# enrichment_results

indicator: 80.76.49.203
indicator_type: ipv4
source: abuseipdb
country: US
city: 14
hosting_provider: Virtuo Networks France SAS
queried_at: 2026-05-27T06:25:22.906820
raw_data:
  {"abuse_confidence": 0, "total_reports": 14, "is_public": true, "is_tor": false, "country": "US", "isp": "Virtuo Networks France SAS", "domain": "virtuo.host", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-03-27T15:26:58+00:00", "categories": [18, 22]}


indicator: 80.76.49.217
indicator_type: ipv4
source: abuseipdb
country: US
city: 0
hosting_provider: Virtuo Networks France SAS
queried_at: 2026-05-27T06:25:24.762743
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "US", "isp": "Virtuo Networks France SAS", "domain": "virtuo.host", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-07-21T02:11:27+00:00", "categories": []}


indicator: 80.76.49.218
indicator_type: ipv4
source: abuseipdb
country: US
city: 4
hosting_provider: Virtuo Networks France SAS
queried_at: 2026-05-27T06:25:26.667230
raw_data:
  {"abuse_confidence": 11, "total_reports": 4, "is_public": true, "is_tor": false, "country": "US", "isp": "Virtuo Networks France SAS", "domain": "virtuo.host", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-04-02T23:46:45+00:00", "categories": [18, 14, 22, 15]}


indicator: 80.76.49.222
indicator_type: ipv4
source: abuseipdb
country: US
city: 0
hosting_provider: Virtuo Networks France SAS
queried_at: 2026-05-27T06:25:30.341789
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "US", "isp": "Virtuo Networks France SAS", "domain": "virtuo.host", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-10-22T00:49:44+00:00", "categories": []}


indicator: 80.76.49.228
indicator_type: ipv4
source: abuseipdb
country: US
city: 0
hosting_provider: Virtuo Networks France SAS
queried_at: 2026-05-27T06:25:33.952124
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "US", "isp": "Virtuo Networks France SAS", "domain": "virtuo.host", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-07-27T22:29:11+00:00", "categories": []}


indicator: 80.76.49.230
indicator_type: ipv4
source: abuseipdb
country: US
city: 0
hosting_provider: Virtuo Networks France SAS
queried_at: 2026-05-27T06:25:35.717126
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "US", "isp": "Virtuo Networks France SAS", "domain": "virtuo.host", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-08-09T05:32:49+00:00", "categories": []}


indicator: 80.76.49.233
indicator_type: ipv4
source: abuseipdb
country: US
city: 0
hosting_provider: Virtuo Networks France SAS
queried_at: 2026-05-27T06:25:37.525308
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "US", "isp": "Virtuo Networks France SAS", "domain": "virtuo.host", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-09-02T02:34:06+00:00", "categories": []}


indicator: 80.76.49.237
indicator_type: ipv4
source: abuseipdb
country: US
city: 1
hosting_provider: Virtuo Networks France SAS
queried_at: 2026-05-27T06:25:41.145490
raw_data:
  {"abuse_confidence": 0, "total_reports": 1, "is_public": true, "is_tor": false, "country": "US", "isp": "Virtuo Networks France SAS", "domain": "virtuo.host", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-04-23T07:14:02+00:00", "categories": [21, 15]}


indicator: 80.76.49.239
indicator_type: ipv4
source: abuseipdb
country: US
city: 0
hosting_provider: Virtuo Networks France SAS
queried_at: 2026-05-27T06:25:42.929703
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "US", "isp": "Virtuo Networks France SAS", "domain": "virtuo.host", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-07-01T10:37:08+00:00", "categories": []}


indicator: 80.76.49.241
indicator_type: ipv4
source: abuseipdb
country: US
city: 4
hosting_provider: Virtuo Networks France SAS
queried_at: 2026-05-27T06:25:44.748733
raw_data:
  {"abuse_confidence": 0, "total_reports": 4, "is_public": true, "is_tor": false, "country": "US", "isp": "Virtuo Networks France SAS", "domain": "virtuo.host", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-04-24T00:09:55+00:00", "categories": [21, 22]}


indicator: 80.76.49.254
indicator_type: ipv4
source: abuseipdb
country: US
city: 0
hosting_provider: Virtuo Networks France SAS
queried_at: 2026-05-27T06:25:48.390597
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "US", "isp": "Virtuo Networks France SAS", "domain": "virtuo.host", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-03-05T22:18:49+00:00", "categories": []}


indicator: 80.76.49.98
indicator_type: ipv4
source: abuseipdb
country: US
city: 5
hosting_provider: Virtuo Networks France SAS
queried_at: 2026-05-27T06:25:50.229595
raw_data:
  {"abuse_confidence": 20, "total_reports": 5, "is_public": true, "is_tor": false, "country": "US", "isp": "Virtuo Networks France SAS", "domain": "virtuo.host", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-04-27T03:08:16+00:00", "categories": [18, 22, 15]}


indicator: 80.76.49.166
indicator_type: ipv4
source: abuseipdb
country: US
city: 2
hosting_provider: Virtuo Networks France SAS
queried_at: 2026-05-27T06:25:52.056609
raw_data:
  {"abuse_confidence": 0, "total_reports": 2, "is_public": true, "is_tor": false, "country": "US", "isp": "Virtuo Networks France SAS", "domain": "virtuo.host", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-04-13T20:02:30+00:00", "categories": [19, 21]}


indicator: 80.76.49.207
indicator_type: ipv4
source: abuseipdb
country: US
city: 1
hosting_provider: Virtuo Networks France SAS
queried_at: 2026-05-27T06:25:55.686945
raw_data:
  {"abuse_confidence": 0, "total_reports": 1, "is_public": true, "is_tor": false, "country": "US", "isp": "Virtuo Networks France SAS", "domain": "virtuo.host", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-04-11T06:15:05+00:00", "categories": [18]}


indicator: 80.76.46.2
indicator_type: ipv4
source: abuseipdb
country: US
city: 0
hosting_provider: Critical Web Solutions LLC
queried_at: 2026-05-27T06:25:59.708979
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "US", "isp": "Critical Web Solutions LLC", "domain": "critical.ws", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 80.76.47.2
indicator_type: ipv4
source: abuseipdb
country: US
city: 0
hosting_provider: Beyond Tomorrow Ltd
queried_at: 2026-05-27T06:26:22.301059
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "US", "isp": "Beyond Tomorrow Ltd", "domain": "beyond.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 80.76.47.4
indicator_type: ipv4
source: abuseipdb
country: US
city: 0
hosting_provider: Beyond Tomorrow Ltd
queried_at: 2026-05-27T06:26:26.114979
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "US", "isp": "Beyond Tomorrow Ltd", "domain": "beyond.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2022-12-05T18:02:46+00:00", "categories": []}


indicator: 176.65.142.9
indicator_type: ipv4
source: abuseipdb
country: GB
city: 0
hosting_provider: ZeXoTeK IT-Services GmbH
queried_at: 2026-05-27T06:26:44.784508
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "GB", "isp": "ZeXoTeK IT-Services GmbH", "domain": "miteflux.co.uk", "usage_type": "Commercial", "last_reported": null, "categories": []}


indicator: 91.186.217.80
indicator_type: ipv4
source: abuseipdb
country: DE
city: 0
hosting_provider: NetCrafters OU
queried_at: 2026-05-27T06:26:46.720150
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "DE", "isp": "NetCrafters OU", "domain": "netcraftersou.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 91.92.43.119
indicator_type: ipv4
source: abuseipdb
country: DE
city: 0
hosting_provider: DEDIK SERVICES LIMITED
queried_at: 2026-05-27T06:26:48.520932
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "DE", "isp": "DEDIK SERVICES LIMITED", "domain": "dedik.io", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 91.92.43.246
indicator_type: ipv4
source: abuseipdb
country: DE
city: 0
hosting_provider: DEDIK SERVICES LIMITED
queried_at: 2026-05-27T06:27:06.855113
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "DE", "isp": "DEDIK SERVICES LIMITED", "domain": "dedik.io", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-10-07T11:17:46+00:00", "categories": []}


indicator: 91.92.43.26
indicator_type: ipv4
source: abuseipdb
country: DE
city: 0
hosting_provider: DEDIK SERVICES LIMITED
queried_at: 2026-05-27T06:27:15.719723
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "DE", "isp": "DEDIK SERVICES LIMITED", "domain": "dedik.io", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-06-02T04:05:26+00:00", "categories": []}


indicator: 91.92.43.52
indicator_type: ipv4
source: abuseipdb
country: DE
city: 0
hosting_provider: DEDIK SERVICES LIMITED
queried_at: 2026-05-27T06:27:39.561738
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "DE", "isp": "DEDIK SERVICES LIMITED", "domain": "dedik.io", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-12-15T09:02:26+00:00", "categories": []}


indicator: 91.92.43.89
indicator_type: ipv4
source: abuseipdb
country: DE
city: 0
hosting_provider: DEDIK SERVICES LIMITED
queried_at: 2026-05-27T06:28:06.632459
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "DE", "isp": "DEDIK SERVICES LIMITED", "domain": "dedik.io", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-10-04T10:11:13+00:00", "categories": []}


indicator: 194.85.251.128
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: Snowd Security OU
queried_at: 2026-05-27T06:28:24.601519
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "Snowd Security OU", "domain": "snowd.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-11-03T18:24:42+00:00", "categories": []}


indicator: 194.85.251.14
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: Snowd Security OU
queried_at: 2026-05-27T06:28:28.153773
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "Snowd Security OU", "domain": "snowd.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-02-01T09:05:13+00:00", "categories": []}


indicator: 194.85.251.19
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: Snowd Security OU
queried_at: 2026-05-27T06:28:38.923770
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "Snowd Security OU", "domain": "snowd.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-02-01T09:14:17+00:00", "categories": []}


indicator: 194.85.251.216
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: Snowd Security OU
queried_at: 2026-05-27T06:28:44.498199
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "Snowd Security OU", "domain": "snowd.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-02-05T20:45:00+00:00", "categories": []}


indicator: 194.85.251.49
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: Snowd Security OU
queried_at: 2026-05-27T06:28:53.532806
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "Snowd Security OU", "domain": "snowd.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-02-17T12:59:23+00:00", "categories": []}


indicator: 194.85.251.61
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: Snowd Security OU
queried_at: 2026-05-27T06:28:55.297250
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "Snowd Security OU", "domain": "snowd.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-02-01T23:45:08+00:00", "categories": []}


indicator: 194.85.251.26
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: Snowd Security OU
queried_at: 2026-05-27T06:29:02.438961
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "Snowd Security OU", "domain": "snowd.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-02-21T11:37:43+00:00", "categories": []}


indicator: 194.85.251.45
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: Snowd Security OU
queried_at: 2026-05-27T06:29:04.228195
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "Snowd Security OU", "domain": "snowd.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-02-19T02:09:40+00:00", "categories": []}


indicator: 194.85.251.56
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: Snowd Security OU
queried_at: 2026-05-27T06:29:07.753386
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "Snowd Security OU", "domain": "snowd.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-02-01T10:00:15+00:00", "categories": []}


indicator: 194.85.251.59
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: Snowd Security OU
queried_at: 2026-05-27T06:29:11.389288
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "Snowd Security OU", "domain": "snowd.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-02-25T13:14:20+00:00", "categories": []}


indicator: 194.85.251.62
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: Snowd Security OU
queried_at: 2026-05-27T06:29:13.235535
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "Snowd Security OU", "domain": "snowd.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-02-01T09:15:04+00:00", "categories": []}


indicator: 194.85.251.63
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: Snowd Security OU
queried_at: 2026-05-27T06:29:15.056209
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "Snowd Security OU", "domain": "snowd.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-02-01T09:07:15+00:00", "categories": []}


indicator: 194.85.251.70
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: Snowd Security OU
queried_at: 2026-05-27T06:29:16.877844
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "Snowd Security OU", "domain": "snowd.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-02-26T09:30:06+00:00", "categories": []}


indicator: 194.85.251.94
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: Snowd Security OU
queried_at: 2026-05-27T06:29:20.506509
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "Snowd Security OU", "domain": "snowd.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-02-01T09:05:40+00:00", "categories": []}


indicator: 37.221.66.1
indicator_type: ipv4
source: virustotal
country: MD
hosting_provider: Ava Host Srl
queried_at: 2026-05-27T06:29:44.698452
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "MD", "as_owner": "Ava Host Srl", "asn": 48753, "network": "37.221.66.0/24", "last_analysis_date": 1773074517}


indicator: 37.221.66.2
indicator_type: ipv4
source: virustotal
country: MD
hosting_provider: Ava Host Srl
queried_at: 2026-05-27T06:30:05.317783
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "MD", "as_owner": "Ava Host Srl", "asn": 48753, "network": "37.221.66.0/24", "last_analysis_date": 1778068630}


indicator: 37.221.66.4
indicator_type: ipv4
source: virustotal
country: MD
hosting_provider: Ava Host Srl
queried_at: 2026-05-27T06:30:25.903768
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "MD", "as_owner": "Ava Host Srl", "asn": 48753, "network": "37.221.66.0/24", "last_analysis_date": 1713286758}


indicator: 37.221.66.5
indicator_type: ipv4
source: virustotal
country: MD
hosting_provider: Ava Host Srl
queried_at: 2026-05-27T06:30:46.377893
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "MD", "as_owner": "Ava Host Srl", "asn": 48753, "network": "37.221.66.0/24", "last_analysis_date": 1761074893}


indicator: 37.221.66.7
indicator_type: ipv4
source: virustotal
country: MD
hosting_provider: Ava Host Srl
queried_at: 2026-05-27T06:31:07.000933
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "MD", "as_owner": "Ava Host Srl", "asn": 48753, "network": "37.221.66.0/24", "last_analysis_date": ""}


indicator: 37.221.66.8
indicator_type: ipv4
source: virustotal
country: MD
hosting_provider: Ava Host Srl
queried_at: 2026-05-27T06:31:27.561915
raw_data:
  {"malicious": 0, "suspicious": 1, "harmless": 54, "undetected": 36, "reputation": 0, "country": "MD", "as_owner": "Ava Host Srl", "asn": 48753, "network": "37.221.66.0/24", "last_analysis_date": 1778584719}


indicator: 37.221.66.10
indicator_type: ipv4
source: virustotal
country: MD
hosting_provider: Ava Host Srl
queried_at: 2026-05-27T06:31:48.035671
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "MD", "as_owner": "Ava Host Srl", "asn": 48753, "network": "37.221.66.0/24", "last_analysis_date": 1742306963}


indicator: 37.221.66.11
indicator_type: ipv4
source: virustotal
country: MD
hosting_provider: Ava Host Srl
queried_at: 2026-05-27T06:32:08.543853
raw_data:
  {"malicious": 0, "suspicious": 1, "harmless": 55, "undetected": 35, "reputation": 0, "country": "MD", "as_owner": "Ava Host Srl", "asn": 48753, "network": "37.221.66.0/24", "last_analysis_date": 1778770629}


indicator: 37.221.66.12
indicator_type: ipv4
source: virustotal
country: MD
hosting_provider: Ava Host Srl
queried_at: 2026-05-27T06:32:29.060252
raw_data:
  {"malicious": 0, "suspicious": 1, "harmless": 53, "undetected": 37, "reputation": 0, "country": "MD", "as_owner": "Ava Host Srl", "asn": 48753, "network": "37.221.66.0/24", "last_analysis_date": 1778601378}


indicator: 37.221.66.13
indicator_type: ipv4
source: virustotal
country: MD
hosting_provider: Ava Host Srl
queried_at: 2026-05-27T06:32:49.618090
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "MD", "as_owner": "Ava Host Srl", "asn": 48753, "network": "37.221.66.0/24", "last_analysis_date": 1775157127}


indicator: 37.221.66.14
indicator_type: ipv4
source: virustotal
country: MD
hosting_provider: Ava Host Srl
queried_at: 2026-05-27T06:33:10.085389
raw_data:
  {"malicious": 2, "suspicious": 0, "harmless": 54, "undetected": 35, "reputation": 0, "country": "MD", "as_owner": "Ava Host Srl", "asn": 48753, "network": "37.221.66.0/24", "last_analysis_date": 1762100264}


indicator: 37.221.67.1
indicator_type: ipv4
source: virustotal
country: MD
hosting_provider: Alexhost Srl
queried_at: 2026-05-27T06:33:30.525293
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "MD", "as_owner": "Alexhost Srl", "asn": 200019, "network": "37.221.67.0/24", "last_analysis_date": ""}


indicator: 37.221.67.2
indicator_type: ipv4
source: virustotal
country: MD
hosting_provider: Alexhost Srl
queried_at: 2026-05-27T06:33:51.387878
raw_data:
  {"malicious": 2, "suspicious": 0, "harmless": 51, "undetected": 38, "reputation": 0, "country": "MD", "as_owner": "Alexhost Srl", "asn": 200019, "network": "37.221.67.0/24", "last_analysis_date": 1772373511}


indicator: 37.221.67.3
indicator_type: ipv4
source: virustotal
country: MD
hosting_provider: Alexhost Srl
queried_at: 2026-05-27T06:34:11.895860
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 91, "reputation": 0, "country": "MD", "as_owner": "Alexhost Srl", "asn": 200019, "network": "37.221.67.0/24", "last_analysis_date": 1773051050}


indicator: 37.221.67.4
indicator_type: ipv4
source: virustotal
country: MD
hosting_provider: Alexhost Srl
queried_at: 2026-05-27T06:34:32.523833
raw_data:
  {"malicious": 0, "suspicious": 1, "harmless": 55, "undetected": 35, "reputation": 0, "country": "MD", "as_owner": "Alexhost Srl", "asn": 200019, "network": "37.221.67.0/24", "last_analysis_date": 1775836955}


indicator: 146.19.213.139
indicator_type: ipv4
source: shodan
queried_at: 2026-05-27T12:00:26.216627
raw_data:
  {"ports": [22, 80], "vulns": [], "hostnames": [], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:litespeedtech:litespeed_web_server"]}

hosting_provider:
  cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux,cpe:/a:litespeedtech:litespeed_web_server


indicator: 146.19.213.140
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: venom.test
queried_at: 2026-05-27T12:00:28.128003
raw_data:
  {"ports": [22, 80], "vulns": ["CVE-2023-44487", "CVE-2025-23419"], "hostnames": ["venom.test"], "tags": ["eol-product"], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/o:linux:linux_kernel", "cpe:/a:f5:nginx:1.24.0"]}

hosting_provider:
  cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux,cpe:/o:linux:linux_kernel,cpe:/a:f5:nginx:1.24.0


indicator: 146.19.213.164
indicator_type: ipv4
source: shodan
city: starttls,self-signed
reverse_dns: caarpi.com,srv1.bitquantfi.com
hosting_provider: cpe:/a:postfix:postfix,cpe:/a:apache:http_server
queried_at: 2026-05-27T12:00:30.040881
raw_data:
  {"ports": [80, 143, 465, 8880], "vulns": [], "hostnames": ["caarpi.com", "srv1.bitquantfi.com"], "tags": ["starttls", "self-signed"], "cpes": ["cpe:/a:postfix:postfix", "cpe:/a:apache:http_server"]}


indicator: 146.19.213.171
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: impact
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T12:00:31.847026
raw_data:
  {"ports": [22, 80, 443], "vulns": [], "hostnames": ["impact"], "tags": ["self-signed"], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 146.19.213.188
indicator_type: ipv4
source: shodan
city: self-signed,starttls
reverse_dns: alexvps24-2
hosting_provider: cpe:/a:f5:nginx:1.28.0,cpe:/a:exim:exim:4.95,cpe:/a:f5:nginx
queried_at: 2026-05-27T12:00:33.675946
raw_data:
  {"ports": [21, 25, 80, 110, 143, 443, 465, 587, 993, 995, 7777, 8888], "vulns": ["CVE-2023-42117", "CVE-2023-42114", "CVE-2025-67896", "CVE-2022-37451", "CVE-2023-42115", "CVE-2026-40686", "CVE-2026-40684", "CVE-2024-39929", "CVE-2022-3620", "CVE-2022-3559", "CVE-2023-51766", "CVE-2023-42116", "CVE-2026-40687", "CVE-2023-42119", "CVE-2026-40685"], "hostnames": ["alexvps24-2"], "tags": ["self-signed", "starttls"], "cpes": ["cpe:/a:f5:nginx:1.28.0", "cpe:/a:exim:exim:4.95", "cpe:/a:f5:nginx"]}


indicator: 146.19.213.193
indicator_type: ipv4
source: shodan
reverse_dns: misskon.com
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx
queried_at: 2026-05-27T12:00:35.613324
raw_data:
  {"ports": [80, 443, 2222], "vulns": [], "hostnames": ["misskon.com"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx"]}


indicator: 146.19.213.206
indicator_type: ipv4
source: shodan
queried_at: 2026-05-27T12:00:39.381615
raw_data:
  {"ports": [22, 80, 1883, 8888], "vulns": ["CVE-2023-28366", "CVE-2021-34431", "CVE-2024-10525", "CVE-2023-0809", "CVE-2024-8376", "CVE-2021-34432", "CVE-2021-41039", "CVE-2023-3592"], "hostnames": [], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.2p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:eclipse:mosquitto:1.6.9", "cpe:/a:f5:nginx"]}

hosting_provider:
  cpe:/a:openbsd:openssh:8.2p1,cpe:/o:canonical:ubuntu_linux,cpe:/a:eclipse:mosquitto:1.6.9,cpe:/a:f5:nginx


indicator: 146.19.213.212
indicator_type: ipv4
source: shodan
city: starttls,self-signed
reverse_dns: zenlabplay.com
hosting_provider: cpe:/a:f5:nginx
queried_at: 2026-05-27T12:00:41.061925
raw_data:
  {"ports": [53, 443, 587, 995], "vulns": [], "hostnames": ["zenlabplay.com"], "tags": ["starttls", "self-signed"], "cpes": ["cpe:/a:f5:nginx"]}


indicator: 146.19.213.225
indicator_type: ipv4
source: shodan
reverse_dns: v1.sp188.net
hosting_provider: cpe:/a:f5:nginx
queried_at: 2026-05-27T12:00:44.701629
raw_data:
  {"ports": [80], "vulns": [], "hostnames": ["v1.sp188.net"], "tags": [], "cpes": ["cpe:/a:f5:nginx"]}


