source: dshield
country: ES
reverse_dns: 88.9.0.0/16
hosting_provider: TELEFONICA_DE_ESPANA
queried_at: 2026-03-10T07:10:11.909405
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "nemesys@telefonica.com", "as": 3352, "asname": "TELEFONICA_DE_ESPANA", "ascountry": "ES", "assource": "", "network": "88.9.0.0/16", "threatfeeds": {}}


indicator: 88.99.125.82
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 88.99.0.0/16
hosting_provider: HETZNER-AS
queried_at: 2026-03-10T07:10:13.239778
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@hetzner.de", "as": 24940, "asname": "HETZNER-AS", "ascountry": "DE", "assource": "", "network": "88.99.0.0/16", "threatfeeds": {}}


indicator: 89.105.201.98
indicator_type: ipv4
source: dshield
country: NL
reverse_dns: 89.105.192.0/19
hosting_provider: NOVOSERVE-AS
queried_at: 2026-03-10T07:10:17.400647
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abusedesk@novoserve.com", "as": 24875, "asname": "NOVOSERVE-AS", "ascountry": "NL", "assource": "", "network": "89.105.192.0/19", "threatfeeds": {"rosti": {"lastseen": "2025-03-06", "firstseen": "2025-03-06"}}}


indicator: 89.106.206.142
indicator_type: ipv4
source: dshield
country: AM
reverse_dns: 89.106.206.0/24
hosting_provider: BITCOMMAND
queried_at: 2026-03-10T07:10:18.732861
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "report@bitcommand.com", "as": 202269, "asname": "BITCOMMAND", "ascountry": "AM", "assource": "", "network": "89.106.206.0/24", "threatfeeds": {}}


indicator: 89.111.152.234
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 89.111.144.0/20
hosting_provider: RU-CENTER-AS
queried_at: 2026-03-10T07:10:20.055741
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@nic.ru", "as": 39494, "asname": "RU-CENTER-AS", "ascountry": "RU", "assource": "", "network": "89.111.144.0/20", "threatfeeds": {}}


indicator: 89.116.170.229
indicator_type: ipv4
source: dshield
country: LT
reverse_dns: 89.116.170.0/24
hosting_provider: BITE-US
queried_at: 2026-03-10T07:10:21.239061
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": ">>UNKNOWN<<", "as": 210906, "asname": "BITE-US", "ascountry": "LT", "assource": "", "network": "89.116.170.0/24", "threatfeeds": {}}


indicator: 89.117.109.238
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 89.117.109.0/24
hosting_provider: GTT-BACKBONE GTT
queried_at: 2026-03-10T07:10:22.563513
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@gtt.net", "as": 3257, "asname": "GTT-BACKBONE GTT", "ascountry": "US", "assource": "", "network": "89.117.109.0/24", "threatfeeds": {}}


indicator: 89.12.149.60
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 89.12.0.0/14
hosting_provider: TDDE-ASN1
queried_at: 2026-03-10T07:10:23.899232
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse.de@telefonica.com", "as": 6805, "asname": "TDDE-ASN1", "ascountry": "DE", "assource": "", "network": "89.12.0.0/14", "threatfeeds": {}}


indicator: 89.147.109.117
indicator_type: ipv4
source: dshield
country: IS
reverse_dns: 89.147.108.0/22
hosting_provider: THE-1984-AS
queried_at: 2026-03-10T07:10:31.928328
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@1984.is", "as": 44925, "asname": "THE-1984-AS", "ascountry": "IS", "assource": "", "network": "89.147.108.0/22", "threatfeeds": {"torexit": {"lastseen": "2022-10-20", "firstseen": "2022-10-09"}}}


indicator: 89.149.200.91
indicator_type: ipv4
source: dshield
country: NL
reverse_dns: 89.149.192.0/20
hosting_provider: LEASEWEB-NL-AMS-01 Netherlands
queried_at: 2026-03-10T07:10:33.286206
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@nl.leaseweb.com", "as": 60781, "asname": "LEASEWEB-NL-AMS-01 Netherlands", "ascountry": "NL", "assource": "", "network": "89.149.192.0/20", "threatfeeds": {"rosti": {"lastseen": "2025-12-02", "firstseen": "2025-02-12"}}}


indicator: 89.154.183.7
indicator_type: ipv4
source: dshield
country: PT
reverse_dns: 89.154.128.0/18
hosting_provider: NOS_COMUNICACOES
queried_at: 2026-03-10T07:10:34.632591
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@nos.pt", "as": 2860, "asname": "NOS_COMUNICACOES", "ascountry": "PT", "assource": "", "network": "89.154.128.0/18", "threatfeeds": {}}


indicator: 89.158.234.135
indicator_type: ipv4
source: dshield
country: FR
reverse_dns: 89.156.0.0/14
hosting_provider: LDCOMNET
queried_at: 2026-03-10T07:10:35.973497
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@gaoland.net", "as": 15557, "asname": "LDCOMNET", "ascountry": "FR", "assource": "", "network": "89.156.0.0/14", "threatfeeds": {}}


indicator: 89.164.128.113
indicator_type: ipv4
source: dshield
country: HR
reverse_dns: 89.164.128.0/24
hosting_provider: ASN-ISKON
queried_at: 2026-03-10T07:10:37.288219
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@iskon.hr", "as": 13046, "asname": "ASN-ISKON", "ascountry": "HR", "assource": "", "network": "89.164.128.0/24", "threatfeeds": {}}


indicator: 89.175.0.74
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 89.175.0.0/16
hosting_provider: MTS
queried_at: 2026-03-10T07:10:39.968236
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@mtu.ru", "as": 8359, "asname": "MTS", "ascountry": "RU", "assource": "", "network": "89.175.0.0/16", "threatfeeds": {}}


indicator: 89.182.29.10
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 89.182.0.0/16
hosting_provider: HTP-AS
queried_at: 2026-03-10T07:10:41.317102
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@htp.net", "as": 13045, "asname": "HTP-AS", "ascountry": "DE", "assource": "", "network": "89.182.0.0/16", "threatfeeds": {}}


indicator: 89.185.80.150
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 89.185.80.0/22
hosting_provider: IPOCEAN UPLINKS
queried_at: 2026-03-10T07:10:44.020097
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ipocean.ru", "as": 207967, "asname": "IPOCEAN  UPLINKS ", "ascountry": "RU", "assource": "", "network": "89.185.80.0/22", "threatfeeds": {}}


indicator: 89.185.80.251
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 89.185.80.0/22
hosting_provider: IPOCEAN UPLINKS
queried_at: 2026-03-10T07:10:46.730615
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ipocean.ru", "as": 207967, "asname": "IPOCEAN  UPLINKS ", "ascountry": "RU", "assource": "", "network": "89.185.80.0/22", "threatfeeds": {"rosti": {"lastseen": "2025-03-03", "firstseen": "2025-03-03"}}}


indicator: 89.185.80.86
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 89.185.80.0/22
hosting_provider: IPOCEAN UPLINKS
queried_at: 2026-03-10T07:10:48.150580
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ipocean.ru", "as": 207967, "asname": "IPOCEAN  UPLINKS ", "ascountry": "RU", "assource": "", "network": "89.185.80.0/22", "threatfeeds": {"rosti": {"lastseen": "2025-03-03", "firstseen": "2025-03-03"}, "threatview": {"lastseen": "2025-01-23", "firstseen": "2025-01-23"}}}


indicator: 89.190.158.149
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 89.190.158.0/24
hosting_provider: PERFECT-INTERNATIONAL
queried_at: 2026-03-10T07:10:49.497981
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "noc@perfectip.net", "as": 22439, "asname": "PERFECT-INTERNATIONAL", "ascountry": "US", "assource": "", "network": "89.190.158.0/24", "threatfeeds": {}}


indicator: 89.212.41.199
indicator_type: ipv4
source: dshield
country: SI
reverse_dns: 89.212.0.0/18
hosting_provider: T-2-AS AS set propagated by T-2 d.o.o.
queried_at: 2026-03-10T07:10:50.843395
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@t-2.com", "as": 34779, "asname": "T-2-AS AS set propagated by T-2 d.o.o.", "ascountry": "SI", "assource": "", "network": "89.212.0.0/18", "threatfeeds": {}}


indicator: 89.213.174.246
indicator_type: ipv4
source: dshield
country: FR
reverse_dns: 89.213.174.0/24
hosting_provider: LEO_GEORGES_NONNENMACHER
queried_at: 2026-03-10T07:10:52.187133
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": ">>UNKNOWN<<", "as": 212104, "asname": "LEO_GEORGES_NONNENMACHER", "ascountry": "FR", "assource": "", "network": "89.213.174.0/24", "threatfeeds": {}}


indicator: 89.213.248.224
indicator_type: ipv4
source: dshield
country: GB
reverse_dns: 89.213.192.0/18
hosting_provider: EDGE ta GCI Com
queried_at: 2026-03-10T07:10:53.507438
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "ripe@gcicom.net", "as": 8851, "asname": "EDGE ta GCI Com", "ascountry": "GB", "assource": "", "network": "89.213.192.0/18", "threatfeeds": {}}


indicator: 89.223.120.224
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 89.223.120.0/24
hosting_provider: TIMEWEB-AS
queried_at: 2026-03-10T07:10:56.168098
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@timeweb.ru", "as": 9123, "asname": "TIMEWEB-AS", "ascountry": "RU", "assource": "", "network": "89.223.120.0/24", "threatfeeds": {}}


indicator: 89.223.123.31
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 89.223.123.0/24
hosting_provider: TIMEWEB-AS
queried_at: 2026-03-10T07:10:57.507424
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@timeweb.ru", "as": 9123, "asname": "TIMEWEB-AS", "ascountry": "RU", "assource": "", "network": "89.223.123.0/24", "threatfeeds": {}}


indicator: 89.223.125.10
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 89.223.125.0/24
hosting_provider: TIMEWEB-AS
queried_at: 2026-03-10T07:10:58.846152
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@timeweb.ru", "as": 9123, "asname": "TIMEWEB-AS", "ascountry": "RU", "assource": "", "network": "89.223.125.0/24", "threatfeeds": {}}


indicator: 89.223.64.112
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 89.223.64.0/24
hosting_provider: TIMEWEB-AS
queried_at: 2026-03-10T07:11:00.172495
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@timeweb.ru", "as": 9123, "asname": "TIMEWEB-AS", "ascountry": "RU", "assource": "", "network": "89.223.64.0/24", "threatfeeds": {}}


indicator: 89.223.67.223
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 89.223.67.0/24
hosting_provider: TIMEWEB-AS
queried_at: 2026-03-10T07:11:01.387159
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@timeweb.ru", "as": 9123, "asname": "TIMEWEB-AS", "ascountry": "RU", "assource": "", "network": "89.223.67.0/24", "threatfeeds": {}}


indicator: 89.23.100.247
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 89.23.100.0/24
hosting_provider: SMARTAPE
queried_at: 2026-03-10T07:11:04.059666
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@dhub.ru", "as": 56694, "asname": "SMARTAPE", "ascountry": "RU", "assource": "", "network": "89.23.100.0/24", "threatfeeds": {}}


indicator: 89.23.101.114
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 89.23.101.0/24
hosting_provider: SMARTAPE
queried_at: 2026-03-10T07:11:05.380614
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@dhub.ru", "as": 56694, "asname": "SMARTAPE", "ascountry": "RU", "assource": "", "network": "89.23.101.0/24", "threatfeeds": {}}


indicator: 89.23.96.54
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 89.23.96.0/22
hosting_provider: SMARTAPE
queried_at: 2026-03-10T07:11:06.704307
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@dhub.ru", "as": 56694, "asname": "SMARTAPE", "ascountry": "RU", "assource": "", "network": "89.23.96.0/22", "threatfeeds": {}}


indicator: 89.238.150.43
indicator_type: ipv4
source: dshield
country: RO
reverse_dns: 89.238.150.0/24
hosting_provider: M247
queried_at: 2026-03-10T07:11:09.393888
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@m247.com", "as": 9009, "asname": "M247", "ascountry": "RO", "assource": "", "network": "89.238.150.0/24", "threatfeeds": {"blocklistde443": {"lastseen": "2026-02-28", "firstseen": "2022-06-27"}, "blocklistde80": {"lastseen": "2026-02-28", "firstseen": "2022-06-26"}, "blocklistdeapache": {"lastseen": "2026-02-28", "firstseen": "2022-06-27"}, "blocklistdebruteforcelogin": {"lasts


indicator: 89.245.192.160
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 89.245.192.0/19
hosting_provider: VERSATEL
queried_at: 2026-03-10T07:11:10.707338
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@versatel.de", "as": 8881, "asname": "VERSATEL", "ascountry": "DE", "assource": "", "network": "89.245.192.0/19", "threatfeeds": {}}


indicator: 89.247.200.153
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 89.247.192.0/20
hosting_provider: VERSATEL
queried_at: 2026-03-10T07:11:14.720321
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@versatel.de", "as": 8881, "asname": "VERSATEL", "ascountry": "DE", "assource": "", "network": "89.247.192.0/20", "threatfeeds": {}}


indicator: 89.39.121.169
indicator_type: ipv4
source: dshield
country: RO
reverse_dns: 89.39.120.0/23
hosting_provider: NG-AS Sos. Bucuresti - Ploiesti nr. 42-44
queried_at: 2026-03-10T07:11:16.123935
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@next-gen.ro", "as": 48161, "asname": "NG-AS Sos. Bucuresti - Ploiesti nr. 42-44", "ascountry": "RO", "assource": "", "network": "89.39.120.0/23", "threatfeeds": {}}


indicator: 89.40.31.15
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: mail1.sendflarebot.org,mail1.sciresoa-researchertext.com
hosting_provider: cpe:/a:apache:http_server
queried_at: 2026-03-10T07:28:03.665966
raw_data:
  {"ports": [53, 80, 443, 445, 2222, 3389, 5985], "vulns": ["CVE-2020-0796"], "hostnames": ["mail1.sendflarebot.org", "mail1.sciresoa-researchertext.com"], "tags": ["self-signed"], "cpes": ["cpe:/a:apache:http_server"]}


indicator: 89.47.113.71
indicator_type: ipv4
source: shodan
reverse_dns: server.keyubu.com
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-03-10T07:28:06.957456
raw_data:
  {"ports": [22, 5357, 5985], "vulns": [], "hostnames": ["server.keyubu.com"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 89.47.113.83
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: server.keyubu.com
queried_at: 2026-03-10T07:28:08.606184
raw_data:
  {"ports": [3389], "vulns": [], "hostnames": ["server.keyubu.com"], "tags": ["self-signed"], "cpes": []}


indicator: 89.58.33.52
indicator_type: ipv4
source: shodan
city: starttls
reverse_dns: uer-media.de,plesk.uer-media.de
queried_at: 2026-03-10T07:28:10.254703
raw_data:
  {"ports": [21, 22, 25, 53, 80, 110, 143, 443, 465, 587, 993, 995, 3389, 4190, 7081, 8060, 8443, 8880], "vulns": [], "hostnames": ["uer-media.de", "plesk.uer-media.de"], "tags": ["starttls"], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/a:apache:http_server", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx", "cpe:/a:postfix:postfix"]}

hosting_provider:
  cpe:/a:openbsd:openssh:8.9p1,cpe:/a:apache:http_server,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx,cpe:/a:postfix:postfix


indicator: 89.58.45.9
indicator_type: ipv4
source: shodan
reverse_dns: cld.jaeckel-modelle.de
hosting_provider: cpe:/a:f5:nginx
queried_at: 2026-03-10T07:28:11.902346
raw_data:
  {"ports": [80, 443, 3478], "vulns": [], "hostnames": ["cld.jaeckel-modelle.de"], "tags": [], "cpes": ["cpe:/a:f5:nginx"]}


indicator: 89.58.48.237
indicator_type: ipv4
source: shodan
city: tor
reverse_dns: v2202210171896203370.quicksrv.de
hosting_provider: cpe:/a:openbsd:openssh:10.2
queried_at: 2026-03-10T07:28:13.549428
raw_data:
  {"ports": [22, 9001], "vulns": [], "hostnames": ["v2202210171896203370.quicksrv.de"], "tags": ["tor"], "cpes": ["cpe:/a:openbsd:openssh:10.2"]}


indicator: 89.58.49.77
indicator_type: ipv4
source: shodan
city: tor
reverse_dns: v2202210165427203540.luckysrv.de
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-03-10T07:28:15.187462
raw_data:
  {"ports": [22, 9001, 9030], "vulns": [], "hostnames": ["v2202210165427203540.luckysrv.de"], "tags": ["tor"], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.184.248.46
indicator_type: ipv4
source: shodan
reverse_dns: creepyworldrain.net
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-03-10T07:28:21.786672
raw_data:
  {"ports": [22, 1080, 4000], "vulns": [], "hostnames": ["creepyworldrain.net"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.208.197.28
indicator_type: ipv4
source: shodan
city: eol-product,self-signed,open-dir
reverse_dns: inquisitively.store,domain.com
queried_at: 2026-03-10T07:28:38.562215
raw_data:
  {"ports": [22, 80, 111, 139, 443], "vulns": ["CVE-2025-15468", "CVE-2009-3766", "CVE-2007-4723", "CVE-2023-51385", "CVE-2026-22795", "CVE-2025-58098", "CVE-2019-11358", "CVE-2025-15469", "CVE-2013-2220", "CVE-2025-59775", "CVE-2024-43204", "CVE-2013-0942", "CVE-2009-2299", "CVE-2026-22796", "CVE-2025-69421", "CVE-2009-1390", "CVE-2012-3526", "CVE-2023-51767", "CVE-2025-69419", "CVE-2011-1176", "CVE-2007-2768", "CVE-2025-66200", "CVE-2025-49630", "CVE-2013-2765", "CVE-2024-43394", "CVE-2024-5458"

hosting_provider:
  cpe:/a:getbootstrap:bootstrap,cpe:/a:jquery:jquery:1.10.2,cpe:/a:php:php:8.0.30,cpe:/a:apache:http_server:2.4.62,cpe:/a:openssl:openssl:3.5.1,cpe:/a:openbsd:openssh:8.7


indicator: 91.215.155.27
indicator_type: ipv4
source: shodan
reverse_dns: arrow186634.vds
hosting_provider: cpe:/a:cloudflare:cloudflare
queried_at: 2026-03-10T07:28:55.498321
raw_data:
  {"ports": [443, 2222], "vulns": [], "hostnames": ["arrow186634.vds"], "tags": [], "cpes": ["cpe:/a:cloudflare:cloudflare"]}


indicator: 91.218.244.153
indicator_type: ipv4
source: shodan
city: vpn
queried_at: 2026-03-10T07:28:57.135986
raw_data:
  {"ports": [137, 445, 1194, 1701, 1723, 2000], "vulns": [], "hostnames": [], "tags": ["vpn"], "cpes": []}


indicator: 91.223.3.141
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: christinecapone.com
hosting_provider: cpe:/a:php:php:8.0.30,cpe:/a:f5:nginx
queried_at: 2026-03-10T07:28:58.760062
raw_data:
  {"ports": [25, 80], "vulns": ["CVE-2024-3566", "CVE-2007-3205", "CVE-2013-2220", "CVE-2024-5458"], "hostnames": ["christinecapone.com"], "tags": ["eol-product"], "cpes": ["cpe:/a:php:php:8.0.30", "cpe:/a:f5:nginx"]}


indicator: 91.230.49.1
indicator_type: ipv4
source: shodan
reverse_dns: www.spectraip.net
hosting_provider: cpe:/a:f5:nginx
queried_at: 2026-03-10T07:29:03.864963
raw_data:
  {"ports": [80, 443], "vulns": [], "hostnames": ["www.spectraip.net"], "tags": [], "cpes": ["cpe:/a:f5:nginx"]}


indicator: 91.231.186.25
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-03-10T07:29:05.613979
raw_data:
  {"ports": [443], "vulns": [], "hostnames": [], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.234.33.48
indicator_type: ipv4
source: shodan
city: database
reverse_dns: enjak2.freedomain.thehost.com.ua
queried_at: 2026-03-10T07:29:09.061830
raw_data:
  {"ports": [22, 80, 3306, 5060, 5353], "vulns": ["CVE-2013-6501", "CVE-2013-2765", "CVE-2018-10548", "CVE-2015-4116", "CVE-2016-10010", "CVE-2016-5770", "CVE-2019-10092", "CVE-2013-0942", "CVE-2015-5589", "CVE-2015-4602", "CVE-2016-0736", "CVE-2016-6292", "CVE-2014-5120", "CVE-2014-2653", "CVE-2016-5093", "CVE-2019-9641", "CVE-2024-24795", "CVE-2018-10545", "CVE-2013-5704", "CVE-2015-4599", "CVE-2009-0796", "CVE-2016-4342", "CVE-2013-4352", "CVE-2015-6835", "CVE-2014-3710", "CVE-2022-37436", "CVE

hosting_provider:
  cpe:/a:apache:http_server:2.4.6,cpe:/a:php:php:5.4.16,cpe:/o:centos:centos,cpe:/a:mariadb:mariadb,cpe:/a:openbsd:openssh:6.4,cpe:/a:getbootstrap:bootstrap


indicator: 91.235.142.33
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: bubbly.simpletrades.net
queried_at: 2026-03-10T07:29:10.692511
raw_data:
  {"ports": [22, 443, 8080, 9000, 9443], "vulns": [], "hostnames": ["bubbly.simpletrades.net"], "tags": ["self-signed"], "cpes": ["cpe:/a:angularjs:angular.js", "cpe:/a:openbsd:openssh:8.2p1", "cpe:/a:portainer:portainer:2.33.7", "cpe:/o:canonical:ubuntu_linux"]}

hosting_provider:
  cpe:/a:angularjs:angular.js,cpe:/a:openbsd:openssh:8.2p1,cpe:/a:portainer:portainer:2.33.7,cpe:/o:canonical:ubuntu_linux


indicator: 89.40.31.15
indicator_type: ipv4
source: otx
country: RO
city: Bucharest
hosting_provider: Havoc,NetSupportRAT,Sliver,Pegasus,Bianlian,Remcos,Mythic,Supershell,Hookbot,AsyncRAT
queried_at: 2026-03-10T07:29:13.547619
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Romania", "country_code": "RO", "city": "Bucharest", "asn": "AS35512 dynamic connection srl", "indicator": "89.40.31.15", "tags": ["Havoc", "NetSupportRAT", "Sliver", "Pegasus", "Bianlian", "Remcos", "Mythic", "Supershell", "Hookbot", "AsyncRAT", "Interactsh", "C2", "Reverse_SSH", "CobaltStrike"], "pulses": ["Threatfox Recent Additions", "Twitter Feed - drb_ra - 06-03-2025"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passi


indicator: 89.46.232.52
indicator_type: ipv4
source: otx
country: RO
city: Sfantu Gheorghe
hosting_provider: id field,dll execution,september,warmcookie,campaign id,maas,malware,rc4 key,labs,type name
queried_at: 2026-03-10T07:29:15.836933
raw_data:
  {"pulse_count": 5, "reputation": 0, "country": "Romania", "country_code": "RO", "city": "Sfantu Gheorghe", "asn": "AS39531 alter-net srl", "indicator": "89.46.232.52", "tags": ["id field", "dll execution", "september", "warmcookie", "campaign id", "maas", "malware", "rc4 key", "labs", "type name", "new features", "below", "mitre att", "powershell", "ibm xforce", "reference", "security labs", "july", "fresh insights", "server", "warmcookie c2"], "pulses": ["IOC TCS- IP", "IOC - WARMCOOKIE One Yea


indicator: 89.47.113.71
indicator_type: ipv4
source: otx
country: RO
reverse_dns: medi.todo-vision.com.ar
queried_at: 2026-03-10T07:29:17.381847
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Romania", "country_code": "RO", "city": null, "asn": "AS39543 tennet telecom", "indicator": "89.47.113.71", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["medi.todo-vision.com.ar"]}


indicator: 89.47.113.83
indicator_type: ipv4
source: otx
country: RO
queried_at: 2026-03-10T07:29:19.104864
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Romania", "country_code": "RO", "city": null, "asn": "AS39543 tennet telecom", "indicator": "89.47.113.83", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 89.58.33.52
indicator_type: ipv4
source: otx
country: DE
queried_at: 2026-03-10T07:29:20.766130
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS197540 netcup gmbh", "indicator": "89.58.33.52", "tags": [], "pulses": ["Malware Filter - Botnet List - 10-12-2025 (Part 10)", "Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 25, "malware_samples": [], "passive_dns": ["app.bf-tag.de", "bf-tag.com", "mwfirejunior.uer-media.de", "www.feuerwehr-wilhelmsburg.de", "feuerwehr-wilhelmsburg.de", "www.uer-media.de", "www.mwmuseu