indicator: 146.19.213.226
indicator_type: ipv4
source: shodan
reverse_dns: naseweisz.de
queried_at: 2026-05-27T12:00:46.581841
raw_data:
  {"ports": [135, 139, 445], "vulns": ["CVE-2020-0796"], "hostnames": ["naseweisz.de"], "tags": [], "cpes": []}


indicator: 146.19.213.251
indicator_type: ipv4
source: shodan
city: self-signed,starttls
reverse_dns: vps27.com
queried_at: 2026-05-27T12:00:50.341381
raw_data:
  {"ports": [22, 80, 143, 443, 587, 8888], "vulns": ["CVE-2023-42117", "CVE-2023-42114", "CVE-2025-67896", "CVE-2022-37451", "CVE-2023-42115", "CVE-2026-40686", "CVE-2026-40684", "CVE-2024-39929", "CVE-2022-3620", "CVE-2022-3559", "CVE-2023-51766", "CVE-2023-42116", "CVE-2026-40687", "CVE-2023-42119", "CVE-2026-40685"], "hostnames": ["vps27.com"], "tags": ["self-signed", "starttls"], "cpes": ["cpe:/a:f5:nginx:1.28.3", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx", "cpe:/a:openbsd:openssh:8.9p

hosting_provider:
  cpe:/a:f5:nginx:1.28.3,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx,cpe:/a:openbsd:openssh:8.9p1,cpe:/a:exim:exim:4.95


indicator: 146.19.213.29
indicator_type: ipv4
source: shodan
city: starttls
reverse_dns: node.moxomal.com,xmaal.in,www.xmaal.in,m1.servicemail.bz
hosting_provider: cpe:/a:postfix:postfix,cpe:/a:f5:nginx
queried_at: 2026-05-27T12:00:52.193230
raw_data:
  {"ports": [443, 587], "vulns": [], "hostnames": ["node.moxomal.com", "xmaal.in", "www.xmaal.in", "m1.servicemail.bz"], "tags": ["starttls"], "cpes": ["cpe:/a:postfix:postfix", "cpe:/a:f5:nginx"]}


indicator: 146.19.213.3
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: validate.androchem-laboratories.com
queried_at: 2026-05-27T12:00:54.126681
raw_data:
  {"ports": [22, 80, 443], "vulns": ["CVE-2025-23419", "CVE-2023-44487"], "hostnames": ["validate.androchem-laboratories.com"], "tags": ["eol-product"], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx:1.24.0"]}

hosting_provider:
[cell repeats an earlier one in this file: 107 characters]


indicator: 146.19.213.31
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: kipit.shopping
queried_at: 2026-05-27T12:00:55.966311
raw_data:
  {"ports": [22, 80], "vulns": ["CVE-2025-23419", "CVE-2021-3618", "CVE-2021-23017", "CVE-2023-44487"], "hostnames": ["kipit.shopping"], "tags": ["eol-product"], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx:1.18.0"]}

hosting_provider:
[cell repeats an earlier one in this file: 107 characters]


indicator: 146.19.213.45
indicator_type: ipv4
source: shodan
reverse_dns: fucker.local
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T12:00:57.768681
raw_data:
  {"ports": [22, 3389, 8080], "vulns": [], "hostnames": ["fucker.local"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 146.19.213.51
indicator_type: ipv4
source: shodan
city: self-signed,starttls
reverse_dns: denmarkbettingguide.com
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/a:f5:nginx
queried_at: 2026-05-27T12:00:59.561299
raw_data:
  {"ports": [22, 53, 80, 465, 587, 993, 995, 8083], "vulns": [], "hostnames": ["denmarkbettingguide.com"], "tags": ["self-signed", "starttls"], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/a:f5:nginx"]}


indicator: 146.19.213.75
indicator_type: ipv4
source: shodan
reverse_dns: heptadragon
queried_at: 2026-05-27T12:01:01.405781
raw_data:
  {"ports": [22, 80, 81, 443, 3000], "vulns": ["CVE-2026-27880", "CVE-2026-21722", "CVE-2025-4123", "CVE-2026-21727", "CVE-2026-33375", "CVE-2025-12141", "CVE-2026-21721", "CVE-2026-21720", "CVE-2026-21725"], "hostnames": ["heptadragon"], "tags": [], "cpes": ["cpe:/a:openresty:openresty", "cpe:/a:f5:nginx", "cpe:/a:openbsd:openssh:8.9p1", "cpe:/a:getbootstrap:bootstrap:3.4.1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:grafana:grafana:11.6.0"]}

hosting_provider:
  cpe:/a:openresty:openresty,cpe:/a:f5:nginx,cpe:/a:openbsd:openssh:8.9p1,cpe:/a:getbootstrap:bootstrap:3.4.1,cpe:/o:canonical:ubuntu_linux,cpe:/a:grafana:grafana:11.6.0


indicator: 146.19.213.76
indicator_type: ipv4
source: shodan
reverse_dns: assres11.com
queried_at: 2026-05-27T12:01:03.232288
raw_data:
  {"ports": [22, 2222], "vulns": [], "hostnames": ["assres11.com"], "tags": [], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:8.4p1", "cpe:/a:openbsd:openssh:9.2p1", "cpe:/o:debian:debian_linux"]}

hosting_provider:
  cpe:/o:linux:linux_kernel,cpe:/a:openbsd:openssh:8.4p1,cpe:/a:openbsd:openssh:9.2p1,cpe:/o:debian:debian_linux


indicator: 159.253.120.118
indicator_type: ipv4
source: shodan
reverse_dns: maquina1.elbahospedagemcloud.online
hosting_provider: cpe:/o:canonical:ubuntu_linux,cpe:/a:apache:http_server:2.4.41
queried_at: 2026-05-27T12:01:06.918115
raw_data:
  {"ports": [80], "vulns": ["CVE-2021-44224", "CVE-2021-30641", "CVE-2022-28614", "CVE-2007-4723", "CVE-2025-49630", "CVE-2024-47252", "CVE-2021-32786", "CVE-2020-35452", "CVE-2024-40898", "CVE-2020-13938", "CVE-2011-2688", "CVE-2019-17567", "CVE-2025-23048", "CVE-2022-28330", "CVE-2024-27316", "CVE-2022-26377", "CVE-2020-9490", "CVE-2021-33193", "CVE-2022-22721", "CVE-2022-31813", "CVE-2024-43394", "CVE-2023-45802", "CVE-2023-38709", "CVE-2021-32785", "CVE-2025-65082", "CVE-2024-38472", "CVE-2020


indicator: 159.253.120.119
indicator_type: ipv4
source: shodan
reverse_dns: defaultserver.com
hosting_provider: cpe:/o:linux:linux_kernel,cpe:/a:openbsd:openssh:9.2p1,cpe:/o:debian:debian_linux
queried_at: 2026-05-27T12:01:08.807392
raw_data:
  {"ports": [22, 80], "vulns": [], "hostnames": ["defaultserver.com"], "tags": [], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:9.2p1", "cpe:/o:debian:debian_linux"]}


indicator: 159.253.120.123
indicator_type: ipv4
source: shodan
city: eol-product,self-signed,starttls
reverse_dns: teatromargen.com
hosting_provider: cpe:/a:f5:nginx:1.28.0,cpe:/a:exim:exim:4.95
queried_at: 2026-05-27T12:01:12.424965
raw_data:
  {"ports": [21, 80, 143, 443, 465, 995], "vulns": ["CVE-2022-3620", "CVE-2026-40685", "CVE-2024-39929", "CVE-2023-42114", "CVE-2026-40684", "CVE-2023-42115", "CVE-2025-67896", "CVE-2026-40687", "CVE-2023-42117", "CVE-2022-3559", "CVE-2026-40686", "CVE-2023-42116", "CVE-2022-37451", "CVE-2023-42119", "CVE-2023-51766"], "hostnames": ["teatromargen.com"], "tags": ["eol-product", "self-signed", "starttls"], "cpes": ["cpe:/a:f5:nginx:1.28.0", "cpe:/a:exim:exim:4.95"]}


indicator: 159.253.120.136
indicator_type: ipv4
source: shodan
reverse_dns: 104.idear.com
hosting_provider: cpe:/a:apache:http_server
queried_at: 2026-05-27T12:01:14.217515
raw_data:
  {"ports": [80], "vulns": [], "hostnames": ["104.idear.com"], "tags": [], "cpes": ["cpe:/a:apache:http_server"]}


indicator: 159.253.120.153
indicator_type: ipv4
source: shodan
reverse_dns: luapi.lotem.org,www.lotem.org,lotem.org
queried_at: 2026-05-27T12:01:17.817639
raw_data:
  {"ports": [22, 443], "vulns": [], "hostnames": ["luapi.lotem.org", "www.lotem.org", "lotem.org"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:jquery:jquery", "cpe:/a:getbootstrap:bootstrap"]}

hosting_provider:
  cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux,cpe:/a:jquery:jquery,cpe:/a:getbootstrap:bootstrap


indicator: 159.253.120.176
indicator_type: ipv4
source: shodan
city: self-signed,starttls
reverse_dns: mail.hypett.com
hosting_provider: cpe:/a:exim:exim:4.95
queried_at: 2026-05-27T12:01:19.602531
raw_data:
  {"ports": [25], "vulns": ["CVE-2023-42117", "CVE-2023-42114", "CVE-2025-67896", "CVE-2022-37451", "CVE-2023-42115", "CVE-2026-40686", "CVE-2026-40684", "CVE-2024-39929", "CVE-2022-3620", "CVE-2022-3559", "CVE-2023-51766", "CVE-2023-42116", "CVE-2026-40687", "CVE-2023-42119", "CVE-2026-40685"], "hostnames": ["mail.hypett.com"], "tags": ["self-signed", "starttls"], "cpes": ["cpe:/a:exim:exim:4.95"]}


indicator: 159.253.120.185
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: lekovi.net,srv.hostalex.com
hosting_provider: cpe:/o:canonical:ubuntu_linux,cpe:/o:linux:linux_kernel,cpe:/a:f5:nginx:1.24.0
queried_at: 2026-05-27T12:01:21.381465
raw_data:
  {"ports": [443], "vulns": ["CVE-2023-44487", "CVE-2025-23419"], "hostnames": ["lekovi.net", "srv.hostalex.com"], "tags": ["eol-product"], "cpes": ["cpe:/o:canonical:ubuntu_linux", "cpe:/o:linux:linux_kernel", "cpe:/a:f5:nginx:1.24.0"]}


indicator: 159.253.120.189
indicator_type: ipv4
source: shodan
reverse_dns: proxy.home
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T12:01:23.183154
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["proxy.home"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 159.253.120.191
indicator_type: ipv4
source: shodan
reverse_dns: www.myservver
hosting_provider: cpe:/a:f5:nginx
queried_at: 2026-05-27T12:01:25.078304
raw_data:
  {"ports": [80], "vulns": [], "hostnames": ["www.myservver"], "tags": [], "cpes": ["cpe:/a:f5:nginx"]}


indicator: 159.253.120.193
indicator_type: ipv4
source: shodan
city: starttls,self-signed
hosting_provider: cpe:/a:f5:nginx
queried_at: 2026-05-27T12:01:26.905450
raw_data:
  {"ports": [21, 110, 993, 7777], "vulns": [], "hostnames": [], "tags": ["starttls", "self-signed"], "cpes": ["cpe:/a:f5:nginx"]}


indicator: 159.253.120.201
indicator_type: ipv4
source: shodan
reverse_dns: dlflde,lunashopping.ru,www.lunashopping.ru
hosting_provider: cpe:/o:linux:linux_kernel,cpe:/a:openbsd:openssh:9.2p1,cpe:/a:f5:nginx,cpe:/o:debian:debian_linux
queried_at: 2026-05-27T12:01:28.697494
raw_data:
  {"ports": [22, 443], "vulns": [], "hostnames": ["dlflde", "lunashopping.ru", "www.lunashopping.ru"], "tags": [], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:9.2p1", "cpe:/a:f5:nginx", "cpe:/o:debian:debian_linux"]}


indicator: 159.253.120.232
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: shield,www.cryptomaster.ai
queried_at: 2026-05-27T12:01:30.500619
raw_data:
  {"ports": [22, 80, 443], "vulns": [], "hostnames": ["shield", "www.cryptomaster.ai"], "tags": ["eol-product"], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/o:debian:debian_linux", "cpe:/a:f5:nginx:1.26.3", "cpe:/a:openbsd:openssh:10.0p2"]}

hosting_provider:
  cpe:/o:linux:linux_kernel,cpe:/o:debian:debian_linux,cpe:/a:f5:nginx:1.26.3,cpe:/a:openbsd:openssh:10.0p2


indicator: 159.253.120.244
indicator_type: ipv4
source: shodan
city: self-signed
hosting_provider: cpe:/a:litespeedtech:litespeed_web_server
queried_at: 2026-05-27T12:01:34.117415
raw_data:
  {"ports": [443], "vulns": [], "hostnames": ["webdisk.fims.org.pk", "fims.org.pk", "autodiscover.fims.org.pk", "cpanel.fims.org.pk", "webmail.fims.org.pk", "cpcontacts.fims.org.pk", "mail.fims.org.pk", "cpcalendars.fims.org.pk", "www.fims.org.pk"], "tags": ["self-signed"], "cpes": ["cpe:/a:litespeedtech:litespeed_web_server"]}

reverse_dns:
  webdisk.fims.org.pk,fims.org.pk,autodiscover.fims.org.pk,cpanel.fims.org.pk,webmail.fims.org.pk,cpcontacts.fims.org.pk,mail.fims.org.pk,cpcalendars.fims.org.pk,www.fims.org.pk


indicator: 159.253.120.37
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: allyserver-e3.com
queried_at: 2026-05-27T12:01:37.702430
raw_data:
  {"ports": [139, 445, 5985, 5986], "vulns": ["CVE-2020-0796"], "hostnames": ["allyserver-e3.com"], "tags": ["self-signed"], "cpes": []}


indicator: 159.253.120.49
indicator_type: ipv4
source: shodan
reverse_dns: 1001omsk.ru,www.1001omsk.ru,shmara
hosting_provider: cpe:/a:f5:nginx
queried_at: 2026-05-27T12:01:39.475427
raw_data:
  {"ports": [80, 443], "vulns": [], "hostnames": ["1001omsk.ru", "www.1001omsk.ru", "shmara"], "tags": [], "cpes": ["cpe:/a:f5:nginx"]}


indicator: 159.253.120.73
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: alex-vm-prox-ppc-web-50
hosting_provider: cpe:/o:debian:debian_linux,cpe:/a:apache:http_server:2.4.66,cpe:/a:apache:http_server:2.4.67
queried_at: 2026-05-27T12:01:41.265026
raw_data:
  {"ports": [80, 443], "vulns": ["CVE-2012-4001", "CVE-2012-3526", "CVE-2011-1176", "CVE-2013-0942", "CVE-2012-4360", "CVE-2011-2688", "CVE-2013-0941", "CVE-2009-2299", "CVE-2009-0796", "CVE-2007-4723", "CVE-2013-2765", "CVE-2013-4365"], "hostnames": ["alex-vm-prox-ppc-web-50"], "tags": ["self-signed"], "cpes": ["cpe:/o:debian:debian_linux", "cpe:/a:apache:http_server:2.4.66", "cpe:/a:apache:http_server:2.4.67"]}


indicator: 159.253.120.93
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: 109-6
queried_at: 2026-05-27T12:01:44.896857
raw_data:
  {"ports": [22, 443, 8443], "vulns": [], "hostnames": ["109-6"], "tags": ["self-signed"], "cpes": ["cpe:/a:getbootstrap:bootstrap", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx", "cpe:/a:openbsd:openssh:9.6p1", "cpe:/a:jquery:jquery"]}

hosting_provider:
  cpe:/a:getbootstrap:bootstrap,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx,cpe:/a:openbsd:openssh:9.6p1,cpe:/a:jquery:jquery


indicator: 176.116.0.192
indicator_type: ipv4
source: shodan
city: database,eol-product
reverse_dns: dreama.studio,www.dreama.studio,api.dreama.studio
queried_at: 2026-05-27T12:01:46.702835
raw_data:
  {"ports": [22, 443, 3306, 5000], "vulns": ["CVE-2025-23419", "CVE-2021-3618", "CVE-2021-23017", "CVE-2023-44487"], "hostnames": ["dreama.studio", "www.dreama.studio", "api.dreama.studio"], "tags": ["database", "eol-product"], "cpes": ["cpe:/a:oracle:mysql:8.0.45-0ubuntu0.22.04.1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx:1.18.0", "cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:8.9p1"]}

hosting_provider:
  cpe:/a:oracle:mysql:8.0.45-0ubuntu0.22.04.1,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx:1.18.0,cpe:/o:linux:linux_kernel,cpe:/a:openbsd:openssh:8.9p1


indicator: 176.116.0.223
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: kirich74.xyz
queried_at: 2026-05-27T12:01:48.473776
raw_data:
  {"ports": [22, 80, 443], "vulns": ["CVE-2023-44487", "CVE-2025-23419"], "hostnames": ["kirich74.xyz"], "tags": ["eol-product"], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/o:linux:linux_kernel", "cpe:/a:f5:nginx:1.24.0"]}

hosting_provider:
  cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux,cpe:/o:linux:linux_kernel,cpe:/a:f5:nginx:1.24.0


indicator: 176.116.0.245
indicator_type: ipv4
source: shodan
city: self-signed,starttls
reverse_dns: four.gigagileteam.org,60plustreff.net
queried_at: 2026-05-27T12:01:50.253605
raw_data:
  {"ports": [22, 25, 53, 80, 110, 443, 587, 993, 2222, 20000], "vulns": [], "hostnames": ["four.gigagileteam.org", "60plustreff.net"], "tags": ["self-signed", "starttls"], "cpes": ["cpe:/a:apache:http_server", "cpe:/o:debian:debian_linux", "cpe:/a:openbsd:openssh:9.2p1", "cpe:/a:postfix:postfix", "cpe:/o:linux:linux_kernel"]}

hosting_provider:
  cpe:/a:apache:http_server,cpe:/o:debian:debian_linux,cpe:/a:openbsd:openssh:9.2p1,cpe:/a:postfix:postfix,cpe:/o:linux:linux_kernel


indicator: 176.116.0.41
indicator_type: ipv4
source: shodan
reverse_dns: nethrl.usk.com
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T12:01:52.039879
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["nethrl.usk.com"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 176.116.0.55
indicator_type: ipv4
source: shodan
city: self-signed,starttls
reverse_dns: 666filmizle.vip,srv.saksomakso.com
queried_at: 2026-05-27T12:01:53.817969
raw_data:
  {"ports": [21, 22, 25, 53, 80, 443, 995, 8090], "vulns": [], "hostnames": ["666filmizle.vip", "srv.saksomakso.com"], "tags": ["self-signed", "starttls"], "cpes": ["cpe:/a:litespeedtech:litespeed_web_server", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:postfix:postfix", "cpe:/a:openbsd:openssh:9.6p1", "cpe:/a:pureftpd:pure-ftpd"]}

hosting_provider:
  cpe:/a:litespeedtech:litespeed_web_server,cpe:/o:canonical:ubuntu_linux,cpe:/a:postfix:postfix,cpe:/a:openbsd:openssh:9.6p1,cpe:/a:pureftpd:pure-ftpd


indicator: 176.116.0.6
indicator_type: ipv4
source: shodan
city: starttls,self-signed
reverse_dns: four.gigagileteam.org,60plustreff.net
queried_at: 2026-05-27T12:01:55.610815
raw_data:
  {"ports": [21, 22, 53, 110, 443, 465, 587, 993, 995, 2222], "vulns": [], "hostnames": ["four.gigagileteam.org", "60plustreff.net"], "tags": ["starttls", "self-signed"], "cpes": ["cpe:/o:debian:debian_linux", "cpe:/a:openbsd:openssh:9.2p1", "cpe:/a:apache:http_server", "cpe:/o:linux:linux_kernel", "cpe:/a:postfix:postfix"]}

hosting_provider:
  cpe:/o:debian:debian_linux,cpe:/a:openbsd:openssh:9.2p1,cpe:/a:apache:http_server,cpe:/o:linux:linux_kernel,cpe:/a:postfix:postfix


indicator: 176.123.10.114
indicator_type: ipv4
source: shodan
city: starttls
queried_at: 2026-05-27T12:01:59.174643
raw_data:
  {"ports": [21, 22, 80, 110, 111, 443, 465, 587, 995, 2083, 2086, 2087, 2096], "vulns": ["CVE-2025-26465", "CVE-2023-38408", "CVE-2008-3844", "CVE-2023-51767", "CVE-2024-6387", "CVE-2025-32728", "CVE-2023-51385", "CVE-2021-36368", "CVE-2007-2768", "CVE-2023-48795", "CVE-2016-20012", "CVE-2021-41617", "CVE-2026-35414"], "hostnames": ["176-123-10-114.forexcracked.com", "autodiscover.forexcracked.com", "mail.forexcracked.com", "forexcracked.com", "www.forexcracked.com", "webdisk.forexcracked.com"], 

reverse_dns:
  176-123-10-114.forexcracked.com,autodiscover.forexcracked.com,mail.forexcracked.com,forexcracked.com,www.forexcracked.com,webdisk.forexcracked.com

hosting_provider:
  cpe:/a:litespeedtech:litespeed_web_server,cpe:/a:exim:exim:4.99.1,cpe:/a:cpanel:cpanel,cpe:/a:cpanel:whm,cpe:/a:openbsd:openssh:8.7,cpe:/a:pureftpd:pure-ftpd,cpe:/a:exim:exim:4.99.2


indicator: 176.123.10.120
indicator_type: ipv4
source: shodan
city: ai,eol-product
hosting_provider: cpe:/o:linux:linux_kernel,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx:1.18.0
queried_at: 2026-05-27T12:02:00.955150
raw_data:
  {"ports": [80], "vulns": ["CVE-2025-23419", "CVE-2021-3618", "CVE-2021-23017", "CVE-2023-44487"], "hostnames": [], "tags": ["ai", "eol-product"], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx:1.18.0"]}