reverse_dns:
  app.bf-tag.de,bf-tag.com,mwfirejunior.uer-media.de,www.feuerwehr-wilhelmsburg.de,feuerwehr-wilhelmsburg.de,www.uer-media.de,www.mwmuseum.uer-media.de,mwmuseum.uer-media.de,www.uer-production.de,nextcloud.uer-media.de


indicator: 89.58.45.9
indicator_type: ipv4
source: otx
country: DE
reverse_dns: cld.jaeckel-modelle.de,v2202209112845202071.powersrv.de
hosting_provider: malicious,cyber security,Nextray,ioc,phishing
queried_at: 2026-03-10T07:29:23.555904
raw_data:
  {"pulse_count": 30, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS197540 netcup gmbh", "indicator": "89.58.45.9", "tags": ["malicious", "cyber security", "Nextray", "ioc", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS_i_am)", "HIVE",


indicator: 89.58.48.237
indicator_type: ipv4
source: otx
country: DE
reverse_dns: v2202210171896203370.quicksrv.de
queried_at: 2026-03-10T07:29:25.212542
raw_data:
  {"pulse_count": 49, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "ASNone ", "indicator": "89.58.48.237", "tags": ["malicious", "cyber security", "anonymization_network", "tor-guard-nodes", "01.10.2025", "Nextray", "ioc", "tor-exit-nodes", "HoneyNet Connect", "2025", "phishing"], "pulses": ["Anonymization_Network | Mar 10, 2026 | Part 4/5", "Anonymization_Network | Mar 9, 2026 | Part 4/5", "Anonymization_Network | Mar 8, 2026 | Part 4/5", "Anonymization_Networ

hosting_provider:
  malicious,cyber security,anonymization_network,tor-guard-nodes,01.10.2025,Nextray,ioc,tor-exit-nodes,HoneyNet Connect,2025


indicator: 89.58.49.77
indicator_type: ipv4
source: otx
country: DE
reverse_dns: v2202210165427203540.luckysrv.de
queried_at: 2026-03-10T07:29:26.893490
raw_data:
  {"pulse_count": 49, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "ASNone ", "indicator": "89.58.49.77", "tags": ["malicious", "cyber security", "anonymization_network", "tor-guard-nodes", "01.10.2025", "Nextray", "ioc", "tor-exit-nodes", "HoneyNet Connect", "2025", "phishing"], "pulses": ["Anonymization_Network | Mar 10, 2026 | Part 3/5", "Anonymization_Network | Mar 9, 2026 | Part 3/5", "Anonymization_Network | Mar 8, 2026 | Part 4/5", "Anonymization_Network

hosting_provider:
  malicious,cyber security,anonymization_network,tor-guard-nodes,01.10.2025,Nextray,ioc,tor-exit-nodes,HoneyNet Connect,2025


indicator: 90.146.22.211
indicator_type: ipv4
source: otx
country: AT
city: Linz
queried_at: 2026-03-10T07:29:28.412528
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Austria", "country_code": "AT", "city": "Linz", "asn": "AS12605 liwest kabelfernsehen errichtungs- und betriebs ges.m.b.h.", "indicator": "90.146.22.211", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 90.156.202.59
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-03-10T07:29:29.895735
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS25532 llc masterhost", "indicator": "90.156.202.59", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 90.186.18.248
indicator_type: ipv4
source: otx
country: DE
city: Leipzig
hosting_provider: malicious,cyber security,Nextray,ioc,phishing
queried_at: 2026-03-10T07:29:31.612174
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Leipzig", "asn": "AS3209 vodafone gmbh", "indicator": "90.186.18.248", "tags": ["malicious", "cyber security", "Nextray", "ioc", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS_i_am)",


indicator: 91.184.248.46
indicator_type: ipv4
source: otx
country: RU
reverse_dns: huaxlacnc.com
queried_at: 2026-03-10T07:29:33.446656
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS57456 intek mytischi", "indicator": "91.184.248.46", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["huaxlacnc.com"]}


indicator: 91.184.250.143
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-03-10T07:29:35.092186
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS57456 intek mytischi", "indicator": "91.184.250.143", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.186.97.210
indicator_type: ipv4
source: otx
country: RU
city: Noril'sk
reverse_dns: cs-nsk.direct.quickconnect.to
hosting_provider: botnet,smb,mirai,scan,tcp,blacklist,honeypot,Malicious IP
queried_at: 2026-03-10T07:29:36.889333
raw_data:
  {"pulse_count": 16, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": "Noril'sk", "asn": "AS42087 mts pjsc", "indicator": "91.186.97.210", "tags": ["botnet", "smb", "mirai", "scan", "tcp", "blacklist", "honeypot", "Malicious IP"], "pulses": ["Russia 2023-10-10", "Scan port 445 SMB (S3#)", "Scan port 445 SMB (S3#)", "Scan port 445 SMB (S3#)", "Scan port 445 SMB (S3#)", "Scan port 445 SMB (S3#)", "Scan port 445 SMB (S3#)", "Scan port 445 SMB (S3#)", "Scan port 445 SMB


indicator: 91.189.237.78
indicator_type: ipv4
source: otx
country: RU
city: Petropavlovsk-Kamchatsky
reverse_dns: cloud.brcd.tech,557e04d823ca.sn.mynetname.net
hosting_provider: iocs,ddos,gs2519126,gs251386,gs2519129,ipv4,malware,mirai,gs2518122,gs25181222
queried_at: 2026-03-10T07:29:46.034297
raw_data:
  {"pulse_count": 3, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": "Petropavlovsk-Kamchatsky", "asn": "AS42742 interkamservice llc", "indicator": "91.189.237.78", "tags": ["iocs", "ddos", "gs2519126", "gs251386", "gs2519129", "ipv4", "malware", "mirai", "gs2518122", "gs25181222", "gs2518120", "outlaw", "xmrig", "mirai botnet", "gs251387", "gs2513862", "gorillabot", "twitter", "botnet mirai", "botnet iocs", "gs2519131", "linux", "gs2519125", "things", "mirai intern


indicator: 91.191.179.107
indicator_type: ipv4
source: otx
country: DE
city: Ingolstadt
hosting_provider: malicious,cyber security,Nextray,ioc,phishing
queried_at: 2026-03-10T07:29:48.263659
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Ingolstadt", "asn": "AS62336 purtel.com gmbh", "indicator": "91.191.179.107", "tags": ["malicious", "cyber security", "Nextray", "ioc", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS_

reverse_dns:
  device-a0d8f06c-df6f-481c-8ac8-e1f5405c976c.remotewd.com,xwik77qfemnp13lf.myfritz.net,familiegroen.synology.me,a8ms1u3stlytjkdz.myfritz.net


indicator: 91.194.11.162
indicator_type: ipv4
source: otx
country: CA
city: Toronto
queried_at: 2026-03-10T07:29:49.946797
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Canada", "country_code": "CA", "city": "Toronto", "asn": "AS53363 tangram canada inc.", "indicator": "91.194.11.162", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 1, "passive_dns_count": 48, "malware_samples": ["a44606471a871a2b398aaa0503f50cf102adb5d2a01c79f94a9f2bfe17ed259f"], "passive_dns": ["alpineroofinguts.com", "jbaroofingsllc.com", "proroofingandsidingrestorations.com", "pathwayofflorida.com", "www.pathwayofflorida

reverse_dns:
  alpineroofinguts.com,jbaroofingsllc.com,proroofingandsidingrestorations.com,pathwayofflorida.com,www.pathwayofflorida.com,www.totaltherapyflorida.com,totaltherapyflorida.com,alpineroofingutahs.com,rileysroofingcos.com,lincolnroofingcon.com


indicator: 91.199.42.124
indicator_type: ipv4
source: otx
country: HR
reverse_dns: luxsfood.click
queried_at: 2026-03-10T07:29:51.594924
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Croatia", "country_code": "HR", "city": null, "asn": "AS211975 sascha wohlert", "indicator": "91.199.42.124", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["luxsfood.click"]}


indicator: 91.2.203.132
indicator_type: ipv4
source: otx
country: DE
city: Essen
reverse_dns: 9db1exi1od9gpxqp.myfritz.net
hosting_provider: malicious,cyber security,Nextray,ioc,phishing
queried_at: 2026-03-10T07:29:53.687505
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Essen", "asn": "AS3320 deutsche telekom ag", "indicator": "91.2.203.132", "tags": ["malicious", "cyber security", "Nextray", "ioc", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS_i_am


indicator: 91.203.242.66
indicator_type: ipv4
source: otx
country: RU
hosting_provider: ddos,http
queried_at: 2026-03-10T07:29:56.233377
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS47335 abn ltd", "indicator": "91.203.242.66", "tags": ["ddos", "http"], "pulses": ["DDoS Attack", "GLITCH:AMBER Monitoring - Changi Airport Group"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.206.178.111
indicator_type: ipv4
source: otx
country: PL
reverse_dns: yapakue.com
queried_at: 2026-03-10T07:29:57.766200
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Poland", "country_code": "PL", "city": null, "asn": "AS200088 artnet sp. z o.o.", "indicator": "91.206.178.111", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["yapakue.com"]}


indicator: 91.208.197.28
indicator_type: ipv4
source: otx
country: MD
reverse_dns: redingtomgroup.com,seecdoled.biz,www.ameli-carte.fr,ameli-carte.fr,trymeplease.live
hosting_provider: honeypot,tsec,tpot19,la-safe.org
queried_at: 2026-03-10T07:29:59.570448
raw_data:
  {"pulse_count": 3, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": null, "asn": "AS200019 alexhost srl", "indicator": "91.208.197.28", "tags": ["honeypot", "tsec", "tpot19", "la-safe.org"], "pulses": ["Threatfox Recent Additions", "LCIA:HoneyNet:2022", "LCIA:HoneyNet:June 2022"], "malware_count": 0, "passive_dns_count": 5, "malware_samples": [], "passive_dns": ["redingtomgroup.com", "seecdoled.biz", "www.ameli-carte.fr", "ameli-carte.fr", "trymeplease.live"]}


indicator: 91.208.206.238
indicator_type: ipv4
source: otx
country: MD
hosting_provider: malicious,cyber security,Nextray,ioc,phishing
queried_at: 2026-03-10T07:30:01.125449
raw_data:
  {"pulse_count": 31, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": null, "asn": "AS200019 alexhost srl", "indicator": "91.208.206.238", "tags": ["malicious", "cyber security", "Nextray", "ioc", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by R


indicator: 91.208.75.12
indicator_type: ipv4
source: otx
country: RO
reverse_dns: id-bca.net,bca-id.pro,bca-id.onl,bca-id.lol,id-bca.cfd,id-bca.biz,bca-id.biz
hosting_provider: malicious,cyber security,Nextray,ioc,phishing
queried_at: 2026-03-10T07:30:02.885879
raw_data:
  {"pulse_count": 30, "reputation": 0, "country": "Romania", "country_code": "RO", "city": null, "asn": "AS47621 sourcenet web srl", "indicator": "91.208.75.12", "tags": ["malicious", "cyber security", "Nextray", "ioc", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS_i_am)", 


indicator: 91.208.75.153
indicator_type: ipv4
source: otx
country: RO
hosting_provider: urlhaus,scanning,sslbl,spamhaus,probing,cowrie,feodo,SSH,sentrypeer,Brute-Force
queried_at: 2026-03-10T07:30:16.499803
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Romania", "country_code": "RO", "city": null, "asn": "AS47621 sourcenet web srl", "indicator": "91.208.75.153", "tags": ["urlhaus", "scanning", "sslbl", "spamhaus", "probing", "cowrie", "feodo", "SSH", "sentrypeer", "Brute-Force", "Honeypot", "dionaea", "webscanner, bruteforce, web app attack", "tpot", "honeytrap", "openphish", "fatt", "p0f", "tanner", "honeypot", "automated", "ja3", "Bruteforce", "tor", "sensor-tagged", "suricata", "mailoney", "w


indicator: 91.209.135.71
indicator_type: ipv4
source: otx
country: ES
reverse_dns: ouhaf.xyz
hosting_provider: probing,webscanner,Crawler,web app attack
queried_at: 2026-03-10T07:30:18.748904
raw_data:
  {"pulse_count": 7, "reputation": 0, "country": "Spain", "country_code": "ES", "city": null, "asn": "ASNone ", "indicator": "91.209.135.71", "tags": ["probing", "webscanner", "Crawler", "web app attack"], "pulses": ["Webscanners IPs 2024-04-08 thru current day", "webscanners_pules", "webscanners_pules", "webscanners_pules", "webscanners_pules", "webscanners_pules", "Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["ouhaf.xyz"]}


indicator: 91.211.248.206
indicator_type: ipv4
source: otx
country: NL
reverse_dns: wededitlab.com,promutu.online,reflupis.com
queried_at: 2026-03-10T07:30:21.267314
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Netherlands", "country_code": "NL", "city": null, "asn": "AS204601 zomro b.v.", "indicator": "91.211.248.206", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 1, "passive_dns_count": 3, "malware_samples": ["331875ac3d37ed675d2169fc07b19e10cbc26e07a13254883932eaf14205cdfa"], "passive_dns": ["wededitlab.com", "promutu.online", "reflupis.com"]}


indicator: 91.212.166.146
indicator_type: ipv4
source: otx
country: GB
hosting_provider: weaxor,ransomware,proton66,wordpress,credential theft,strela stealer,xworm,android,remcos,germany
queried_at: 2026-03-10T07:30:25.383477
raw_data:
  {"pulse_count": 4, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": null, "asn": "ASNone ", "indicator": "91.212.166.146", "tags": ["weaxor", "ransomware", "proton66", "wordpress", "credential theft", "strela stealer", "xworm", "android", "remcos", "germany", "korea", "phishing"], "pulses": ["Part 2: Compromised WordPress Pages and Malware Campaigns", "Proton66: Compromised WordPress Pages and Malware Campaigns", "Threatfox Recent 

reverse_dns:
  my-wpenglne.com,my-tasjeel-ae.com,playstors-gr.com,gr-playmarkets.com,getmanyme.com,ioginwealthsimple.com,ioginmyweaithsimple.com,securemystake.com,verifymystake.com,verify-st.com


indicator: 91.212.166.154
indicator_type: ipv4
source: otx
country: GB
reverse_dns: stax.farm,wifechangingmoney.meme
queried_at: 2026-03-10T07:30:27.056765
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": null, "asn": "ASNone ", "indicator": "91.212.166.154", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["stax.farm", "wifechangingmoney.meme"]}


indicator: 91.212.166.155
indicator_type: ipv4
source: otx
country: GB
reverse_dns: www.babypork.top,babypork.top,dropjup.com,sleeplessai.pro
queried_at: 2026-03-10T07:30:28.603126
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": null, "asn": "ASNone ", "indicator": "91.212.166.155", "tags": [], "pulses": ["Threatfox Recent Additions", "Server Scanning 21/04/2025"], "malware_count": 0, "passive_dns_count": 4, "malware_samples": [], "passive_dns": ["www.babypork.top", "babypork.top", "dropjup.com", "sleeplessai.pro"]}


indicator: 91.212.166.9
indicator_type: ipv4
source: otx
country: GB
reverse_dns: vangoghtickets.com,accountnetflixconnect.com
queried_at: 2026-03-10T07:30:31.394059
raw_data:
  {"pulse_count": 7, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": null, "asn": "ASNone ", "indicator": "91.212.166.9", "tags": ["obfuscation", "ghostsocks", "maas", "as48282 hosting", "double victimization", "blackbasta", "socks5", "filename sha256", "uk relay", "c2 dashboard", "ltd ru", "as216127", "hk relay", "lummastealer", "golang", "c2", "ru relay", "server", "residential proxy"], "pulses": ["GhostSocks: From Initial Access 

hosting_provider:
  obfuscation,ghostsocks,maas,as48282 hosting,double victimization,blackbasta,socks5,filename sha256,uk relay,c2 dashboard


indicator: 91.215.155.27
indicator_type: ipv4
source: otx
country: BG
city: Sofia
queried_at: 2026-03-10T07:30:33.188170
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Bulgaria", "country_code": "BG", "city": "Sofia", "asn": "AS59729 itl llc", "indicator": "91.215.155.27", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 23, "malware_samples": [], "passive_dns": ["cryptoshare.rheinemetall.com", "cryptshare.rheinemetall.com", "betkey.site", "www.handeledgame.com", "handeledgame.com", "bavneopudqpxpl.info", "bavnotopdpl.info", "www.bayvnoiopdpl.info", "bayvnoiopdpl.info", "bavwnotpsdpl.info", "www

reverse_dns:
  cryptoshare.rheinemetall.com,cryptshare.rheinemetall.com,betkey.site,www.handeledgame.com,handeledgame.com,bavneopudqpxpl.info,bavnotopdpl.info,www.bayvnoiopdpl.info,bayvnoiopdpl.info,bavwnotpsdpl.info


indicator: 91.223.3.141
indicator_type: ipv4
source: otx
country: PL
queried_at: 2026-03-10T07:30:50.265285
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Poland", "country_code": "PL", "city": null, "asn": "AS201814 meverywhere sp. z o.o.", "indicator": "91.223.3.141", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.225.217.174
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-03-10T07:30:51.767407
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "ASNone ", "indicator": "91.225.217.174", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.23.77.121
indicator_type: ipv4
source: otx
country: DE
city: Achim
reverse_dns: e4dbd.direct.quickconnect.to,ouq7rxwuf1qv4b67.myfritz.net
hosting_provider: malicious,cyber security,Nextray,ioc,phishing
queried_at: 2026-03-10T07:30:53.418628
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Achim", "asn": "AS3320 deutsche telekom ag", "indicator": "91.23.77.121", "tags": ["malicious", "cyber security", "Nextray", "ioc", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS_i_am


indicator: 91.230.49.1
indicator_type: ipv4
source: otx
country: NL
hosting_provider: honeypot,tsec,tpot19,la-safe.org
queried_at: 2026-03-10T07:30:55.000149
raw_data:
  {"pulse_count": 4, "reputation": 0, "country": "Netherlands", "country_code": "NL", "city": null, "asn": "AS62068 spectraip b.v.", "indicator": "91.230.49.1", "tags": ["honeypot", "tsec", "tpot19", "la-safe.org"], "pulses": ["Threatfox Recent Additions", "Malware Filter - Botnet List - 27-03-2025", "LCIA:HoneyNet:2022", "LCIA:HoneyNet:November 2022"], "malware_count": 0, "passive_dns_count": 19, "malware_samples": [], "passive_dns": ["360vps.net", "spectraip.biz", "spectraip.pro", "spectraip.io"

reverse_dns:
  360vps.net,spectraip.biz,spectraip.pro,spectraip.io,spectra-ip.net,spectraip.org,spectraip.nl,www.spectraip.nl,spectraip.tech,customer.spectraip.net


indicator: 91.231.186.25
indicator_type: ipv4
source: otx
country: RU
reverse_dns: iopmetsmenb.com,gradterd.com,consequaturekbkg.mavibettv107.com
hosting_provider: Havoc,NetSupportRAT,Brute_Ratel_C4,Deimos,Sliver,Remcos,Dcrat,Mythic,Supershell,Hookbot
queried_at: 2026-03-10T07:30:56.740701
raw_data:
  {"pulse_count": 3, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "ASNone ", "indicator": "91.231.186.25", "tags": ["Havoc", "NetSupportRAT", "Brute_Ratel_C4", "Deimos", "Sliver", "Remcos", "Dcrat", "Mythic", "Supershell", "Hookbot", "AsyncRAT", "Reverse_SSH", "Interactsh", "C2", "Pegasus", "CobaltStrike"], "pulses": ["Threatfox Recent Additions", "Twitter Feed - drb_ra - 05-03-2025", "Twitter Feed - drb_ra - 03-03-2025"], "malware_count": 0, "passiv


indicator: 91.234.104.220
indicator_type: ipv4
source: otx
country: FR
queried_at: 2026-03-10T07:30:58.264450
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "France", "country_code": "FR", "city": null, "asn": "AS200780 appliwave sas", "indicator": "91.234.104.220", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.234.33.48
indicator_type: ipv4
source: otx
country: UA
city: Kyiv
reverse_dns: x3fxa.ru,ok00.ru
hosting_provider: afghanistan,secret blizzard,ukraine,psexec,february,blizzard,tomiris,oilrig,august,team
queried_at: 2026-03-10T07:31:00.087953
raw_data:
  {"pulse_count": 9, "reputation": 0, "country": "Ukraine", "country_code": "UA", "city": "Kyiv", "asn": "AS56485 sedinkin olexandr valeriyovuch", "indicator": "91.234.33.48", "tags": ["afghanistan", "secret blizzard", "ukraine", "psexec", "february", "blizzard", "tomiris", "oilrig", "august", "team", "snake", "hosts", "twodash", "sha256", "powershell", "storm-0156 golang", "intelligence", "turn", "storm0156", "kopiluwak", "minipocket", "service", "windows", "twitter", "turla", "india", "quietcana


indicator: 91.235.142.33
indicator_type: ipv4
source: otx
country: UA
city: Odessa
reverse_dns: fs29.gounlimited.to
hosting_provider: Havoc,NetSupportRAT,Brute_Ratel_C4,Sliver,Deimos,Pegasus,Remcos,Dcrat,Mythic,Supershell
queried_at: 2026-03-10T07:31:01.657051
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Ukraine", "country_code": "UA", "city": "Odessa", "asn": "AS30860 virtual systems llc", "indicator": "91.235.142.33", "tags": ["Havoc", "NetSupportRAT", "Brute_Ratel_C4", "Sliver", "Deimos", "Pegasus", "Remcos", "Dcrat", "Mythic", "Supershell", "Hookbot", "AsyncRAT", "Interactsh", "C2", "Reverse_SSH", "CobaltStrike"], "pulses": ["Threatfox Recent Additions", "Twitter Feed - drb_ra - 02-03-2025"], "malware_count": 1, "passive_dns_count": 1, "malware


indicator: 91.218.244.153
indicator_type: ipv4
source: abuseipdb
country: RU
city: 10
hosting_provider: LLC IT BASIS
queried_at: 2026-03-10T07:31:02.508688
raw_data:
  {"abuse_confidence": 24, "total_reports": 10, "is_public": true, "is_tor": false, "country": "RU", "isp": "LLC IT BASIS", "domain": "hostkey.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-03-01T18:16:37+00:00", "categories": [4, 9, 10, 14, 18, 19, 20, 21]}


indicator: 89.40.31.15
indicator_type: ipv4
source: abuseipdb
country: CA
city: 0
hosting_provider: IN HOSTERDADDYPVTLTD
queried_at: 2026-03-10T07:31:04.273934
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "CA", "isp": "IN HOSTERDADDYPVTLTD", "domain": "hosterdaddy.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-12-07T06:01:01+00:00", "categories": []}


indicator: 89.46.232.52
indicator_type: ipv4
source: abuseipdb
country: CH
city: 0
hosting_provider: EDIS Infrastructure in Switzerland
queried_at: 2026-03-10T07:31:05.937495
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "CH", "isp": "EDIS Infrastructure in Switzerland", "domain": "edis.at", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 89.47.113.71
indicator_type: ipv4
source: abuseipdb
country: TR
city: 0
hosting_provider: Tennet Telecom SRL
queried_at: 2026-03-10T07:31:07.718580
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "TR", "isp": "Tennet Telecom SRL", "domain": "tennet.ro", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 89.58.33.52
indicator_type: ipv4
source: abuseipdb
country: DE
city: 4
hosting_provider: netcup GmbH
queried_at: 2026-03-10T07:31:11.301822
raw_data:
  {"abuse_confidence": 0, "total_reports": 4, "is_public": true, "is_tor": false, "country": "DE", "isp": "netcup GmbH", "domain": "netcup.de", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-12-11T20:12:06+00:00", "categories": [18, 21]}


indicator: 89.58.45.9
indicator_type: ipv4
source: abuseipdb
country: DE
city: 0
hosting_provider: netcup GmbH
queried_at: 2026-03-10T07:31:13.058170
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "DE", "isp": "netcup GmbH", "domain": "netcup.de", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-07-04T23:36:54+00:00", "categories": []}