indicator: 176.123.10.158
indicator_type: ipv4
source: shodan
city: self-signed,ai,starttls
reverse_dns: vibrant-jones.176-123-10-58.plesk.page
queried_at: 2026-05-27T12:02:02.741789
raw_data:
  {"ports": [22, 25, 53, 80, 110, 143, 993, 995, 8443], "vulns": [], "hostnames": ["vibrant-jones.176-123-10-58.plesk.page"], "tags": ["self-signed", "ai", "starttls"], "cpes": ["cpe:/a:openbsd:openssh:8.4p1", "cpe:/o:debian:debian_linux", "cpe:/a:postfix:postfix", "cpe:/a:f5:nginx", "cpe:/o:linux:linux_kernel"]}

hosting_provider:
  cpe:/a:openbsd:openssh:8.4p1,cpe:/o:debian:debian_linux,cpe:/a:postfix:postfix,cpe:/a:f5:nginx,cpe:/o:linux:linux_kernel


indicator: 176.123.10.210
indicator_type: ipv4
source: shodan
reverse_dns: orlovpro.ru,www.orlovpro.ru
hosting_provider: cpe:/a:f5:nginx
queried_at: 2026-05-27T12:02:04.577965
raw_data:
  {"ports": [80, 443, 465], "vulns": [], "hostnames": ["orlovpro.ru", "www.orlovpro.ru"], "tags": [], "cpes": ["cpe:/a:f5:nginx"]}


indicator: 176.123.10.5
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/a:hp:integrated_lights-out
queried_at: 2026-05-27T12:02:08.130063
raw_data:
  {"ports": [22, 80, 443], "vulns": [], "hostnames": [], "tags": [], "cpes": ["cpe:/a:hp:integrated_lights-out"]}


indicator: 176.123.10.56
indicator_type: ipv4
source: shodan
city: self-signed,starttls
reverse_dns: fervent-noyce.176-123-10-56.plesk.page
hosting_provider: cpe:/a:postfix:postfix,cpe:/a:php:php:8.2.30,cpe:/a:f5:nginx
queried_at: 2026-05-27T12:02:10.180049
raw_data:
  {"ports": [21, 53, 106, 143, 443, 465, 995, 8443, 8880, 8888], "vulns": ["CVE-2007-3205", "CVE-2024-3566", "CVE-2013-2220"], "hostnames": ["fervent-noyce.176-123-10-56.plesk.page"], "tags": ["self-signed", "starttls"], "cpes": ["cpe:/a:postfix:postfix", "cpe:/a:php:php:8.2.30", "cpe:/a:f5:nginx"]}


indicator: 176.123.10.61
indicator_type: ipv4
source: shodan
city: self-signed,starttls
hosting_provider: cpe:/a:f5:nginx:1.28.0,cpe:/a:exim:exim:4.98.2,cpe:/a:openbsd:openssh:8.0
queried_at: 2026-05-27T12:02:11.972656
raw_data:
  {"ports": [21, 22, 53, 80, 110, 587], "vulns": ["CVE-2025-26465", "CVE-2025-67896", "CVE-2008-3844", "CVE-2020-15778", "CVE-2007-2768", "CVE-2026-35386", "CVE-2023-48795", "CVE-2021-41617", "CVE-2023-38408", "CVE-2026-35387", "CVE-2020-14145", "CVE-2025-32728", "CVE-2023-51385", "CVE-2021-36368", "CVE-2016-20012", "CVE-2026-35414", "CVE-2026-35388", "CVE-2023-51767", "CVE-2026-35385", "CVE-2019-16905"], "hostnames": [], "tags": ["self-signed", "starttls"], "cpes": ["cpe:/a:f5:nginx:1.28.0", "cpe


indicator: 176.123.10.85
indicator_type: ipv4
source: shodan
city: ai,starttls
hosting_provider: cpe:/a:exim:exim:4.99.1,cpe:/a:cpanel:cpanel
queried_at: 2026-05-27T12:02:13.777878
raw_data:
  {"ports": [53, 80, 111, 143, 443, 465, 2083, 2086, 2087], "vulns": [], "hostnames": ["vivaxxx.com", "www.ankaraharem1.click", "www.acibademviva.store", "176-123-10-85.cprapid.com", "ankaraharem1.click", "acibademviva.store"], "tags": ["ai", "starttls"], "cpes": ["cpe:/a:exim:exim:4.99.1", "cpe:/a:cpanel:cpanel"]}

reverse_dns:
  vivaxxx.com,www.ankaraharem1.click,www.acibademviva.store,176-123-10-85.cprapid.com,ankaraharem1.click,acibademviva.store


indicator: 176.123.11.103
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: mail2.xtra-dater.live
hosting_provider: cpe:/o:canonical:ubuntu_linux,cpe:/a:php:php:5.5.9,cpe:/a:apache:http_server:2.4.7
queried_at: 2026-05-27T12:02:17.429678
raw_data:
  {"ports": [53, 80, 143], "vulns": ["CVE-2020-35452", "CVE-2016-4975", "CVE-2014-0236", "CVE-2016-8743", "CVE-2018-10545", "CVE-2016-3141", "CVE-2014-9426", "CVE-2016-2161", "CVE-2024-3566", "CVE-2015-2331", "CVE-2014-3480", "CVE-2014-3981", "CVE-2016-5766", "CVE-2016-5387", "CVE-2014-2270", "CVE-2015-3416", "CVE-2015-6835", "CVE-2015-0232", "CVE-2016-7418", "CVE-2007-4723", "CVE-2014-4049", "CVE-2018-19520", "CVE-2025-59775", "CVE-2016-9137", "CVE-2016-9138", "CVE-2022-31628", "CVE-2022-31629", 


indicator: 176.123.11.11
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: mta.delightfulmail.life
queried_at: 2026-05-27T12:02:21.078483
raw_data:
  {"ports": [22, 53, 80, 143], "vulns": ["CVE-2020-35452", "CVE-2016-4975", "CVE-2014-0236", "CVE-2016-8743", "CVE-2018-10545", "CVE-2016-3141", "CVE-2014-9426", "CVE-2016-2161", "CVE-2024-3566", "CVE-2015-2331", "CVE-2014-3480", "CVE-2014-3981", "CVE-2016-5766", "CVE-2016-5387", "CVE-2014-2270", "CVE-2015-3416", "CVE-2015-6835", "CVE-2015-0232", "CVE-2016-7418", "CVE-2007-4723", "CVE-2014-4049", "CVE-2018-19520", "CVE-2025-59775", "CVE-2016-9137", "CVE-2016-9138", "CVE-2022-31628", "CVE-2022-3162

hosting_provider:
  cpe:/a:openbsd:openssh:6.6.1p1,cpe:/o:canonical:ubuntu_linux,cpe:/a:php:php:5.5.9,cpe:/a:apache:http_server:2.4.7


indicator: 176.123.11.115
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: rare-mistfit.life,mail1.rare-mistfit.life
hosting_provider: cpe:/o:canonical:ubuntu_linux,cpe:/a:php:php:5.5.9,cpe:/a:apache:http_server:2.4.7
queried_at: 2026-05-27T12:02:22.837581
raw_data:
  {"ports": [443], "vulns": ["CVE-2016-7126", "CVE-2015-4601", "CVE-2018-15132", "CVE-2018-1301", "CVE-2016-3142", "CVE-2018-5712", "CVE-2016-4537", "CVE-2014-9709", "CVE-2013-7345", "CVE-2022-28614", "CVE-2018-19520", "CVE-2014-9767", "CVE-2016-5114", "CVE-2016-7127", "CVE-2015-3414", "CVE-2021-32786", "CVE-2017-11143", "CVE-2015-4599", "CVE-2020-13938", "CVE-2018-10547", "CVE-2011-2688", "CVE-2019-17567", "CVE-2016-7131", "CVE-2016-3141", "CVE-2016-4539", "CVE-2015-4024", "CVE-2018-17199", "CVE-


indicator: 176.123.11.117
indicator_type: ipv4
source: shodan
reverse_dns: mta1.wow-woman.live
hosting_provider: cpe:/o:canonical:ubuntu_linux,cpe:/a:openbsd:openssh:6.6.1p1,cpe:/a:apache:http_server:2.4.7
queried_at: 2026-05-27T12:02:24.605930
raw_data:
  {"ports": [22, 143, 443], "vulns": ["CVE-2020-35452", "CVE-2016-4975", "CVE-2021-39275", "CVE-2016-8743", "CVE-2024-38472", "CVE-2022-30556", "CVE-2018-1303", "CVE-2022-23943", "CVE-2016-2161", "CVE-2009-2299", "CVE-2013-5704", "CVE-2018-1283", "CVE-2012-4360", "CVE-2009-0796", "CVE-2015-0228", "CVE-2020-1934", "CVE-2017-7679", "CVE-2016-5387", "CVE-2021-32785", "CVE-2013-4365", "CVE-2016-8612", "CVE-2007-4723", "CVE-2015-3183", "CVE-2014-0118", "CVE-2015-3185", "CVE-2025-49812", "CVE-2025-59775


indicator: 176.123.11.127
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/a:apache:http_server:2.4.7
queried_at: 2026-05-27T12:02:26.365572
raw_data:
  {"ports": [53, 443], "vulns": ["CVE-2018-1302", "CVE-2018-1301", "CVE-2021-44224", "CVE-2022-28614", "CVE-2007-4723", "CVE-2026-33857", "CVE-2014-0231", "CVE-2024-47252", "CVE-2014-0117", "CVE-2021-32786", "CVE-2020-35452", "CVE-2024-40898", "CVE-2016-8612", "CVE-2020-13938", "CVE-2011-2688", "CVE-2019-17567", "CVE-2022-28330", "CVE-2014-3581", "CVE-2022-26377", "CVE-2022-22721", "CVE-2018-17199", "CVE-2022-31813", "CVE-2024-43394", "CVE-2023-38709", "CVE-2017-9788", "CVE-2016-8743", "CVE-2021-3


indicator: 176.123.11.13
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: mx03.girl-glue.info
queried_at: 2026-05-27T12:02:28.125371
raw_data:
  {"ports": [22, 53, 80], "vulns": ["CVE-2020-35452", "CVE-2016-4975", "CVE-2014-0236", "CVE-2016-8743", "CVE-2018-10545", "CVE-2016-3141", "CVE-2014-9426", "CVE-2016-2161", "CVE-2024-3566", "CVE-2015-2331", "CVE-2014-3480", "CVE-2014-3981", "CVE-2016-5766", "CVE-2016-5387", "CVE-2014-2270", "CVE-2015-3416", "CVE-2015-6835", "CVE-2015-0232", "CVE-2016-7418", "CVE-2007-4723", "CVE-2014-4049", "CVE-2018-19520", "CVE-2025-59775", "CVE-2016-9137", "CVE-2016-9138", "CVE-2022-31628", "CVE-2022-31629", "

hosting_provider:
  cpe:/a:openbsd:openssh:6.6.1p1,cpe:/o:canonical:ubuntu_linux,cpe:/a:php:php:5.5.9,cpe:/a:apache:http_server:2.4.7


indicator: 176.123.11.130
indicator_type: ipv4
source: shodan
city: open-dir,eol-product
reverse_dns: mx.headsuper.live
queried_at: 2026-05-27T12:02:29.901766
raw_data:
  {"ports": [22, 53, 80, 1500, 2200], "vulns": ["CVE-2020-35452", "CVE-2016-4975", "CVE-2014-0236", "CVE-2016-8743", "CVE-2018-10545", "CVE-2016-3141", "CVE-2014-9426", "CVE-2016-2161", "CVE-2024-3566", "CVE-2015-2331", "CVE-2014-3480", "CVE-2014-3981", "CVE-2016-5766", "CVE-2016-5387", "CVE-2014-2270", "CVE-2015-3416", "CVE-2015-6835", "CVE-2015-0232", "CVE-2016-7418", "CVE-2007-4723", "CVE-2014-4049", "CVE-2018-19520", "CVE-2025-59775", "CVE-2016-9137", "CVE-2016-9138", "CVE-2022-31628", "CVE-20

hosting_provider:
  cpe:/a:openbsd:openssh:6.6.1p1,cpe:/o:canonical:ubuntu_linux,cpe:/a:php:php:5.5.9,cpe:/a:apache:http_server:2.4.7


indicator: 176.123.11.133
indicator_type: ipv4
source: shodan
city: eol-product,open-dir
reverse_dns: mx3.cougar-hungry.info
queried_at: 2026-05-27T12:02:31.671795
raw_data:
  {"ports": [22, 80, 443, 873], "vulns": ["CVE-2016-7126", "CVE-2015-4601", "CVE-2018-15132", "CVE-2018-1301", "CVE-2016-3142", "CVE-2018-5712", "CVE-2016-4537", "CVE-2014-9709", "CVE-2013-7345", "CVE-2022-28614", "CVE-2018-19520", "CVE-2014-9767", "CVE-2016-5114", "CVE-2016-7127", "CVE-2015-3414", "CVE-2021-32786", "CVE-2017-11143", "CVE-2015-4599", "CVE-2020-13938", "CVE-2018-10547", "CVE-2011-2688", "CVE-2019-17567", "CVE-2016-7131", "CVE-2016-3141", "CVE-2016-4539", "CVE-2015-4024", "CVE-2018-

hosting_provider:
  cpe:/o:canonical:ubuntu_linux,cpe:/a:php:php:5.5.9,cpe:/a:openbsd:openssh:6.6.1p1,cpe:/a:apache:http_server:2.4.7


indicator: 176.123.11.134
indicator_type: ipv4
source: shodan
city: open-dir,self-signed,eol-product,starttls
reverse_dns: mail1.near-bygirls.info
queried_at: 2026-05-27T12:02:33.457079
raw_data:
  {"ports": [22, 25, 53, 80, 143, 873, 1500], "vulns": ["CVE-2020-35452", "CVE-2016-4975", "CVE-2014-0236", "CVE-2016-8743", "CVE-2018-10545", "CVE-2016-3141", "CVE-2014-9426", "CVE-2016-2161", "CVE-2024-3566", "CVE-2015-2331", "CVE-2014-3480", "CVE-2014-3981", "CVE-2016-5766", "CVE-2016-5387", "CVE-2014-2270", "CVE-2015-3416", "CVE-2015-6835", "CVE-2015-0232", "CVE-2016-7418", "CVE-2007-4723", "CVE-2014-4049", "CVE-2018-19520", "CVE-2025-59775", "CVE-2016-9137", "CVE-2016-9138", "CVE-2022-31628",

hosting_provider:
  cpe:/a:openbsd:openssh:6.6.1p1,cpe:/a:php:php:5.5.9,cpe:/o:canonical:ubuntu_linux,cpe:/a:postfix:postfix,cpe:/a:apache:http_server:2.4.7


indicator: 176.123.11.142
indicator_type: ipv4
source: shodan
reverse_dns: mail.lime-breed.live
queried_at: 2026-05-27T12:02:35.228409
raw_data:
  {"ports": [53, 143, 873], "vulns": [], "hostnames": ["mail.lime-breed.live"], "tags": [], "cpes": []}


indicator: 176.123.11.152
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: mta2.ladygoo.live
queried_at: 2026-05-27T12:02:36.992075
raw_data:
  {"ports": [22, 53, 80, 143, 873], "vulns": ["CVE-2016-7126", "CVE-2015-4601", "CVE-2018-15132", "CVE-2018-1301", "CVE-2016-3142", "CVE-2018-5712", "CVE-2016-4537", "CVE-2014-9709", "CVE-2013-7345", "CVE-2022-28614", "CVE-2018-19520", "CVE-2014-9767", "CVE-2016-5114", "CVE-2016-7127", "CVE-2015-3414", "CVE-2021-32786", "CVE-2017-11143", "CVE-2015-4599", "CVE-2020-13938", "CVE-2018-10547", "CVE-2011-2688", "CVE-2019-17567", "CVE-2016-7131", "CVE-2016-3141", "CVE-2016-4539", "CVE-2015-4024", "CVE-2

hosting_provider:
  cpe:/o:canonical:ubuntu_linux,cpe:/a:php:php:5.5.9,cpe:/a:openbsd:openssh:6.6.1p1,cpe:/a:apache:http_server:2.4.7


indicator: 176.123.11.164
indicator_type: ipv4
source: shodan
reverse_dns: mta3.do-cums.info
hosting_provider: cpe:/o:canonical:ubuntu_linux,cpe:/a:openbsd:openssh:6.6.1p1
queried_at: 2026-05-27T12:02:38.747803
raw_data:
  {"ports": [22, 53, 873, 2200], "vulns": [], "hostnames": ["mta3.do-cums.info"], "tags": [], "cpes": ["cpe:/o:canonical:ubuntu_linux", "cpe:/a:openbsd:openssh:6.6.1p1"]}


indicator: 176.123.11.165
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: mta4.trandy-curvy.info
hosting_provider: cpe:/o:canonical:ubuntu_linux,cpe:/a:php:php:5.5.9,cpe:/a:apache:http_server:2.4.7
queried_at: 2026-05-27T12:02:40.519863
raw_data:
  {"ports": [22, 53, 80, 873], "vulns": ["CVE-2020-35452", "CVE-2016-4975", "CVE-2014-0236", "CVE-2016-8743", "CVE-2018-10545", "CVE-2016-3141", "CVE-2014-9426", "CVE-2016-2161", "CVE-2024-3566", "CVE-2015-2331", "CVE-2014-3480", "CVE-2014-3981", "CVE-2016-5766", "CVE-2016-5387", "CVE-2014-2270", "CVE-2015-3416", "CVE-2015-6835", "CVE-2015-0232", "CVE-2016-7418", "CVE-2007-4723", "CVE-2014-4049", "CVE-2018-19520", "CVE-2025-59775", "CVE-2016-9137", "CVE-2016-9138", "CVE-2022-31628", "CVE-2022-3162


indicator: 176.123.11.171
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/o:canonical:ubuntu_linux,cpe:/a:openbsd:openssh:6.6.1p1
queried_at: 2026-05-27T12:02:44.095346
raw_data:
  {"ports": [22, 53, 2200], "vulns": [], "hostnames": [], "tags": [], "cpes": ["cpe:/o:canonical:ubuntu_linux", "cpe:/a:openbsd:openssh:6.6.1p1"]}


indicator: 176.123.11.172
indicator_type: ipv4
source: shodan
city: self-signed,eol-product,starttls
reverse_dns: mta.datecloud.live
queried_at: 2026-05-27T12:02:45.870570
raw_data:
  {"ports": [22, 25, 53, 80, 873], "vulns": ["CVE-2020-35452", "CVE-2016-4975", "CVE-2014-0236", "CVE-2016-8743", "CVE-2018-10545", "CVE-2016-3141", "CVE-2014-9426", "CVE-2016-2161", "CVE-2024-3566", "CVE-2015-2331", "CVE-2014-3480", "CVE-2014-3981", "CVE-2016-5766", "CVE-2016-5387", "CVE-2014-2270", "CVE-2015-3416", "CVE-2015-6835", "CVE-2015-0232", "CVE-2016-7418", "CVE-2007-4723", "CVE-2014-4049", "CVE-2018-19520", "CVE-2025-59775", "CVE-2016-9137", "CVE-2016-9138", "CVE-2022-31628", "CVE-2022-

hosting_provider:
  cpe:/a:openbsd:openssh:6.6.1p1,cpe:/a:php:php:5.5.9,cpe:/o:canonical:ubuntu_linux,cpe:/a:postfix:postfix,cpe:/a:apache:http_server:2.4.7


indicator: 176.123.11.175
indicator_type: ipv4
source: shodan
city: eol-product,self-signed,starttls
reverse_dns: cemail-posts.live,mail1.cemail-posts.live
queried_at: 2026-05-27T12:02:47.637543
raw_data:
  {"ports": [22, 25, 53, 80, 443], "vulns": ["CVE-2016-7126", "CVE-2015-4601", "CVE-2018-15132", "CVE-2018-1301", "CVE-2016-3142", "CVE-2018-5712", "CVE-2016-4537", "CVE-2014-9709", "CVE-2013-7345", "CVE-2022-28614", "CVE-2018-19520", "CVE-2014-9767", "CVE-2016-5114", "CVE-2016-7127", "CVE-2015-3414", "CVE-2021-32786", "CVE-2017-11143", "CVE-2015-4599", "CVE-2020-13938", "CVE-2018-10547", "CVE-2011-2688", "CVE-2019-17567", "CVE-2016-7131", "CVE-2016-3141", "CVE-2016-4539", "CVE-2015-4024", "CVE-20

hosting_provider:
  cpe:/o:canonical:ubuntu_linux,cpe:/a:php:php:5.5.9,cpe:/a:apache:http_server:2.4.7,cpe:/a:postfix:postfix


indicator: 176.123.11.179
indicator_type: ipv4
source: shodan
city: self-signed,eol-product,starttls
reverse_dns: mx1.clock4u.life
queried_at: 2026-05-27T12:02:49.409852
raw_data:
  {"ports": [22, 25, 53, 80, 143, 873, 2200], "vulns": ["CVE-2020-35452", "CVE-2016-4975", "CVE-2014-0236", "CVE-2016-8743", "CVE-2018-10545", "CVE-2016-3141", "CVE-2014-9426", "CVE-2016-2161", "CVE-2024-3566", "CVE-2015-2331", "CVE-2014-3480", "CVE-2014-3981", "CVE-2016-5766", "CVE-2016-5387", "CVE-2014-2270", "CVE-2015-3416", "CVE-2015-6835", "CVE-2015-0232", "CVE-2016-7418", "CVE-2007-4723", "CVE-2014-4049", "CVE-2018-19520", "CVE-2025-59775", "CVE-2016-9137", "CVE-2016-9138", "CVE-2022-31628",

hosting_provider:
  cpe:/a:openbsd:openssh:6.6.1p1,cpe:/a:php:php:5.5.9,cpe:/o:canonical:ubuntu_linux,cpe:/a:postfix:postfix,cpe:/a:apache:http_server:2.4.7


indicator: 176.123.11.196
indicator_type: ipv4
source: shodan
city: eol-product
queried_at: 2026-05-27T12:02:54.962040
raw_data:
  {"ports": [22, 80, 143, 873], "vulns": ["CVE-2020-35452", "CVE-2016-4975", "CVE-2014-0236", "CVE-2016-8743", "CVE-2018-10545", "CVE-2016-3141", "CVE-2014-9426", "CVE-2016-2161", "CVE-2024-3566", "CVE-2015-2331", "CVE-2014-3480", "CVE-2014-3981", "CVE-2016-5766", "CVE-2016-5387", "CVE-2014-2270", "CVE-2015-3416", "CVE-2015-6835", "CVE-2015-0232", "CVE-2016-7418", "CVE-2007-4723", "CVE-2014-4049", "CVE-2018-19520", "CVE-2025-59775", "CVE-2016-9137", "CVE-2016-9138", "CVE-2022-31628", "CVE-2022-316

hosting_provider:
[cell repeats an earlier one in this file: 113 characters]


indicator: 176.123.11.208
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: mx.pretty-girlscloud.info
queried_at: 2026-05-27T12:03:00.326555
raw_data:
  {"ports": [22, 53, 80, 443], "vulns": ["CVE-2016-7126", "CVE-2015-4601", "CVE-2018-15132", "CVE-2018-1301", "CVE-2016-3142", "CVE-2018-5712", "CVE-2016-4537", "CVE-2014-9709", "CVE-2013-7345", "CVE-2022-28614", "CVE-2018-19520", "CVE-2014-9767", "CVE-2016-5114", "CVE-2016-7127", "CVE-2015-3414", "CVE-2021-32786", "CVE-2017-11143", "CVE-2015-4599", "CVE-2020-13938", "CVE-2018-10547", "CVE-2011-2688", "CVE-2019-17567", "CVE-2016-7131", "CVE-2016-3141", "CVE-2016-4539", "CVE-2015-4024", "CVE-2018-1

hosting_provider:
  cpe:/o:canonical:ubuntu_linux,cpe:/a:php:php:5.5.9,cpe:/a:openbsd:openssh:6.6.1p1,cpe:/a:apache:http_server:2.4.7


indicator: 176.123.11.210
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: mta3.do-troopers.life
queried_at: 2026-05-27T12:03:02.117345
raw_data:
  {"ports": [22, 80, 143, 443, 873], "vulns": ["CVE-2020-35452", "CVE-2016-4975", "CVE-2014-0236", "CVE-2016-8743", "CVE-2018-10545", "CVE-2016-3141", "CVE-2014-9426", "CVE-2016-2161", "CVE-2024-3566", "CVE-2015-2331", "CVE-2014-3480", "CVE-2014-3981", "CVE-2016-5766", "CVE-2016-5387", "CVE-2014-2270", "CVE-2015-3416", "CVE-2015-6835", "CVE-2015-0232", "CVE-2016-7418", "CVE-2007-4723", "CVE-2014-4049", "CVE-2018-19520", "CVE-2025-59775", "CVE-2016-9137", "CVE-2016-9138", "CVE-2022-31628", "CVE-202

hosting_provider:
[cell repeats an earlier one in this file: 113 characters]


indicator: 176.123.11.212
indicator_type: ipv4
source: shodan
reverse_dns: mail.willthey-date.info
hosting_provider: cpe:/o:canonical:ubuntu_linux,cpe:/a:openbsd:openssh:6.6.1p1,cpe:/a:apache:http_server:2.4.7
queried_at: 2026-05-27T12:03:03.914560
raw_data:
  {"ports": [22, 53, 143, 443, 873], "vulns": ["CVE-2020-35452", "CVE-2016-4975", "CVE-2021-39275", "CVE-2016-8743", "CVE-2024-38472", "CVE-2022-30556", "CVE-2018-1303", "CVE-2022-23943", "CVE-2016-2161", "CVE-2009-2299", "CVE-2013-5704", "CVE-2018-1283", "CVE-2012-4360", "CVE-2009-0796", "CVE-2015-0228", "CVE-2020-1934", "CVE-2017-7679", "CVE-2016-5387", "CVE-2021-32785", "CVE-2013-4365", "CVE-2016-8612", "CVE-2007-4723", "CVE-2015-3183", "CVE-2014-0118", "CVE-2015-3185", "CVE-2025-49812", "CVE-2


indicator: 176.123.11.222
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: mta1.feelrealyou.live
hosting_provider: cpe:/o:canonical:ubuntu_linux,cpe:/a:php:php:5.5.9,cpe:/a:apache:http_server:2.4.7
queried_at: 2026-05-27T12:03:07.435500
raw_data:
  {"ports": [53, 80, 143, 873], "vulns": ["CVE-2016-7126", "CVE-2015-4601", "CVE-2018-15132", "CVE-2018-1301", "CVE-2016-3142", "CVE-2018-5712", "CVE-2016-4537", "CVE-2014-9709", "CVE-2013-7345", "CVE-2022-28614", "CVE-2018-19520", "CVE-2014-9767", "CVE-2016-5114", "CVE-2016-7127", "CVE-2015-3414", "CVE-2021-32786", "CVE-2017-11143", "CVE-2015-4599", "CVE-2020-13938", "CVE-2018-10547", "CVE-2011-2688", "CVE-2019-17567", "CVE-2016-7131", "CVE-2016-3141", "CVE-2016-4539", "CVE-2015-4024", "CVE-2018-


indicator: 176.123.11.23
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: mta.hornylive.life
hosting_provider: cpe:/o:canonical:ubuntu_linux,cpe:/a:php:php:5.5.9,cpe:/a:apache:http_server:2.4.7
queried_at: 2026-05-27T12:03:09.202708
raw_data:
  {"ports": [80, 143], "vulns": ["CVE-2020-35452", "CVE-2016-4975", "CVE-2014-0236", "CVE-2016-8743", "CVE-2018-10545", "CVE-2016-3141", "CVE-2014-9426", "CVE-2016-2161", "CVE-2024-3566", "CVE-2015-2331", "CVE-2014-3480", "CVE-2014-3981", "CVE-2016-5766", "CVE-2016-5387", "CVE-2014-2270", "CVE-2015-3416", "CVE-2015-6835", "CVE-2015-0232", "CVE-2016-7418", "CVE-2007-4723", "CVE-2014-4049", "CVE-2018-19520", "CVE-2025-59775", "CVE-2016-9137", "CVE-2016-9138", "CVE-2022-31628", "CVE-2022-31629", "CVE


indicator: 176.123.11.239
indicator_type: ipv4
source: shodan
city: self-signed,eol-product,starttls
reverse_dns: mx3.slapme-please.life
queried_at: 2026-05-27T12:03:14.528170
raw_data:
  {"ports": [22, 25, 53, 80, 143], "vulns": ["CVE-2020-35452", "CVE-2016-4975", "CVE-2014-0236", "CVE-2016-8743", "CVE-2018-10545", "CVE-2016-3141", "CVE-2014-9426", "CVE-2016-2161", "CVE-2024-3566", "CVE-2015-2331", "CVE-2014-3480", "CVE-2014-3981", "CVE-2016-5766", "CVE-2016-5387", "CVE-2014-2270", "CVE-2015-3416", "CVE-2015-6835", "CVE-2015-0232", "CVE-2016-7418", "CVE-2007-4723", "CVE-2014-4049", "CVE-2018-19520", "CVE-2025-59775", "CVE-2016-9137", "CVE-2016-9138", "CVE-2022-31628", "CVE-2022-

hosting_provider:
[cell repeats an earlier one in this file: 136 characters]


indicator: 176.123.11.245
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: mta1.bestofme.life,mx3.olivaceus.info
hosting_provider: cpe:/o:canonical:ubuntu_linux,cpe:/a:php:php:5.5.9,cpe:/a:apache:http_server:2.4.7
queried_at: 2026-05-27T12:03:18.132462
raw_data:
  {"ports": [53, 80, 443, 873], "vulns": ["CVE-2016-7126", "CVE-2015-4601", "CVE-2018-15132", "CVE-2018-1301", "CVE-2016-3142", "CVE-2018-5712", "CVE-2016-4537", "CVE-2014-9709", "CVE-2013-7345", "CVE-2022-28614", "CVE-2018-19520", "CVE-2014-9767", "CVE-2016-5114", "CVE-2016-7127", "CVE-2015-3414", "CVE-2021-32786", "CVE-2017-11143", "CVE-2015-4599", "CVE-2020-13938", "CVE-2018-10547", "CVE-2011-2688", "CVE-2019-17567", "CVE-2016-7131", "CVE-2016-3141", "CVE-2016-4539", "CVE-2015-4024", "CVE-2018-


indicator: 176.123.11.248
indicator_type: ipv4
source: shodan
reverse_dns: mail.badgirls-passion.life
queried_at: 2026-05-27T12:03:19.952133
raw_data:
  {"ports": [143, 873], "vulns": [], "hostnames": ["mail.badgirls-passion.life"], "tags": [], "cpes": []}


indicator: 176.123.11.4
indicator_type: ipv4
source: shodan
city: eol-product
queried_at: 2026-05-27T12:03:25.186044
raw_data:
  {"ports": [22, 53, 80, 143, 443], "vulns": ["CVE-2016-7126", "CVE-2015-4601", "CVE-2018-15132", "CVE-2018-1301", "CVE-2016-3142", "CVE-2018-5712", "CVE-2016-4537", "CVE-2014-9709", "CVE-2013-7345", "CVE-2022-28614", "CVE-2018-19520", "CVE-2014-9767", "CVE-2016-5114", "CVE-2016-7127", "CVE-2015-3414", "CVE-2021-32786", "CVE-2017-11143", "CVE-2015-4599", "CVE-2020-13938", "CVE-2018-10547", "CVE-2011-2688", "CVE-2019-17567", "CVE-2016-7131", "CVE-2016-3141", "CVE-2016-4539", "CVE-2015-4024", "CVE-2

hosting_provider:
[cell repeats an earlier one in this file: 113 characters]


indicator: 176.123.11.40
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: mta2.witchcraft-girls.life
queried_at: 2026-05-27T12:03:26.946606
raw_data:
  {"ports": [22, 80, 143], "vulns": ["CVE-2020-35452", "CVE-2016-4975", "CVE-2014-0236", "CVE-2016-8743", "CVE-2018-10545", "CVE-2016-3141", "CVE-2014-9426", "CVE-2016-2161", "CVE-2024-3566", "CVE-2015-2331", "CVE-2014-3480", "CVE-2014-3981", "CVE-2016-5766", "CVE-2016-5387", "CVE-2014-2270", "CVE-2015-3416", "CVE-2015-6835", "CVE-2015-0232", "CVE-2016-7418", "CVE-2007-4723", "CVE-2014-4049", "CVE-2018-19520", "CVE-2025-59775", "CVE-2016-9137", "CVE-2016-9138", "CVE-2022-31628", "CVE-2022-31629", 

hosting_provider:
[cell repeats an earlier one in this file: 113 characters]


indicator: 176.123.11.47
indicator_type: ipv4
source: shodan
city: self-signed,eol-product,starttls
reverse_dns: mx.seductors.life
queried_at: 2026-05-27T12:03:28.760067
raw_data:
  {"ports": [22, 25, 80, 143], "vulns": ["CVE-2020-35452", "CVE-2016-4975", "CVE-2014-0236", "CVE-2016-8743", "CVE-2018-10545", "CVE-2016-3141", "CVE-2014-9426", "CVE-2016-2161", "CVE-2024-3566", "CVE-2015-2331", "CVE-2014-3480", "CVE-2014-3981", "CVE-2016-5766", "CVE-2016-5387", "CVE-2014-2270", "CVE-2015-3416", "CVE-2015-6835", "CVE-2015-0232", "CVE-2016-7418", "CVE-2007-4723", "CVE-2014-4049", "CVE-2018-19520", "CVE-2025-59775", "CVE-2016-9137", "CVE-2016-9138", "CVE-2022-31628", "CVE-2022-3162

hosting_provider:
[cell repeats an earlier one in this file: 136 characters]


indicator: 176.123.11.73
indicator_type: ipv4
source: shodan
city: open-dir
reverse_dns: mx2.sensparty.life
hosting_provider: cpe:/o:canonical:ubuntu_linux,cpe:/a:openbsd:openssh:6.6.1p1,cpe:/a:apache:http_server:2.4.7
queried_at: 2026-05-27T12:03:35.895490
raw_data:
  {"ports": [22, 443, 1500], "vulns": ["CVE-2018-1302", "CVE-2018-1301", "CVE-2021-44224", "CVE-2022-28614", "CVE-2007-4723", "CVE-2026-33857", "CVE-2014-0231", "CVE-2024-47252", "CVE-2014-0117", "CVE-2021-32786", "CVE-2020-35452", "CVE-2024-40898", "CVE-2016-8612", "CVE-2020-13938", "CVE-2011-2688", "CVE-2019-17567", "CVE-2022-28330", "CVE-2014-3581", "CVE-2022-26377", "CVE-2022-22721", "CVE-2018-17199", "CVE-2022-31813", "CVE-2024-43394", "CVE-2023-38709", "CVE-2017-9788", "CVE-2016-8743", "CVE-


indicator: 176.123.11.79
indicator_type: ipv4
source: shodan
city: open-dir,self-signed,starttls
reverse_dns: mail3.websutting.life
queried_at: 2026-05-27T12:03:37.976185
raw_data:
  {"ports": [22, 25, 53, 143, 1500], "vulns": ["CVE-2020-35452", "CVE-2016-4975", "CVE-2021-39275", "CVE-2016-8743", "CVE-2024-38472", "CVE-2022-30556", "CVE-2018-1303", "CVE-2022-23943", "CVE-2016-2161", "CVE-2009-2299", "CVE-2013-5704", "CVE-2018-1283", "CVE-2012-4360", "CVE-2009-0796", "CVE-2015-0228", "CVE-2020-1934", "CVE-2017-7679", "CVE-2016-5387", "CVE-2021-32785", "CVE-2013-4365", "CVE-2016-8612", "CVE-2007-4723", "CVE-2015-3183", "CVE-2014-0118", "CVE-2015-3185", "CVE-2025-49812", "CVE-2

hosting_provider:
  cpe:/a:openbsd:openssh:6.6.1p1,cpe:/o:canonical:ubuntu_linux,cpe:/a:postfix:postfix,cpe:/a:apache:http_server:2.4.7


indicator: 176.123.11.81
indicator_type: ipv4
source: shodan
city: self-signed,eol-product,starttls
reverse_dns: mx3.goodholesite.live
queried_at: 2026-05-27T12:03:39.767483
raw_data:
  {"ports": [25, 53, 80, 143], "vulns": ["CVE-2020-35452", "CVE-2016-4975", "CVE-2014-0236", "CVE-2016-8743", "CVE-2018-10545", "CVE-2016-3141", "CVE-2014-9426", "CVE-2016-2161", "CVE-2024-3566", "CVE-2015-2331", "CVE-2014-3480", "CVE-2014-3981", "CVE-2016-5766", "CVE-2016-5387", "CVE-2014-2270", "CVE-2015-3416", "CVE-2015-6835", "CVE-2015-0232", "CVE-2016-7418", "CVE-2007-4723", "CVE-2014-4049", "CVE-2018-19520", "CVE-2025-59775", "CVE-2016-9137", "CVE-2016-9138", "CVE-2022-31628", "CVE-2022-3162

hosting_provider:
  cpe:/a:postfix:postfix,cpe:/o:canonical:ubuntu_linux,cpe:/a:php:php:5.5.9,cpe:/a:apache:http_server:2.4.7


indicator: 176.123.11.85
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: mx2.bellhours.live
hosting_provider: cpe:/o:canonical:ubuntu_linux,cpe:/a:php:php:5.5.9,cpe:/a:apache:http_server:2.4.7
queried_at: 2026-05-27T12:03:41.536415
raw_data:
  {"ports": [22, 80, 443], "vulns": ["CVE-2020-35452", "CVE-2016-4975", "CVE-2014-0236", "CVE-2016-8743", "CVE-2018-10545", "CVE-2016-3141", "CVE-2014-9426", "CVE-2016-2161", "CVE-2024-3566", "CVE-2015-2331", "CVE-2014-3480", "CVE-2014-3981", "CVE-2016-5766", "CVE-2016-5387", "CVE-2014-2270", "CVE-2015-3416", "CVE-2015-6835", "CVE-2015-0232", "CVE-2016-7418", "CVE-2007-4723", "CVE-2014-4049", "CVE-2018-19520", "CVE-2025-59775", "CVE-2016-9137", "CVE-2016-9138", "CVE-2022-31628", "CVE-2022-31629", 


indicator: 176.123.5.11
indicator_type: ipv4
source: shodan
reverse_dns: api.ci6ef27x3vdy0p4o.a41hsrxuv2.cc
hosting_provider: cpe:/a:f5:nginx
queried_at: 2026-05-27T12:03:48.694400
raw_data:
  {"ports": [443], "vulns": [], "hostnames": ["api.ci6ef27x3vdy0p4o.a41hsrxuv2.cc"], "tags": [], "cpes": ["cpe:/a:f5:nginx"]}


indicator: 176.123.5.121
indicator_type: ipv4
source: shodan
reverse_dns: peaceful-tereshkova.176-123-5-120.plesk.page
hosting_provider: cpe:/a:f5:nginx
queried_at: 2026-05-27T12:03:50.449561
raw_data:
  {"ports": [21, 22, 80, 106, 443, 8443], "vulns": [], "hostnames": ["peaceful-tereshkova.176-123-5-120.plesk.page"], "tags": [], "cpes": ["cpe:/a:f5:nginx"]}


indicator: 176.123.5.142
indicator_type: ipv4
source: shodan
reverse_dns: supervpn.website
hosting_provider: cpe:/a:openbsd:openssh:7.2p2,cpe:/o:canonical:ubuntu_linux,cpe:/a:openvpn:openvpn_access_server
queried_at: 2026-05-27T12:03:55.793616
raw_data:
  {"ports": [22, 443, 943], "vulns": [], "hostnames": ["supervpn.website"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:7.2p2", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:openvpn:openvpn_access_server"]}


indicator: 176.123.5.144
indicator_type: ipv4
source: shodan
city: self-signed,database,starttls
queried_at: 2026-05-27T12:03:57.565470
raw_data:
  {"ports": [53, 80, 110, 111, 443, 465, 993, 995, 2077, 2083, 2087, 2222, 3306], "vulns": ["CVE-2025-26465", "CVE-2026-40686", "CVE-2008-3844", "CVE-2020-15778", "CVE-2007-2768", "CVE-2026-35386", "CVE-2023-48795", "CVE-2026-40687", "CVE-2021-41617", "CVE-2023-38408", "CVE-2026-35387", "CVE-2020-14145", "CVE-2025-32728", "CVE-2023-51385", "CVE-2021-36368", "CVE-2016-20012", "CVE-2026-35414", "CVE-2026-35388", "CVE-2023-51767", "CVE-2026-35385", "CVE-2026-40684", "CVE-2019-16905", "CVE-2026-40685"

reverse_dns:
  autodiscover.host.penndrugstore.com,mail.host.penndrugstore.com,ipv6.host.penndrugstore.com,penndrugstore.com,cpcontacts.host.penndrugstore.com,whm.host.penndrugstore.com,www.host.penndrugstore.com,healpharmacy.net,webmail.host.penndrugstore.com,cpanel.host.penndrugstore.com,cpcalendars.host.penndrugstore.com,webdisk.host.penndrugstore.com,host.penndrugstore.com,autoconfig.host.penndrugstore.com

hosting_provider:
  cpe:/a:exim:exim:4.99.1,cpe:/a:apache:http_server,cpe:/a:cpanel:cpanel,cpe:/a:oracle:mysql,cpe:/a:openbsd:openssh:8.0


indicator: 176.123.5.150
indicator_type: ipv4
source: shodan
city: starttls,self-signed
hosting_provider: cpe:/a:cpanel:whm,cpe:/a:cpanel:cpanel
queried_at: 2026-05-27T12:03:59.365862
raw_data:
  {"ports": [21, 53, 111, 143, 993, 2083, 2087], "vulns": [], "hostnames": ["whm.host.penndrugstore.com", "cpanel.host.penndrugstore.com", "autodiscover.host.penndrugstore.com", "buyivermectin12mgonline.com", "www.host.penndrugstore.com", "ipv6.host.penndrugstore.com", "webdisk.host.penndrugstore.com", "webmail.host.penndrugstore.com", "mail.host.penndrugstore.com", "autoconfig.host.penndrugstore.com", "cpcalendars.host.penndrugstore.com", "cpcontacts.host.penndrugstore.com", "host.penndrugstore.c

reverse_dns:
  whm.host.penndrugstore.com,cpanel.host.penndrugstore.com,autodiscover.host.penndrugstore.com,buyivermectin12mgonline.com,www.host.penndrugstore.com,ipv6.host.penndrugstore.com,webdisk.host.penndrugstore.com,webmail.host.penndrugstore.com,mail.host.penndrugstore.com,autoconfig.host.penndrugstore.com,cpcalendars.host.penndrugstore.com,cpcontacts.host.penndrugstore.com,host.penndrugstore.com


indicator: 176.123.5.169
indicator_type: ipv4
source: shodan
city: self-signed,starttls
hosting_provider: cpe:/a:exim:exim:4.99.1,cpe:/a:cpanel:cpanel,cpe:/a:apache:http_server,cpe:/a:openbsd:openssh:8.0
queried_at: 2026-05-27T12:04:01.195405
raw_data:
  {"ports": [53, 80, 143, 443, 465, 587, 993, 2083, 2086, 2087, 2222, 4190], "vulns": ["CVE-2025-26465", "CVE-2026-40686", "CVE-2008-3844", "CVE-2020-15778", "CVE-2007-2768", "CVE-2026-35386", "CVE-2023-48795", "CVE-2026-40687", "CVE-2021-41617", "CVE-2023-38408", "CVE-2026-35387", "CVE-2020-14145", "CVE-2025-32728", "CVE-2023-51385", "CVE-2021-36368", "CVE-2016-20012", "CVE-2026-35414", "CVE-2026-35388", "CVE-2023-51767", "CVE-2026-35385", "CVE-2026-40684", "CVE-2019-16905", "CVE-2026-40685"], "h

reverse_dns:
  autodiscover.host.penndrugstore.com,mail.host.penndrugstore.com,ipv6.host.penndrugstore.com,cpcontacts.host.penndrugstore.com,whm.host.penndrugstore.com,www.host.penndrugstore.com,cpanel.host.penndrugstore.com,webmail.host.penndrugstore.com,cpcalendars.host.penndrugstore.com,webdisk.host.penndrugstore.com,host.penndrugstore.com,zithromaxonline.com,autoconfig.host.penndrugstore.com