indicator: 89.58.48.237
indicator_type: ipv4
source: abuseipdb
country: DE
city: 0
hosting_provider: netcup GmbH
queried_at: 2026-03-10T07:31:14.686209
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "DE", "isp": "netcup GmbH", "domain": "netcup.de", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-06-23T08:43:07+00:00", "categories": []}


indicator: 89.58.49.77
indicator_type: ipv4
source: abuseipdb
country: DE
city: 0
hosting_provider: netcup GmbH
queried_at: 2026-03-10T07:31:16.455567
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "DE", "isp": "netcup GmbH", "domain": "netcup.de", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-06-26T10:58:37+00:00", "categories": []}


indicator: 90.146.22.211
indicator_type: ipv4
source: abuseipdb
country: AT
city: 0
hosting_provider: LIWEST Kabelmedien GmbH
queried_at: 2026-03-10T07:31:18.121776
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "AT", "isp": "LIWEST Kabelmedien GmbH", "domain": "liwest.at", "usage_type": "Fixed Line ISP", "last_reported": "2025-08-23T11:30:21+00:00", "categories": []}


indicator: 90.156.202.59
indicator_type: ipv4
source: abuseipdb
country: RU
city: 0
hosting_provider: Masterhost is a hosting and technical support organization.
queried_at: 2026-03-10T07:31:19.872677
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RU", "isp": "Masterhost is a hosting and technical support organization.", "domain": "masterhost.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-03-21T19:35:21+00:00", "categories": []}


indicator: 90.186.18.248
indicator_type: ipv4
source: abuseipdb
country: DE
city: 0
hosting_provider: Vodafone GmbH
queried_at: 2026-03-10T07:31:21.730168
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "DE", "isp": "Vodafone GmbH", "domain": "vodafone.de", "usage_type": "Mobile ISP", "last_reported": null, "categories": []}


indicator: 91.184.248.46
indicator_type: ipv4
source: abuseipdb
country: CZ
city: 0
hosting_provider: SmartApe OU
queried_at: 2026-03-10T07:31:23.362039
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "CZ", "isp": "SmartApe OU", "domain": "smartape.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-02-13T16:27:11+00:00", "categories": []}


indicator: 91.184.250.143
indicator_type: ipv4
source: abuseipdb
country: CZ
city: 0
hosting_provider: SmartApe OU
queried_at: 2026-03-10T07:31:25.171576
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "CZ", "isp": "SmartApe OU", "domain": "smartape.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 91.186.97.210
indicator_type: ipv4
source: abuseipdb
country: RU
city: 0
hosting_provider: CJSC Cannel-7
queried_at: 2026-03-10T07:31:26.955061
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RU", "isp": "CJSC Cannel-7", "domain": "mts.ru", "usage_type": "Fixed Line ISP", "last_reported": "2025-08-25T14:32:13+00:00", "categories": []}


indicator: 91.189.237.78
indicator_type: ipv4
source: abuseipdb
country: RU
city: 0
hosting_provider: InterkamService LLC
queried_at: 2026-03-10T07:31:29.096500
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RU", "isp": "InterkamService LLC", "domain": "interkam.pl", "usage_type": "Fixed Line ISP", "last_reported": "2025-07-25T04:52:11+00:00", "categories": []}


indicator: 91.191.179.107
indicator_type: ipv4
source: abuseipdb
country: DE
city: 0
hosting_provider: PURtel.com GmbH
queried_at: 2026-03-10T07:31:30.928384
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "DE", "isp": "PURtel.com GmbH", "domain": "purtel.com", "usage_type": "Fixed Line ISP", "last_reported": null, "categories": []}


indicator: 91.194.11.162
indicator_type: ipv4
source: abuseipdb
country: CA
city: 0
hosting_provider: DGTL TECH UK LLP
queried_at: 2026-03-10T07:31:32.661289
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "CA", "isp": "DGTL TECH UK LLP", "domain": "dgtl.tech", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-05-28T08:28:37+00:00", "categories": []}


indicator: 91.199.42.124
indicator_type: ipv4
source: abuseipdb
country: US
city: 0
hosting_provider: Hosting Solutions
queried_at: 2026-03-10T07:31:34.344005
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "US", "isp": "Hosting Solutions", "domain": "tsshosting.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 89.40.31.15
indicator_type: ipv4
source: virustotal
country: CA
hosting_provider: HosterDaddy Private Limited
queried_at: 2026-03-10T07:31:38.116019
raw_data:
  {"malicious": 2, "suspicious": 1, "harmless": 57, "undetected": 34, "reputation": 0, "country": "CA", "as_owner": "HosterDaddy Private Limited", "asn": 215117, "network": "89.40.31.0/24", "last_analysis_date": 1772805496}


indicator: 89.46.232.52
indicator_type: ipv4
source: virustotal
country: CH
hosting_provider: M247 Europe SRL
queried_at: 2026-03-10T07:31:58.379597
raw_data:
  {"malicious": 6, "suspicious": 0, "harmless": 55, "undetected": 33, "reputation": -1, "country": "CH", "as_owner": "M247 Europe SRL", "asn": 9009, "network": "89.46.232.0/23", "last_analysis_date": 1771332616}


indicator: 89.47.113.71
indicator_type: ipv4
source: virustotal
country: TR
hosting_provider: KEYUBU Internet ve Bilisim Tic. Ltd. Sti.
queried_at: 2026-03-10T07:32:18.681802
raw_data:
  {"malicious": 6, "suspicious": 0, "harmless": 57, "undetected": 31, "reputation": -1, "country": "TR", "as_owner": "KEYUBU Internet ve Bilisim Tic. Ltd. Sti.", "asn": 210538, "network": "89.47.113.0/24", "last_analysis_date": 1770398989}


indicator: 89.47.113.83
indicator_type: ipv4
source: virustotal
country: TR
hosting_provider: KEYUBU Internet ve Bilisim Tic. Ltd. Sti.
queried_at: 2026-03-10T07:32:38.974729
raw_data:
  {"malicious": 8, "suspicious": 0, "harmless": 53, "undetected": 33, "reputation": -1, "country": "TR", "as_owner": "KEYUBU Internet ve Bilisim Tic. Ltd. Sti.", "asn": 210538, "network": "89.47.113.0/24", "last_analysis_date": 1770919276}


indicator: 89.58.33.52
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: netcup GmbH
queried_at: 2026-03-10T07:32:59.335765
raw_data:
  {"malicious": 8, "suspicious": 1, "harmless": 52, "undetected": 33, "reputation": -1, "country": "DE", "as_owner": "netcup GmbH", "asn": 197540, "network": "89.58.0.0/18", "last_analysis_date": 1773045938}


indicator: 89.58.45.9
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: netcup GmbH
queried_at: 2026-03-10T07:33:19.855602
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "DE", "as_owner": "netcup GmbH", "asn": 197540, "network": "89.58.0.0/18", "last_analysis_date": 1757435571}


indicator: 89.58.48.237
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: netcup GmbH
queried_at: 2026-03-10T07:33:40.174001
raw_data:
  {"malicious": 1, "suspicious": 1, "harmless": 60, "undetected": 32, "reputation": -1, "country": "DE", "as_owner": "netcup GmbH", "asn": 197540, "network": "89.58.0.0/18", "last_analysis_date": 1767495284}


indicator: 89.58.49.77
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: netcup GmbH
queried_at: 2026-03-10T07:34:00.431523
raw_data:
  {"malicious": 1, "suspicious": 0, "harmless": 60, "undetected": 33, "reputation": -1, "country": "DE", "as_owner": "netcup GmbH", "asn": 197540, "network": "89.58.0.0/18", "last_analysis_date": 1773051324}


indicator: 90.146.22.211
indicator_type: ipv4
source: virustotal
country: AT
hosting_provider: LIWEST Kabelmedien GmbH
queried_at: 2026-03-10T07:34:20.729827
raw_data:
  {"malicious": 3, "suspicious": 0, "harmless": 57, "undetected": 34, "reputation": 0, "country": "AT", "as_owner": "LIWEST Kabelmedien GmbH", "asn": 12605, "network": "90.146.0.0/17", "last_analysis_date": 1773028750}


indicator: 90.156.202.59
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: LLC masterhost
queried_at: 2026-03-10T07:34:41.042814
raw_data:
  {"malicious": 1, "suspicious": 0, "harmless": 60, "undetected": 33, "reputation": 0, "country": "RU", "as_owner": "LLC masterhost", "asn": 25532, "network": "90.156.200.0/21", "last_analysis_date": 1754482504}


indicator: 89.58.33.52
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 89.58.32.0/22
hosting_provider: NETCUP-AS netcup GmbH
queried_at: 2026-03-10T07:35:08.859824
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@netcup.de", "as": 197540, "asname": "NETCUP-AS netcup GmbH", "ascountry": "DE", "assource": "", "network": "89.58.32.0/22", "threatfeeds": {}}


indicator: 89.58.45.9
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 89.58.44.0/22
hosting_provider: NETCUP-AS netcup GmbH
queried_at: 2026-03-10T07:35:10.191116
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@netcup.de", "as": 197540, "asname": "NETCUP-AS netcup GmbH", "ascountry": "DE", "assource": "", "network": "89.58.44.0/22", "threatfeeds": {}}


indicator: 89.58.48.237
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 89.58.48.0/22
hosting_provider: NETCUP-AS netcup GmbH
queried_at: 2026-03-10T07:35:11.518866
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@netcup.de", "as": 197540, "asname": "NETCUP-AS netcup GmbH", "ascountry": "DE", "assource": "", "network": "89.58.48.0/22", "threatfeeds": {"alltor": {"lastseen": "2026-03-02", "firstseen": "2025-02-04"}}}


indicator: 89.58.49.77
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 89.58.48.0/22
hosting_provider: NETCUP-AS netcup GmbH
queried_at: 2026-03-10T07:35:12.840329
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@netcup.de", "as": 197540, "asname": "NETCUP-AS netcup GmbH", "ascountry": "DE", "assource": "", "network": "89.58.48.0/22", "threatfeeds": {"alltor": {"lastseen": "2025-10-29", "firstseen": "2025-02-04"}}}


indicator: 90.146.22.211
indicator_type: ipv4
source: dshield
country: AT
reverse_dns: 90.146.0.0/17
hosting_provider: LIWEST-AT Linz, Austria
queried_at: 2026-03-10T07:35:14.133065
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@liwest.at", "as": 12605, "asname": "LIWEST-AT Linz, Austria", "ascountry": "AT", "assource": "", "network": "90.146.0.0/17", "threatfeeds": {}}


indicator: 90.156.202.59
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 90.156.200.0/21
hosting_provider: MASTERHOST-AS Moscow, Russia
queried_at: 2026-03-10T07:35:15.524123
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@masterhost.ru", "as": 25532, "asname": "MASTERHOST-AS Moscow, Russia", "ascountry": "RU", "assource": "", "network": "90.156.200.0/21", "threatfeeds": {}}


indicator: 90.186.18.248
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 90.186.0.0/16
hosting_provider: VODANET International IP-Backbone of Vodafone
queried_at: 2026-03-10T07:35:16.877646
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@arcor-ip.de", "as": 3209, "asname": "VODANET International IP-Backbone of Vodafone", "ascountry": "DE", "assource": "", "network": "90.186.0.0/16", "threatfeeds": {}}


indicator: 91.184.248.46
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 91.184.248.0/22
hosting_provider: INTEK-MYTISCHI-AS
queried_at: 2026-03-10T07:35:18.207870
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "samid-11@ya.ru", "as": 57456, "asname": "INTEK-MYTISCHI-AS", "ascountry": "RU", "assource": "", "network": "91.184.248.0/22", "threatfeeds": {}}


indicator: 91.186.97.210
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 91.186.97.0/24
hosting_provider: KANAL7-AS MTS PJSC, MR Sibir, Norilsk
queried_at: 2026-03-10T07:35:20.815648
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@mtu.ru", "as": 42087, "asname": "KANAL7-AS MTS PJSC, MR Sibir, Norilsk", "ascountry": "RU", "assource": "", "network": "91.186.97.0/24", "threatfeeds": {}}


indicator: 91.189.237.78
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 91.189.232.0/21
hosting_provider: INTERKAMSERVICE-AS
queried_at: 2026-03-10T07:35:22.031159
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "bva@mail.iks.ru", "as": 42742, "asname": "INTERKAMSERVICE-AS", "ascountry": "RU", "assource": "", "network": "91.189.232.0/21", "threatfeeds": {}}


indicator: 91.191.179.107
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 91.191.176.0/22
hosting_provider: PURTEL-AS # Upstream
queried_at: 2026-03-10T07:35:23.381235
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@purtel.com", "as": 62336, "asname": "PURTEL-AS # Upstream", "ascountry": "DE", "assource": "", "network": "91.191.176.0/22", "threatfeeds": {}}


indicator: 91.194.11.162
indicator_type: ipv4
source: dshield
country: CA
reverse_dns: 91.194.11.0/24
hosting_provider: TANGRAM-CANADA-INC
queried_at: 2026-03-10T07:35:24.672723
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@tangram.biz", "as": 53363, "asname": "TANGRAM-CANADA-INC", "ascountry": "CA", "assource": "", "network": "91.194.11.0/24", "threatfeeds": {}}


indicator: 91.203.242.66
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 91.203.240.0/22
hosting_provider: ABNTC-NET
queried_at: 2026-03-10T07:35:28.895473
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abn@abn-telecom.ru", "as": 47335, "asname": "ABNTC-NET", "ascountry": "RU", "assource": "", "network": "91.203.240.0/22", "threatfeeds": {}}


indicator: 91.206.178.111
indicator_type: ipv4
source: dshield
country: PL
reverse_dns: 91.206.178.0/23
hosting_provider: ARTNET
queried_at: 2026-03-10T07:35:30.198267
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@artnet.pl", "as": 197155, "asname": "ARTNET", "ascountry": "PL", "assource": "", "network": "91.206.178.0/23", "threatfeeds": {}}


indicator: 91.208.197.28
indicator_type: ipv4
source: dshield
country: MD
reverse_dns: 91.208.197.0/24
hosting_provider: ALEXHOST
queried_at: 2026-03-10T07:35:31.417787
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@alexhost.com", "as": 200019, "asname": "ALEXHOST", "ascountry": "MD", "assource": "", "network": "91.208.197.0/24", "threatfeeds": {}}


indicator: 91.208.206.238
indicator_type: ipv4
source: dshield
country: MD
reverse_dns: 91.208.206.0/24
hosting_provider: ALEXHOST
queried_at: 2026-03-10T07:35:32.724132
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@alexhost.com", "as": 200019, "asname": "ALEXHOST", "ascountry": "MD", "assource": "", "network": "91.208.206.0/24", "threatfeeds": {}}


indicator: 91.208.75.12
indicator_type: ipv4
source: dshield
country: RO
reverse_dns: 91.208.75.0/24
hosting_provider: NAV NAV Communications
queried_at: 2026-03-10T07:35:34.057705
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@nav.ro", "as": 6718, "asname": "NAV NAV Communications", "ascountry": "RO", "assource": "", "network": "91.208.75.0/24", "threatfeeds": {"blocklistde22": {"lastseen": "2022-10-15", "firstseen": "2022-10-14"}, "torexit": {"lastseen": "2022-10-20", "firstseen": "2022-09-21"}}}


indicator: 91.208.75.153
indicator_type: ipv4
source: dshield
country: RO
reverse_dns: 91.208.75.0/24
hosting_provider: NAV NAV Communications
queried_at: 2026-03-10T07:35:35.366547
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@nav.ro", "as": 6718, "asname": "NAV NAV Communications", "ascountry": "RO", "assource": "", "network": "91.208.75.0/24", "threatfeeds": {"alltor": {"lastseen": "2025-11-06", "firstseen": "2025-02-04"}, "blocklistde22": {"lastseen": "2025-11-06", "firstseen": "2022-11-11"}, "forumspam": {"lastseen": "2025-11-06", "firstseen": "2022-10-14"}, "myip": {"lastseen": "2025-11-06", "fi


indicator: 91.211.248.206
indicator_type: ipv4
source: dshield
country: NL
reverse_dns: 91.211.248.0/24
hosting_provider: ON-LINE-DATA Server location - Netherlands, Dronten
queried_at: 2026-03-10T07:35:38.397016
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@novoserve.com", "as": 204601, "asname": "ON-LINE-DATA Server location - Netherlands, Dronten", "ascountry": "NL", "assource": "", "network": "91.211.248.0/24", "threatfeeds": {}}


indicator: 91.212.166.146
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 91.212.166.0/24
hosting_provider: PROTON66
queried_at: 2026-03-10T07:35:39.724151
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@proton66.ru", "as": 198953, "asname": "PROTON66", "ascountry": "RU", "assource": "", "network": "91.212.166.0/24", "threatfeeds": {}}


indicator: 91.215.155.27
indicator_type: ipv4
source: dshield
country: UA
reverse_dns: 91.215.155.0/24
hosting_provider: ITL-BG
queried_at: 2026-03-10T07:35:44.971414
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@uaservers.net", "as": 59729, "asname": "ITL-BG", "ascountry": "UA", "assource": "", "network": "91.215.155.0/24", "threatfeeds": {}}


indicator: 91.218.244.153
indicator_type: ipv4
source: dshield
country: NL
reverse_dns: 91.218.244.0/24
hosting_provider: HOSTKEY-RU-AS
queried_at: 2026-03-10T07:35:46.190878
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@exitec.de", "as": 50867, "asname": "HOSTKEY-RU-AS", "ascountry": "NL", "assource": "", "network": "91.218.244.0/24", "threatfeeds": {"forumspam": {"lastseen": "2021-10-23", "firstseen": "2021-10-22"}, "openresolver": {"lastseen": "2022-01-06", "firstseen": "2021-12-11"}}}


indicator: 91.223.3.141
indicator_type: ipv4
source: dshield
country: PL
reverse_dns: 91.223.3.0/24
hosting_provider: MEVSPACE
queried_at: 2026-03-10T07:35:47.486722
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@skynode.pl", "as": 201814, "asname": "MEVSPACE", "ascountry": "PL", "assource": "", "network": "91.223.3.0/24", "threatfeeds": {}}


indicator: 91.230.49.1
indicator_type: ipv4
source: dshield
country: NL
reverse_dns: 91.230.49.0/24
hosting_provider: SPECTRAIP SpectraIP B.V.
queried_at: 2026-03-10T07:35:51.656878
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@spectraip.net", "as": 62068, "asname": "SPECTRAIP SpectraIP B.V.", "ascountry": "NL", "assource": "", "network": "91.230.49.0/24", "threatfeeds": {"emergingthreats": {"lastseen": "2025-04-03", "firstseen": "2025-03-03"}}}


indicator: 91.231.186.25
indicator_type: ipv4
source: dshield
country: GB
reverse_dns: 91.231.186.0/24
hosting_provider: CLOUVIDER Clouvider - Global ASN
queried_at: 2026-03-10T07:35:52.947192
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@clouvider.net", "as": 62240, "asname": "CLOUVIDER Clouvider - Global ASN", "ascountry": "GB", "assource": "", "network": "91.231.186.0/24", "threatfeeds": {}}


indicator: 91.234.104.220
indicator_type: ipv4
source: dshield
country: FR
reverse_dns: 91.234.104.0/22
hosting_provider: APPLIWAVE
queried_at: 2026-03-10T07:35:54.231962
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "support@appliwave.com", "as": 200780, "asname": "APPLIWAVE", "ascountry": "FR", "assource": "", "network": "91.234.104.0/22", "threatfeeds": {}}


indicator: 91.234.33.48
indicator_type: ipv4
source: dshield
country: UA
reverse_dns: 91.234.32.0/22
hosting_provider: THEHOST-AS
queried_at: 2026-03-10T07:35:55.531258
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@thehost.ua", "as": 56485, "asname": "THEHOST-AS", "ascountry": "UA", "assource": "", "network": "91.234.32.0/22", "threatfeeds": {"rosti": {"lastseen": "2024-12-13", "firstseen": "2024-12-04"}}}


indicator: 91.235.142.33
indicator_type: ipv4
source: dshield
country: UA
reverse_dns: 91.235.142.0/24
hosting_provider: YURTEH-AS
queried_at: 2026-03-10T07:35:56.817710
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "hostmaster@v-sys.org", "as": 30860, "asname": "YURTEH-AS", "ascountry": "UA", "assource": "", "network": "91.235.142.0/24", "threatfeeds": {}}


indicator: 91.239.17.22
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 91.239.16.0/22
hosting_provider: TELECOMRUNET
queried_at: 2026-03-10T07:35:58.120475
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "it@evo73.ru", "as": 50716, "asname": "TELECOMRUNET", "ascountry": "RU", "assource": "", "network": "91.239.16.0/22", "threatfeeds": {"blocklistde22": {"lastseen": "2024-07-26", "firstseen": "2024-07-25"}}}


indicator: 91.240.118.2
indicator_type: ipv4
source: dshield
country: HK
reverse_dns: 91.240.118.0/24
hosting_provider: CHANGWAY-AS
queried_at: 2026-03-10T07:35:59.456499
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "noc@ameurotel.com", "as": 57523, "asname": "CHANGWAY-AS", "ascountry": "HK", "assource": "", "network": "91.240.118.0/24", "threatfeeds": {"rosti": {"lastseen": "2025-10-16", "firstseen": "2025-10-16"}, "threatview": {"lastseen": "2025-03-25", "firstseen": "2025-03-11"}}}


indicator: 91.241.5.44
indicator_type: ipv4
source: dshield
country: PL
reverse_dns: 91.241.5.0/24
hosting_provider: OPEGIEKA-
queried_at: 2026-03-10T07:36:00.746955
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "ripe@ipartners.pl", "as": 2115, "asname": "OPEGIEKA-", "ascountry": "PL", "assource": "", "network": "91.241.5.0/24", "threatfeeds": {}}


indicator: 91.244.14.115
indicator_type: ipv4
source: dshield
country: UA
reverse_dns: 91.244.0.0/18
hosting_provider: MCLAUT-AS
queried_at: 2026-03-10T07:36:02.043067
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@mclaut.com", "as": 25133, "asname": "MCLAUT-AS", "ascountry": "UA", "assource": "", "network": "91.244.0.0/18", "threatfeeds": {}}


indicator: 91.244.255.107
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 91.244.255.0/24
hosting_provider: ASSKYNETWORK - SAS -
queried_at: 2026-03-10T07:36:03.343507
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "noc@skynet-kazan.com", "as": 31566, "asname": "ASSKYNETWORK - SAS -", "ascountry": "RU", "assource": "", "network": "91.244.255.0/24", "threatfeeds": {}}


indicator: 91.245.225.85
indicator_type: ipv4
source: dshield
country: GB
reverse_dns: 91.245.225.0/24
hosting_provider: RETN-AS
queried_at: 2026-03-10T07:36:05.953379
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@retn.net", "as": 9002, "asname": "RETN-AS", "ascountry": "GB", "assource": "", "network": "91.245.225.0/24", "threatfeeds": {}}


indicator: 91.245.255.87
indicator_type: ipv4
source: dshield
country: RO
reverse_dns: 91.245.255.0/24
hosting_provider: M247
queried_at: 2026-03-10T07:36:07.157154
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@m247.com", "as": 9009, "asname": "M247", "ascountry": "RO", "assource": "", "network": "91.245.255.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-02", "firstseen": "2025-02-04"}}}


indicator: 91.90.195.91
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 91.90.195.0/24
hosting_provider: GREENFLOID-AS
queried_at: 2026-03-10T07:36:47.917958
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@itldc.com", "as": 204957, "asname": "GREENFLOID-AS", "ascountry": "US", "assource": "", "network": "91.90.195.0/24", "threatfeeds": {"rosti": {"lastseen": "2025-03-03", "firstseen": "2025-03-03"}}}


indicator: 91.96.25.68
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 91.96.0.0/15
hosting_provider: EWETEL Cloppenburger Strasse 310
queried_at: 2026-03-10T07:36:49.246198
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ewetel.de", "as": 9145, "asname": "EWETEL Cloppenburger Strasse 310", "ascountry": "DE", "assource": "", "network": "91.96.0.0/15", "threatfeeds": {}}


indicator: 92.114.92.102
indicator_type: ipv4
source: dshield
country: IT
reverse_dns: 92.114.92.0/24
hosting_provider: ASSEFLOW
queried_at: 2026-03-10T07:36:55.771242
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@seflow.net", "as": 49367, "asname": "ASSEFLOW", "ascountry": "IT", "assource": "", "network": "92.114.92.0/24", "threatfeeds": {}}