indicator: 176.123.5.171
indicator_type: ipv4
source: shodan
city: self-signed,database,ai,starttls
hosting_provider: cpe:/a:exim:exim:4.99.1,cpe:/a:cpanel:cpanel,cpe:/a:oracle:mysql,cpe:/a:openbsd:openssh:8.0
queried_at: 2026-05-27T12:04:02.980695
raw_data:
  {"ports": [21, 53, 80, 110, 111, 587, 993, 995, 2079, 2082, 2083, 2087, 2222, 3306], "vulns": ["CVE-2025-26465", "CVE-2026-40686", "CVE-2008-3844", "CVE-2020-15778", "CVE-2007-2768", "CVE-2026-35386", "CVE-2023-48795", "CVE-2026-40687", "CVE-2021-41617", "CVE-2023-38408", "CVE-2026-35387", "CVE-2020-14145", "CVE-2025-32728", "CVE-2023-51385", "CVE-2021-36368", "CVE-2016-20012", "CVE-2026-35414", "CVE-2026-35388", "CVE-2023-51767", "CVE-2026-35385", "CVE-2026-40684", "CVE-2019-16905", "CVE-2026-4

reverse_dns:
  autodiscover.host.penndrugstore.com,mail.host.penndrugstore.com,ipv6.host.penndrugstore.com,cpcontacts.host.penndrugstore.com,whm.host.penndrugstore.com,www.host.penndrugstore.com,cpanel.host.penndrugstore.com,webmail.host.penndrugstore.com,cpcalendars.host.penndrugstore.com,webdisk.host.penndrugstore.com,host.penndrugstore.com,zithromaxonline.com,autoconfig.host.penndrugstore.com


indicator: 176.123.5.178
indicator_type: ipv4
source: shodan
city: starttls,self-signed
hosting_provider: cpe:/a:cpanel:whm,cpe:/a:openbsd:openssh:8.0,cpe:/a:exim:exim:4.99.1,cpe:/a:apache:http_server
queried_at: 2026-05-27T12:04:04.741359
raw_data:
  {"ports": [53, 80, 111, 143, 443, 465, 993, 2087, 2222], "vulns": ["CVE-2008-3844", "CVE-2020-15778", "CVE-2025-26465", "CVE-2023-38408", "CVE-2026-40685", "CVE-2026-40684", "CVE-2026-35385", "CVE-2021-41617", "CVE-2026-40687", "CVE-2026-35386", "CVE-2023-51767", "CVE-2025-32728", "CVE-2026-35388", "CVE-2026-40686", "CVE-2023-51385", "CVE-2023-48795", "CVE-2026-35414", "CVE-2007-2768", "CVE-2019-16905", "CVE-2016-20012", "CVE-2026-35387", "CVE-2020-14145", "CVE-2021-36368"], "hostnames": ["whm.h

reverse_dns:
  whm.host.penndrugstore.com,cpanel.host.penndrugstore.com,autodiscover.host.penndrugstore.com,ipv6.host.penndrugstore.com,www.host.penndrugstore.com,webdisk.host.penndrugstore.com,webmail.host.penndrugstore.com,mail.host.penndrugstore.com,host.penndrugstore.com,autoconfig.host.penndrugstore.com,cpcalendars.host.penndrugstore.com,cpcontacts.host.penndrugstore.com,zithromaxonline.com


indicator: 176.123.5.182
indicator_type: ipv4
source: shodan
city: self-signed,starttls
queried_at: 2026-05-27T12:04:06.511965
raw_data:
  {"ports": [21, 53, 80, 111, 143, 443, 465, 993, 995, 2082, 2083, 2087, 2222], "vulns": ["CVE-2025-26465", "CVE-2008-3844", "CVE-2020-15778", "CVE-2007-2768", "CVE-2026-35386", "CVE-2023-48795", "CVE-2021-41617", "CVE-2023-38408", "CVE-2026-35387", "CVE-2020-14145", "CVE-2025-32728", "CVE-2023-51385", "CVE-2021-36368", "CVE-2016-20012", "CVE-2026-35414", "CVE-2026-35388", "CVE-2023-51767", "CVE-2026-35385", "CVE-2019-16905"], "hostnames": ["www.grantpharmacy.co", "autodiscover.host.penndrugstore.

reverse_dns:
  www.grantpharmacy.co,autodiscover.host.penndrugstore.com,mail.host.penndrugstore.com,ipv6.host.penndrugstore.com,cpcontacts.host.penndrugstore.com,whm.host.penndrugstore.com,www.host.penndrugstore.com,cpanel.host.penndrugstore.com,webmail.host.penndrugstore.com,grantpharmacy.co,cpcalendars.host.penndrugstore.com,webdisk.host.penndrugstore.com,host.penndrugstore.com,autoconfig.host.penndrugstore.com

hosting_provider:
  cpe:/a:exim:exim:4.99.1,cpe:/a:apache:http_server,cpe:/a:cpanel:cpanel,cpe:/a:cpanel:whm,cpe:/a:openbsd:openssh:8.0


indicator: 176.123.5.191
indicator_type: ipv4
source: shodan
city: starttls
reverse_dns: crash-slots.com
hosting_provider: cpe:/a:litespeedtech:litespeed_web_server,cpe:/a:postfix:postfix
queried_at: 2026-05-27T12:04:08.276594
raw_data:
  {"ports": [25, 53, 443, 993, 8090], "vulns": [], "hostnames": ["crash-slots.com"], "tags": ["starttls"], "cpes": ["cpe:/a:litespeedtech:litespeed_web_server", "cpe:/a:postfix:postfix"]}


indicator: 176.123.5.194
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: zithromaxonline.com
queried_at: 2026-05-27T12:04:10.077529
raw_data:
  {"ports": [80, 443, 5900, 5988], "vulns": [], "hostnames": ["zithromaxonline.com"], "tags": ["self-signed"], "cpes": []}


indicator: 176.123.5.208
indicator_type: ipv4
source: shodan
city: eol-product,self-signed,starttls
hosting_provider: cpe:/a:f5:nginx:1.26.2,cpe:/a:exim:exim:4.93,cpe:/a:f5:nginx
queried_at: 2026-05-27T12:04:11.860143
raw_data:
  {"ports": [53, 443, 465, 587, 7777, 8888], "vulns": ["CVE-2020-28019", "CVE-2026-40685", "CVE-2024-39929", "CVE-2023-42114", "CVE-2026-40684", "CVE-2020-28010", "CVE-2020-28021", "CVE-2026-40687", "CVE-2021-27216", "CVE-2023-42116", "CVE-2020-28015", "CVE-2020-28026", "CVE-2020-28011", "CVE-2020-28013", "CVE-2025-67896", "CVE-2022-3559", "CVE-2020-28022", "CVE-2026-40686", "CVE-2023-42119", "CVE-2021-38371", "CVE-2020-12783", "CVE-2020-28009", "CVE-2020-28012", "CVE-2023-42115", "CVE-2020-28023"


indicator: 176.123.5.218
indicator_type: ipv4
source: shodan
city: ai,eol-product
reverse_dns: billyknowsbest.com
hosting_provider: cpe:/a:jquery:jquery:1.12.4,cpe:/a:php:php:7.4.33,cpe:/a:f5:nginx,cpe:/a:getbootstrap:bootstrap
queried_at: 2026-05-27T12:04:13.624090
raw_data:
  {"ports": [80], "vulns": ["CVE-2024-3566", "CVE-2024-25117", "CVE-2007-3205", "CVE-2024-5458", "CVE-2020-11023", "CVE-2020-11022", "CVE-2019-11358", "CVE-2022-4900", "CVE-2013-2220", "CVE-2015-9251"], "hostnames": ["billyknowsbest.com"], "tags": ["ai", "eol-product"], "cpes": ["cpe:/a:jquery:jquery:1.12.4", "cpe:/a:php:php:7.4.33", "cpe:/a:f5:nginx", "cpe:/a:getbootstrap:bootstrap"]}


indicator: 176.123.5.232
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: www.carglob.com,speedaffiliatewealth.com,carglob.com,mta-sts.carglob.com
queried_at: 2026-05-27T12:04:17.153227
raw_data:
  {"ports": [53, 80, 443], "vulns": ["CVE-2007-3205", "CVE-2024-25117", "CVE-2024-3566", "CVE-2024-5458", "CVE-2013-2220", "CVE-2022-4900"], "hostnames": ["www.carglob.com", "speedaffiliatewealth.com", "carglob.com", "mta-sts.carglob.com"], "tags": ["eol-product"], "cpes": ["cpe:/a:getbootstrap:bootstrap", "cpe:/a:cloudflare:cloudflare", "cpe:/a:f5:nginx", "cpe:/a:php:php:7.4.33", "cpe:/a:jquery:jquery"]}

hosting_provider:
  cpe:/a:getbootstrap:bootstrap,cpe:/a:cloudflare:cloudflare,cpe:/a:f5:nginx,cpe:/a:php:php:7.4.33,cpe:/a:jquery:jquery


indicator: 176.123.5.242
indicator_type: ipv4
source: shodan
city: starttls,self-signed
reverse_dns: interesting-raman.176-123-5-242.plesk.page
queried_at: 2026-05-27T12:04:18.930557
raw_data:
  {"ports": [21, 22, 53, 80, 443, 465, 995, 8880], "vulns": [], "hostnames": ["interesting-raman.176-123-5-242.plesk.page"], "tags": ["starttls", "self-signed"], "cpes": ["cpe:/a:openbsd:openssh:8.2p1", "cpe:/a:parallels:parallels_plesk_panel", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:litespeedtech:litespeed_web_server", "cpe:/a:postfix:postfix"]}

hosting_provider:
  cpe:/a:openbsd:openssh:8.2p1,cpe:/a:parallels:parallels_plesk_panel,cpe:/o:canonical:ubuntu_linux,cpe:/a:litespeedtech:litespeed_web_server,cpe:/a:postfix:postfix


indicator: 176.123.5.35
indicator_type: ipv4
source: shodan
city: eol-product,self-signed,starttls
reverse_dns: blueprintingtools.com
queried_at: 2026-05-27T12:04:20.694740
raw_data:
  {"ports": [22, 25, 53, 80, 443, 993], "vulns": ["CVE-2022-3620", "CVE-2026-40685", "CVE-2024-39929", "CVE-2023-42114", "CVE-2026-40684", "CVE-2019-20372", "CVE-2026-40687", "CVE-2017-20005", "CVE-2023-42116", "CVE-2014-0133", "CVE-2016-0747", "CVE-2016-0742", "CVE-2025-67896", "CVE-2018-16845", "CVE-2022-3559", "CVE-2026-40686", "CVE-2016-1247", "CVE-2023-42119", "CVE-2016-4450", "CVE-2017-7529", "CVE-2023-42115", "CVE-2016-0746", "CVE-2023-42117", "CVE-2014-3616", "CVE-2022-37451", "CVE-2023-51

hosting_provider:
  cpe:/a:exim:exim:4.95,cpe:/a:f5:nginx,cpe:/a:openbsd:openssh:8.9p1,cpe:/a:f5:nginx:1.4.6,cpe:/o:canonical:ubuntu_linux,cpe:/o:linux:linux_kernel


indicator: 176.123.5.64
indicator_type: ipv4
source: shodan
city: starttls
reverse_dns: crash-slots.com
queried_at: 2026-05-27T12:04:22.448715
raw_data:
  {"ports": [22, 25, 80, 110, 443, 465, 587, 993], "vulns": [], "hostnames": ["crash-slots.com"], "tags": ["starttls"], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:litespeedtech:litespeed_web_server", "cpe:/a:postfix:postfix"]}

hosting_provider:
  cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux,cpe:/a:litespeedtech:litespeed_web_server,cpe:/a:postfix:postfix


indicator: 176.123.5.82
indicator_type: ipv4
source: shodan
city: ai
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx
queried_at: 2026-05-27T12:04:25.997812
raw_data:
  {"ports": [22, 80, 22222], "vulns": [], "hostnames": [], "tags": ["ai"], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx"]}


indicator: 176.123.5.83
indicator_type: ipv4
source: shodan
city: self-signed,database,starttls
queried_at: 2026-05-27T12:04:27.752488
raw_data:
  {"ports": [22, 25, 110, 123, 3306], "vulns": ["CVE-2023-42117", "CVE-2023-42114", "CVE-2025-67896", "CVE-2022-37451", "CVE-2023-42115", "CVE-2021-38371", "CVE-2022-37452", "CVE-2024-39929", "CVE-2022-3559", "CVE-2023-51766", "CVE-2023-42116", "CVE-2023-42119"], "hostnames": [], "tags": ["self-signed", "database", "starttls"], "cpes": ["cpe:/a:mariadb:mariadb", "cpe:/a:ntp:ntp:3", "cpe:/a:openbsd:openssh:8.4p1", "cpe:/o:debian:debian_linux", "cpe:/a:exim:exim:4.94.2", "cpe:/o:linux:linux_kernel"]

hosting_provider:
  cpe:/a:mariadb:mariadb,cpe:/a:ntp:ntp:3,cpe:/a:openbsd:openssh:8.4p1,cpe:/o:debian:debian_linux,cpe:/a:exim:exim:4.94.2,cpe:/o:linux:linux_kernel


indicator: 176.123.5.90
indicator_type: ipv4
source: shodan
city: starttls,self-signed
hosting_provider: cpe:/a:f5:nginx:1.28.0,cpe:/a:exim:exim:4.98.2,cpe:/a:f5:nginx
queried_at: 2026-05-27T12:04:31.301363
raw_data:
  {"ports": [21, 25, 53, 143, 443, 995, 7777, 8888], "vulns": ["CVE-2026-40685", "CVE-2026-40684", "CVE-2025-67896", "CVE-2026-40687", "CVE-2026-40686"], "hostnames": [], "tags": ["starttls", "self-signed"], "cpes": ["cpe:/a:f5:nginx:1.28.0", "cpe:/a:exim:exim:4.98.2", "cpe:/a:f5:nginx"]}


indicator: 176.123.5.97
indicator_type: ipv4
source: shodan
city: starttls,self-signed
queried_at: 2026-05-27T12:04:33.057164
raw_data:
  {"ports": [22, 25, 53, 587, 993, 995], "vulns": ["CVE-2026-40685", "CVE-2024-39929", "CVE-2023-42114", "CVE-2026-40684", "CVE-2023-42115", "CVE-2025-67896", "CVE-2026-40687", "CVE-2023-42117", "CVE-2022-3559", "CVE-2026-40686", "CVE-2023-42116", "CVE-2022-37451", "CVE-2021-38371", "CVE-2023-42119", "CVE-2023-51766", "CVE-2022-37452"], "hostnames": [], "tags": ["starttls", "self-signed"], "cpes": ["cpe:/a:openbsd:openssh:8.4p1", "cpe:/o:debian:debian_linux", "cpe:/o:linux:linux_kernel", "cpe:/a:e

hosting_provider:
  cpe:/a:openbsd:openssh:8.4p1,cpe:/o:debian:debian_linux,cpe:/o:linux:linux_kernel,cpe:/a:exim:exim:4.94.2


indicator: 176.123.6.109
indicator_type: ipv4
source: shodan
city: eol-product
queried_at: 2026-05-27T12:04:34.804021
raw_data:
  {"ports": [22, 80, 3000], "vulns": ["CVE-2025-23419", "CVE-2021-3618", "CVE-2021-23017", "CVE-2023-44487"], "hostnames": [], "tags": ["eol-product"], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx:1.18.0", "cpe:/a:openbsd:openssh:8.2p1"]}

hosting_provider:
[cell repeats an earlier one in this file: 107 characters]


indicator: 176.123.6.112
indicator_type: ipv4
source: shodan
city: self-signed
hosting_provider: cpe:/a:embedthis:appweb:2.4.2
queried_at: 2026-05-27T12:04:36.555861
raw_data:
  {"ports": [80, 443, 623], "vulns": [], "hostnames": [], "tags": ["self-signed"], "cpes": ["cpe:/a:embedthis:appweb:2.4.2"]}


indicator: 176.123.6.122
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/o:canonical:ubuntu_linux,cpe:/a:openbsd:openssh:8.2p1
queried_at: 2026-05-27T12:04:41.859082
raw_data:
  {"ports": [22, 9000], "vulns": [], "hostnames": [], "tags": [], "cpes": ["cpe:/o:canonical:ubuntu_linux", "cpe:/a:openbsd:openssh:8.2p1"]}


indicator: 176.123.6.187
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/o:debian:debian_linux,cpe:/a:openbsd:openssh:7.9p1,cpe:/o:linux:linux_kernel
queried_at: 2026-05-27T12:04:50.663104
raw_data:
  {"ports": [22], "vulns": [], "hostnames": [], "tags": [], "cpes": ["cpe:/o:debian:debian_linux", "cpe:/a:openbsd:openssh:7.9p1", "cpe:/o:linux:linux_kernel"]}


indicator: 176.123.6.189
indicator_type: ipv4
source: shodan
reverse_dns: www.lux-casino.club,lux-casino.club
hosting_provider: cpe:/a:f5:nginx
queried_at: 2026-05-27T12:04:52.410237
raw_data:
  {"ports": [443, 32101], "vulns": [], "hostnames": ["www.lux-casino.club", "lux-casino.club"], "tags": [], "cpes": ["cpe:/a:f5:nginx"]}


indicator: 176.123.6.20
indicator_type: ipv4
source: shodan
queried_at: 2026-05-27T12:04:55.987233
raw_data:
  {"ports": [22, 4369, 5201, 8080, 8090, 8098, 8099, 8554, 8888, 9998], "vulns": ["CVE-2025-13837", "CVE-2024-6232", "CVE-2026-4519", "CVE-2025-13836", "CVE-2025-12084", "CVE-2024-7592", "CVE-2009-2940", "CVE-2021-32052", "CVE-2024-9287", "CVE-2020-29396", "CVE-2026-27205", "CVE-2023-27043", "CVE-2025-12781", "CVE-2009-3720"], "hostnames": [], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/a:python:python:3.12.3", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:palletsprojects:flask:3.0.1"]}

hosting_provider:
  cpe:/a:openbsd:openssh:9.6p1,cpe:/a:python:python:3.12.3,cpe:/o:canonical:ubuntu_linux,cpe:/a:palletsprojects:flask:3.0.1


indicator: 176.123.6.218
indicator_type: ipv4
source: shodan
reverse_dns: voice.vantibolli.com
hosting_provider: cpe:/a:openbsd:openssh:7.4
queried_at: 2026-05-27T12:05:01.438911
raw_data:
  {"ports": [22], "vulns": ["CVE-2008-3844", "CVE-2020-15778", "CVE-2025-26465", "CVE-2023-38408", "CVE-2019-6110", "CVE-2026-35385", "CVE-2021-41617", "CVE-2026-35386", "CVE-2018-15473", "CVE-2019-6111", "CVE-2023-51767", "CVE-2025-32728", "CVE-2026-35388", "CVE-2023-51385", "CVE-2023-48795", "CVE-2019-6109", "CVE-2026-35414", "CVE-2007-2768", "CVE-2016-20012", "CVE-2018-15919", "CVE-2018-20685", "CVE-2026-35387", "CVE-2020-14145", "CVE-2017-15906", "CVE-2021-36368"], "hostnames": ["voice.vantibo


indicator: 176.123.6.71
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: stream.shoncine.com
queried_at: 2026-05-27T12:05:12.373888
raw_data:
  {"ports": [22, 80], "vulns": ["CVE-2025-23419", "CVE-2023-44487"], "hostnames": ["stream.shoncine.com"], "tags": ["eol-product"], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx:1.24.0"]}

hosting_provider:
[cell repeats an earlier one in this file: 107 characters]


indicator: 176.123.6.8
indicator_type: ipv4
source: shodan
city: self-signed,starttls
reverse_dns: server2.orders101.net
hosting_provider: cpe:/a:exim:exim:4.99.2
queried_at: 2026-05-27T12:05:14.280024
raw_data:
  {"ports": [53, 587], "vulns": [], "hostnames": ["server2.orders101.net"], "tags": ["self-signed", "starttls"], "cpes": ["cpe:/a:exim:exim:4.99.2"]}


indicator: 176.123.6.92
indicator_type: ipv4
source: shodan
city: ai,database,self-signed
queried_at: 2026-05-27T12:05:16.065851
raw_data:
  {"ports": [21, 22, 80, 1080, 3306, 8443], "vulns": ["CVE-2013-6712", "CVE-2016-7126", "CVE-2015-4601", "CVE-2018-15132", "CVE-2018-1301", "CVE-2016-3142", "CVE-2018-5712", "CVE-2016-4537", "CVE-2014-9709", "CVE-2013-7345", "CVE-2022-28614", "CVE-2018-19520", "CVE-2014-9767", "CVE-2016-5114", "CVE-2016-7127", "CVE-2023-51385", "CVE-2015-3414", "CVE-2021-32786", "CVE-2017-11143", "CVE-2012-1171", "CVE-2015-4599", "CVE-2020-13938", "CVE-2018-10547", "CVE-2011-2688", "CVE-2019-17567", "CVE-2016-7131

hosting_provider:
  cpe:/o:centos:centos,cpe:/a:mariadb:mariadb,cpe:/a:google:web_server,cpe:/a:php:php:5.4.16,cpe:/a:getbootstrap:bootstrap,cpe:/a:openbsd:openssh:7.4,cpe:/a:apache:http_server:2.4.6


indicator: 176.123.7.102
indicator_type: ipv4
source: shodan
reverse_dns: host.com
hosting_provider: cpe:/a:openbsd:openssh:8.4p1,cpe:/o:debian:debian_linux,cpe:/o:linux:linux_kernel,cpe:/a:f5:nginx
queried_at: 2026-05-27T12:05:17.914458
raw_data:
  {"ports": [21, 22, 80], "vulns": [], "hostnames": ["host.com"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.4p1", "cpe:/o:debian:debian_linux", "cpe:/o:linux:linux_kernel", "cpe:/a:f5:nginx"]}


indicator: 176.123.7.154
indicator_type: ipv4
source: shodan
city: ai,eol-product
queried_at: 2026-05-27T12:05:23.266769
raw_data:
  {"ports": [22, 80, 9001, 10050], "vulns": ["CVE-2025-23419", "CVE-2023-44487"], "hostnames": [], "tags": ["ai", "eol-product"], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/o:debian:debian_linux", "cpe:/a:openbsd:openssh:9.2p1", "cpe:/a:f5:nginx:1.22.1"]}

hosting_provider:
[cell repeats an earlier one in this file: 104 characters]