indicator: 92.117.102.166
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 92.117.96.0/19
hosting_provider: VERSATEL
queried_at: 2026-03-10T07:36:57.097926
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@versatel.de", "as": 8881, "asname": "VERSATEL", "ascountry": "DE", "assource": "", "network": "92.117.96.0/19", "threatfeeds": {}}


indicator: 92.117.128.87
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 92.117.128.0/19
hosting_provider: VERSATEL
queried_at: 2026-03-10T07:36:59.789571
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@versatel.de", "as": 8881, "asname": "VERSATEL", "ascountry": "DE", "assource": "", "network": "92.117.128.0/19", "threatfeeds": {}}


indicator: 92.117.162.45
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 92.117.160.0/19
hosting_provider: VERSATEL
queried_at: 2026-03-10T07:37:01.149344
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@versatel.de", "as": 8881, "asname": "VERSATEL", "ascountry": "DE", "assource": "", "network": "92.117.160.0/19", "threatfeeds": {}}


indicator: 92.117.216.55
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 92.117.192.0/19
hosting_provider: VERSATEL
queried_at: 2026-03-10T07:37:05.133079
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@versatel.de", "as": 8881, "asname": "VERSATEL", "ascountry": "DE", "assource": "", "network": "92.117.192.0/19", "threatfeeds": {"mastodon": {"lastseen": "2023-08-22", "firstseen": "2023-08-13"}}}


indicator: 92.117.22.134
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 92.117.0.0/19
hosting_provider: VERSATEL
queried_at: 2026-03-10T07:37:06.483348
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@versatel.de", "as": 8881, "asname": "VERSATEL", "ascountry": "DE", "assource": "", "network": "92.117.0.0/19", "threatfeeds": {}}


indicator: 92.117.227.79
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 92.117.224.0/19
hosting_provider: VERSATEL
queried_at: 2026-03-10T07:37:09.110970
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@versatel.de", "as": 8881, "asname": "VERSATEL", "ascountry": "DE", "assource": "", "network": "92.117.224.0/19", "threatfeeds": {}}


indicator: 92.118.112.28
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 92.118.112.0/24
hosting_provider: GIR-AS
queried_at: 2026-03-10T07:37:13.098509
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@fionera.de", "as": 207713, "asname": "GIR-AS", "ascountry": "RU", "assource": "", "network": "92.118.112.0/24", "threatfeeds": {}}


indicator: 92.119.129.194
indicator_type: ipv4
source: dshield
country: CA
reverse_dns: 92.119.129.0/24
hosting_provider: SERVER-MANIA
queried_at: 2026-03-10T07:37:14.445933
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "support@servermania.com", "as": 55286, "asname": "SERVER-MANIA", "ascountry": "CA", "assource": "", "network": "92.119.129.0/24", "threatfeeds": {"blocklistde22": {"lastseen": "2022-10-17", "firstseen": "2022-10-15"}, "forumspam": {"lastseen": "2022-10-19", "firstseen": "2022-10-15"}, "torexit": {"lastseen": "2022-10-31", "firstseen": "2022-10-10"}}}


indicator: 92.119.178.42
indicator_type: ipv4
source: dshield
country: RO
reverse_dns: 92.119.178.0/24
hosting_provider: M247
queried_at: 2026-03-10T07:37:15.805629
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@m247.com", "as": 9009, "asname": "M247", "ascountry": "RO", "assource": "", "network": "92.119.178.0/24", "threatfeeds": {}}


indicator: 92.124.115.104
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 92.124.64.0/18
hosting_provider: ROSTELECOM-AS
queried_at: 2026-03-10T07:37:17.121245
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@rt.ru", "as": 12389, "asname": "ROSTELECOM-AS", "ascountry": "RU", "assource": "", "network": "92.124.64.0/18", "threatfeeds": {}}


indicator: 92.194.58.16
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 92.192.0.0/13
hosting_provider: PLUSNET *****************
queried_at: 2026-03-10T07:37:18.673221
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@qsc.de", "as": 20676, "asname": "PLUSNET *****************", "ascountry": "DE", "assource": "", "network": "92.192.0.0/13", "threatfeeds": {}}


indicator: 92.200.204.73
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 92.200.0.0/16
hosting_provider: PLUSNET *****************
queried_at: 2026-03-10T07:37:20.048100
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@qsc.de", "as": 20676, "asname": "PLUSNET *****************", "ascountry": "DE", "assource": "", "network": "92.200.0.0/16", "threatfeeds": {}}


indicator: 92.201.171.22
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 92.201.128.0/17
hosting_provider: PLUSNET *****************
queried_at: 2026-03-10T07:37:21.389000
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@qsc.de", "as": 20676, "asname": "PLUSNET *****************", "ascountry": "DE", "assource": "", "network": "92.201.128.0/17", "threatfeeds": {}}


indicator: 92.25.30.226
indicator_type: ipv4
source: shodan
reverse_dns: host-92-25-30-226.as13285.net
queried_at: 2026-03-10T07:54:18.801120
raw_data:
  {"ports": [7443], "vulns": [], "hostnames": ["host-92-25-30-226.as13285.net"], "tags": [], "cpes": []}


indicator: 92.252.111.177
indicator_type: ipv4
source: shodan
reverse_dns: dyndsl-092-252-111-177.ewe-ip-backbone.de
queried_at: 2026-03-10T07:54:20.534961
raw_data:
  {"ports": [8089], "vulns": [], "hostnames": ["dyndsl-092-252-111-177.ewe-ip-backbone.de"], "tags": [], "cpes": []}


indicator: 92.252.112.182
indicator_type: ipv4
source: shodan
reverse_dns: dyndsl-092-252-112-182.ewe-ip-backbone.de
queried_at: 2026-03-10T07:54:22.168787
raw_data:
  {"ports": [8089], "vulns": [], "hostnames": ["dyndsl-092-252-112-182.ewe-ip-backbone.de"], "tags": [], "cpes": []}


indicator: 92.53.97.112
indicator_type: ipv4
source: shodan
city: starttls,self-signed
queried_at: 2026-03-10T07:54:39.006182
raw_data:
  {"ports": [21, 22, 25, 80, 110, 443, 465, 587, 993, 995, 7777, 10050], "vulns": ["CVE-2024-39929", "CVE-2025-67896", "CVE-2025-30232", "CVE-2023-51766"], "hostnames": [], "tags": ["starttls", "self-signed"], "cpes": ["cpe:/a:exim:exim:4.97", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx", "cpe:/a:f5:nginx:1.28.0", "cpe:/a:openbsd:openssh:9.6p1"]}

hosting_provider:
  cpe:/a:exim:exim:4.97,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx,cpe:/a:f5:nginx:1.28.0,cpe:/a:openbsd:openssh:9.6p1


indicator: 93.185.167.134
indicator_type: ipv4
source: shodan
city: eol-product
queried_at: 2026-03-10T07:54:52.250466
raw_data:
  {"ports": [22, 123, 2083, 8087], "vulns": ["CVE-2021-23017", "CVE-2025-23419", "CVE-2021-3618", "CVE-2023-44487"], "hostnames": [], "tags": ["eol-product"], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/a:ntp:ntp:3", "cpe:/o:linux:linux_kernel", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx:1.18.0"]}

hosting_provider:
  cpe:/a:openbsd:openssh:8.9p1,cpe:/a:ntp:ntp:3,cpe:/o:linux:linux_kernel,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx:1.18.0


indicator: 93.198.178.208
indicator_type: ipv4
source: shodan
city: self-signed
queried_at: 2026-03-10T07:54:54.039631
raw_data:
  {"ports": [443, 5060], "vulns": [], "hostnames": ["fritz.box", "myfritz.box", "www.myfritz.box", "bt4w3xxypxezce6u.myfritz.net", "TaS27bGEIS-Nussberg.TelanlrIs.de", "p5dc6b2d0.dip0.t-ipconnect.de", "www.fritz.box"], "tags": ["self-signed"], "cpes": []}

reverse_dns:
  fritz.box,myfritz.box,www.myfritz.box,bt4w3xxypxezce6u.myfritz.net,TaS27bGEIS-Nussberg.TelanlrIs.de,p5dc6b2d0.dip0.t-ipconnect.de,www.fritz.box


indicator: 93.200.244.171
indicator_type: ipv4
source: shodan
reverse_dns: p5dc8f4ab.dip0.t-ipconnect.de
queried_at: 2026-03-10T07:55:00.630674
raw_data:
  {"ports": [5060], "vulns": [], "hostnames": ["p5dc8f4ab.dip0.t-ipconnect.de"], "tags": [], "cpes": []}


indicator: 93.218.68.148
indicator_type: ipv4
source: shodan
reverse_dns: p5dda4494.dip0.t-ipconnect.de
queried_at: 2026-03-10T07:55:15.649812
raw_data:
  {"ports": [8089], "vulns": [], "hostnames": ["p5dda4494.dip0.t-ipconnect.de"], "tags": [], "cpes": []}


indicator: 92.217.239.30
indicator_type: ipv4
source: otx
country: DE
city: Freiberg
hosting_provider: ioc,phishing,Nextray,cyber security,malicious
queried_at: 2026-03-10T07:55:18.843741
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Freiberg", "asn": "AS3209 vodafone gmbh", "indicator": "92.217.239.30", "tags": ["ioc", "phishing", "Nextray", "cyber security", "malicious"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS_i_am)"


indicator: 92.225.117.249
indicator_type: ipv4
source: otx
country: DE
hosting_provider: ioc,phishing,Nextray,cyber security,malicious
queried_at: 2026-03-10T07:55:20.456313
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS6805 telefonica germany gmbh & co.ohg", "indicator": "92.225.117.249", "tags": ["ioc", "phishing", "Nextray", "cyber security", "malicious"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created


indicator: 92.242.62.131
indicator_type: ipv4
source: otx
country: US
city: Redwood City
hosting_provider: stealer,russia,actinium,mstic,deviceid,custom vbs,cluster,explorer,iocs,microsoft
queried_at: 2026-03-10T07:55:23.337641
raw_data:
  {"pulse_count": 17, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Redwood City", "asn": "AS201192 dilmax corporation", "indicator": "92.242.62.131", "tags": ["stealer", "russia", "actinium", "mstic", "deviceid", "custom vbs", "cluster", "explorer", "iocs", "microsoft", "pterodo", "c server", "later", "armageddon", "pe file", "text file", "hta file", "install", "geopolitical conflict", "gamaredon group", "wildfire", "alertinfo", "bat file", "symantec", "pt

reverse_dns:
  pmta5.com,ninaletta-psy.ru,universitymilitary.site,ceruleglyph.site,localcollc.com,manage-applcid.secure2id.stunbic.org,www.manage-appleid.support.lmowoman.com,www.lmowoman.com,lmowoman.com,manage-appleid.support.lmowoman.com


indicator: 92.246.141.75
indicator_type: ipv4
source: otx
country: RU
city: Nizhniy Novgorod
queried_at: 2026-03-10T07:55:25.021772
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": "Nizhniy Novgorod", "asn": "AS8744 ooo mediaseti", "indicator": "92.246.141.75", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 92.246.87.44
indicator_type: ipv4
source: otx
country: DE
queried_at: 2026-03-10T07:55:26.542898
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS207918 marcel edler trading as optimate-server", "indicator": "92.246.87.44", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 92.248.35.17
indicator_type: ipv4
source: otx
country: AT
city: Vienna
reverse_dns: tompelab.spdns.org
hosting_provider: ioc,phishing,Nextray,cyber security,malicious
queried_at: 2026-03-10T07:55:28.242831
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Austria", "country_code": "AT", "city": "Vienna", "asn": "AS8447 a1 telekom austria ag", "indicator": "92.248.35.17", "tags": ["ioc", "phishing", "Nextray", "cyber security", "malicious"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS_i


indicator: 92.25.30.226
indicator_type: ipv4
source: otx
country: GB
city: Southampton
hosting_provider: ioc,phishing,Nextray,cyber security,malicious
queried_at: 2026-03-10T07:55:32.652604
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": "Southampton", "asn": "AS13285 talktalk communications", "indicator": "92.25.30.226", "tags": ["ioc", "phishing", "Nextray", "cyber security", "malicious"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created b


indicator: 92.252.111.177
indicator_type: ipv4
source: otx
country: DE
city: Ibbenbueren
reverse_dns: n0bwtwpfgcqsagbx.myfritz.net
hosting_provider: ioc,phishing,Nextray,cyber security,malicious
queried_at: 2026-03-10T07:55:34.227531
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Ibbenbueren", "asn": "AS9145 ewe tel gmbh", "indicator": "92.252.111.177", "tags": ["ioc", "phishing", "Nextray", "cyber security", "malicious"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS_i_a


indicator: 92.252.112.182
indicator_type: ipv4
source: otx
country: DE
city: Ibbenbueren
hosting_provider: ioc,phishing,Nextray,cyber security,malicious
queried_at: 2026-03-10T07:55:36.171944
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Ibbenbueren", "asn": "AS9145 ewe tel gmbh", "indicator": "92.252.112.182", "tags": ["ioc", "phishing", "Nextray", "cyber security", "malicious"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS_i_a


indicator: 92.255.57.221
indicator_type: ipv4
source: otx
country: HK
hosting_provider: elf,coinminer,vo1d,ransomware,pump,Lumma,mirai,germany,mozi link,encrypted
queried_at: 2026-03-10T07:55:37.872864
raw_data:
  {"pulse_count": 4, "reputation": 0, "country": "Hong Kong", "country_code": "HK", "city": null, "asn": "AS57523 chang way technologies co. limited", "indicator": "92.255.57.221", "tags": ["elf", "coinminer", "vo1d", "ransomware", "pump", "Lumma", "mirai", "germany", "mozi link", "encrypted", "SmartLoader", "connectwise", "akira", "date", "steam", "friday", "malware", "mexico", "remcos", "india", "RemcosRAT", "ClickFix", "exe", "panama", "mips", "curl", "screenconnect", "canada", "grouped", "wget


indicator: 92.255.57.224
indicator_type: ipv4
source: otx
country: HK
queried_at: 2026-03-10T07:55:39.492719
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Hong Kong", "country_code": "HK", "city": null, "asn": "AS57523 chang way technologies co. limited", "indicator": "92.255.57.224", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 92.255.85.2
indicator_type: ipv4
source: otx
country: HK
hosting_provider: reversed,elf,sh,sshdkit,Lumma,mirai,cvss,germany,booking,mozi link
queried_at: 2026-03-10T07:55:41.144104
raw_data:
  {"pulse_count": 10, "reputation": 0, "country": "Hong Kong", "country_code": "HK", "city": null, "asn": "AS57523 chang way technologies co. limited", "indicator": "92.255.85.2", "tags": ["reversed", "elf", "sh", "sshdkit", "Lumma", "mirai", "cvss", "germany", "booking", "mozi link", "interlock", "encrypted", "masslogger", "SmartLoader", "connectwise", "date", "bruteforce", "malware", "mexico", "bangladesh", "remcos", "RemcosRAT", "ClickFix", "exe", "mips", "panama", "curl", "screenconnect", "apr


indicator: 92.32.138.220
indicator_type: ipv4
source: otx
country: SE
city: Falkenberg
hosting_provider: ioc,phishing,Nextray,cyber security,malicious
queried_at: 2026-03-10T07:55:51.168987
raw_data:
  {"pulse_count": 30, "reputation": 0, "country": "Sweden", "country_code": "SE", "city": "Falkenberg", "asn": "AS2119 telenor norge as", "indicator": "92.32.138.220", "tags": ["ioc", "phishing", "Nextray", "cyber security", "malicious"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS_i_


indicator: 92.34.148.151
indicator_type: ipv4
source: otx
country: SE
city: Uppsala
hosting_provider: ioc,phishing,Nextray,cyber security,malicious
queried_at: 2026-03-10T07:55:52.823458
raw_data:
  {"pulse_count": 30, "reputation": 0, "country": "Sweden", "country_code": "SE", "city": "Uppsala", "asn": "AS2119 telenor norge as", "indicator": "92.34.148.151", "tags": ["ioc", "phishing", "Nextray", "cyber security", "malicious"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS_i_am)


indicator: 92.35.20.235
indicator_type: ipv4
source: otx
country: SE
city: Linköping
hosting_provider: ioc,phishing,Nextray,cyber security,malicious
queried_at: 2026-03-10T07:55:54.610599
raw_data:
  {"pulse_count": 39, "reputation": 0, "country": "Sweden", "country_code": "SE", "city": "Link\u00f6ping", "asn": "AS2119 telenor norge as", "indicator": "92.35.20.235", "tags": ["ioc", "phishing", "Nextray", "cyber security", "malicious"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs - 202312212158 - ANIA Threat Feeds - IP Segment 8", "IOCs - 202312162330 - ANIA Threat Feeds - IP Segment 8", "IOCs - 202

reverse_dns:
  akkoma.xn--pikabl-0xa.se,www.ferretporn.se,owncast.ferretporn.se,nitter.ferretporn.se,pixelfed.xn--pikabl-0xa.se,kaptensgatan.synology.me,kaptensgatan.direct.quickconnect.to


indicator: 92.36.136.186
indicator_type: ipv4
source: otx
country: BA
city: Sarajevo
queried_at: 2026-03-10T07:55:56.488155
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Bosnia and Herzegovina", "country_code": "BA", "city": "Sarajevo", "asn": "AS9146 bh telecom d.d. sarajevo", "indicator": "92.36.136.186", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 1, "passive_dns_count": 0, "malware_samples": ["fdcdb0ce47802fce665ef0a438b368fc2b6bf3430d174d4aac3ce5c7461223d7"], "passive_dns": []}


indicator: 92.38.188.248
indicator_type: ipv4
source: otx
country: RU
city: Khabarovsk
reverse_dns: senectiong.com,fabrorahmiarral.com,maps.317o.com,map.317o.com,www.317o.com
hosting_provider: ioc,phishing,Nextray,cyber security,malicious
queried_at: 2026-03-10T07:55:58.936834
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": "Khabarovsk", "asn": "AS202422 g-core labs s.a.", "indicator": "92.38.188.248", "tags": ["ioc", "phishing", "Nextray", "cyber security", "malicious"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse cre


indicator: 92.43.74.96
indicator_type: ipv4
source: otx
country: DK
queried_at: 2026-03-10T07:56:00.458866
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Denmark", "country_code": "DK", "city": null, "asn": "AS42789 gvd antenneforening", "indicator": "92.43.74.96", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 92.53.97.112
indicator_type: ipv4
source: otx
country: RU
hosting_provider: stealer,russia,actinium,mstic,deviceid,custom vbs,cluster,explorer,iocs,microsoft
queried_at: 2026-03-10T07:56:02.968122
raw_data:
  {"pulse_count": 14, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS9123 timeweb ltd.", "indicator": "92.53.97.112", "tags": ["stealer", "russia", "actinium", "mstic", "deviceid", "custom vbs", "cluster", "explorer", "iocs", "microsoft", "pterodo", "c server", "later", "armageddon", "pe file", "text file", "hta file", "install", "geopolitical conflict", "gamaredon group", "wildfire", "alertinfo", "bat file", "symantec", "pteranodon", "dword", "user

reverse_dns:
  xn--b1add.xn----8sbpzhkicp.xn--p1ai,www.xn----8sbpzhkicp.xn--p1ai,xn----8sbpzhkicp.xn--p1ai,securego-volksbank.ddns.net,inccttejr.redirectme.net,ctt-tracking.ddns.net,moskjk3sqd65f6s2d.redirectme.net,vr-de.ddns.net,pwdb.info


indicator: 92.60.47.178
indicator_type: ipv4
source: otx
country: GB
hosting_provider: ,malware,ransomware
queried_at: 2026-03-10T07:56:04.520348
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": null, "asn": "AS3170 etheroute ltd", "indicator": "92.60.47.178", "tags": ["", "malware", "ransomware"], "pulses": ["ThreatFix", "Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 93.177.144.20
indicator_type: ipv4
source: otx
country: GE
city: K'alak'i T'bilisi
queried_at: 2026-03-10T07:56:06.025387
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Georgia", "country_code": "GE", "city": "K'alak'i T'bilisi", "asn": "AS16010 magticom ltd.", "indicator": "93.177.144.20", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 93.181.22.41
indicator_type: ipv4
source: otx
country: DE
city: Rendsburg
reverse_dns: ktethgyqqcwec89i.myfritz.net
hosting_provider: ioc,phishing,Nextray,cyber security,malicious
queried_at: 2026-03-10T07:56:07.831926
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Rendsburg", "asn": "AS42965 net services beteiligungsgesellschaft mbh trading as net services gmbh & co. kg", "indicator": "93.181.22.41", "tags": ["ioc", "phishing", "Nextray", "cyber security", "malicious"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse 


indicator: 93.181.30.10
indicator_type: ipv4
source: otx
country: DE
city: Geesthacht
hosting_provider: ioc,phishing,Nextray,cyber security,malicious
queried_at: 2026-03-10T07:56:09.548067
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Geesthacht", "asn": "AS42965 net services beteiligungsgesellschaft mbh trading as net services gmbh & co. kg", "indicator": "93.181.30.10", "tags": ["ioc", "phishing", "Nextray", "cyber security", "malicious"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse


indicator: 93.181.40.101
indicator_type: ipv4
source: otx
country: DE
city: Geesthacht
hosting_provider: ioc,phishing,Nextray,cyber security,malicious
queried_at: 2026-03-10T07:56:11.195491
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Geesthacht", "asn": "AS42965 net services beteiligungsgesellschaft mbh trading as net services gmbh & co. kg", "indicator": "93.181.40.101", "tags": ["ioc", "phishing", "Nextray", "cyber security", "malicious"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Puls


indicator: 93.183.93.208
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-03-10T07:56:13.260639
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS34580 ooo mediaseti", "indicator": "93.183.93.208", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 93.185.159.253
indicator_type: ipv4
source: otx
country: RU
reverse_dns: sendmail.lojapintar.com,mserv1.utensiliododia.com
queried_at: 2026-03-10T07:56:15.991432
raw_data:
  {"pulse_count": 8, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "ASNone ", "indicator": "93.185.159.253", "tags": ["path", "Malware/Credential Stealing Malware", "cobalt strike", "custom packer", "blackbasta", "sharepoint", "DarkGate", "Industries/All Industries", "ransomware", "black basta", "Malware/Black Basta", "malwaretype/Remote Access Trojan (RAT)", "malwaretype/Loader", "kill", "internal error", "malware/Ransomware", "tenant", "threattype/M

hosting_provider:
  path,Malware/Credential Stealing Malware,cobalt strike,custom packer,blackbasta,sharepoint,DarkGate,Industries/All Industries,ransomware,black basta


indicator: 93.185.167.134
indicator_type: ipv4
source: otx
country: RU
reverse_dns: international-equipements.com
queried_at: 2026-03-10T07:56:17.725120
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS48430 perviy tsod llc", "indicator": "93.185.167.134", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["international-equipements.com"]}


indicator: 93.198.178.208
indicator_type: ipv4
source: otx
country: DE
city: Iserlohn
reverse_dns: p3h1bvky3efaiqu9.myfritz.net
queried_at: 2026-03-10T07:56:21.096550
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Iserlohn", "asn": "AS3320 deutsche telekom ag", "indicator": "93.198.178.208", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["p3h1bvky3efaiqu9.myfritz.net"]}


indicator: 93.198.213.225
indicator_type: ipv4
source: otx
country: DE
city: Miltenberg
hosting_provider: ioc,phishing,Nextray,cyber security,malicious
queried_at: 2026-03-10T07:56:22.946312
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Miltenberg", "asn": "AS3320 deutsche telekom ag", "indicator": "93.198.213.225", "tags": ["ioc", "phishing", "Nextray", "cyber security", "malicious"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by R


indicator: 93.198.215.25
indicator_type: ipv4
source: otx
country: DE
city: Miltenberg
hosting_provider: ioc,phishing,Nextray,cyber security,malicious
queried_at: 2026-03-10T07:56:24.534717
raw_data:
  {"pulse_count": 34, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Miltenberg", "asn": "AS3320 deutsche telekom ag", "indicator": "93.198.215.25", "tags": ["ioc", "phishing", "Nextray", "cyber security", "malicious"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RV


indicator: 93.200.156.213
indicator_type: ipv4
source: otx
country: DE
city: Wehr
hosting_provider: ioc,phishing,Nextray,cyber security,malicious
queried_at: 2026-03-10T07:56:26.249307
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Wehr", "asn": "AS3320 deutsche telekom ag", "indicator": "93.200.156.213", "tags": ["ioc", "phishing", "Nextray", "cyber security", "malicious"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS_i_a


indicator: 93.200.244.171
indicator_type: ipv4
source: otx
country: DE
city: Westerburg
hosting_provider: ioc,phishing,Nextray,cyber security,malicious
queried_at: 2026-03-10T07:56:28.398059
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Westerburg", "asn": "AS3320 deutsche telekom ag", "indicator": "93.200.244.171", "tags": ["ioc", "phishing", "Nextray", "cyber security", "malicious"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by R


indicator: 93.200.79.60
indicator_type: ipv4
source: otx
country: DE
city: Orbis
hosting_provider: ioc,phishing,Nextray,cyber security,malicious
queried_at: 2026-03-10T07:56:29.958087
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Orbis", "asn": "AS3320 deutsche telekom ag", "indicator": "93.200.79.60", "tags": ["ioc", "phishing", "Nextray", "cyber security", "malicious"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS_i_am


indicator: 93.201.150.39
indicator_type: ipv4
source: otx
country: DE
city: Hagen
reverse_dns: sciphy.de,www.sciphy.de
hosting_provider: ioc,phishing,Nextray,cyber security,malicious
queried_at: 2026-03-10T07:56:31.632071
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Hagen", "asn": "AS3320 deutsche telekom ag", "indicator": "93.201.150.39", "tags": ["ioc", "phishing", "Nextray", "cyber security", "malicious"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS_i_a


indicator: 93.201.220.197
indicator_type: ipv4
source: otx
country: DE
city: Glewitz
hosting_provider: ioc,phishing,Nextray,cyber security,malicious
queried_at: 2026-03-10T07:56:33.259379
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Glewitz", "asn": "AS3320 deutsche telekom ag", "indicator": "93.201.220.197", "tags": ["ioc", "phishing", "Nextray", "cyber security", "malicious"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS_


indicator: 93.207.34.84
indicator_type: ipv4
source: otx
country: DE
city: Freiberg
hosting_provider: ioc,phishing,Nextray,cyber security,malicious
queried_at: 2026-03-10T07:56:34.883640
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Freiberg", "asn": "AS3320 deutsche telekom ag", "indicator": "93.207.34.84", "tags": ["ioc", "phishing", "Nextray", "cyber security", "malicious"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS_i


indicator: 93.215.195.154
indicator_type: ipv4
source: otx
country: DE
city: Bad Kreuznach
hosting_provider: ioc,phishing,Nextray,cyber security,malicious
queried_at: 2026-03-10T07:56:36.493807
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Bad Kreuznach", "asn": "AS3320 deutsche telekom ag", "indicator": "93.215.195.154", "tags": ["ioc", "phishing", "Nextray", "cyber security", "malicious"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created b


indicator: 93.216.188.64
indicator_type: ipv4
source: otx
country: DE
city: Zirzow
reverse_dns: mxtwd3etra8yddcb.myfritz.net
hosting_provider: ioc,phishing,Nextray,cyber security,malicious
queried_at: 2026-03-10T07:56:38.198941
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Zirzow", "asn": "AS3320 deutsche telekom ag", "indicator": "93.216.188.64", "tags": ["ioc", "phishing", "Nextray", "cyber security", "malicious"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS_i_


indicator: 93.216.189.36
indicator_type: ipv4
source: otx
country: DE
city: Neubrandenburg
hosting_provider: ioc,phishing,Nextray,cyber security,malicious
queried_at: 2026-03-10T07:56:39.853074
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Neubrandenburg", "asn": "AS3320 deutsche telekom ag", "indicator": "93.216.189.36", "tags": ["ioc", "phishing", "Nextray", "cyber security", "malicious"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created b


indicator: 93.216.189.98
indicator_type: ipv4
source: otx
country: DE
city: Neubrandenburg
hosting_provider: ioc,phishing,Nextray,cyber security,malicious
queried_at: 2026-03-10T07:56:41.545281
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Neubrandenburg", "asn": "AS3320 deutsche telekom ag", "indicator": "93.216.189.98", "tags": ["ioc", "phishing", "Nextray", "cyber security", "malicious"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created b


indicator: 93.218.68.148
indicator_type: ipv4
source: otx
country: DE
city: Bonn
hosting_provider: ioc,phishing,Nextray,cyber security,malicious
queried_at: 2026-03-10T07:56:43.899618
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Bonn", "asn": "AS3320 deutsche telekom ag", "indicator": "93.218.68.148", "tags": ["ioc", "phishing", "Nextray", "cyber security", "malicious"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS_i_am


indicator: 92.217.239.30
indicator_type: ipv4
source: abuseipdb
country: DE
city: 0
hosting_provider: Vodafone GmbH
queried_at: 2026-03-10T07:56:44.776246
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "DE", "isp": "Vodafone GmbH", "domain": "vodafone.de", "usage_type": "Fixed Line ISP", "last_reported": null, "categories": []}


indicator: 92.225.117.249
indicator_type: ipv4
source: abuseipdb
country: DE
city: 0
hosting_provider: Telefonica Germany GmbH & Co. OHG
queried_at: 2026-03-10T07:56:46.632030
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "DE", "isp": "Telefonica Germany GmbH & Co. OHG", "domain": "telefonica.de", "usage_type": "Fixed Line ISP", "last_reported": null, "categories": []}


indicator: 92.242.62.131
indicator_type: ipv4
source: abuseipdb
country: RU
city: 0
hosting_provider: Selectel Network
queried_at: 2026-03-10T07:56:48.432816
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RU", "isp": "Selectel Network", "domain": "selectel.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2023-09-19T11:16:12+00:00", "categories": []}


indicator: 92.246.141.75
indicator_type: ipv4
source: abuseipdb
country: DE
city: 0
hosting_provider: Prostie Reshenia LLC
queried_at: 2026-03-10T07:56:50.243303
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "DE", "isp": "Prostie Reshenia LLC", "domain": "webrocket.pro", "usage_type": null, "last_reported": null, "categories": []}


indicator: 92.246.87.44
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: PIO-Hosting GmbH
queried_at: 2026-03-10T07:56:52.132004
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "PIO-Hosting GmbH", "domain": "pio.hosting", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 92.248.35.17
indicator_type: ipv4
source: abuseipdb
country: AT
city: 0
hosting_provider: A1 Telekom Austria AG
queried_at: 2026-03-10T07:56:53.930842
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "AT", "isp": "A1 Telekom Austria AG", "domain": "a1.net", "usage_type": "Mobile ISP", "last_reported": null, "categories": []}


indicator: 92.252.111.177
indicator_type: ipv4
source: abuseipdb
country: DE
city: 0
hosting_provider: EWE TEL GmbH
queried_at: 2026-03-10T07:56:57.530355
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "DE", "isp": "EWE TEL GmbH", "domain": "ewe.com", "usage_type": "Fixed Line ISP", "last_reported": null, "categories": []}


indicator: 92.255.57.221
indicator_type: ipv4
source: abuseipdb
country: RU
city: 0
hosting_provider: Chang Way Technologies Co. Limited
queried_at: 2026-03-10T07:57:03.091758
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RU", "isp": "Chang Way Technologies Co. Limited", "domain": "changway.hk", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-08-29T03:03:07+00:00", "categories": []}


indicator: 92.255.85.2
indicator_type: ipv4
source: abuseipdb
country: RU
city: 0
hosting_provider: Chang Way Technologies Co. Limited
queried_at: 2026-03-10T07:57:10.402385
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RU", "isp": "Chang Way Technologies Co. Limited", "domain": "changway.hk", "usage_type": null, "last_reported": "2025-08-29T03:03:07+00:00", "categories": []}


indicator: 92.32.138.220
indicator_type: ipv4
source: abuseipdb
country: SE
city: 0
hosting_provider: Telenor Sverige AB
queried_at: 2026-03-10T07:57:12.339835
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "SE", "isp": "Telenor Sverige AB", "domain": "telenor.se", "usage_type": "Fixed Line ISP", "last_reported": null, "categories": []}


indicator: 92.35.20.235
indicator_type: ipv4
source: abuseipdb
country: SE
city: 0
hosting_provider: Telenor Sverige AB
queried_at: 2026-03-10T07:57:16.071105
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "SE", "isp": "Telenor Sverige AB", "domain": "telenor.se", "usage_type": "Fixed Line ISP", "last_reported": "2024-07-04T23:38:45+00:00", "categories": []}


indicator: 92.36.136.186
indicator_type: ipv4
source: abuseipdb
country: BA
city: 0
hosting_provider: BH Telecom d.d. Sarajevo
queried_at: 2026-03-10T07:57:17.831080
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "BA", "isp": "BH Telecom d.d. Sarajevo", "domain": "bhtelecom.ba", "usage_type": "Fixed Line ISP", "last_reported": null, "categories": []}


indicator: 92.38.188.248
indicator_type: ipv4
source: abuseipdb
country: RU
city: 0
hosting_provider: EdgeCenter LLC
queried_at: 2026-03-10T07:57:19.832881
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RU", "isp": "EdgeCenter LLC", "domain": "edgecenter.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2022-11-17T05:30:52+00:00", "categories": []}


indicator: 92.43.74.96
indicator_type: ipv4
source: abuseipdb
country: DK
city: 0
hosting_provider: Hjorring Antenneselskab
queried_at: 2026-03-10T07:57:21.484176
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "DK", "isp": "Hjorring Antenneselskab", "domain": "has.dk", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 92.53.97.112
indicator_type: ipv4
source: abuseipdb
country: RU
city: 0
hosting_provider: JSC TIMEWEB
queried_at: 2026-03-10T07:57:23.439791
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RU", "isp": "JSC TIMEWEB", "domain": "timeweb.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2021-08-18T11:51:53+00:00", "categories": []}


indicator: 92.60.47.178
indicator_type: ipv4
source: abuseipdb
country: GB
city: 0
hosting_provider: Shropshire Online Solutions Ltd
queried_at: 2026-03-10T07:57:25.187326
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "GB", "isp": "Shropshire Online Solutions Ltd", "domain": "nodemasters.co.uk", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 92.217.239.30
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: Vodafone GmbH
queried_at: 2026-03-10T07:57:27.150673
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "DE", "as_owner": "Vodafone GmbH", "asn": 3209, "network": "92.216.0.0/14", "last_analysis_date": 1730080566}


indicator: 92.225.117.249
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: Telefonica Germany
queried_at: 2026-03-10T07:57:47.512478
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "DE", "as_owner": "Telefonica Germany", "asn": 6805, "network": "92.224.0.0/13", "last_analysis_date": 1730080565}


indicator: 92.242.62.131
indicator_type: ipv4
source: virustotal
country: RU
hosting_provider: JSC Selectel
queried_at: 2026-03-10T07:58:07.742771
raw_data:
  {"malicious": 1, "suspicious": 0, "harmless": 59, "undetected": 34, "reputation": 0, "country": "RU", "as_owner": "JSC Selectel", "asn": 61976, "network": "92.242.62.0/23", "last_analysis_date": 1773031113}


indicator: 92.246.141.75
indicator_type: ipv4
source: virustotal
country: DE
queried_at: 2026-03-10T07:58:28.078931
raw_data:
  {"malicious": 2, "suspicious": 0, "harmless": 58, "undetected": 34, "reputation": -1, "country": "DE", "as_owner": "", "asn": 0, "network": "", "last_analysis_date": 1772726261}


indicator: 92.246.87.44
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: PIO-Hosting GmbH
queried_at: 2026-03-10T07:58:48.401544
raw_data:
  {"malicious": 5, "suspicious": 0, "harmless": 57, "undetected": 32, "reputation": 0, "country": "DE", "as_owner": "PIO-Hosting GmbH", "asn": 198584, "network": "92.246.87.0/24", "last_analysis_date": 1766235252}


indicator: 92.248.35.17
indicator_type: ipv4
source: virustotal
country: AT
hosting_provider: Telekom Austria
queried_at: 2026-03-10T07:59:09.032000
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "AT", "as_owner": "Telekom Austria", "asn": 8447, "network": "92.248.0.0/17", "last_analysis_date": 1730080539}


indicator: 92.25.30.226
indicator_type: ipv4
source: virustotal
country: GB
hosting_provider: TalkTalk
queried_at: 2026-03-10T07:59:29.292126
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "GB", "as_owner": "TalkTalk", "asn": 13285, "network": "92.16.0.0/12", "last_analysis_date": 1730080538}


indicator: 92.252.111.177
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: EWE-Tel GmbH
queried_at: 2026-03-10T07:59:49.932566
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "DE", "as_owner": "EWE-Tel GmbH", "asn": 9145, "network": "92.252.0.0/17", "last_analysis_date": 1730080528}


indicator: 92.252.112.182
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: EWE-Tel GmbH
queried_at: 2026-03-10T08:00:10.458291
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "DE", "as_owner": "EWE-Tel GmbH", "asn": 9145, "network": "92.252.0.0/17", "last_analysis_date": 1748844147}


indicator: 92.255.57.221
indicator_type: ipv4
source: virustotal
country: HK
queried_at: 2026-03-10T08:00:30.935413
raw_data:
  {"malicious": 16, "suspicious": 0, "harmless": 48, "undetected": 30, "reputation": -61, "country": "HK", "as_owner": "", "asn": 0, "network": "", "last_analysis_date": 1772736616}


indicator: 92.217.239.30
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 92.216.0.0/14
hosting_provider: VODANET International IP-Backbone of Vodafone
queried_at: 2026-03-10T08:00:51.370198
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@arcor-ip.de", "as": 3209, "asname": "VODANET International IP-Backbone of Vodafone", "ascountry": "DE", "assource": "", "network": "92.216.0.0/14", "threatfeeds": {}}


indicator: 92.225.117.249
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 92.224.0.0/13
hosting_provider: TDDE-ASN1
queried_at: 2026-03-10T08:00:52.681349
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse.de@telefonica.com", "as": 6805, "asname": "TDDE-ASN1", "ascountry": "DE", "assource": "", "network": "92.224.0.0/13", "threatfeeds": {}}


indicator: 92.242.62.131
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 92.242.62.0/23
hosting_provider: DILMAX
queried_at: 2026-03-10T08:00:54.111791
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "support@neoserver.site", "as": 201192, "asname": "DILMAX", "ascountry": "US", "assource": "", "network": "92.242.62.0/23", "threatfeeds": {}}


indicator: 92.246.87.44
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 92.246.87.0/24
hosting_provider: OS
queried_at: 2026-03-10T08:00:57.537147
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@optimate-server.de", "as": 207918, "asname": "OS", "ascountry": "DE", "assource": "", "network": "92.246.87.0/24", "threatfeeds": {}}


indicator: 92.248.35.17
indicator_type: ipv4
source: dshield
country: AT
reverse_dns: 92.248.0.0/17
hosting_provider: A1TELEKOM-AT A1 Telekom Austria AG
queried_at: 2026-03-10T08:00:58.866705
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@a1.at", "as": 8447, "asname": "A1TELEKOM-AT A1 Telekom Austria AG", "ascountry": "AT", "assource": "", "network": "92.248.0.0/17", "threatfeeds": {}}


indicator: 92.25.30.226
indicator_type: ipv4
source: dshield
country: GB
reverse_dns: 92.24.0.0/14
hosting_provider: OPALTELECOM-AS TalkTalk Communications Limited
queried_at: 2026-03-10T08:01:00.205243
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@talktalkplc.com", "as": 13285, "asname": "OPALTELECOM-AS TalkTalk Communications Limited", "ascountry": "GB", "assource": "", "network": "92.24.0.0/14", "threatfeeds": {}}


indicator: 92.252.111.177
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 92.252.0.0/17
hosting_provider: EWETEL Cloppenburger Strasse 310
queried_at: 2026-03-10T08:01:01.662615
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ewetel.de", "as": 9145, "asname": "EWETEL Cloppenburger Strasse 310", "ascountry": "DE", "assource": "", "network": "92.252.0.0/17", "threatfeeds": {}}


indicator: 92.255.57.221
indicator_type: ipv4
source: dshield
country: HK
reverse_dns: 92.255.57.0/24
hosting_provider: LD007-AS
queried_at: 2026-03-10T08:01:04.195077
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "dl@hostway.ru", "as": 207566, "asname": "LD007-AS", "ascountry": "HK", "assource": "", "network": "92.255.57.0/24", "threatfeeds": {}}


indicator: 92.255.85.2
indicator_type: ipv4
source: dshield
country: HK
reverse_dns: 92.255.85.0/24
hosting_provider: LD007-AS
queried_at: 2026-03-10T08:01:06.856519
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "dl@hostway.ru", "as": 207566, "asname": "LD007-AS", "ascountry": "HK", "assource": "", "network": "92.255.85.0/24", "threatfeeds": {}}


indicator: 92.32.138.220
indicator_type: ipv4
source: dshield
country: NO
reverse_dns: 92.32.0.0/14
hosting_provider: TELENOR-NEXTEL Telenor Norge AS
queried_at: 2026-03-10T08:01:08.172539
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@telenor.net", "as": 2119, "asname": "TELENOR-NEXTEL Telenor Norge AS", "ascountry": "NO", "assource": "", "network": "92.32.0.0/14", "threatfeeds": {}}


indicator: 92.35.20.235
indicator_type: ipv4
source: dshield
country: NO
reverse_dns: 92.32.0.0/14
hosting_provider: TELENOR-NEXTEL Telenor Norge AS
queried_at: 2026-03-10T08:01:10.793685
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@telenor.net", "as": 2119, "asname": "TELENOR-NEXTEL Telenor Norge AS", "ascountry": "NO", "assource": "", "network": "92.32.0.0/14", "threatfeeds": {"mastodon": {"lastseen": "2024-02-29", "firstseen": "2022-12-20"}}}


indicator: 92.36.136.186
indicator_type: ipv4
source: dshield
country: BA
reverse_dns: 92.36.136.0/21
hosting_provider: BIHNET BIHNET Autonomus System
queried_at: 2026-03-10T08:01:12.128436
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@bih.net.ba", "as": 9146, "asname": "BIHNET BIHNET Autonomus System", "ascountry": "BA", "assource": "", "network": "92.36.136.0/21", "threatfeeds": {}}


indicator: 92.38.188.248
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 92.38.188.0/24
hosting_provider: EDGECENTERLLC
queried_at: 2026-03-10T08:01:13.505022
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": ">>UNKNOWN<<", "as": 210756, "asname": "EDGECENTERLLC", "ascountry": "RU", "assource": "", "network": "92.38.188.0/24", "threatfeeds": {"blocklistde22": {"lastseen": "2022-10-21", "firstseen": "2022-10-19"}, "blocklistde25": {"lastseen": "2020-08-01", "firstseen": "2020-07-31"}, "forumspam": {"lastseen": "2022-11-03", "firstseen": "2022-10-16"}, "torexit": {"lastseen": "2022-11-23", "


indicator: 92.43.74.96
indicator_type: ipv4
source: dshield
country: DK
reverse_dns: 92.43.72.0/22
hosting_provider: GLOBALCONNECT-AS31027
queried_at: 2026-03-10T08:01:14.798327
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@nianet.dk", "as": 31027, "asname": "GLOBALCONNECT-AS31027", "ascountry": "DK", "assource": "", "network": "92.43.72.0/22", "threatfeeds": {}}


indicator: 92.53.97.112
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 92.53.97.0/24
hosting_provider: TIMEWEB-AS
queried_at: 2026-03-10T08:01:16.156268
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@timeweb.ru", "as": 9123, "asname": "TIMEWEB-AS", "ascountry": "RU", "assource": "", "network": "92.53.97.0/24", "threatfeeds": {"blocklistde22": {"lastseen": "2017-06-07", "firstseen": "2017-06-06"}}}


indicator: 92.60.47.178
indicator_type: ipv4
source: dshield
country: GB
reverse_dns: 92.60.47.0/24
hosting_provider: VELOXSERV
queried_at: 2026-03-10T08:01:17.518878
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "serwis@galatea.pl", "as": 3170, "asname": "VELOXSERV", "ascountry": "GB", "assource": "", "network": "92.60.47.0/24", "threatfeeds": {}}


indicator: 93.177.144.20
indicator_type: ipv4
source: dshield
country: GE
reverse_dns: 93.177.128.0/19
hosting_provider: MAGTICOMAS Magticom
queried_at: 2026-03-10T08:01:18.847265
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@magtinet.ge", "as": 16010, "asname": "MAGTICOMAS Magticom", "ascountry": "GE", "assource": "", "network": "93.177.128.0/19", "threatfeeds": {}}


indicator: 93.181.22.41
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 93.181.0.0/18
hosting_provider: NETSERVICES-AS
queried_at: 2026-03-10T08:01:20.455649
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "ripe@mr-netservices.de", "as": 42965, "asname": "NETSERVICES-AS", "ascountry": "DE", "assource": "", "network": "93.181.0.0/18", "threatfeeds": {}}


indicator: 93.183.93.208
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 93.183.92.0/22
hosting_provider: UNITLINE_MSK_NET1
queried_at: 2026-03-10T08:01:24.844619
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "lirmaster@unitline.ru", "as": 34580, "asname": "UNITLINE_MSK_NET1", "ascountry": "RU", "assource": "", "network": "93.183.92.0/22", "threatfeeds": {}}


indicator: 93.185.159.253
indicator_type: ipv4
source: dshield
country: XX
hosting_provider: not routed
queried_at: 2026-03-10T08:01:26.638970
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": null, "as": 0, "asname": "not routed", "ascountry": "XX", "assource": "", "network": "", "threatfeeds": {"rosti": {"lastseen": "2025-01-06", "firstseen": "2024-12-11"}}}


indicator: 93.185.167.134
indicator_type: ipv4
source: dshield
country: GB
reverse_dns: 93.185.167.0/24
hosting_provider: VPLAB
queried_at: 2026-03-10T08:01:27.964446
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@fcgnet.ro", "as": 60912, "asname": "VPLAB", "ascountry": "GB", "assource": "", "network": "93.185.167.0/24", "threatfeeds": {}}


indicator: 93.198.178.208
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 93.192.0.0/10
hosting_provider: DTAG Internet service provider operations
queried_at: 2026-03-10T08:01:29.253789
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "auftrag@nic.telekom.de", "as": 3320, "asname": "DTAG Internet service provider operations", "ascountry": "DE", "assource": "", "network": "93.192.0.0/10", "threatfeeds": {}}


indicator: 93.71.143.16
indicator_type: ipv4
source: dshield
country: IT
reverse_dns: 93.71.0.0/16
hosting_provider: VODAFONE-IT-ASN
queried_at: 2026-03-10T08:02:06.676040
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "italy.abuse@mail.vodafone.it", "as": 30722, "asname": "VODAFONE-IT-ASN", "ascountry": "IT", "assource": "", "network": "93.71.0.0/16", "threatfeeds": {}}


indicator: 93.82.25.135
indicator_type: ipv4
source: dshield
country: AT
reverse_dns: 93.82.0.0/15
hosting_provider: A1TELEKOM-AT A1 Telekom Austria AG
queried_at: 2026-03-10T08:02:09.292996
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@a1.at", "as": 8447, "asname": "A1TELEKOM-AT A1 Telekom Austria AG", "ascountry": "AT", "assource": "", "network": "93.82.0.0/15", "threatfeeds": {}}


indicator: 93.95.115.185
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 93.95.115.0/24
hosting_provider: LEVEL3
queried_at: 2026-03-10T08:02:10.588163
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "ipaddressing@level3.com", "as": 3356, "asname": "LEVEL3", "ascountry": "US", "assource": "", "network": "93.95.115.0/24", "threatfeeds": {}}


indicator: 93.95.227.46
indicator_type: ipv4
source: dshield
country: IS
reverse_dns: 93.95.224.0/21
hosting_provider: THE-1984-AS
queried_at: 2026-03-10T08:02:11.884108
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@1984.is", "as": 44925, "asname": "THE-1984-AS", "ascountry": "IS", "assource": "", "network": "93.95.224.0/21", "threatfeeds": {}}


indicator: 94.131.118.79
indicator_type: ipv4
source: dshield
country: GB
reverse_dns: 94.131.118.0/24
hosting_provider: STARK-INDUSTRIES
queried_at: 2026-03-10T08:02:13.179820
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "aospan@netup.ru", "as": 44477, "asname": "STARK-INDUSTRIES", "ascountry": "GB", "assource": "", "network": "94.131.118.0/24", "threatfeeds": {}}