indicator: 176.123.7.189
indicator_type: ipv4
source: shodan
city: self-signed,starttls
reverse_dns: finance.thotplay.com
queried_at: 2026-05-27T12:05:28.562352
raw_data:
  {"ports": [21, 22, 443], "vulns": [], "hostnames": ["finance.thotplay.com"], "tags": ["self-signed", "starttls"], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/a:pureftpd:pure-ftpd", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx"]}

hosting_provider:
  cpe:/a:openbsd:openssh:9.6p1,cpe:/a:pureftpd:pure-ftpd,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx


indicator: 176.123.7.191
indicator_type: ipv4
source: shodan
city: self-signed
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/a:f5:nginx
queried_at: 2026-05-27T12:05:30.329692
raw_data:
  {"ports": [22, 80, 8083], "vulns": [], "hostnames": [], "tags": ["self-signed"], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/a:f5:nginx"]}


indicator: 176.123.7.192
indicator_type: ipv4
source: shodan
city: ai
reverse_dns: f01.mp3cloud.org,topreading.ru
hosting_provider: cpe:/a:f5:nginx
queried_at: 2026-05-27T12:05:32.092099
raw_data:
  {"ports": [80, 443], "vulns": [], "hostnames": ["f01.mp3cloud.org", "topreading.ru"], "tags": ["ai"], "cpes": ["cpe:/a:f5:nginx"]}


indicator: 176.123.7.196
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: onlinecasinolook.com,www.onlinecasinolook.com
hosting_provider: cpe:/a:f5:nginx:1.18.0,cpe:/o:canonical:ubuntu_linux,cpe:/o:linux:linux_kernel
queried_at: 2026-05-27T12:05:35.620134
raw_data:
  {"ports": [443], "vulns": ["CVE-2023-44487", "CVE-2021-23017", "CVE-2021-3618", "CVE-2025-23419"], "hostnames": ["onlinecasinolook.com", "www.onlinecasinolook.com"], "tags": ["eol-product"], "cpes": ["cpe:/a:f5:nginx:1.18.0", "cpe:/o:canonical:ubuntu_linux", "cpe:/o:linux:linux_kernel"]}


indicator: 176.123.7.199
indicator_type: ipv4
source: shodan
city: self-signed
hosting_provider: cpe:/a:openbsd:openssh:7.4
queried_at: 2026-05-27T12:05:37.376308
raw_data:
  {"ports": [22, 80, 161, 443], "vulns": ["CVE-2025-26465", "CVE-2019-6111", "CVE-2017-15906", "CVE-2018-15473", "CVE-2008-3844", "CVE-2020-15778", "CVE-2007-2768", "CVE-2026-35386", "CVE-2023-48795", "CVE-2021-41617", "CVE-2023-38408", "CVE-2026-35387", "CVE-2020-14145", "CVE-2025-32728", "CVE-2023-51385", "CVE-2021-36368", "CVE-2018-20685", "CVE-2016-20012", "CVE-2026-35414", "CVE-2026-35388", "CVE-2023-51767", "CVE-2026-35385", "CVE-2019-6109", "CVE-2018-15919", "CVE-2019-6110"], "hostnames": [


indicator: 176.123.7.203
indicator_type: ipv4
source: shodan
city: self-signed
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/a:f5:nginx
queried_at: 2026-05-27T12:05:39.132017
raw_data:
  {"ports": [22, 80, 443], "vulns": [], "hostnames": [], "tags": ["self-signed"], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/a:f5:nginx"]}


indicator: 176.123.7.229
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/o:linux:linux_kernel,cpe:/a:openbsd:openssh:8.4p1,cpe:/a:f5:nginx,cpe:/o:debian:debian_linux
queried_at: 2026-05-27T12:05:40.908723
raw_data:
  {"ports": [22, 80], "vulns": [], "hostnames": [], "tags": [], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:8.4p1", "cpe:/a:f5:nginx", "cpe:/o:debian:debian_linux"]}


indicator: 176.123.7.246
indicator_type: ipv4
source: shodan
city: starttls,database
hosting_provider: cpe:/a:openbsd:openssh:7.4,cpe:/a:oracle:mysql,cpe:/a:cpanel:cpanel,cpe:/a:exim:exim:4.99.2
queried_at: 2026-05-27T12:05:46.240519
raw_data:
  {"ports": [22, 53, 110, 111, 587, 2082, 2083, 2086, 2087, 3306], "vulns": ["CVE-2008-3844", "CVE-2020-15778", "CVE-2025-26465", "CVE-2023-38408", "CVE-2019-6110", "CVE-2026-35385", "CVE-2021-41617", "CVE-2026-35386", "CVE-2018-15473", "CVE-2019-6111", "CVE-2023-51767", "CVE-2025-32728", "CVE-2026-35388", "CVE-2023-51385", "CVE-2023-48795", "CVE-2019-6109", "CVE-2026-35414", "CVE-2007-2768", "CVE-2016-20012", "CVE-2018-15919", "CVE-2018-20685", "CVE-2026-35387", "CVE-2020-14145", "CVE-2017-15906"

reverse_dns:
  webmail.serv.rockhamptonserver.com,www.serv.rockhamptonserver.com,autodiscover.serv.rockhamptonserver.com,ipv6.serv.rockhamptonserver.com,cpanel.serv.rockhamptonserver.com,whm.serv.rockhamptonserver.com,cpcontacts.serv.rockhamptonserver.com,mail.serv.rockhamptonserver.com,webdisk.serv.rockhamptonserver.com,serv.rockhamptonserver.com,cpcalendars.serv.rockhamptonserver.com,autoconfig.serv.rockhamptonserver.com


indicator: 176.123.7.250
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: rc2.avanootechnicalservices.com
queried_at: 2026-05-27T12:05:47.995082
raw_data:
  {"ports": [80], "vulns": ["CVE-2020-35452", "CVE-2021-39275", "CVE-2023-45802", "CVE-2024-38472", "CVE-2023-4807", "CVE-2022-30556", "CVE-2022-4900", "CVE-2022-23943", "CVE-2023-0464", "CVE-2009-1390", "CVE-2009-2299", "CVE-2012-4360", "CVE-2009-0796", "CVE-2009-3765", "CVE-2024-3566", "CVE-2020-1934", "CVE-2021-32785", "CVE-2013-4365", "CVE-2007-4723", "CVE-2019-9637", "CVE-2019-0196", "CVE-2025-49812", "CVE-2025-59775", "CVE-2017-7963", "CVE-2023-0466", "CVE-2022-31628", "CVE-2022-31629", "CVE

hosting_provider:
  cpe:/a:php:php:5.6.40,cpe:/a:openssl:openssl:1.1.1k,cpe:/a:apache:http_server:2.4.37,cpe:/o:centos:centos


indicator: 176.123.7.37
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/o:linux:linux_kernel,cpe:/a:openbsd:openssh:8.4p1,cpe:/o:debian:debian_linux
queried_at: 2026-05-27T12:05:49.771400
raw_data:
  {"ports": [22, 80], "vulns": [], "hostnames": [], "tags": [], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:8.4p1", "cpe:/o:debian:debian_linux"]}


indicator: 176.123.7.47
indicator_type: ipv4
source: shodan
city: self-signed
queried_at: 2026-05-27T12:05:51.570925
raw_data:
  {"ports": [135, 443], "vulns": ["CVE-2014-4078"], "hostnames": [], "tags": ["self-signed"], "cpes": ["cpe:/a:microsoft:internet_information_services:8.5", "cpe:/a:microsoft:asp.net", "cpe:/o:microsoft:windows", "cpe:/a:microsoft:internet_information_services"]}

hosting_provider:
  cpe:/a:microsoft:internet_information_services:8.5,cpe:/a:microsoft:asp.net,cpe:/o:microsoft:windows,cpe:/a:microsoft:internet_information_services


indicator: 176.123.7.52
indicator_type: ipv4
source: shodan
city: eol-product
queried_at: 2026-05-27T12:05:53.332800
raw_data:
  {"ports": [80], "vulns": ["CVE-2023-44487", "CVE-2021-3618", "CVE-2025-23419"], "hostnames": [], "tags": ["eol-product"], "cpes": ["cpe:/a:varnish-software:varnish_cache_plus", "cpe:/a:f5:nginx:1.20.1", "cpe:/a:varnish-software:varnish_cache"]}

hosting_provider:
  cpe:/a:varnish-software:varnish_cache_plus,cpe:/a:f5:nginx:1.20.1,cpe:/a:varnish-software:varnish_cache


indicator: 176.123.7.6
indicator_type: ipv4
source: shodan
city: self-signed,starttls
reverse_dns: friendly-bose.176-123-7-251.plesk.page
queried_at: 2026-05-27T12:05:56.878990
raw_data:
  {"ports": [21, 22, 25, 53, 80, 106, 143, 443, 993, 8443], "vulns": [], "hostnames": ["friendly-bose.176-123-7-251.plesk.page"], "tags": ["self-signed", "starttls"], "cpes": ["cpe:/a:openbsd:openssh:8.2p1", "cpe:/a:parallels:parallels_plesk_panel", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:postfix:postfix", "cpe:/a:f5:nginx"]}

hosting_provider:
  cpe:/a:openbsd:openssh:8.2p1,cpe:/a:parallels:parallels_plesk_panel,cpe:/o:canonical:ubuntu_linux,cpe:/a:postfix:postfix,cpe:/a:f5:nginx


indicator: 176.123.7.76
indicator_type: ipv4
source: shodan
reverse_dns: video.hentai-fap.fr
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx
queried_at: 2026-05-27T12:05:58.695670
raw_data:
  {"ports": [22, 80, 443], "vulns": [], "hostnames": ["video.hentai-fap.fr"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx"]}


indicator: 176.123.7.80
indicator_type: ipv4
source: shodan
city: ai,starttls
reverse_dns: netherlands-10.hookserver.xyz
hosting_provider: cpe:/a:postfix:postfix,cpe:/a:f5:nginx
queried_at: 2026-05-27T12:06:00.553005
raw_data:
  {"ports": [21, 25, 53, 80, 143, 465, 4190, 8443], "vulns": [], "hostnames": ["netherlands-10.hookserver.xyz"], "tags": ["ai", "starttls"], "cpes": ["cpe:/a:postfix:postfix", "cpe:/a:f5:nginx"]}


indicator: 176.123.8.111
indicator_type: ipv4
source: shodan
reverse_dns: dowloands.com
hosting_provider: cpe:/a:postfix:postfix
queried_at: 2026-05-27T12:06:02.336143
raw_data:
  {"ports": [25, 53], "vulns": [], "hostnames": ["dowloands.com"], "tags": [], "cpes": ["cpe:/a:postfix:postfix"]}


indicator: 176.123.8.115
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: pot-drop.org
hosting_provider: cpe:/a:lighttpd:lighttpd:1.4.31,cpe:/a:openbsd:openssh:6.4
queried_at: 2026-05-27T12:06:04.112661
raw_data:
  {"ports": [22, 23, 80, 443, 623, 5986], "vulns": ["CVE-2016-10708", "CVE-2013-4559", "CVE-2015-6563", "CVE-2018-19052", "CVE-2016-10010", "CVE-2019-6111", "CVE-2014-1692", "CVE-2017-15906", "CVE-2016-0778", "CVE-2014-2653", "CVE-2018-15473", "CVE-2016-10009", "CVE-2008-3844", "CVE-2020-15778", "CVE-2019-11072", "CVE-2007-2768", "CVE-2026-35386", "CVE-2014-2323", "CVE-2023-48795", "CVE-2015-5352", "CVE-2021-41617", "CVE-2013-4508", "CVE-2015-3200", "CVE-2023-38408", "CVE-2016-1908", "CVE-2016-311


indicator: 176.123.8.124
indicator_type: ipv4
source: shodan
city: self-signed,database,eol-product,starttls
queried_at: 2026-05-27T12:06:07.667407
raw_data:
  {"ports": [22, 25, 53, 110, 123, 465, 3306, 3310], "vulns": ["CVE-2019-2741", "CVE-2016-0611", "CVE-2016-5443", "CVE-2023-22028", "CVE-2017-3529", "CVE-2016-5442", "CVE-2013-3806", "CVE-2013-2395", "CVE-2026-40686", "CVE-2017-3465", "CVE-2016-0503", "CVE-2014-2442", "CVE-2015-0423", "CVE-2016-0663", "CVE-2014-4238", "CVE-2020-14760", "CVE-2017-3452", "CVE-2017-3460", "CVE-2018-3061", "CVE-2016-0667", "CVE-2013-3795", "CVE-2017-3650", "CVE-2017-10284", "CVE-2015-2566", "CVE-2017-3637", "CVE-2020-

hosting_provider:
  cpe:/a:mariadb:mariadb,cpe:/a:ntp:ntp:3,cpe:/a:openbsd:openssh:8.4p1,cpe:/a:oracle:mysql:5.5.62,cpe:/o:debian:debian_linux,cpe:/a:exim:exim:4.94.2,cpe:/o:linux:linux_kernel


indicator: 176.123.8.131
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: kabah.net
hosting_provider: cpe:/a:php:php:7.2.24,cpe:/a:f5:nginx
queried_at: 2026-05-27T12:06:09.463586
raw_data:
  {"ports": [53, 80], "vulns": ["CVE-2022-31629", "CVE-2020-7070", "CVE-2020-7062", "CVE-2020-7059", "CVE-2020-7060", "CVE-2013-2220", "CVE-2022-4900", "CVE-2019-11045", "CVE-2019-11050", "CVE-2020-7063", "CVE-2020-7069", "CVE-2019-11044", "CVE-2020-7066", "CVE-2020-7067", "CVE-2019-11047", "CVE-2020-7068", "CVE-2024-3566", "CVE-2019-11046", "CVE-2007-3205", "CVE-2020-7061", "CVE-2020-7064", "CVE-2022-37454", "CVE-2019-11048", "CVE-2024-25117", "CVE-2017-8923", "CVE-2022-31628"], "hostnames": ["ka


indicator: 176.123.8.152
indicator_type: ipv4
source: shodan
city: eol-product,self-signed,starttls
hosting_provider: cpe:/a:exim:exim:4.96,cpe:/a:openbsd:openssh:7.4,cpe:/a:f5:nginx:1.20.2
queried_at: 2026-05-27T12:06:11.232510
raw_data:
  {"ports": [22, 25, 53, 80, 465], "vulns": ["CVE-2008-3844", "CVE-2020-15778", "CVE-2025-26465", "CVE-2023-38408", "CVE-2019-6110", "CVE-2026-40685", "CVE-2026-40684", "CVE-2024-39929", "CVE-2023-42114", "CVE-2022-3620", "CVE-2026-35385", "CVE-2021-41617", "CVE-2026-40687", "CVE-2026-35386", "CVE-2018-15473", "CVE-2019-6111", "CVE-2023-42116", "CVE-2023-44487", "CVE-2023-51767", "CVE-2025-32728", "CVE-2025-67896", "CVE-2025-30232", "CVE-2026-35388", "CVE-2022-3559", "CVE-2026-40686", "CVE-2023-51


indicator: 176.123.8.181
indicator_type: ipv4
source: shodan
city: self-signed,eol-product,starttls
reverse_dns: kr-fbs.com
hosting_provider: cpe:/a:exim:exim:4.96,cpe:/a:f5:nginx:1.20.2,cpe:/a:php:php:5.4.16
queried_at: 2026-05-27T12:06:14.787800
raw_data:
  {"ports": [21, 53, 80, 143, 443, 587, 993, 995], "vulns": ["CVE-2013-3735", "CVE-2015-6834", "CVE-2014-0236", "CVE-2015-4642", "CVE-2015-1351", "CVE-2018-15132", "CVE-2016-7478", "CVE-2016-3142", "CVE-2018-10545", "CVE-2015-4116", "CVE-2017-11142", "CVE-2015-2783", "CVE-2016-5095", "CVE-2016-3141", "CVE-2015-5590", "CVE-2016-4541", "CVE-2022-4900", "CVE-2015-4599", "CVE-2016-1903", "CVE-2014-9426", "CVE-2016-6289", "CVE-2014-3668", "CVE-2013-7456", "CVE-2018-10548", "CVE-2016-6291", "CVE-2013-65


indicator: 176.123.8.194
indicator_type: ipv4
source: shodan
city: eol-product
queried_at: 2026-05-27T12:06:16.551149
raw_data:
  {"ports": [80, 88], "vulns": ["CVE-2024-43394", "CVE-2026-24072", "CVE-2026-34059", "CVE-2024-38473", "CVE-2023-38709", "CVE-2024-42516", "CVE-2023-44487", "CVE-2025-55753", "CVE-2024-43204", "CVE-2025-65082", "CVE-2025-53020", "CVE-2013-0942", "CVE-2026-33523", "CVE-2024-38472", "CVE-2026-34032", "CVE-2024-38475", "CVE-2012-4001", "CVE-2009-2299", "CVE-2007-4723", "CVE-2025-49630", "CVE-2026-33857", "CVE-2024-38474", "CVE-2024-36387", "CVE-2024-47252", "CVE-2012-3526", "CVE-2013-4365", "CVE-202

hosting_provider:
  cpe:/o:canonical:ubuntu_linux,cpe:/a:apache:http_server:2.4.58,cpe:/o:linux:linux_kernel,cpe:/a:f5:nginx:1.24.0


indicator: 176.123.8.217
indicator_type: ipv4
source: shodan
city: open-dir
reverse_dns: www.infected.su,infected.su,conference.infected.su
hosting_provider: cpe:/o:linux:linux_kernel,cpe:/a:openbsd:openssh:8.4p1,cpe:/o:debian:debian_linux
queried_at: 2026-05-27T12:06:18.325827
raw_data:
  {"ports": [80, 443, 666, 5222], "vulns": [], "hostnames": ["www.infected.su", "infected.su", "conference.infected.su"], "tags": ["open-dir"], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:8.4p1", "cpe:/o:debian:debian_linux"]}


indicator: 176.123.8.236
indicator_type: ipv4
source: shodan
city: self-signed,eol-product,starttls
reverse_dns: fabricfashionstudio.com,www.fabricfashionstudio.com
hosting_provider: cpe:/a:f5:nginx:1.20.2,cpe:/a:php:php:7.4.29,cpe:/a:openbsd:openssh:7.4,cpe:/a:exim:exim:4.95
queried_at: 2026-05-27T12:06:21.895999
raw_data:
  {"ports": [21, 22, 25, 443, 465, 993], "vulns": ["CVE-2022-31629", "CVE-2025-26465", "CVE-2023-42114", "CVE-2025-67896", "CVE-2026-40686", "CVE-2019-6111", "CVE-2017-15906", "CVE-2021-3618", "CVE-2023-42116", "CVE-2022-3559", "CVE-2013-2220", "CVE-2022-4900", "CVE-2023-42117", "CVE-2023-42119", "CVE-2018-15473", "CVE-2022-31626", "CVE-2008-3844", "CVE-2020-15778", "CVE-2024-39929", "CVE-2007-2768", "CVE-2022-31630", "CVE-2026-35386", "CVE-2025-23419", "CVE-2023-48795", "CVE-2024-5458", "CVE-2026


indicator: 176.123.8.242
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/o:debian:debian_linux,cpe:/a:openbsd:openssh:9.2p1,cpe:/o:linux:linux_kernel
queried_at: 2026-05-27T12:06:23.692108
raw_data:
  {"ports": [22], "vulns": [], "hostnames": [], "tags": [], "cpes": ["cpe:/o:debian:debian_linux", "cpe:/a:openbsd:openssh:9.2p1", "cpe:/o:linux:linux_kernel"]}


indicator: 176.123.8.3
indicator_type: ipv4
source: shodan
city: self-signed,starttls
hosting_provider: cpe:/a:postfix:postfix
queried_at: 2026-05-27T12:06:27.336070
raw_data:
  {"ports": [465, 587, 993], "vulns": [], "hostnames": [], "tags": ["self-signed", "starttls"], "cpes": ["cpe:/a:postfix:postfix"]}


indicator: 176.123.8.32
indicator_type: ipv4
source: shodan
city: ai,starttls,database,self-signed
reverse_dns: hosting.com
queried_at: 2026-05-27T12:06:29.103620
raw_data:
  {"ports": [21, 22, 80, 110, 465, 587, 995, 3306], "vulns": ["CVE-2026-40685", "CVE-2024-39929", "CVE-2023-42114", "CVE-2026-40684", "CVE-2023-42115", "CVE-2025-67896", "CVE-2026-40687", "CVE-2023-42117", "CVE-2022-3559", "CVE-2026-40686", "CVE-2023-42116", "CVE-2022-37451", "CVE-2021-38371", "CVE-2023-42119", "CVE-2023-51766", "CVE-2022-37452"], "hostnames": ["hosting.com"], "tags": ["ai", "starttls", "database", "self-signed"], "cpes": ["cpe:/a:openbsd:openssh:8.4p1", "cpe:/o:debian:debian_linu

hosting_provider:
  cpe:/a:openbsd:openssh:8.4p1,cpe:/o:debian:debian_linux,cpe:/a:mariadb:mariadb,cpe:/a:f5:nginx,cpe:/o:linux:linux_kernel,cpe:/a:exim:exim:4.94.2


indicator: 176.123.8.54
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: s3.ozbridge.financial
queried_at: 2026-05-27T12:06:32.698121
raw_data:
  {"ports": [80, 443, 9000], "vulns": ["CVE-2023-44487", "CVE-2021-23017", "CVE-2021-3618", "CVE-2025-23419"], "hostnames": ["s3.ozbridge.financial"], "tags": ["eol-product"], "cpes": ["cpe:/a:f5:nginx:1.18.0", "cpe:/a:amazon:elastic_load_balancing", "cpe:/a:minio:minio", "cpe:/o:canonical:ubuntu_linux", "cpe:/o:linux:linux_kernel"]}

hosting_provider:
  cpe:/a:f5:nginx:1.18.0,cpe:/a:amazon:elastic_load_balancing,cpe:/a:minio:minio,cpe:/o:canonical:ubuntu_linux,cpe:/o:linux:linux_kernel


indicator: 176.123.9.135
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: 24x7.cinepex.tv
hosting_provider: cpe:/a:php:php:7.4.5,cpe:/a:openbsd:openssh:7.6p1,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx
queried_at: 2026-05-27T12:06:45.195046
raw_data:
  {"ports": [22, 8080], "vulns": ["CVE-2022-31629", "CVE-2021-21705", "CVE-2020-7070", "CVE-2017-9120", "CVE-2017-9118", "CVE-2021-21703", "CVE-2013-2220", "CVE-2022-4900", "CVE-2022-31626", "CVE-2021-21706", "CVE-2021-21704", "CVE-2021-21708", "CVE-2020-7069", "CVE-2021-21707", "CVE-2022-31630", "CVE-2021-21702", "CVE-2020-7068", "CVE-2024-3566", "CVE-2007-3205", "CVE-2022-31625", "CVE-2022-37454", "CVE-2019-11048", "CVE-2024-25117", "CVE-2020-7071", "CVE-2017-8923", "CVE-2022-31628"], "hostnames


indicator: 176.123.9.183
indicator_type: ipv4
source: shodan
city: self-signed,eol-product,database,starttls
hosting_provider: cpe:/a:php:php:7.4.33,cpe:/a:openbsd:openssh:7.4,cpe:/a:mariadb:mariadb,cpe:/a:f5:nginx:1.20.2
queried_at: 2026-05-27T12:06:48.744407
raw_data:
  {"ports": [21, 22, 53, 80, 3306], "vulns": ["CVE-2016-20012", "CVE-2024-25117", "CVE-2021-36368", "CVE-2021-3618", "CVE-2026-35386", "CVE-2020-14145", "CVE-2026-35385", "CVE-2007-2768", "CVE-2018-20685", "CVE-2018-15919", "CVE-2007-3205", "CVE-2026-35387", "CVE-2017-15906", "CVE-2013-2220", "CVE-2019-6110", "CVE-2025-32728", "CVE-2024-3566", "CVE-2025-26465", "CVE-2023-44487", "CVE-2023-51385", "CVE-2023-48795", "CVE-2018-15473", "CVE-2008-3844", "CVE-2023-51767", "CVE-2026-35414", "CVE-2020-157


indicator: 176.123.9.199
indicator_type: ipv4
source: shodan
reverse_dns: sell9-199.lfomotor.uk.com
queried_at: 2026-05-27T12:06:52.254777
raw_data:
  {"ports": [25, 111, 9966], "vulns": [], "hostnames": ["sell9-199.lfomotor.uk.com"], "tags": [], "cpes": []}


indicator: 176.123.9.209
indicator_type: ipv4
source: shodan
city: self-signed,ai,starttls
hosting_provider: cpe:/a:ntp:ntp:3,cpe:/a:f5:nginx,cpe:/a:exim:exim:4.97
queried_at: 2026-05-27T12:06:55.837407
raw_data:
  {"ports": [21, 25, 53, 80, 110, 123, 143, 443, 465, 587, 995], "vulns": ["CVE-2025-67896", "CVE-2026-40686", "CVE-2026-40684", "CVE-2025-30232", "CVE-2024-39929", "CVE-2023-51766", "CVE-2026-40687", "CVE-2026-40685"], "hostnames": [], "tags": ["self-signed", "ai", "starttls"], "cpes": ["cpe:/a:ntp:ntp:3", "cpe:/a:f5:nginx", "cpe:/a:exim:exim:4.97"]}


indicator: 176.123.9.216
indicator_type: ipv4
source: shodan
city: database,eol-product
hosting_provider: cpe:/a:oracle:mysql
queried_at: 2026-05-27T12:06:57.652373
raw_data:
  {"ports": [9306], "vulns": [], "hostnames": [], "tags": ["database", "eol-product"], "cpes": ["cpe:/a:oracle:mysql"]}


indicator: 176.123.9.30
indicator_type: ipv4
source: shodan
city: ai,starttls,self-signed
reverse_dns: buffroids.com
hosting_provider: cpe:/o:canonical:ubuntu_linux,cpe:/a:openbsd:openssh:8.2p1,cpe:/a:postfix:postfix
queried_at: 2026-05-27T12:07:01.212988
raw_data:
  {"ports": [22, 25, 53, 106, 995, 8443], "vulns": [], "hostnames": ["buffroids.com"], "tags": ["ai", "starttls", "self-signed"], "cpes": ["cpe:/o:canonical:ubuntu_linux", "cpe:/a:openbsd:openssh:8.2p1", "cpe:/a:postfix:postfix"]}


indicator: 176.123.9.31
indicator_type: ipv4
source: shodan
city: ai,eol-product
reverse_dns: bulkyon.com
hosting_provider: cpe:/o:linux:linux_kernel,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx:1.24.0
queried_at: 2026-05-27T12:07:03.011078
raw_data:
  {"ports": [80], "vulns": ["CVE-2025-23419", "CVE-2023-44487"], "hostnames": ["bulkyon.com"], "tags": ["ai", "eol-product"], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx:1.24.0"]}


indicator: 176.123.9.33
indicator_type: ipv4
source: shodan
city: starttls
reverse_dns: 60sekmail.email,mail.60sekmail.email
hosting_provider: cpe:/a:f5:nginx
queried_at: 2026-05-27T12:07:04.785548
raw_data:
  {"ports": [143, 443, 993, 995], "vulns": [], "hostnames": ["60sekmail.email", "mail.60sekmail.email"], "tags": ["starttls"], "cpes": ["cpe:/a:f5:nginx"]}


indicator: 176.123.9.4
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx,cpe:/a:openbsd:openssh:8.2p1
queried_at: 2026-05-27T12:07:08.308144
raw_data:
  {"ports": [22, 80], "vulns": [], "hostnames": [], "tags": [], "cpes": ["cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx", "cpe:/a:openbsd:openssh:8.2p1"]}


indicator: 176.123.9.48
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/a:openbsd:openssh:7.4
queried_at: 2026-05-27T12:07:11.847669
raw_data:
  {"ports": [111, 2223], "vulns": ["CVE-2008-3844", "CVE-2020-15778", "CVE-2025-26465", "CVE-2023-38408", "CVE-2019-6110", "CVE-2021-41617", "CVE-2018-15473", "CVE-2019-6111", "CVE-2025-32728", "CVE-2023-51767", "CVE-2023-51385", "CVE-2023-48795", "CVE-2019-6109", "CVE-2026-35414", "CVE-2007-2768", "CVE-2016-20012", "CVE-2018-15919", "CVE-2018-20685", "CVE-2020-14145", "CVE-2017-15906", "CVE-2021-36368"], "hostnames": [], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:7.4"]}


indicator: 176.123.9.60
indicator_type: ipv4
source: shodan
city: starttls
reverse_dns: mail.ugeen.live
hosting_provider: cpe:/a:openbsd:openssh:7.6p1,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx
queried_at: 2026-05-27T12:07:15.362329
raw_data:
  {"ports": [22, 143, 3000, 8080], "vulns": [], "hostnames": ["mail.ugeen.live"], "tags": ["starttls"], "cpes": ["cpe:/a:openbsd:openssh:7.6p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx"]}


indicator: 176.123.9.65
indicator_type: ipv4
source: shodan
city: eol-product,self-signed,starttls
reverse_dns: amongus-ko.com
hosting_provider: cpe:/a:php:php:5.6.40,cpe:/a:exim:exim:4.96,cpe:/a:f5:nginx:1.20.2
queried_at: 2026-05-27T12:07:17.142274
raw_data:
  {"ports": [21, 53, 80, 143, 443, 465, 993], "vulns": ["CVE-2022-3620", "CVE-2024-3566", "CVE-2024-25117", "CVE-2019-9638", "CVE-2020-11579", "CVE-2007-3205", "CVE-2026-40684", "CVE-2026-40685", "CVE-2024-39929", "CVE-2023-42114", "CVE-2026-40687", "CVE-2019-9641", "CVE-2022-4900", "CVE-2023-42116", "CVE-2017-7272", "CVE-2023-44487", "CVE-2013-2220", "CVE-2017-8923", "CVE-2018-19396", "CVE-2025-67896", "CVE-2025-30232", "CVE-2022-3559", "CVE-2026-40686", "CVE-2022-31628", "CVE-2023-42119", "CVE-2


indicator: 176.123.9.90
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/a:openbsd:openssh:7.4
queried_at: 2026-05-27T12:07:20.704019
raw_data:
  {"ports": [22], "vulns": ["CVE-2025-26465", "CVE-2019-6111", "CVE-2017-15906", "CVE-2018-15473", "CVE-2008-3844", "CVE-2020-15778", "CVE-2007-2768", "CVE-2023-48795", "CVE-2021-41617", "CVE-2023-38408", "CVE-2020-14145", "CVE-2025-32728", "CVE-2023-51385", "CVE-2021-36368", "CVE-2018-20685", "CVE-2016-20012", "CVE-2026-35414", "CVE-2023-51767", "CVE-2019-6109", "CVE-2018-15919", "CVE-2019-6110"], "hostnames": [], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:7.4"]}


indicator: 185.223.79.100
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: mx.chill-girlzone.info
hosting_provider: cpe:/o:canonical:ubuntu_linux,cpe:/a:php:php:5.5.9,cpe:/a:apache:http_server:2.4.7
queried_at: 2026-05-27T12:09:49.077442
raw_data:
  {"ports": [22, 53, 80], "vulns": ["CVE-2016-7126", "CVE-2015-4601", "CVE-2018-15132", "CVE-2018-1301", "CVE-2016-3142", "CVE-2018-5712", "CVE-2016-4537", "CVE-2014-9709", "CVE-2013-7345", "CVE-2022-28614", "CVE-2018-19520", "CVE-2014-9767", "CVE-2016-5114", "CVE-2016-7127", "CVE-2015-3414", "CVE-2021-32786", "CVE-2017-11143", "CVE-2015-4599", "CVE-2020-13938", "CVE-2018-10547", "CVE-2011-2688", "CVE-2019-17567", "CVE-2016-7131", "CVE-2016-3141", "CVE-2016-4539", "CVE-2015-4024", "CVE-2018-17199"


indicator: 185.223.79.104
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: mx2.ero-call-office.info
hosting_provider: cpe:/o:canonical:ubuntu_linux,cpe:/a:php:php:5.5.9,cpe:/a:apache:http_server:2.4.7
queried_at: 2026-05-27T12:09:50.881482
raw_data:
  {"ports": [53, 80], "vulns": ["CVE-2020-35452", "CVE-2016-4975", "CVE-2014-0236", "CVE-2016-8743", "CVE-2018-10545", "CVE-2016-3141", "CVE-2014-9426", "CVE-2016-2161", "CVE-2024-3566", "CVE-2015-2331", "CVE-2014-3480", "CVE-2014-3981", "CVE-2016-5766", "CVE-2016-5387", "CVE-2014-2270", "CVE-2015-3416", "CVE-2015-6835", "CVE-2015-0232", "CVE-2016-7418", "CVE-2007-4723", "CVE-2014-4049", "CVE-2018-19520", "CVE-2025-59775", "CVE-2016-9137", "CVE-2016-9138", "CVE-2022-31628", "CVE-2022-31629", "CVE-


indicator: 185.223.79.105
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: mta.eroticcall-office.info
queried_at: 2026-05-27T12:09:52.658353
raw_data:
  {"ports": [22, 53, 80, 443], "vulns": ["CVE-2020-35452", "CVE-2016-4975", "CVE-2014-0236", "CVE-2016-8743", "CVE-2018-10545", "CVE-2016-3141", "CVE-2014-9426", "CVE-2016-2161", "CVE-2024-3566", "CVE-2015-2331", "CVE-2014-3480", "CVE-2014-3981", "CVE-2016-5766", "CVE-2016-5387", "CVE-2014-2270", "CVE-2015-3416", "CVE-2015-6835", "CVE-2015-0232", "CVE-2016-7418", "CVE-2007-4723", "CVE-2014-4049", "CVE-2018-19520", "CVE-2025-59775", "CVE-2016-9137", "CVE-2016-9138", "CVE-2022-31628", "CVE-2022-3162

hosting_provider:
[cell repeats an earlier one in this file: 113 characters]


indicator: 185.223.79.124
indicator_type: ipv4
source: shodan
reverse_dns: mail2.jellyinside.life
hosting_provider: cpe:/a:apache:http_server:2.4.7
queried_at: 2026-05-27T12:09:54.409313
raw_data:
  {"ports": [443], "vulns": ["CVE-2020-35452", "CVE-2016-4975", "CVE-2021-39275", "CVE-2016-8743", "CVE-2024-38472", "CVE-2022-30556", "CVE-2018-1303", "CVE-2022-23943", "CVE-2016-2161", "CVE-2009-2299", "CVE-2013-5704", "CVE-2018-1283", "CVE-2012-4360", "CVE-2009-0796", "CVE-2015-0228", "CVE-2020-1934", "CVE-2017-7679", "CVE-2016-5387", "CVE-2021-32785", "CVE-2013-4365", "CVE-2016-8612", "CVE-2007-4723", "CVE-2015-3183", "CVE-2014-0118", "CVE-2015-3185", "CVE-2025-49812", "CVE-2025-59775", "CVE-2


indicator: 185.223.79.126
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/o:canonical:ubuntu_linux,cpe:/a:openbsd:openssh:6.6.1p1,cpe:/a:apache:http_server:2.4.7
queried_at: 2026-05-27T12:09:56.164754
raw_data:
  {"ports": [22, 53, 143, 443], "vulns": ["CVE-2020-35452", "CVE-2016-4975", "CVE-2021-39275", "CVE-2016-8743", "CVE-2024-38472", "CVE-2022-30556", "CVE-2018-1303", "CVE-2022-23943", "CVE-2016-2161", "CVE-2009-2299", "CVE-2013-5704", "CVE-2018-1283", "CVE-2012-4360", "CVE-2009-0796", "CVE-2015-0228", "CVE-2020-1934", "CVE-2017-7679", "CVE-2016-5387", "CVE-2021-32785", "CVE-2013-4365", "CVE-2016-8612", "CVE-2007-4723", "CVE-2015-3183", "CVE-2014-0118", "CVE-2015-3185", "CVE-2025-49812", "CVE-2025-5


indicator: 185.223.79.130
indicator_type: ipv4
source: shodan
city: self-signed,eol-product,starttls
reverse_dns: mail.myeditorial.live,myeditorial.live
queried_at: 2026-05-27T12:09:57.935812
raw_data:
  {"ports": [22, 25, 53, 123, 143, 443], "vulns": ["CVE-2020-35452", "CVE-2016-4975", "CVE-2014-0236", "CVE-2016-8743", "CVE-2018-10545", "CVE-2016-3141", "CVE-2014-9426", "CVE-2016-2161", "CVE-2024-3566", "CVE-2015-2331", "CVE-2014-3480", "CVE-2014-3981", "CVE-2016-5766", "CVE-2016-5387", "CVE-2014-2270", "CVE-2015-3416", "CVE-2015-6835", "CVE-2015-0232", "CVE-2016-7418", "CVE-2007-4723", "CVE-2014-4049", "CVE-2018-19520", "CVE-2025-59775", "CVE-2016-9137", "CVE-2016-9138", "CVE-2022-31628", "CVE

hosting_provider:
  cpe:/a:ntp:ntp:3,cpe:/a:openbsd:openssh:6.6.1p1,cpe:/a:php:php:5.5.9,cpe:/o:canonical:ubuntu_linux,cpe:/a:postfix:postfix,cpe:/a:apache:http_server:2.4.7


indicator: 185.223.79.139
indicator_type: ipv4
source: shodan
reverse_dns: mta.googirl-fart.info
queried_at: 2026-05-27T12:09:59.715519
raw_data:
  {"ports": [22, 53, 123, 143, 443], "vulns": ["CVE-2020-35452", "CVE-2016-4975", "CVE-2021-39275", "CVE-2016-8743", "CVE-2024-38472", "CVE-2022-30556", "CVE-2018-1303", "CVE-2022-23943", "CVE-2016-2161", "CVE-2009-2299", "CVE-2013-5704", "CVE-2018-1283", "CVE-2012-4360", "CVE-2009-0796", "CVE-2015-0228", "CVE-2020-1934", "CVE-2017-7679", "CVE-2016-5387", "CVE-2021-32785", "CVE-2013-4365", "CVE-2016-8612", "CVE-2007-4723", "CVE-2015-3183", "CVE-2014-0118", "CVE-2015-3185", "CVE-2025-49812", "CVE-2

hosting_provider:
  cpe:/a:ntp:ntp:3,cpe:/o:canonical:ubuntu_linux,cpe:/a:openbsd:openssh:6.6.1p1,cpe:/a:apache:http_server:2.4.7


indicator: 185.223.79.140
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: mail3.filthy-yogurt.life
hosting_provider: cpe:/a:ntp:ntp:3,cpe:/o:canonical:ubuntu_linux,cpe:/a:php:php:5.5.9,cpe:/a:apache:http_server:2.4.7
queried_at: 2026-05-27T12:10:01.542223
raw_data:
  {"ports": [22, 80, 123, 143], "vulns": ["CVE-2016-7126", "CVE-2015-4601", "CVE-2018-15132", "CVE-2018-1301", "CVE-2016-3142", "CVE-2018-5712", "CVE-2016-4537", "CVE-2014-9709", "CVE-2013-7345", "CVE-2022-28614", "CVE-2018-19520", "CVE-2014-9767", "CVE-2016-5114", "CVE-2016-7127", "CVE-2015-3414", "CVE-2021-32786", "CVE-2017-11143", "CVE-2015-4599", "CVE-2020-13938", "CVE-2018-10547", "CVE-2011-2688", "CVE-2019-17567", "CVE-2016-7131", "CVE-2016-3141", "CVE-2016-4539", "CVE-2015-4024", "CVE-2018-


indicator: 185.223.79.149
indicator_type: ipv4
source: shodan
reverse_dns: mx3.blesstier.info
hosting_provider: cpe:/o:canonical:ubuntu_linux,cpe:/a:ntp:ntp:3,cpe:/a:openbsd:openssh:6.6.1p1
queried_at: 2026-05-27T12:10:05.300181
raw_data:
  {"ports": [22, 123, 143], "vulns": [], "hostnames": ["mx3.blesstier.info"], "tags": [], "cpes": ["cpe:/o:canonical:ubuntu_linux", "cpe:/a:ntp:ntp:3", "cpe:/a:openbsd:openssh:6.6.1p1"]}


indicator: 185.223.79.16
indicator_type: ipv4
source: shodan
reverse_dns: vistamatcher.com
hosting_provider: cpe:/a:apache:http_server:2.4.7
queried_at: 2026-05-27T12:10:07.211403
raw_data:
  {"ports": [53, 443], "vulns": ["CVE-2020-35452", "CVE-2016-4975", "CVE-2021-39275", "CVE-2016-8743", "CVE-2024-38472", "CVE-2022-30556", "CVE-2018-1303", "CVE-2022-23943", "CVE-2016-2161", "CVE-2009-2299", "CVE-2013-5704", "CVE-2018-1283", "CVE-2012-4360", "CVE-2009-0796", "CVE-2015-0228", "CVE-2020-1934", "CVE-2017-7679", "CVE-2016-5387", "CVE-2021-32785", "CVE-2013-4365", "CVE-2016-8612", "CVE-2007-4723", "CVE-2015-3183", "CVE-2014-0118", "CVE-2015-3185", "CVE-2025-49812", "CVE-2025-59775", "C


indicator: 185.223.79.17
indicator_type: ipv4
source: shodan
city: self-signed,eol-product,starttls
reverse_dns: hotmatch-log.life,mx.hotmatch-log.life
queried_at: 2026-05-27T12:10:11.111440
raw_data:
  {"ports": [22, 25, 53, 80, 443], "vulns": ["CVE-2020-35452", "CVE-2016-4975", "CVE-2014-0236", "CVE-2016-8743", "CVE-2018-10545", "CVE-2016-3141", "CVE-2014-9426", "CVE-2016-2161", "CVE-2024-3566", "CVE-2015-2331", "CVE-2014-3480", "CVE-2014-3981", "CVE-2016-5766", "CVE-2016-5387", "CVE-2014-2270", "CVE-2015-3416", "CVE-2015-6835", "CVE-2015-0232", "CVE-2016-7418", "CVE-2007-4723", "CVE-2014-4049", "CVE-2018-19520", "CVE-2025-59775", "CVE-2016-9137", "CVE-2016-9138", "CVE-2022-31628", "CVE-2022-

hosting_provider:
[cell repeats an earlier one in this file: 136 characters]


indicator: 185.223.79.178
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: mail2.greedmates.life
hosting_provider: cpe:/a:ntp:ntp:3,cpe:/o:canonical:ubuntu_linux,cpe:/a:php:php:5.5.9,cpe:/a:apache:http_server:2.4.7
queried_at: 2026-05-27T12:10:12.958092
raw_data:
  {"ports": [80, 123, 143], "vulns": ["CVE-2020-35452", "CVE-2016-4975", "CVE-2014-0236", "CVE-2016-8743", "CVE-2018-10545", "CVE-2016-3141", "CVE-2014-9426", "CVE-2016-2161", "CVE-2024-3566", "CVE-2015-2331", "CVE-2014-3480", "CVE-2014-3981", "CVE-2016-5766", "CVE-2016-5387", "CVE-2014-2270", "CVE-2015-3416", "CVE-2015-6835", "CVE-2015-0232", "CVE-2016-7418", "CVE-2007-4723", "CVE-2014-4049", "CVE-2018-19520", "CVE-2025-59775", "CVE-2016-9137", "CVE-2016-9138", "CVE-2022-31628", "CVE-2022-31629",


indicator: 185.223.79.179
indicator_type: ipv4
source: shodan
city: self-signed,eol-product,starttls
reverse_dns: lonee-batterfly.life,mx2.lonee-batterfly.life
queried_at: 2026-05-27T12:10:14.868193
raw_data:
  {"ports": [25, 53, 80, 443], "vulns": ["CVE-2020-35452", "CVE-2016-4975", "CVE-2014-0236", "CVE-2016-8743", "CVE-2018-10545", "CVE-2016-3141", "CVE-2014-9426", "CVE-2016-2161", "CVE-2024-3566", "CVE-2015-2331", "CVE-2014-3480", "CVE-2014-3981", "CVE-2016-5766", "CVE-2016-5387", "CVE-2014-2270", "CVE-2015-3416", "CVE-2015-6835", "CVE-2015-0232", "CVE-2016-7418", "CVE-2007-4723", "CVE-2014-4049", "CVE-2018-19520", "CVE-2025-59775", "CVE-2016-9137", "CVE-2016-9138", "CVE-2022-31628", "CVE-2022-3162