indicator: 94.134.24.106
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 94.134.0.0/18
hosting_provider: VERSATEL
queried_at: 2026-03-10T08:02:14.550611
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@versatel.de", "as": 8881, "asname": "VERSATEL", "ascountry": "DE", "assource": "", "network": "94.134.0.0/18", "threatfeeds": {}}


indicator: 94.137.78.235
indicator_type: ipv4
source: dshield
country: NL
reverse_dns: 94.137.78.0/24
hosting_provider: HOSTKEY-AS
queried_at: 2026-03-10T08:02:18.979635
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@hostkey.nl", "as": 57043, "asname": "HOSTKEY-AS", "ascountry": "NL", "assource": "", "network": "94.137.78.0/24", "threatfeeds": {}}


indicator: 94.137.79.20
indicator_type: ipv4
source: dshield
country: NL
reverse_dns: 94.137.79.0/24
hosting_provider: HOSTKEY-AS
queried_at: 2026-03-10T08:02:20.280545
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@hostkey.nl", "as": 57043, "asname": "HOSTKEY-AS", "ascountry": "NL", "assource": "", "network": "94.137.79.0/24", "threatfeeds": {}}


indicator: 94.140.115.114
indicator_type: ipv4
source: dshield
country: LV
reverse_dns: 94.140.114.0/23
hosting_provider: NANO-AS
queried_at: 2026-03-10T08:02:21.575171
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@nano.lv", "as": 43513, "asname": "NANO-AS", "ascountry": "LV", "assource": "", "network": "94.140.114.0/23", "threatfeeds": {"alltor": {"lastseen": "2025-12-29", "firstseen": "2025-02-04"}}}


indicator: 94.141.122.171
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 94.141.120.0/22
hosting_provider: UNITLINE_RST_NET1 Rostov na Donu
queried_at: 2026-03-10T08:02:22.888186
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "lirmaster@unitline.ru", "as": 43429, "asname": "UNITLINE_RST_NET1 Rostov na Donu", "ascountry": "RU", "assource": "", "network": "94.141.120.0/22", "threatfeeds": {}}


indicator: 94.142.139.119
indicator_type: ipv4
source: dshield
country: GB
reverse_dns: 94.142.139.0/24
hosting_provider: I-SERVERS-EAST
queried_at: 2026-03-10T08:02:24.190478
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": ">>UNKNOWN<<", "as": 209641, "asname": "I-SERVERS-EAST", "ascountry": "GB", "assource": "", "network": "94.142.139.0/24", "threatfeeds": {}}


indicator: 94.154.172.222
indicator_type: ipv4
source: dshield
country: GB
reverse_dns: 94.154.172.0/24
hosting_provider: HUIZE_TELECOM Huize Telecom
queried_at: 2026-03-10T08:02:25.622814
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "info@tasmin.ru", "as": 61302, "asname": "HUIZE_TELECOM Huize Telecom", "ascountry": "GB", "assource": "", "network": "94.154.172.0/24", "threatfeeds": {"threatview": {"lastseen": "2025-02-28", "firstseen": "2025-02-28"}}}


indicator: 94.154.173.50
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 94.154.173.0/24
hosting_provider: ASN-QUADRANET-GLOBAL
queried_at: 2026-03-10T08:02:26.909540
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "support@quadranet.com", "as": 8100, "asname": "ASN-QUADRANET-GLOBAL", "ascountry": "US", "assource": "", "network": "94.154.173.0/24", "threatfeeds": {}}


indicator: 94.154.34.47
indicator_type: ipv4
source: dshield
country: TR
reverse_dns: 94.154.34.0/24
hosting_provider: AS-HOSTIFOX
queried_at: 2026-03-10T08:02:28.208956
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ip-only.net", "as": 205733, "asname": "AS-HOSTIFOX", "ascountry": "TR", "assource": "", "network": "94.154.34.0/24", "threatfeeds": {}}


indicator: 94.156.177.171
indicator_type: ipv4
source: dshield
country: HK
reverse_dns: 94.156.177.0/24
hosting_provider: HUICAST_TELECOM
queried_at: 2026-03-10T08:02:29.577371
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "ripe@newtonad.ro", "as": 60539, "asname": "HUICAST_TELECOM", "ascountry": "HK", "assource": "", "network": "94.156.177.0/24", "threatfeeds": {}}


indicator: 94.156.189.245
indicator_type: ipv4
source: dshield
country: BG
reverse_dns: 94.156.189.0/24
hosting_provider: BELCLOUD
queried_at: 2026-03-10T08:02:30.878949
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@belcloud.net", "as": 44901, "asname": "BELCLOUD", "ascountry": "BG", "assource": "", "network": "94.156.189.0/24", "threatfeeds": {}}


indicator: 94.156.227.14
indicator_type: ipv4
source: dshield
country: BG
reverse_dns: 94.156.227.0/24
hosting_provider: NETERRA-AS
queried_at: 2026-03-10T08:02:32.184914
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@neterra.net", "as": 34224, "asname": "NETERRA-AS", "ascountry": "BG", "assource": "", "network": "94.156.227.0/24", "threatfeeds": {"threatview": {"lastseen": "2025-03-25", "firstseen": "2025-03-11"}}}


indicator: 94.156.227.37
indicator_type: ipv4
source: dshield
country: BG
reverse_dns: 94.156.227.0/24
hosting_provider: NETERRA-AS
queried_at: 2026-03-10T08:02:33.488176
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@neterra.net", "as": 34224, "asname": "NETERRA-AS", "ascountry": "BG", "assource": "", "network": "94.156.227.0/24", "threatfeeds": {}}


indicator: 94.158.247.5
indicator_type: ipv4
source: dshield
country: MD
reverse_dns: 94.158.247.0/24
hosting_provider: MIVOCLOUD
queried_at: 2026-03-10T08:02:34.784567
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@mivocloud.com", "as": 39798, "asname": "MIVOCLOUD", "ascountry": "MD", "assource": "", "network": "94.158.247.0/24", "threatfeeds": {"rosti": {"lastseen": "2025-04-11", "firstseen": "2022-12-05"}}}


indicator: 94.159.104.140
indicator_type: ipv4
source: dshield
country: XX
hosting_provider: not routed
queried_at: 2026-03-10T08:02:36.657764
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": null, "as": 0, "asname": "not routed", "ascountry": "XX", "assource": "", "network": "", "threatfeeds": {"blocklistde22": {"lastseen": "2024-12-24", "firstseen": "2024-11-09"}}}


indicator: 94.159.113.64
indicator_type: ipv4
source: dshield
country: XX
hosting_provider: not routed
queried_at: 2026-03-10T08:02:38.584496
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": null, "as": 0, "asname": "not routed", "ascountry": "XX", "assource": "", "network": "", "threatfeeds": {"rosti": {"lastseen": "2026-01-30", "firstseen": "2026-01-30"}, "threatview": {"lastseen": "2025-03-21", "firstseen": "2025-03-21"}}}


indicator: 94.177.198.94
indicator_type: ipv4
source: dshield
country: IT
reverse_dns: 94.177.192.0/20
hosting_provider: ARUBA-ASN
queried_at: 2026-03-10T08:02:39.950722
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@staff.aruba.it", "as": 31034, "asname": "ARUBA-ASN", "ascountry": "IT", "assource": "", "network": "94.177.192.0/20", "threatfeeds": {"rosti": {"lastseen": "2024-12-13", "firstseen": "2024-12-04"}}}


indicator: 94.177.8.76
indicator_type: ipv4
source: dshield
country: AT
reverse_dns: 94.177.8.0/24
hosting_provider: ALWYZON Alwyzon, a trading name of Hohl IT e.U.
queried_at: 2026-03-10T08:02:41.247265
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "noc@internetvision.ro", "as": 40994, "asname": "ALWYZON Alwyzon, a trading name of Hohl IT e.U.", "ascountry": "AT", "assource": "", "network": "94.177.8.0/24", "threatfeeds": {}}


indicator: 94.209.216.217
indicator_type: ipv4
source: dshield
country: NL
reverse_dns: 94.208.0.0/14
hosting_provider: TNF-AS
queried_at: 2026-03-10T08:02:42.583398
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "esabuse.nl@vodafone.com", "as": 33915, "asname": "TNF-AS", "ascountry": "NL", "assource": "", "network": "94.208.0.0/14", "threatfeeds": {}}


indicator: 94.220.91.72
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 94.216.0.0/13
hosting_provider: VODANET International IP-Backbone of Vodafone
queried_at: 2026-03-10T08:02:43.797778
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@arcor-ip.de", "as": 3209, "asname": "VODANET International IP-Backbone of Vodafone", "ascountry": "DE", "assource": "", "network": "94.216.0.0/13", "threatfeeds": {}}


indicator: 94.228.117.59
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 94.228.117.0/24
hosting_provider: TIMEWEB-AS
queried_at: 2026-03-10T08:02:45.092445
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@timeweb.ru", "as": 9123, "asname": "TIMEWEB-AS", "ascountry": "RU", "assource": "", "network": "94.228.117.0/24", "threatfeeds": {}}


indicator: 94.228.126.157
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 94.228.126.0/24
hosting_provider: TIMEWEB-AS
queried_at: 2026-03-10T08:02:46.408520
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@timeweb.ru", "as": 9123, "asname": "TIMEWEB-AS", "ascountry": "RU", "assource": "", "network": "94.228.126.0/24", "threatfeeds": {}}


indicator: 94.228.186.178
indicator_type: ipv4
source: dshield
country: FR
reverse_dns: 94.228.176.0/20
hosting_provider: CELESTE-AS CELESTE - Internet services provider
queried_at: 2026-03-10T08:02:47.694431
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@celeste.fr", "as": 34177, "asname": "CELESTE-AS CELESTE - Internet services provider", "ascountry": "FR", "assource": "", "network": "94.228.176.0/20", "threatfeeds": {}}


indicator: 94.231.176.50
indicator_type: ipv4
source: dshield
country: UA
reverse_dns: 94.231.176.0/24
hosting_provider: BEREZHANY-AS
queried_at: 2026-03-10T08:02:49.005135
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@galcom.net.ua", "as": 49183, "asname": "BEREZHANY-AS", "ascountry": "UA", "assource": "", "network": "94.231.176.0/24", "threatfeeds": {"blocklistde25": {"lastseen": "2025-02-05", "firstseen": "2016-12-06"}}}


indicator: 94.232.11.178
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 94.232.11.0/24
hosting_provider: MEGAFON-AS Moscow, Russia
queried_at: 2026-03-10T08:02:50.463799
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": "IP may participate in DDoS against russian websites (3/3/2022)", "asabusecontact": "abuse@ti.ru", "as": 12714, "asname": "MEGAFON-AS Moscow, Russia", "ascountry": "RU", "assource": "", "network": "94.232.11.0/24", "threatfeeds": {"blocklistde110": {"lastseen": "2025-08-09", "firstseen": "2020-11-18"}, "blocklistde143": {"lastseen": "2025-08-09", "firstseen": "2020-11-18"}, "blocklistde25": {"lastseen": "202


indicator: 94.232.245.65
indicator_type: ipv4
source: dshield
country: NL
reverse_dns: 94.232.244.0/22
hosting_provider: ACCESS2IT Access2.IT Network
queried_at: 2026-03-10T08:02:51.753152
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@a2srv.eu", "as": 208258, "asname": "ACCESS2IT Access2.IT Network", "ascountry": "NL", "assource": "", "network": "94.232.244.0/22", "threatfeeds": {}}


indicator: 94.232.249.204
indicator_type: ipv4
source: dshield
country: SY
reverse_dns: 94.232.248.0/22
hosting_provider: INT-PDN-STE-AS STE PDN Internal AS
queried_at: 2026-03-10T08:02:54.467008
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "exp-dir@net.sy", "as": 29256, "asname": "INT-PDN-STE-AS STE PDN Internal AS", "ascountry": "SY", "assource": "", "network": "94.232.248.0/22", "threatfeeds": {}}


indicator: 94.237.67.192
indicator_type: ipv4
source: dshield
country: FI
reverse_dns: 94.237.64.0/20
hosting_provider: UPCLOUD
queried_at: 2026-03-10T08:02:55.750766
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@upcloud.com", "as": 202053, "asname": "UPCLOUD", "ascountry": "FI", "assource": "", "network": "94.237.64.0/20", "threatfeeds": {}}


indicator: 94.237.98.169
indicator_type: ipv4
source: dshield
country: FI
reverse_dns: 94.237.96.0/21
hosting_provider: UPCLOUD
queried_at: 2026-03-10T08:02:58.333343
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@upcloud.com", "as": 202053, "asname": "UPCLOUD", "ascountry": "FI", "assource": "", "network": "94.237.96.0/21", "threatfeeds": {}}


indicator: 94.24.236.42
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 94.24.192.0/18
hosting_provider: INTERSVYAZ-AS 38-B, Komsomolsky prospekt
queried_at: 2026-03-10T08:03:07.135954
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@is74.ru", "as": 8369, "asname": "INTERSVYAZ-AS 38-B, Komsomolsky prospekt", "ascountry": "RU", "assource": "", "network": "94.24.192.0/18", "threatfeeds": {}}


indicator: 94.242.53.120
indicator_type: ipv4
source: dshield
country: LV
reverse_dns: 94.242.48.0/20
hosting_provider: VEESP-AS
queried_at: 2026-03-10T08:03:08.426525
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@rnet.ru", "as": 43317, "asname": "VEESP-AS", "ascountry": "LV", "assource": "", "network": "94.242.48.0/20", "threatfeeds": {}}


indicator: 94.244.3.194
indicator_type: ipv4
source: dshield
country: UA
reverse_dns: 94.244.0.0/22
hosting_provider: UKRDATACOM-NET-AS
queried_at: 2026-03-10T08:03:11.042491
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ukrdatacom.kiev.ua", "as": 48278, "asname": "UKRDATACOM-NET-AS", "ascountry": "UA", "assource": "", "network": "94.244.0.0/22", "threatfeeds": {}}


indicator: 94.249.212.230
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 94.249.128.0/17
hosting_provider: ASGHOSTNET
queried_at: 2026-03-10T08:03:12.334145
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ghostnet.de", "as": 12586, "asname": "ASGHOSTNET", "ascountry": "DE", "assource": "", "network": "94.249.128.0/17", "threatfeeds": {}}


indicator: 94.250.249.129
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 94.250.248.0/23
hosting_provider: RU-JSCIOT
queried_at: 2026-03-10T08:03:13.649832
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@abusehost.ru", "as": 29182, "asname": "RU-JSCIOT", "ascountry": "RU", "assource": "", "network": "94.250.248.0/23", "threatfeeds": {}}


indicator: 94.46.171.220
indicator_type: ipv4
source: shodan
city: c2,eol-product
reverse_dns: parques-verdes-aveiro.enterrei.me
hosting_provider: cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx:1.27.4,cpe:/a:openbsd:openssh:8.9p1
queried_at: 2026-03-10T08:20:04.098369
raw_data:
  {"ports": [22, 80, 443], "vulns": [], "hostnames": ["parques-verdes-aveiro.enterrei.me"], "tags": ["c2", "eol-product"], "cpes": ["cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx:1.27.4", "cpe:/a:openbsd:openssh:8.9p1"]}


indicator: 95.117.36.40
indicator_type: ipv4
source: shodan
reverse_dns: dynamic-095-117-036-040.95.117.pool.telefonica.de
queried_at: 2026-03-10T08:20:16.096894
raw_data:
  {"ports": [443, 8089], "vulns": [], "hostnames": ["dynamic-095-117-036-040.95.117.pool.telefonica.de"], "tags": [], "cpes": []}


indicator: 95.131.202.38
indicator_type: ipv4
source: shodan
city: self-signed,honeypot
queried_at: 2026-03-10T08:20:21.080674
raw_data:
  {"ports": [22, 23, 80, 443, 2087, 2323, 3128, 4433, 4443, 5986, 6443, 7547, 8000, 8008, 8080, 8081, 8085, 8089, 8443, 9443, 10443], "vulns": [], "hostnames": [], "tags": ["self-signed", "honeypot"], "cpes": []}


indicator: 95.164.53.3
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: larrygems.store,2714squidsbased.example.com,7349squidsbased.example.com
queried_at: 2026-03-10T08:20:31.222033
raw_data:
  {"ports": [22, 80, 443], "vulns": ["CVE-2022-22721", "CVE-2024-38476", "CVE-2013-2765", "CVE-2024-27316", "CVE-2025-23048", "CVE-2023-38709", "CVE-2023-31122", "CVE-2012-4360", "CVE-2011-2688", "CVE-2024-43204", "CVE-2022-28615", "CVE-2024-38474", "CVE-2022-29404", "CVE-2025-55753", "CVE-2009-2299", "CVE-2022-37436", "CVE-2007-4723", "CVE-2023-45802", "CVE-2024-24795", "CVE-2022-31813", "CVE-2006-20001", "CVE-2011-1176", "CVE-2009-0796", "CVE-2024-38477", "CVE-2025-23419", "CVE-2025-65082", "CVE

hosting_provider:
  cpe:/o:canonical:ubuntu_linux,cpe:/a:apache:http_server:2.4.52,cpe:/a:openbsd:openssh:8.9p1,cpe:/o:linux:linux_kernel,cpe:/a:f5:nginx:1.24.0


indicator: 95.179.162.106
indicator_type: ipv4
source: shodan
city: cloud
reverse_dns: 95.179.162.106.vultrusercontent.com
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-03-10T08:20:37.942117
raw_data:
  {"ports": [22, 9030], "vulns": [], "hostnames": ["95.179.162.106.vultrusercontent.com"], "tags": ["cloud"], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 95.181.164.107
indicator_type: ipv4
source: shodan
city: eol-product,self-signed,starttls
reverse_dns: ceo.cloud-vds
hosting_provider: cpe:/a:f5:nginx:1.26.3
queried_at: 2026-03-10T08:20:41.239879
raw_data:
  {"ports": [53, 80, 110, 143, 993, 995, 1500], "vulns": [], "hostnames": ["ceo.cloud-vds"], "tags": ["eol-product", "self-signed", "starttls"], "cpes": ["cpe:/a:f5:nginx:1.26.3"]}


indicator: 95.214.55.246
indicator_type: ipv4
source: shodan
city: self-signed,scanner
reverse_dns: continued.zonogicism.nl
queried_at: 2026-03-10T08:20:42.906348
raw_data:
  {"ports": [135, 445, 3389, 5985], "vulns": ["CVE-2020-0796"], "hostnames": ["continued.zonogicism.nl"], "tags": ["self-signed", "scanner"], "cpes": []}


indicator: 95.215.206.151
indicator_type: ipv4
source: shodan
city: self-signed,starttls
reverse_dns: 95-215-206-151.netherlands-2.vps.ac
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/a:f5:nginx
queried_at: 2026-03-10T08:20:44.584242
raw_data:
  {"ports": [21, 22, 25, 53, 80, 110, 143, 443, 465, 587, 993, 995, 8083], "vulns": [], "hostnames": ["95-215-206-151.netherlands-2.vps.ac"], "tags": ["self-signed", "starttls"], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/a:f5:nginx"]}


indicator: 95.216.118.42
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: static.42.118.216.95.clients.your-server.de
hosting_provider: cpe:/o:canonical:ubuntu_linux,cpe:/o:linux:linux_kernel,cpe:/a:f5:nginx:1.24.0
queried_at: 2026-03-10T08:20:46.236740
raw_data:
  {"ports": [80], "vulns": ["CVE-2025-23419", "CVE-2023-44487"], "hostnames": ["static.42.118.216.95.clients.your-server.de"], "tags": ["eol-product"], "cpes": ["cpe:/o:canonical:ubuntu_linux", "cpe:/o:linux:linux_kernel", "cpe:/a:f5:nginx:1.24.0"]}


indicator: 95.216.147.179
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: static.179.147.216.95.clients.your-server.de
queried_at: 2026-03-10T08:20:47.871287
raw_data:
  {"ports": [22, 80], "vulns": ["CVE-2021-23017", "CVE-2025-23419", "CVE-2021-3618", "CVE-2023-44487"], "hostnames": ["static.179.147.216.95.clients.your-server.de"], "tags": ["eol-product"], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/a:f5:nginx:1.18.0", "cpe:/o:linux:linux_kernel", "cpe:/o:canonical:ubuntu_linux"]}

hosting_provider:
  cpe:/a:openbsd:openssh:8.9p1,cpe:/a:f5:nginx:1.18.0,cpe:/o:linux:linux_kernel,cpe:/o:canonical:ubuntu_linux


indicator: 95.216.179.65
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: www.isaaffik.org,static.65.179.216.95.clients.your-server.de,isaaffik.org
hosting_provider: cpe:/a:f5:nginx:1.18.0,cpe:/o:linux:linux_kernel,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-03-10T08:20:52.462526
raw_data:
  {"ports": [80, 443], "vulns": ["CVE-2025-23419", "CVE-2023-44487", "CVE-2021-3618", "CVE-2021-23017"], "hostnames": ["www.isaaffik.org", "static.65.179.216.95.clients.your-server.de", "isaaffik.org"], "tags": ["eol-product"], "cpes": ["cpe:/a:f5:nginx:1.18.0", "cpe:/o:linux:linux_kernel", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 95.216.180.148
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: static.148.180.216.95.clients.your-server.de
hosting_provider: cpe:/a:f5:nginx
queried_at: 2026-03-10T08:20:54.209406
raw_data:
  {"ports": [443], "vulns": [], "hostnames": ["static.148.180.216.95.clients.your-server.de"], "tags": ["self-signed"], "cpes": ["cpe:/a:f5:nginx"]}


indicator: 95.217.206.215
indicator_type: ipv4
source: shodan
reverse_dns: static.215.206.217.95.clients.your-server.de,eustorage.onthewifi.com,eustorage.gotdns.ch
hosting_provider: cpe:/a:f5:nginx,cpe:/a:openbsd:openssh:8.2p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-03-10T08:21:00.818475
raw_data:
  {"ports": [22, 80, 443], "vulns": [], "hostnames": ["static.215.206.217.95.clients.your-server.de", "eustorage.onthewifi.com", "eustorage.gotdns.ch"], "tags": [], "cpes": ["cpe:/a:f5:nginx", "cpe:/a:openbsd:openssh:8.2p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 95.217.206.235
indicator_type: ipv4
source: shodan
reverse_dns: static.235.206.217.95.clients.your-server.de
hosting_provider: cpe:/o:linux:linux_kernel,cpe:/o:debian:debian_linux,cpe:/a:openbsd:openssh:8.4p1
queried_at: 2026-03-10T08:21:02.594572
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["static.235.206.217.95.clients.your-server.de"], "tags": [], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/o:debian:debian_linux", "cpe:/a:openbsd:openssh:8.4p1"]}


indicator: 95.217.218.240
indicator_type: ipv4
source: shodan
reverse_dns: static.240.218.217.95.clients.your-server.de
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-03-10T08:21:04.233730
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["static.240.218.217.95.clients.your-server.de"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 95.217.27.252
indicator_type: ipv4
source: shodan
city: self-signed,eol-product
reverse_dns: static.252.27.217.95.clients.your-server.de
queried_at: 2026-03-10T08:21:05.924386
raw_data:
  {"ports": [22, 80, 443, 444], "vulns": ["CVE-2025-23419", "CVE-2023-44487"], "hostnames": ["static.252.27.217.95.clients.your-server.de"], "tags": ["self-signed", "eol-product"], "cpes": ["cpe:/o:canonical:ubuntu_linux", "cpe:/o:linux:linux_kernel", "cpe:/a:f5:nginx:1.24.0", "cpe:/a:openbsd:openssh:9.6p1"]}

hosting_provider:
[cell repeats an earlier one in this file: 107 characters]


indicator: 95.217.31.199
indicator_type: ipv4
source: shodan
reverse_dns: static.199.31.217.95.clients.your-server.de
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-03-10T08:21:07.571187
raw_data:
  {"ports": [22, 80, 443], "vulns": [], "hostnames": ["static.199.31.217.95.clients.your-server.de"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 95.217.60.176
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: static.176.60.217.95.clients.your-server.de
queried_at: 2026-03-10T08:21:09.242399
raw_data:
  {"ports": [80, 443, 1701, 8291], "vulns": [], "hostnames": ["static.176.60.217.95.clients.your-server.de"], "tags": ["self-signed"], "cpes": []}


indicator: 94.31.108.129
indicator_type: ipv4
source: otx
country: DE
reverse_dns: behrensonline.direct.quickconnect.to,behrensonline.myds.me,chmontzproton.direct.quickconnect.to
queried_at: 2026-03-10T08:21:12.853585
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS60294 deutsche glasfaser wholesale gmbh", "indicator": "94.31.108.129", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["behrensonline.direct.quickconnect.to", "behrensonline.myds.me", "chmontzproton.direct.quickconnect.to"]}


indicator: 94.46.171.151
indicator_type: ipv4
source: otx
country: PT
queried_at: 2026-03-10T08:21:14.771054
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Portugal", "country_code": "PT", "city": null, "asn": "AS24768 almouroltec servicos de informatica e internet lda", "indicator": "94.46.171.151", "tags": ["Nextray", "2025", "anonymization_network", "cyber security", "malicious", "01.10.2025", "HoneyNet Connect", "tor-guard-nodes", "ioc", "phishing", "tor-exit-nodes"], "pulses": ["Anonymization_Network | Mar 10, 2026 | Part 3/5", "Anonymization_Network | Mar 9, 2026 | Part 3/5", "Anonymization_Net

hosting_provider:
  Nextray,2025,anonymization_network,cyber security,malicious,01.10.2025,HoneyNet Connect,tor-guard-nodes,ioc,phishing


indicator: 94.46.171.220
indicator_type: ipv4
source: otx
country: PT
reverse_dns: enterrei.me,c3b0l1nhas.proj3ts.me
queried_at: 2026-03-10T08:21:16.922197
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Portugal", "country_code": "PT", "city": null, "asn": "AS24768 almouroltec servicos de informatica e internet lda", "indicator": "94.46.171.220", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["enterrei.me", "c3b0l1nhas.proj3ts.me"]}


indicator: 94.46.171.221
indicator_type: ipv4
source: otx
country: PT
reverse_dns: app.xelo.finance,www.app.xelo.finance,www.eroshop.pt,eroshop.pt,gitlab.merkat.pt
queried_at: 2026-03-10T08:21:18.578156
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Portugal", "country_code": "PT", "city": null, "asn": "AS24768 almouroltec servicos de informatica e internet lda", "indicator": "94.46.171.221", "tags": ["Nextray", "2025", "anonymization_network", "cyber security", "malicious", "01.10.2025", "HoneyNet Connect", "tor-guard-nodes", "ioc", "phishing", "tor-exit-nodes"], "pulses": ["Anonymization_Network | Mar 10, 2026 | Part 3/5", "Anonymization_Network | Mar 9, 2026 | Part 3/5", "Anonymization_Net

hosting_provider:
  Nextray,2025,anonymization_network,cyber security,malicious,01.10.2025,HoneyNet Connect,tor-guard-nodes,ioc,phishing


indicator: 94.46.171.245
indicator_type: ipv4
source: otx
country: PT
hosting_provider: copy,address,files c,ioc,false,digicert global,bashlite,secure,samesitenone,urls
queried_at: 2026-03-10T08:21:22.195593
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Portugal", "country_code": "PT", "city": null, "asn": "AS24768 almouroltec servicos de informatica e internet lda", "indicator": "94.46.171.245", "tags": ["copy", "address", "files c", "ioc", "false", "digicert global", "bashlite", "secure", "samesitenone", "urls", "service", "domains", "malware", "regdword", "passive dns", "scan endpoints", "ascii text", "error", "japan asn", "australia", "self", "unknown", "cyber security", "com laude", "contact


indicator: 94.66.237.39
indicator_type: ipv4
source: otx
country: GR
city: Athens
queried_at: 2026-03-10T08:21:23.763823
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Greece", "country_code": "GR", "city": "Athens", "asn": "AS6799 ote sa (hellenic telecommunications organisation)", "indicator": "94.66.237.39", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 95.116.129.67
indicator_type: ipv4
source: otx
country: DE
city: Hamburg
hosting_provider: Nextray,cyber security,malicious,ioc,phishing
queried_at: 2026-03-10T08:21:26.526772
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Hamburg", "asn": "AS6805 telefonica germany gmbh & co.ohg", "indicator": "95.116.129.67", "tags": ["Nextray", "cyber security", "malicious", "ioc", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse cre


indicator: 95.116.21.181
indicator_type: ipv4
source: otx
country: DE
city: Hamburg
reverse_dns: tbtgqtqno2xqv0lk.myfritz.net
hosting_provider: Nextray,cyber security,malicious,ioc,phishing
queried_at: 2026-03-10T08:21:29.411724
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Hamburg", "asn": "AS6805 telefonica germany gmbh & co.ohg", "indicator": "95.116.21.181", "tags": ["Nextray", "cyber security", "malicious", "ioc", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse cre


indicator: 95.116.7.122
indicator_type: ipv4
source: otx
country: DE
city: Lübeck
reverse_dns: mknobel.direct.quickconnect.to
hosting_provider: Nextray,cyber security,malicious,ioc,phishing
queried_at: 2026-03-10T08:21:33.236344
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "L\u00fcbeck", "asn": "AS6805 telefonica germany gmbh & co.ohg", "indicator": "95.116.7.122", "tags": ["Nextray", "cyber security", "malicious", "ioc", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse 


indicator: 95.117.36.40
indicator_type: ipv4
source: otx
country: DE
city: Zirndorf
reverse_dns: vbtgx7r0loz4zxlc.myfritz.net
hosting_provider: Nextray,cyber security,malicious,ioc,phishing
queried_at: 2026-03-10T08:21:34.837801
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Zirndorf", "asn": "AS6805 telefonica germany gmbh & co.ohg", "indicator": "95.117.36.40", "tags": ["Nextray", "cyber security", "malicious", "ioc", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse cre


indicator: 95.118.30.107
indicator_type: ipv4
source: otx
country: DE
city: Munich
hosting_provider: Nextray,cyber security,malicious,ioc,phishing
queried_at: 2026-03-10T08:21:36.415280
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Munich", "asn": "AS6805 telefonica germany gmbh & co.ohg", "indicator": "95.118.30.107", "tags": ["Nextray", "cyber security", "malicious", "ioc", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse crea


indicator: 95.128.137.159
indicator_type: ipv4
source: otx
country: RU
city: Syktyvkar
hosting_provider: file v2,ms windows,address,khtml,present,asn as24940,format,forbidden,https domain,getclassinfoptr
queried_at: 2026-03-10T08:21:37.958090
raw_data:
  {"pulse_count": 5, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": "Syktyvkar", "asn": "AS44572 joint-stock company parmatel", "indicator": "95.128.137.159", "tags": ["file v2", "ms windows", "address", "khtml", "present", "asn as24940", "format", "forbidden", "https domain", "getclassinfoptr", "ok accept", "encrypt", "defense evasion", "dennis schroder", "files ip", "hello2malware", "command", "sgpauiclassinfo", "botnet iocs", "reverse dns", "asnone related", "do


indicator: 95.131.202.38
indicator_type: ipv4
source: otx
country: SE
queried_at: 2026-03-10T08:21:39.488383
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Sweden", "country_code": "SE", "city": null, "asn": "AS34950 evry sweden ab", "indicator": "95.131.202.38", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 2, "passive_dns_count": 0, "malware_samples": ["be67e1876a62787b90ef3307b201e53b70d9aae45df9f3dcbfa82551557688d8", "83a671f71c03767ad4ab35ef027586e817f916e3f06ad8a575d0c667b745c2a3"], "passive_dns": []}


indicator: 95.156.207.88
indicator_type: ipv4
source: otx
country: ES
city: Pilar de la Horadada
queried_at: 2026-03-10T08:21:41.043442
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Spain", "country_code": "ES", "city": "Pilar de la Horadada", "asn": "AS50129 concisa  comunicacion  marketing y servicios s.l.", "indicator": "95.156.207.88", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 95.158.10.196
indicator_type: ipv4
source: otx
country: UA
city: Kyiv
queried_at: 2026-03-10T08:21:46.513868
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Ukraine", "country_code": "UA", "city": "Kyiv", "asn": "AS35362 company with additional responsibility company best", "indicator": "95.158.10.196", "tags": [], "pulses": ["DarkComet - C2 IP Addresses", "Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 95.163.84.250
indicator_type: ipv4
source: otx
country: RU
city: Moscow
reverse_dns: zayprostofyrim.zapto.org
queried_at: 2026-03-10T08:21:48.276880
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": "Moscow", "asn": "AS12695 llc digital network", "indicator": "95.163.84.250", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 1, "passive_dns_count": 1, "malware_samples": ["155cc43ecd4b973ce30eae914dbe1291a3090aa8cfc6efbd7162280c979571a5"], "passive_dns": ["zayprostofyrim.zapto.org"]}


indicator: 95.164.19.68
indicator_type: ipv4
source: otx
country: GI
queried_at: 2026-03-10T08:21:49.810952
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Gibraltar", "country_code": "GI", "city": null, "asn": "AS29632 netassist limited", "indicator": "95.164.19.68", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 3, "passive_dns_count": 0, "malware_samples": ["b81fe8d8538caff87cd1d4a4d9ba36ba5425f3b41a338c15c9de9fa7aa25d84f", "3a911009008c0b1235a2a495b72c6e801f82dad8005792f1943f4106c2790055", "607626fde0a0263edd41db4721523682cb343600ef083fc78f23f04ca8be04b1"], "passive_dns": [


indicator: 95.164.5.131
indicator_type: ipv4
source: otx
country: GI
reverse_dns: honaly.pro,xoweju.pro,jegula.pro,lawconsultinghub.pro,cloudoptimization.pro
queried_at: 2026-03-10T08:21:51.391848
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Gibraltar", "country_code": "GI", "city": null, "asn": "AS6461 zayo bandwidth", "indicator": "95.164.5.131", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 5, "malware_samples": [], "passive_dns": ["honaly.pro", "xoweju.pro", "jegula.pro", "lawconsultinghub.pro", "cloudoptimization.pro"]}


indicator: 95.164.53.3
indicator_type: ipv4
source: otx
country: GI
queried_at: 2026-03-10T08:21:52.941524
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Gibraltar", "country_code": "GI", "city": null, "asn": "AS29632 netassist limited", "indicator": "95.164.53.3", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 95.168.194.192
indicator_type: ipv4
source: otx
country: CZ
queried_at: 2026-03-10T08:21:54.448390
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Czechia", "country_code": "CZ", "city": null, "asn": "AS39392 \\(^_^)", "indicator": "95.168.194.192", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 95.169.203.245
indicator_type: ipv4
source: otx
country: BG
hosting_provider: linux,compromise ipv4,ipv4 port,mirai,sha1,sha256,combinations
queried_at: 2026-03-10T08:21:55.963119
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Bulgaria", "country_code": "BG", "city": null, "asn": "AS42459 fiber optics bulgaria ood", "indicator": "95.169.203.245", "tags": ["linux", "compromise ipv4", "ipv4 port", "mirai", "sha1", "sha256", "combinations"], "pulses": ["Threatfox Recent Additions", "[GS-25-1277] Mirai Botnet IOCs - SEC-1275-1"], "malware_count": 0, "passive_dns_count": 5, "malware_samples": [], "passive_dns": ["datanalytics.site", "xn--holiganbt1067-ihb.com", "fiiirsatbufii

reverse_dns:
  datanalytics.site,xn--holiganbt1067-ihb.com,fiiirsatbufiirsat.buzz,panelbufiirsat.buzz,support.workingdomain.xyz


indicator: 95.174.95.231
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-03-10T08:21:57.495343
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "ASNone ", "indicator": "95.174.95.231", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 95.179.162.106
indicator_type: ipv4
source: otx
country: DE
city: Frankfurt am Main
queried_at: 2026-03-10T08:21:59.235581
raw_data:
  {"pulse_count": 38, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Frankfurt am Main", "asn": "AS20473 the constant company  llc", "indicator": "95.179.162.106", "tags": ["HoneyNet Connect", "ioc", "response", "text state", "file type", "cus subject", "number", "text geoip6", "cnwe1 ogoogle", "Nextray", "get https", "cyber security", "malicious", "text", "phishing", "csv geoip", "win32 exe", "dns resolutions", "2025", "01.10.2025", "trust", "name file"], "pulses": ["HoneyP

hosting_provider:
  HoneyNet Connect,ioc,response,text state,file type,cus subject,number,text geoip6,cnwe1 ogoogle,Nextray


indicator: 95.179.243.180
indicator_type: ipv4
source: otx
country: DE
city: Frankfurt am Main
queried_at: 2026-03-10T08:22:01.256304
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Frankfurt am Main", "asn": "AS20473 the constant company  llc", "indicator": "95.179.243.180", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 6, "malware_samples": [], "passive_dns": ["kuegy.com", "www.ericsprojects.de", "ericsprojects.de", "netflix-4desktop.4nmn.com", "95.179.243.180", "dev.doerfert-immobilien.de"]}

reverse_dns:
  kuegy.com,www.ericsprojects.de,ericsprojects.de,netflix-4desktop.4nmn.com,95.179.243.180,dev.doerfert-immobilien.de


indicator: 95.181.164.107
indicator_type: ipv4
source: otx
country: NL
queried_at: 2026-03-10T08:22:03.016664
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Netherlands", "country_code": "NL", "city": null, "asn": "AS208626 servtech ltd", "indicator": "95.181.164.107", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 9, "malware_samples": [], "passive_dns": ["6mk8.esoestarjeta.com", "www.6mk8.esoestarjeta.com", "bornasamaneh.com", "alisonbickett.com", "www.alisonbickett.com", "esoestarjeta.com", "www.esoestarjeta.com", "www.alnakheeltraders.com", "alnakheel

reverse_dns:
  6mk8.esoestarjeta.com,www.6mk8.esoestarjeta.com,bornasamaneh.com,alisonbickett.com,www.alisonbickett.com,esoestarjeta.com,www.esoestarjeta.com,www.alnakheeltraders.com,alnakheeltraders.com


indicator: 95.214.55.246
indicator_type: ipv4
source: otx
country: PL
reverse_dns: bncisdor.nriasoruvd.info
hosting_provider: exploits,postgres,ldap,oracle,scan,p0f,elasticpot,honeypot,heralding,sensor-tagged
queried_at: 2026-03-10T08:22:05.760036
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Poland", "country_code": "PL", "city": null, "asn": "AS201814 meverywhere sp. z o.o.", "indicator": "95.214.55.246", "tags": ["exploits", "postgres", "ldap", "oracle", "scan", "p0f", "elasticpot", "honeypot", "heralding", "sensor-tagged", "scanner", "android", "sftp", "cisco", "sip", "2026-01", "socks5", "sentrypeer", "imap", "elasticsearch", "dionaea", "ipphoney", "monthly", "2026-02", "Automated", "Adbhoney", "ciscoasa", "cowrie", "LAMP", "ftp",


indicator: 95.215.206.151
indicator_type: ipv4
source: otx
country: NL
city: Dronten
reverse_dns: domik2000.com.ua,www.domik2000.com,domik2000.com,dito007.com
queried_at: 2026-03-10T08:22:07.755197
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Netherlands", "country_code": "NL", "city": "Dronten", "asn": "AS204601 zomro b.v.", "indicator": "95.215.206.151", "tags": [], "pulses": ["Threatfox Recent Additions", "top malware (AnyRun)"], "malware_count": 9, "passive_dns_count": 4, "malware_samples": ["72334eda0fa1761f55a5c170be94105f557785e1d1071a9fb876700b32686799", "88bd127745be4d9bca9c0bb46414738bdea2b81a68dac93a08ff2aaa9ae3d012", "31fd74f2392ea8d048b0ab2c3c7ad2fc90976293c512ad4a6ff685468


indicator: 95.216.118.42
indicator_type: ipv4
source: otx
country: FI
city: Helsinki
queried_at: 2026-03-10T08:22:09.417055
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Finland", "country_code": "FI", "city": "Helsinki", "asn": "AS24940 hetzner online gmbh", "indicator": "95.216.118.42", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 1, "passive_dns_count": 0, "malware_samples": ["b9cab9b0f5cf6f0fa174c0418059d6cf72798358c0628af6a8dfb0910280991b"], "passive_dns": []}


indicator: 95.216.147.179
indicator_type: ipv4
source: otx
country: FI
city: Helsinki
queried_at: 2026-03-10T08:22:11.922962
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Finland", "country_code": "FI", "city": "Helsinki", "asn": "AS24940 hetzner online gmbh", "indicator": "95.216.147.179", "tags": [], "pulses": ["Threatfox Recent Additions", "top malware (AnyRun)"], "malware_count": 1, "passive_dns_count": 7, "malware_samples": ["e33266bded800fc7bf8bb5479de089973e13c3dd47301c3b4ee154fb2a0ec25e"], "passive_dns": ["uppy.sh", "gmsolucionescusco.com", "mc.la-isabella.xyz", "www.deadmallradio.com", "irenegellein.com", "

reverse_dns:
  uppy.sh,gmsolucionescusco.com,mc.la-isabella.xyz,www.deadmallradio.com,irenegellein.com,www.irenegellein.com,deadmallradio.com


indicator: 95.216.159.94
indicator_type: ipv4
source: otx
country: FI
city: Helsinki
reverse_dns: sw.vgaps.zone
hosting_provider: Nextray,cyber security,malicious,ioc,phishing
queried_at: 2026-03-10T08:22:13.716263
raw_data:
  {"pulse_count": 34, "reputation": 0, "country": "Finland", "country_code": "FI", "city": "Helsinki", "asn": "AS24940 hetzner online gmbh", "indicator": "95.216.159.94", "tags": ["Nextray", "cyber security", "malicious", "ioc", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS


indicator: 95.216.179.65
indicator_type: ipv4
source: otx
country: FI
city: Helsinki
hosting_provider: pejzasz,sha1
queried_at: 2026-03-10T08:22:15.411396
raw_data:
  {"pulse_count": 3, "reputation": 0, "country": "Finland", "country_code": "FI", "city": "Helsinki", "asn": "AS24940 hetzner online gmbh", "indicator": "95.216.179.65", "tags": ["pejzasz", "sha1"], "pulses": ["Threatfox Recent Additions", "1W49u3", "https://steamcommunity.com/profiles/76561199832267488"], "malware_count": 0, "passive_dns_count": 9, "malware_samples": [], "passive_dns": ["isaaffik.org", "ns4.seawaves.co.za", "ns4.9trogen.com", "ns4.enchantedhost.com", "ns10.private-nameservers.com

reverse_dns:
  isaaffik.org,ns4.seawaves.co.za,ns4.9trogen.com,ns4.enchantedhost.com,ns10.private-nameservers.com,ns4.wpwhmhost.com,ns4.warehost.net,ns4.softserv.uk,ns4.gnu-host.com


indicator: 95.216.180.148
indicator_type: ipv4
source: otx
country: FI
city: Helsinki
reverse_dns: quiz.fsir.ro,serenalenjerie.ro,shipforrent.com
hosting_provider: steam,vidar,c2,telegram,malware
queried_at: 2026-03-10T08:22:17.182620
raw_data:
  {"pulse_count": 3, "reputation": 0, "country": "Finland", "country_code": "FI", "city": "Helsinki", "asn": "AS24940 hetzner online gmbh", "indicator": "95.216.180.148", "tags": ["steam", "vidar", "c2", "telegram", "malware"], "pulses": ["Vidar - C2 IP/Domain Tracker", "Threatfox Recent Additions", "vidar stealer - telegram & Steam profile:: go77lh"], "malware_count": 1, "passive_dns_count": 3, "malware_samples": ["bee7a94e3504974af87bd500f60512b412fa8240af181cac36dd7be2f3b37a12"], "passive_dns":


indicator: 95.216.19.115
indicator_type: ipv4
source: otx
country: FI
city: Helsinki
hosting_provider: ,ransomware,malware
queried_at: 2026-03-10T08:22:19.937156
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Finland", "country_code": "FI", "city": "Helsinki", "asn": "AS24940 hetzner online gmbh", "indicator": "95.216.19.115", "tags": ["", "ransomware", "malware"], "pulses": ["ThreatFix", "Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 95.216.59.92
indicator_type: ipv4
source: otx
country: FI
city: Helsinki
reverse_dns: pandorasong.com,static.92.59.216.95.clients.your-server.de
hosting_provider: Nextray,cyber security,malicious,ioc,phishing
queried_at: 2026-03-10T08:22:23.051760
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Finland", "country_code": "FI", "city": "Helsinki", "asn": "AS24940 hetzner online gmbh", "indicator": "95.216.59.92", "tags": ["Nextray", "cyber security", "malicious", "ioc", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS_


indicator: 95.217.161.103
indicator_type: ipv4
source: otx
country: FI
city: Helsinki
reverse_dns: omskmir.ru,www.bibliotekskampen.se,bibliotekskampen.se
queried_at: 2026-03-10T08:22:24.889337
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Finland", "country_code": "FI", "city": "Helsinki", "asn": "AS24940 hetzner online gmbh", "indicator": "95.217.161.103", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["omskmir.ru", "www.bibliotekskampen.se", "bibliotekskampen.se"]}


indicator: 95.217.206.215
indicator_type: ipv4
source: otx
country: FI
city: Helsinki
reverse_dns: static.215.206.217.95.clients.your-server.de
queried_at: 2026-03-10T08:22:26.433611
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Finland", "country_code": "FI", "city": "Helsinki", "asn": "AS24940 hetzner online gmbh", "indicator": "95.217.206.215", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["static.215.206.217.95.clients.your-server.de"]}


indicator: 95.217.206.235
indicator_type: ipv4
source: otx
country: FI
city: Helsinki
hosting_provider: Nextray,cyber security,malicious,ioc,phishing
queried_at: 2026-03-10T08:22:28.497666
raw_data:
  {"pulse_count": 37, "reputation": 0, "country": "Finland", "country_code": "FI", "city": "Helsinki", "asn": "AS24940 hetzner online gmbh", "indicator": "95.217.206.235", "tags": ["Nextray", "cyber security", "malicious", "ioc", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RV

reverse_dns:
  sonarr-1080p-en.luebke.io,overseerr.gerstream.xyz,gerstream.xyz,plex.gerstream.xyz,signal.luebke.io,ppmc.luebke.io,api.try.pypirate.dev,nextcloud.luebke.io,keycloak.luebke.io,bitwarden.luebke.io


indicator: 95.217.218.240
indicator_type: ipv4
source: otx
country: FI
city: Helsinki
queried_at: 2026-03-10T08:22:30.025465
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Finland", "country_code": "FI", "city": "Helsinki", "asn": "AS24940 hetzner online gmbh", "indicator": "95.217.218.240", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 6, "malware_samples": [], "passive_dns": ["peer-prep.com", "metaui.peer-prep.com", "editorbackend.peer-prep.com", "editorui.peer-prep.com", "meta.peer-prep.com", "www.gallinews.com"]}

reverse_dns:
  peer-prep.com,metaui.peer-prep.com,editorbackend.peer-prep.com,editorui.peer-prep.com,meta.peer-prep.com,www.gallinews.com


indicator: 95.217.27.252
indicator_type: ipv4
source: otx
country: FI
city: Helsinki
queried_at: 2026-03-10T08:22:32.189182
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Finland", "country_code": "FI", "city": "Helsinki", "asn": "AS24940 hetzner online gmbh", "indicator": "95.217.27.252", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 8, "malware_samples": [], "passive_dns": ["up.t.goldenloafuae.com", "ls.t.goldenloafuae.com", "log.t.goldenloafuae.com", "e.mx.goldenloafuae.com", "d.mx.goldenloafuae.com", "www.tieqimeng.com", "tieqimeng.com", "mx.tieqimeng.com"]}

reverse_dns:
  up.t.goldenloafuae.com,ls.t.goldenloafuae.com,log.t.goldenloafuae.com,e.mx.goldenloafuae.com,d.mx.goldenloafuae.com,www.tieqimeng.com,tieqimeng.com,mx.tieqimeng.com


indicator: 95.217.31.199
indicator_type: ipv4
source: otx
country: FI
city: Helsinki
queried_at: 2026-03-10T08:22:33.763053
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Finland", "country_code": "FI", "city": "Helsinki", "asn": "AS24940 hetzner online gmbh", "indicator": "95.217.31.199", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 8, "malware_samples": [], "passive_dns": ["poolsthegame.com", "www.poolsthegame.com", "www.tensori.fi", "tensori.fi", "vmsync.mgrd.dev", "vmproxy.mgrd.dev", "mqtts.mgrd.dev", "l.download-boy.site"]}

reverse_dns:
  poolsthegame.com,www.poolsthegame.com,www.tensori.fi,tensori.fi,vmsync.mgrd.dev,vmproxy.mgrd.dev,mqtts.mgrd.dev,l.download-boy.site


indicator: 95.217.60.176
indicator_type: ipv4
source: otx
country: FI
city: Helsinki
reverse_dns: gate.gages.io,gages.io,kowl.gages.io
queried_at: 2026-03-10T08:22:35.430249
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Finland", "country_code": "FI", "city": "Helsinki", "asn": "AS24940 hetzner online gmbh", "indicator": "95.217.60.176", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["gate.gages.io", "gages.io", "kowl.gages.io"]}


indicator: 94.31.108.129
indicator_type: ipv4
source: abuseipdb
country: DE
city: 0
hosting_provider: Deutsche Glasfaser Wholesale GmbH
queried_at: 2026-03-10T08:22:36.100745
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "DE", "isp": "Deutsche Glasfaser Wholesale GmbH", "domain": "deutsche-glasfaser.de", "usage_type": "Fixed Line ISP", "last_reported": null, "categories": []}


indicator: 94.46.171.151
indicator_type: ipv4
source: abuseipdb
country: PT
city: 0
hosting_provider: ALMOUROLTEC SERVICOS DE INFORMATICA E INTERNET LDA
queried_at: 2026-03-10T08:22:38.043711
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "PT", "isp": "ALMOUROLTEC SERVICOS DE INFORMATICA E INTERNET LDA", "domain": "ptisp.pt", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-06-23T08:07:18+00:00", "categories": []}


indicator: 94.46.171.220
indicator_type: ipv4
source: abuseipdb
country: PT
city: 0
hosting_provider: ALMOUROLTEC SERVICOS DE INFORMATICA E INTERNET LDA
queried_at: 2026-03-10T08:22:40.035581
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "PT", "isp": "ALMOUROLTEC SERVICOS DE INFORMATICA E INTERNET LDA", "domain": "ptisp.pt", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 94.46.171.221
indicator_type: ipv4
source: abuseipdb
country: PT
city: 0
hosting_provider: ALMOUROLTEC SERVICOS DE INFORMATICA E INTERNET LDA
queried_at: 2026-03-10T08:22:41.667990
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "PT", "isp": "ALMOUROLTEC SERVICOS DE INFORMATICA E INTERNET LDA", "domain": "ptisp.pt", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-07-04T23:40:21+00:00", "categories": []}


indicator: 94.46.171.245
indicator_type: ipv4
source: abuseipdb
country: PT
city: 0
hosting_provider: ALMOUROLTEC SERVICOS DE INFORMATICA E INTERNET LDA
queried_at: 2026-03-10T08:22:43.293784
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "PT", "isp": "ALMOUROLTEC SERVICOS DE INFORMATICA E INTERNET LDA", "domain": "ptisp.pt", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-04-28T10:29:01+00:00", "categories": []}


indicator: 94.66.237.39
indicator_type: ipv4
source: abuseipdb
country: GR
city: 0
hosting_provider: Ote SA (Hellenic Telecommunications Organisation)
queried_at: 2026-03-10T08:22:45.286055
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "GR", "isp": "Ote SA (Hellenic Telecommunications Organisation)", "domain": "otenet.gr", "usage_type": "Fixed Line ISP", "last_reported": null, "categories": []}


indicator: 95.116.129.67
indicator_type: ipv4
source: abuseipdb
country: DE
city: 0
hosting_provider: NCC#2008114512
queried_at: 2026-03-10T08:22:47.208799
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "DE", "isp": "NCC#2008114512", "domain": "telefonica.de", "usage_type": "Fixed Line ISP", "last_reported": null, "categories": []}


indicator: 95.128.137.159
indicator_type: ipv4
source: abuseipdb
country: RU
city: 1
hosting_provider: JSC ParmaTel
queried_at: 2026-03-10T08:22:57.209827
raw_data:
  {"abuse_confidence": 0, "total_reports": 1, "is_public": true, "is_tor": false, "country": "RU", "isp": "JSC ParmaTel", "domain": "parmatel.ru", "usage_type": "Fixed Line ISP", "last_reported": "2026-01-21T09:53:09+00:00", "categories": [4]}


indicator: 95.131.202.38
indicator_type: ipv4
source: abuseipdb
country: SK
city: 0
hosting_provider: Hosteroid - Bratislava
queried_at: 2026-03-10T08:22:59.184948
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "SK", "isp": "Hosteroid - Bratislava", "domain": "hosteroid.uk", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 95.156.207.88
indicator_type: ipv4
source: abuseipdb
country: DE
city: 0
hosting_provider: EDIS Infrastructure in Germany
queried_at: 2026-03-10T08:23:01.018625
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "DE", "isp": "EDIS Infrastructure in Germany", "domain": "edis.at", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 95.158.10.196
indicator_type: ipv4
source: abuseipdb
country: UA
city: 0
hosting_provider: LIMITED LIABILITY COMPANY BEST SOLUTIONS
queried_at: 2026-03-10T08:23:02.812793
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "UA", "isp": "LIMITED LIABILITY COMPANY BEST SOLUTIONS", "domain": "best.net.ua", "usage_type": "Fixed Line ISP", "last_reported": null, "categories": []}


indicator: 95.163.84.250
indicator_type: ipv4
source: abuseipdb
country: RU
city: 1
hosting_provider: LLC Digital Network
queried_at: 2026-03-10T08:23:04.790599
raw_data:
  {"abuse_confidence": 0, "total_reports": 1, "is_public": true, "is_tor": false, "country": "RU", "isp": "LLC Digital Network", "domain": "msm.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-01-09T11:23:48+00:00", "categories": [15]}


indicator: 95.164.19.68
indicator_type: ipv4
source: abuseipdb
country: KZ
city: 0
hosting_provider: WorkTitans B.V.
queried_at: 2026-03-10T08:23:06.761442
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "KZ", "isp": "WorkTitans B.V.", "domain": "the.hosting", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-04-01T15:28:29+00:00", "categories": []}


indicator: 95.164.5.131
indicator_type: ipv4
source: abuseipdb
country: BR
city: 0
hosting_provider: WorkTitans B.V.
queried_at: 2026-03-10T08:23:08.563208
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "BR", "isp": "WorkTitans B.V.", "domain": "the.hosting", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 95.164.53.3
indicator_type: ipv4
source: abuseipdb
country: DE
city: 0
hosting_provider: QWINS Hosting
queried_at: 2026-03-10T08:23:10.346526
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "DE", "isp": "QWINS Hosting", "domain": "qwins.co", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 95.168.194.192
indicator_type: ipv4
source: abuseipdb
country: CZ
city: 0
hosting_provider: SH.cz s.r.o.
queried_at: 2026-03-10T08:23:12.228836
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "CZ", "isp": "SH.cz s.r.o.", "domain": "sh.cz", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 94.31.108.129
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: Deutsche Glasfaser Wholesale GmbH
queried_at: 2026-03-10T08:23:14.000288
raw_data:
  {"malicious": 0, "suspicious": 1, "harmless": 60, "undetected": 33, "reputation": -1, "country": "DE", "as_owner": "Deutsche Glasfaser Wholesale GmbH", "asn": 60294, "network": "94.31.64.0/18", "last_analysis_date": 1766634992}


indicator: 94.46.171.151
indicator_type: ipv4
source: virustotal
country: PT
hosting_provider: Almouroltec Servicos De Informatica E Internet Lda
queried_at: 2026-03-10T08:23:34.263278
raw_data:
  {"malicious": 2, "suspicious": 0, "harmless": 59, "undetected": 33, "reputation": -1, "country": "PT", "as_owner": "Almouroltec Servicos De Informatica E Internet Lda", "asn": 24768, "network": "94.46.160.0/20", "last_analysis_date": 1768793414}


indicator: 94.46.171.220
indicator_type: ipv4
source: virustotal
country: PT
hosting_provider: Almouroltec Servicos De Informatica E Internet Lda
queried_at: 2026-03-10T08:23:54.572434
raw_data:
  {"malicious": 1, "suspicious": 1, "harmless": 59, "undetected": 33, "reputation": 0, "country": "PT", "as_owner": "Almouroltec Servicos De Informatica E Internet Lda", "asn": 24768, "network": "94.46.160.0/20", "last_analysis_date": 1771573505}


indicator: 94.46.171.221
indicator_type: ipv4
source: virustotal
country: PT
hosting_provider: Almouroltec Servicos De Informatica E Internet Lda
queried_at: 2026-03-10T08:24:14.844631
raw_data:
  {"malicious": 2, "suspicious": 0, "harmless": 59, "undetected": 33, "reputation": 0, "country": "PT", "as_owner": "Almouroltec Servicos De Informatica E Internet Lda", "asn": 24768, "network": "94.46.160.0/20", "last_analysis_date": 1773104917}


indicator: 94.46.171.245
indicator_type: ipv4
source: virustotal
country: PT
hosting_provider: Almouroltec Servicos De Informatica E Internet Lda
queried_at: 2026-03-10T08:24:35.245259
raw_data:
  {"malicious": 2, "suspicious": 1, "harmless": 57, "undetected": 34, "reputation": -1, "country": "PT", "as_owner": "Almouroltec Servicos De Informatica E Internet Lda", "asn": 24768, "network": "94.46.160.0/20", "last_analysis_date": 1773135898}


indicator: 94.66.237.39
indicator_type: ipv4
source: virustotal
country: GR
hosting_provider: OTEnet S.A.
queried_at: 2026-03-10T08:24:56.896171
raw_data:
  {"malicious": 1, "suspicious": 1, "harmless": 60, "undetected": 32, "reputation": 0, "country": "GR", "as_owner": "OTEnet S.A.", "asn": 6799, "network": "94.64.0.0/13", "last_analysis_date": 1770330272}


indicator: 95.116.129.67
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: Telefonica Germany
queried_at: 2026-03-10T08:25:17.218132
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "DE", "as_owner": "Telefonica Germany", "asn": 6805, "network": "95.112.0.0/13", "last_analysis_date": 1730080530}


indicator: 95.116.21.181
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: Telefonica Germany
queried_at: 2026-03-10T08:25:37.488558
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "DE", "as_owner": "Telefonica Germany", "asn": 6805, "network": "95.112.0.0/13", "last_analysis_date": 1730080560}


indicator: 95.116.7.122
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: Telefonica Germany
queried_at: 2026-03-10T08:25:58.079470
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "DE", "as_owner": "Telefonica Germany", "asn": 6805, "network": "95.112.0.0/13", "last_analysis_date": 1730080568}


indicator: 94.31.108.129
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 94.31.96.0/20
hosting_provider: DE-DGW Deutsche Glasfaser Wholesale Internet
queried_at: 2026-03-10T08:26:38.663805
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@deutsche-glasfaser.de", "as": 60294, "asname": "DE-DGW Deutsche Glasfaser Wholesale Internet", "ascountry": "DE", "assource": "", "network": "94.31.96.0/20", "threatfeeds": {}}


indicator: 94.46.171.151
indicator_type: ipv4
source: dshield
country: PT
reverse_dns: 94.46.160.0/20
hosting_provider: ALMOUROLTEC
queried_at: 2026-03-10T08:26:39.977210
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ptisp.pt", "as": 24768, "asname": "ALMOUROLTEC", "ascountry": "PT", "assource": "", "network": "94.46.160.0/20", "threatfeeds": {"alltor": {"lastseen": "2026-01-03", "firstseen": "2025-02-04"}}}


indicator: 94.46.171.220
indicator_type: ipv4
source: dshield
country: PT
reverse_dns: 94.46.160.0/20
hosting_provider: ALMOUROLTEC
queried_at: 2026-03-10T08:26:41.284414
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ptisp.pt", "as": 24768, "asname": "ALMOUROLTEC", "ascountry": "PT", "assource": "", "network": "94.46.160.0/20", "threatfeeds": {}}


indicator: 94.46.171.221
indicator_type: ipv4
source: dshield
country: PT
reverse_dns: 94.46.160.0/20
hosting_provider: ALMOUROLTEC
queried_at: 2026-03-10T08:26:42.614951
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ptisp.pt", "as": 24768, "asname": "ALMOUROLTEC", "ascountry": "PT", "assource": "", "network": "94.46.160.0/20", "threatfeeds": {"alltor": {"lastseen": "2026-03-03", "firstseen": "2025-02-04"}}}


indicator: 94.46.171.245
indicator_type: ipv4
source: dshield
country: PT
reverse_dns: 94.46.160.0/20
hosting_provider: ALMOUROLTEC
queried_at: 2026-03-10T08:26:43.903739
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ptisp.pt", "as": 24768, "asname": "ALMOUROLTEC", "ascountry": "PT", "assource": "", "network": "94.46.160.0/20", "threatfeeds": {"alltor": {"lastseen": "2026-03-02", "firstseen": "2025-02-04"}}}


indicator: 94.66.237.39
indicator_type: ipv4
source: dshield
country: GR
reverse_dns: 94.66.0.0/16
hosting_provider: OTENET-GR Athens - Greece
queried_at: 2026-03-10T08:26:45.234612
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ote.gr", "as": 6799, "asname": "OTENET-GR Athens - Greece", "ascountry": "GR", "assource": "", "network": "94.66.0.0/16", "threatfeeds": {}}


indicator: 95.116.129.67
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 95.112.0.0/13
hosting_provider: TDDE-ASN1
queried_at: 2026-03-10T08:26:46.533788
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse.de@telefonica.com", "as": 6805, "asname": "TDDE-ASN1", "ascountry": "DE", "assource": "", "network": "95.112.0.0/13", "threatfeeds": {}}


indicator: 95.128.137.159
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 95.128.137.0/24
hosting_provider: PARMATEL-AS
queried_at: 2026-03-10T08:26:53.231664
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@parmatel.ru", "as": 44572, "asname": "PARMATEL-AS", "ascountry": "RU", "assource": "", "network": "95.128.137.0/24", "threatfeeds": {}}


indicator: 95.158.10.196
indicator_type: ipv4
source: dshield
country: UA
reverse_dns: 95.158.0.0/18
hosting_provider: BEST Best ISP
queried_at: 2026-03-10T08:26:58.381172
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "noc@best.net.ua", "as": 35362, "asname": "BEST Best ISP", "ascountry": "UA", "assource": "", "network": "95.158.0.0/18", "threatfeeds": {}}


indicator: 95.163.84.250
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 95.163.64.0/18
hosting_provider: DINET-AS
queried_at: 2026-03-10T08:26:59.693925
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@msm.ru", "as": 12695, "asname": "DINET-AS", "ascountry": "RU", "assource": "", "network": "95.163.64.0/18", "threatfeeds": {}}


indicator: 95.164.19.68
indicator_type: ipv4
source: dshield
country: GB
reverse_dns: 95.164.19.0/24
hosting_provider: STARK-INDUSTRIES
queried_at: 2026-03-10T08:27:01.014114
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "aospan@netup.ru", "as": 44477, "asname": "STARK-INDUSTRIES", "ascountry": "GB", "assource": "", "network": "95.164.19.0/24", "threatfeeds": {}}


indicator: 95.164.53.3
indicator_type: ipv4
source: dshield
country: UA
reverse_dns: 95.164.52.0/22
hosting_provider: RIDER
queried_at: 2026-03-10T08:27:04.237430
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "support@rider.com.ua", "as": 8772, "asname": "RIDER", "ascountry": "UA", "assource": "", "network": "95.164.52.0/22", "threatfeeds": {"rosti": {"lastseen": "2025-03-20", "firstseen": "2025-03-20"}}}


indicator: 95.168.194.192
indicator_type: ipv4
source: dshield
country: CZ
reverse_dns: 95.168.192.0/19
hosting_provider: SUPERNETWORK \^_^
queried_at: 2026-03-10T08:27:05.554454
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@superhosting.cz", "as": 39392, "asname": "SUPERNETWORK \\^_^", "ascountry": "CZ", "assource": "", "network": "95.168.192.0/19", "threatfeeds": {}}


indicator: 95.169.203.245
indicator_type: ipv4
source: dshield
country: BG
reverse_dns: 95.169.203.0/24
hosting_provider: BTEL-BG-AS
queried_at: 2026-03-10T08:27:06.853175
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@bulgartel.bg", "as": 44814, "asname": "BTEL-BG-AS", "ascountry": "BG", "assource": "", "network": "95.169.203.0/24", "threatfeeds": {}}


indicator: 95.179.162.106
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 95.179.160.0/20
hosting_provider: AS-CHOOPA
queried_at: 2026-03-10T08:27:10.037472
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@choopa.com", "as": 20473, "asname": "AS-CHOOPA", "ascountry": "US", "assource": "", "network": "95.179.160.0/20", "threatfeeds": {"alltor": {"lastseen": "2026-01-30", "firstseen": "2025-02-04"}}}


indicator: 95.179.243.180
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 95.179.240.0/20
hosting_provider: AS-CHOOPA
queried_at: 2026-03-10T08:27:11.392920
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@choopa.com", "as": 20473, "asname": "AS-CHOOPA", "ascountry": "US", "assource": "", "network": "95.179.240.0/20", "threatfeeds": {}}


indicator: 95.181.164.107
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 95.181.164.0/24
hosting_provider: SERV-TECH
queried_at: 2026-03-10T08:27:12.688638
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@serv-tech.ru", "as": 208626, "asname": "SERV-TECH", "ascountry": "RU", "assource": "", "network": "95.181.164.0/24", "threatfeeds": {}}


indicator: 95.214.55.246
indicator_type: ipv4
source: dshield
country: PL
reverse_dns: 95.214.52.0/22
hosting_provider: MEVSPACE
queried_at: 2026-03-10T08:27:14.053490
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@skynode.pl", "as": 201814, "asname": "MEVSPACE", "ascountry": "PL", "assource": "", "network": "95.214.52.0/22", "threatfeeds": {}}


indicator: 95.215.206.151
indicator_type: ipv4
source: dshield
country: NL
reverse_dns: 95.215.204.0/22
hosting_provider: ON-LINE-DATA Server location - Netherlands, Dronten
queried_at: 2026-03-10T08:27:15.412277
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@novoserve.com", "as": 204601, "asname": "ON-LINE-DATA Server location - Netherlands, Dronten", "ascountry": "NL", "assource": "", "network": "95.215.204.0/22", "threatfeeds": {}}


indicator: 95.216.118.42
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 95.216.0.0/16
hosting_provider: HETZNER-AS
queried_at: 2026-03-10T08:27:16.708190
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@hetzner.de", "as": 24940, "asname": "HETZNER-AS", "ascountry": "DE", "assource": "", "network": "95.216.0.0/16", "threatfeeds": {}}


indicator: 95.217.161.103
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 95.217.0.0/16
hosting_provider: HETZNER-AS
queried_at: 2026-03-10T08:27:26.020003
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@hetzner.de", "as": 24940, "asname": "HETZNER-AS", "ascountry": "DE", "assource": "", "network": "95.217.0.0/16", "threatfeeds": {}}


indicator: 95.219.224.174
indicator_type: ipv4
source: dshield
country: SA
reverse_dns: 95.219.224.0/20
hosting_provider: SAUDINETSTC-AS
queried_at: 2026-03-10T08:27:36.945356
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "registry@stc.com.sa", "as": 25019, "asname": "SAUDINETSTC-AS", "ascountry": "SA", "assource": "", "network": "95.219.224.0/20", "threatfeeds": {}}


indicator: 95.222.182.145
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 95.222.0.0/16
hosting_provider: VODANET International IP-Backbone of Vodafone
queried_at: 2026-03-10T08:27:38.250608
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@arcor-ip.de", "as": 3209, "asname": "VODANET International IP-Backbone of Vodafone", "ascountry": "DE", "assource": "", "network": "95.222.0.0/16", "threatfeeds": {}}


indicator: 95.223.32.66
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 95.223.0.0/16
hosting_provider: VODANET International IP-Backbone of Vodafone
queried_at: 2026-03-10T08:27:39.573969
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@arcor-ip.de", "as": 3209, "asname": "VODANET International IP-Backbone of Vodafone", "ascountry": "DE", "assource": "", "network": "95.223.0.0/16", "threatfeeds": {}}


indicator: 95.232.104.205
indicator_type: ipv4
source: dshield
country: IT
reverse_dns: 95.232.0.0/15
hosting_provider: ASN-IBSNAZ
queried_at: 2026-03-10T08:27:42.174478
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@business.telecomitalia.it", "as": 3269, "asname": "ASN-IBSNAZ", "ascountry": "IT", "assource": "", "network": "95.232.0.0/15", "threatfeeds": {}}


indicator: 95.239.48.26
indicator_type: ipv4
source: dshield
country: IT
reverse_dns: 95.238.0.0/15
hosting_provider: ASN-IBSNAZ
queried_at: 2026-03-10T08:27:43.540811
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@business.telecomitalia.it", "as": 3269, "asname": "ASN-IBSNAZ", "ascountry": "IT", "assource": "", "network": "95.238.0.0/15", "threatfeeds": {}}


indicator: 95.244.175.135
indicator_type: ipv4
source: dshield
country: IT
reverse_dns: 95.244.0.0/16
hosting_provider: ASN-IBSNAZ
queried_at: 2026-03-10T08:27:45.269437
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@business.telecomitalia.it", "as": 3269, "asname": "ASN-IBSNAZ", "ascountry": "IT", "assource": "", "network": "95.244.0.0/16", "threatfeeds": {}}


indicator: 95.249.183.252
indicator_type: ipv4
source: dshield
country: IT
reverse_dns: 95.248.0.0/15
hosting_provider: ASN-IBSNAZ
queried_at: 2026-03-10T08:27:46.471496
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@business.telecomitalia.it", "as": 3269, "asname": "ASN-IBSNAZ", "ascountry": "IT", "assource": "", "network": "95.248.0.0/15", "threatfeeds": {}}


indicator: 95.33.155.89
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 95.33.0.0/16
hosting_provider: EWETEL Cloppenburger Strasse 310
queried_at: 2026-03-10T08:27:47.811597
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ewetel.de", "as": 9145, "asname": "EWETEL Cloppenburger Strasse 310", "ascountry": "DE", "assource": "", "network": "95.33.0.0/16", "threatfeeds": {}}


indicator: 95.88.155.18
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 95.88.0.0/14
hosting_provider: VODANET International IP-Backbone of Vodafone
queried_at: 2026-03-10T08:27:54.606246
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@arcor-ip.de", "as": 3209, "asname": "VODANET International IP-Backbone of Vodafone", "ascountry": "DE", "assource": "", "network": "95.88.0.0/14", "threatfeeds": {}}


indicator: 96.242.126.171
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 96.242.0.0/16
hosting_provider: UUNET
queried_at: 2026-03-10T08:28:01.119410
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse-mail@verizonbusiness.com", "as": 701, "asname": "UUNET", "ascountry": "US", "assource": "", "network": "96.242.0.0/16", "threatfeeds": {}}


indicator: 96.246.198.80
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 96.246.128.0/17
hosting_provider: UUNET
queried_at: 2026-03-10T08:28:02.345478
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse-mail@verizonbusiness.com", "as": 701, "asname": "UUNET", "ascountry": "US", "assource": "", "network": "96.246.128.0/17", "threatfeeds": {}}


indicator: 96.246.91.185
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 96.246.0.0/17
hosting_provider: UUNET
queried_at: 2026-03-10T08:28:03.740816
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse-mail@verizonbusiness.com", "as": 701, "asname": "UUNET", "ascountry": "US", "assource": "", "network": "96.246.0.0/17", "threatfeeds": {}}


indicator: 96.255.130.174
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 96.255.0.0/16
hosting_provider: UUNET
queried_at: 2026-03-10T08:28:05.067537
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse-mail@verizonbusiness.com", "as": 701, "asname": "UUNET", "ascountry": "US", "assource": "", "network": "96.255.0.0/16", "threatfeeds": {}}


indicator: 96.47.234.74
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 96.47.232.0/22
hosting_provider: ASN-QUADRANET-GLOBAL
queried_at: 2026-03-10T08:28:06.371756
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "support@quadranet.com", "as": 8100, "asname": "ASN-QUADRANET-GLOBAL", "ascountry": "US", "assource": "", "network": "96.47.232.0/22", "threatfeeds": {}}


indicator: 96.62.89.102
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 96.62.0.0/16
hosting_provider: VPLSNET
queried_at: 2026-03-10T08:28:07.690774
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@kryptservers.com", "as": 35908, "asname": "VPLSNET", "ascountry": "US", "assource": "", "network": "96.62.0.0/16", "threatfeeds": {}}