hosting_provider:
  cpe:/a:postfix:postfix,cpe:/o:canonical:ubuntu_linux,cpe:/a:php:php:5.5.9,cpe:/a:apache:http_server:2.4.7


indicator: 185.223.79.182
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: mx2.mydirtypic.info
queried_at: 2026-05-27T12:10:16.733078
raw_data:
  {"ports": [22, 53, 80, 123, 443], "vulns": ["CVE-2020-35452", "CVE-2016-4975", "CVE-2014-0236", "CVE-2016-8743", "CVE-2018-10545", "CVE-2016-3141", "CVE-2014-9426", "CVE-2016-2161", "CVE-2024-3566", "CVE-2015-2331", "CVE-2014-3480", "CVE-2014-3981", "CVE-2016-5766", "CVE-2016-5387", "CVE-2014-2270", "CVE-2015-3416", "CVE-2015-6835", "CVE-2015-0232", "CVE-2016-7418", "CVE-2007-4723", "CVE-2014-4049", "CVE-2018-19520", "CVE-2025-59775", "CVE-2016-9137", "CVE-2016-9138", "CVE-2022-31628", "CVE-2022

hosting_provider:
  cpe:/a:ntp:ntp:3,cpe:/a:openbsd:openssh:6.6.1p1,cpe:/a:php:php:5.5.9,cpe:/o:canonical:ubuntu_linux,cpe:/a:apache:http_server:2.4.7


indicator: 185.223.79.190
indicator_type: ipv4
source: shodan
city: self-signed,eol-product,starttls
reverse_dns: mail.palacer.live
queried_at: 2026-05-27T12:10:18.602055
raw_data:
  {"ports": [25, 53, 80], "vulns": ["CVE-2020-35452", "CVE-2016-4975", "CVE-2014-0236", "CVE-2016-8743", "CVE-2018-10545", "CVE-2016-3141", "CVE-2014-9426", "CVE-2016-2161", "CVE-2024-3566", "CVE-2015-2331", "CVE-2014-3480", "CVE-2014-3981", "CVE-2016-5766", "CVE-2016-5387", "CVE-2014-2270", "CVE-2015-3416", "CVE-2015-6835", "CVE-2015-0232", "CVE-2016-7418", "CVE-2007-4723", "CVE-2014-4049", "CVE-2018-19520", "CVE-2025-59775", "CVE-2016-9137", "CVE-2016-9138", "CVE-2022-31628", "CVE-2022-31629", "

hosting_provider:
  cpe:/a:postfix:postfix,cpe:/o:canonical:ubuntu_linux,cpe:/a:php:php:5.5.9,cpe:/a:apache:http_server:2.4.7


indicator: 185.223.79.192
indicator_type: ipv4
source: shodan
city: self-signed,eol-product,starttls
reverse_dns: mx.seniorbreak.life
queried_at: 2026-05-27T12:10:20.507960
raw_data:
  {"ports": [25, 53, 80, 123], "vulns": ["CVE-2020-35452", "CVE-2016-4975", "CVE-2014-0236", "CVE-2016-8743", "CVE-2018-10545", "CVE-2016-3141", "CVE-2014-9426", "CVE-2016-2161", "CVE-2024-3566", "CVE-2015-2331", "CVE-2014-3480", "CVE-2014-3981", "CVE-2016-5766", "CVE-2016-5387", "CVE-2014-2270", "CVE-2015-3416", "CVE-2015-6835", "CVE-2015-0232", "CVE-2016-7418", "CVE-2007-4723", "CVE-2014-4049", "CVE-2018-19520", "CVE-2025-59775", "CVE-2016-9137", "CVE-2016-9138", "CVE-2022-31628", "CVE-2022-3162

hosting_provider:
  cpe:/a:ntp:ntp:3,cpe:/a:php:php:5.5.9,cpe:/o:canonical:ubuntu_linux,cpe:/a:postfix:postfix,cpe:/a:apache:http_server:2.4.7


indicator: 185.223.79.196
indicator_type: ipv4
source: shodan
reverse_dns: mta3.bustyhookers.life
hosting_provider: cpe:/a:ntp:ntp:3,cpe:/a:apache:http_server:2.4.7
queried_at: 2026-05-27T12:10:22.397938
raw_data:
  {"ports": [53, 123, 443], "vulns": ["CVE-2020-35452", "CVE-2016-4975", "CVE-2021-39275", "CVE-2016-8743", "CVE-2024-38472", "CVE-2022-30556", "CVE-2018-1303", "CVE-2022-23943", "CVE-2016-2161", "CVE-2009-2299", "CVE-2013-5704", "CVE-2018-1283", "CVE-2012-4360", "CVE-2009-0796", "CVE-2015-0228", "CVE-2020-1934", "CVE-2017-7679", "CVE-2016-5387", "CVE-2021-32785", "CVE-2013-4365", "CVE-2016-8612", "CVE-2007-4723", "CVE-2015-3183", "CVE-2014-0118", "CVE-2015-3185", "CVE-2025-49812", "CVE-2025-59775


indicator: 185.223.79.206
indicator_type: ipv4
source: shodan
city: starttls,self-signed
reverse_dns: mta2.yourdirtydeed.life
hosting_provider: cpe:/a:openbsd:openssh:6.6.1p1,cpe:/o:canonical:ubuntu_linux,cpe:/a:postfix:postfix
queried_at: 2026-05-27T12:10:27.932058
raw_data:
  {"ports": [22, 25, 53, 143], "vulns": [], "hostnames": ["mta2.yourdirtydeed.life"], "tags": ["starttls", "self-signed"], "cpes": ["cpe:/a:openbsd:openssh:6.6.1p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:postfix:postfix"]}


indicator: 185.223.79.211
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: mail.blastworship.life,blastworship.life
hosting_provider: cpe:/o:canonical:ubuntu_linux,cpe:/a:php:php:5.5.9,cpe:/a:apache:http_server:2.4.7
queried_at: 2026-05-27T12:10:31.611731
raw_data:
  {"ports": [22, 53, 80, 143, 443], "vulns": ["CVE-2020-35452", "CVE-2016-4975", "CVE-2014-0236", "CVE-2016-8743", "CVE-2018-10545", "CVE-2016-3141", "CVE-2014-9426", "CVE-2016-2161", "CVE-2024-3566", "CVE-2015-2331", "CVE-2014-3480", "CVE-2014-3981", "CVE-2016-5766", "CVE-2016-5387", "CVE-2014-2270", "CVE-2015-3416", "CVE-2015-6835", "CVE-2015-0232", "CVE-2016-7418", "CVE-2007-4723", "CVE-2014-4049", "CVE-2018-19520", "CVE-2025-59775", "CVE-2016-9137", "CVE-2016-9138", "CVE-2022-31628", "CVE-2022


indicator: 185.223.79.214
indicator_type: ipv4
source: shodan
city: self-signed,eol-product,starttls
reverse_dns: mass-masters.life,mta.mass-masters.life
queried_at: 2026-05-27T12:10:33.469197
raw_data:
  {"ports": [25, 53, 443], "vulns": ["CVE-2020-35452", "CVE-2016-4975", "CVE-2014-0236", "CVE-2016-8743", "CVE-2018-10545", "CVE-2016-3141", "CVE-2014-9426", "CVE-2016-2161", "CVE-2024-3566", "CVE-2015-2331", "CVE-2014-3480", "CVE-2014-3981", "CVE-2016-5766", "CVE-2016-5387", "CVE-2014-2270", "CVE-2015-3416", "CVE-2015-6835", "CVE-2015-0232", "CVE-2016-7418", "CVE-2007-4723", "CVE-2014-4049", "CVE-2018-19520", "CVE-2025-59775", "CVE-2016-9137", "CVE-2016-9138", "CVE-2022-31628", "CVE-2022-31629", 

hosting_provider:
[cell repeats an earlier one in this file: 105 characters]


indicator: 185.223.79.229
indicator_type: ipv4
source: shodan
city: self-signed,eol-product,starttls
reverse_dns: mail1.mastmessage.life
queried_at: 2026-05-27T12:10:39.297789
raw_data:
  {"ports": [22, 25, 53, 80, 123, 143], "vulns": ["CVE-2020-35452", "CVE-2016-4975", "CVE-2014-0236", "CVE-2016-8743", "CVE-2018-10545", "CVE-2016-3141", "CVE-2014-9426", "CVE-2016-2161", "CVE-2024-3566", "CVE-2015-2331", "CVE-2014-3480", "CVE-2014-3981", "CVE-2016-5766", "CVE-2016-5387", "CVE-2014-2270", "CVE-2015-3416", "CVE-2015-6835", "CVE-2015-0232", "CVE-2016-7418", "CVE-2007-4723", "CVE-2014-4049", "CVE-2018-19520", "CVE-2025-59775", "CVE-2016-9137", "CVE-2016-9138", "CVE-2022-31628", "CVE-

hosting_provider:
  cpe:/a:ntp:ntp:3,cpe:/a:php:php:5.5.9,cpe:/o:canonical:ubuntu_linux,cpe:/a:postfix:postfix,cpe:/a:apache:http_server:2.4.7


indicator: 185.223.79.236
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: mx.partofcart.info
hosting_provider: cpe:/o:canonical:ubuntu_linux,cpe:/a:php:php:5.5.9,cpe:/a:apache:http_server:2.4.7
queried_at: 2026-05-27T12:10:41.229080
raw_data:
  {"ports": [80, 443, 1500], "vulns": ["CVE-2016-7126", "CVE-2015-4601", "CVE-2018-15132", "CVE-2018-1301", "CVE-2016-3142", "CVE-2018-5712", "CVE-2016-4537", "CVE-2014-9709", "CVE-2013-7345", "CVE-2022-28614", "CVE-2018-19520", "CVE-2014-9767", "CVE-2016-5114", "CVE-2016-7127", "CVE-2015-3414", "CVE-2021-32786", "CVE-2017-11143", "CVE-2015-4599", "CVE-2020-13938", "CVE-2018-10547", "CVE-2011-2688", "CVE-2019-17567", "CVE-2016-7131", "CVE-2016-3141", "CVE-2016-4539", "CVE-2015-4024", "CVE-2018-171


indicator: 185.223.79.243
indicator_type: ipv4
source: shodan
reverse_dns: openfloordrive.com
hosting_provider: cpe:/o:canonical:ubuntu_linux,cpe:/a:ntp:ntp:3,cpe:/a:openbsd:openssh:6.6.1p1
queried_at: 2026-05-27T12:10:43.051470
raw_data:
  {"ports": [22, 53, 123], "vulns": [], "hostnames": ["openfloordrive.com"], "tags": [], "cpes": ["cpe:/o:canonical:ubuntu_linux", "cpe:/a:ntp:ntp:3", "cpe:/a:openbsd:openssh:6.6.1p1"]}


indicator: 185.223.79.248
indicator_type: ipv4
source: shodan
reverse_dns: mx.nasty-madchen.life
queried_at: 2026-05-27T12:10:44.892097
raw_data:
  {"ports": [22, 53, 123, 443], "vulns": ["CVE-2020-35452", "CVE-2016-4975", "CVE-2021-39275", "CVE-2016-8743", "CVE-2024-38472", "CVE-2022-30556", "CVE-2018-1303", "CVE-2022-23943", "CVE-2016-2161", "CVE-2009-2299", "CVE-2013-5704", "CVE-2018-1283", "CVE-2012-4360", "CVE-2009-0796", "CVE-2015-0228", "CVE-2020-1934", "CVE-2017-7679", "CVE-2016-5387", "CVE-2021-32785", "CVE-2013-4365", "CVE-2016-8612", "CVE-2007-4723", "CVE-2015-3183", "CVE-2014-0118", "CVE-2015-3185", "CVE-2025-49812", "CVE-2025-5

hosting_provider:
  cpe:/a:ntp:ntp:3,cpe:/o:canonical:ubuntu_linux,cpe:/a:openbsd:openssh:6.6.1p1,cpe:/a:apache:http_server:2.4.7


indicator: 185.223.79.249
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: mx.secret-camart.life
queried_at: 2026-05-27T12:10:46.828864
raw_data:
  {"ports": [22, 80, 123, 443], "vulns": ["CVE-2020-35452", "CVE-2016-4975", "CVE-2014-0236", "CVE-2016-8743", "CVE-2018-10545", "CVE-2016-3141", "CVE-2014-9426", "CVE-2016-2161", "CVE-2024-3566", "CVE-2015-2331", "CVE-2014-3480", "CVE-2014-3981", "CVE-2016-5766", "CVE-2016-5387", "CVE-2014-2270", "CVE-2015-3416", "CVE-2015-6835", "CVE-2015-0232", "CVE-2016-7418", "CVE-2007-4723", "CVE-2014-4049", "CVE-2018-19520", "CVE-2025-59775", "CVE-2016-9137", "CVE-2016-9138", "CVE-2022-31628", "CVE-2022-316

hosting_provider:
  cpe:/a:ntp:ntp:3,cpe:/a:openbsd:openssh:6.6.1p1,cpe:/a:php:php:5.5.9,cpe:/o:canonical:ubuntu_linux,cpe:/a:apache:http_server:2.4.7


indicator: 185.223.79.253
indicator_type: ipv4
source: shodan
reverse_dns: mta3.extra-date.life
hosting_provider: cpe:/o:canonical:ubuntu_linux,cpe:/a:openbsd:openssh:6.6.1p1
queried_at: 2026-05-27T12:10:52.329802
raw_data:
  {"ports": [22, 53], "vulns": [], "hostnames": ["mta3.extra-date.life"], "tags": [], "cpes": ["cpe:/o:canonical:ubuntu_linux", "cpe:/a:openbsd:openssh:6.6.1p1"]}


indicator: 185.223.79.33
indicator_type: ipv4
source: shodan
city: self-signed,starttls
reverse_dns: mail.pickthisdate.info
hosting_provider: cpe:/o:canonical:ubuntu_linux,cpe:/a:openbsd:openssh:6.6.1p1,cpe:/a:postfix:postfix
queried_at: 2026-05-27T12:10:54.214004
raw_data:
  {"ports": [22, 25, 53, 143], "vulns": [], "hostnames": ["mail.pickthisdate.info"], "tags": ["self-signed", "starttls"], "cpes": ["cpe:/o:canonical:ubuntu_linux", "cpe:/a:openbsd:openssh:6.6.1p1", "cpe:/a:postfix:postfix"]}


indicator: 185.223.79.39
indicator_type: ipv4
source: shodan
city: eol-product,self-signed,starttls
reverse_dns: mail.playfull-hole.life
queried_at: 2026-05-27T12:10:56.107870
raw_data:
  {"ports": [22, 25, 53, 80, 143], "vulns": ["CVE-2016-7126", "CVE-2015-4601", "CVE-2018-15132", "CVE-2018-1301", "CVE-2016-3142", "CVE-2018-5712", "CVE-2016-4537", "CVE-2014-9709", "CVE-2013-7345", "CVE-2022-28614", "CVE-2018-19520", "CVE-2014-9767", "CVE-2016-5114", "CVE-2016-7127", "CVE-2015-3414", "CVE-2021-32786", "CVE-2017-11143", "CVE-2015-4599", "CVE-2020-13938", "CVE-2018-10547", "CVE-2011-2688", "CVE-2019-17567", "CVE-2016-7131", "CVE-2016-3141", "CVE-2016-4539", "CVE-2015-4024", "CVE-20

hosting_provider:
  cpe:/a:openbsd:openssh:6.6.1p1,cpe:/a:php:php:5.5.9,cpe:/a:apache:http_server:2.4.7,cpe:/o:canonical:ubuntu_linux,cpe:/a:postfix:postfix


indicator: 185.223.79.43
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: mx2.make-herhot.info
queried_at: 2026-05-27T12:10:57.950516
raw_data:
  {"ports": [22, 80, 143, 443], "vulns": ["CVE-2020-35452", "CVE-2016-4975", "CVE-2014-0236", "CVE-2016-8743", "CVE-2018-10545", "CVE-2016-3141", "CVE-2014-9426", "CVE-2016-2161", "CVE-2024-3566", "CVE-2015-2331", "CVE-2014-3480", "CVE-2014-3981", "CVE-2016-5766", "CVE-2016-5387", "CVE-2014-2270", "CVE-2015-3416", "CVE-2015-6835", "CVE-2015-0232", "CVE-2016-7418", "CVE-2007-4723", "CVE-2014-4049", "CVE-2018-19520", "CVE-2025-59775", "CVE-2016-9137", "CVE-2016-9138", "CVE-2022-31628", "CVE-2022-316

hosting_provider:
[cell repeats an earlier one in this file: 113 characters]


indicator: 185.223.79.48
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: mx.furry-dater.life
hosting_provider: cpe:/o:canonical:ubuntu_linux,cpe:/a:php:php:5.5.9,cpe:/a:apache:http_server:2.4.7
queried_at: 2026-05-27T12:10:59.877627
raw_data:
  {"ports": [53, 80, 143, 443], "vulns": ["CVE-2020-35452", "CVE-2016-4975", "CVE-2014-0236", "CVE-2016-8743", "CVE-2018-10545", "CVE-2016-3141", "CVE-2014-9426", "CVE-2016-2161", "CVE-2024-3566", "CVE-2015-2331", "CVE-2014-3480", "CVE-2014-3981", "CVE-2016-5766", "CVE-2016-5387", "CVE-2014-2270", "CVE-2015-3416", "CVE-2015-6835", "CVE-2015-0232", "CVE-2016-7418", "CVE-2007-4723", "CVE-2014-4049", "CVE-2018-19520", "CVE-2025-59775", "CVE-2016-9137", "CVE-2016-9138", "CVE-2022-31628", "CVE-2022-316


indicator: 185.223.79.5
indicator_type: ipv4
source: shodan
city: self-signed,eol-product,starttls
reverse_dns: mail3.delight-chats.info,delight-chats.info
queried_at: 2026-05-27T12:11:03.683715
raw_data:
  {"ports": [22, 25, 53, 80, 143, 443], "vulns": ["CVE-2020-35452", "CVE-2016-4975", "CVE-2014-0236", "CVE-2016-8743", "CVE-2018-10545", "CVE-2016-3141", "CVE-2014-9426", "CVE-2016-2161", "CVE-2024-3566", "CVE-2015-2331", "CVE-2014-3480", "CVE-2014-3981", "CVE-2016-5766", "CVE-2016-5387", "CVE-2014-2270", "CVE-2015-3416", "CVE-2015-6835", "CVE-2015-0232", "CVE-2016-7418", "CVE-2007-4723", "CVE-2014-4049", "CVE-2018-19520", "CVE-2025-59775", "CVE-2016-9137", "CVE-2016-9138", "CVE-2022-31628", "CVE-

hosting_provider:
[cell repeats an earlier one in this file: 136 characters]


indicator: 185.223.79.63
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: mta2.loaddates.live,loaddates.live
hosting_provider: cpe:/o:canonical:ubuntu_linux,cpe:/a:php:php:5.5.9,cpe:/a:apache:http_server:2.4.7
queried_at: 2026-05-27T12:11:07.402363
raw_data:
  {"ports": [22, 80, 143, 443], "vulns": ["CVE-2016-7126", "CVE-2015-4601", "CVE-2018-15132", "CVE-2018-1301", "CVE-2016-3142", "CVE-2018-5712", "CVE-2016-4537", "CVE-2014-9709", "CVE-2013-7345", "CVE-2022-28614", "CVE-2018-19520", "CVE-2014-9767", "CVE-2016-5114", "CVE-2016-7127", "CVE-2015-3414", "CVE-2021-32786", "CVE-2017-11143", "CVE-2015-4599", "CVE-2020-13938", "CVE-2018-10547", "CVE-2011-2688", "CVE-2019-17567", "CVE-2016-7131", "CVE-2016-3141", "CVE-2016-4539", "CVE-2015-4024", "CVE-2018-


indicator: 185.223.79.74
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: mail3.wooble-net.info
hosting_provider: cpe:/o:canonical:ubuntu_linux,cpe:/a:php:php:5.5.9,cpe:/a:apache:http_server:2.4.7
queried_at: 2026-05-27T12:11:13.957561
raw_data:
  {"ports": [53, 80, 443], "vulns": ["CVE-2016-7126", "CVE-2015-4601", "CVE-2018-15132", "CVE-2018-1301", "CVE-2016-3142", "CVE-2018-5712", "CVE-2016-4537", "CVE-2014-9709", "CVE-2013-7345", "CVE-2022-28614", "CVE-2018-19520", "CVE-2014-9767", "CVE-2016-5114", "CVE-2016-7127", "CVE-2015-3414", "CVE-2021-32786", "CVE-2017-11143", "CVE-2015-4599", "CVE-2020-13938", "CVE-2018-10547", "CVE-2011-2688", "CVE-2019-17567", "CVE-2016-7131", "CVE-2016-3141", "CVE-2016-4539", "CVE-2015-4024", "CVE-2018-17199


indicator: 188.214.144.178
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: npcscope.co.uk,www.abyssmanual.co.uk,abyssmanual.co.uk
queried_at: 2026-05-27T12:11:24.905165
raw_data:
  {"ports": [22, 80, 443], "vulns": [], "hostnames": ["npcscope.co.uk", "www.abyssmanual.co.uk", "abyssmanual.co.uk"], "tags": ["self-signed"], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:litespeedtech:litespeed_web_server", "cpe:/a:getbootstrap:bootstrap"]}

hosting_provider:
  cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux,cpe:/a:litespeedtech:litespeed_web_server,cpe:/a:getbootstrap:bootstrap


indicator: 188.214.144.18
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: wow.com,srv1.cloud-manager.com
hosting_provider: cpe:/a:getbootstrap:bootstrap,cpe:/a:jquery:jquery,cpe:/a:f5:nginx
queried_at: 2026-05-27T12:11:26.727245
raw_data:
  {"ports": [5357, 5985, 8443], "vulns": [], "hostnames": ["wow.com", "srv1.cloud-manager.com"], "tags": ["self-signed"], "cpes": ["cpe:/a:getbootstrap:bootstrap", "cpe:/a:jquery:jquery", "cpe:/a:f5:nginx"]}


indicator: 188.214.144.233
indicator_type: ipv4
source: shodan
reverse_dns: celtictourney.co.uk
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T12:11:28.497025
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["celtictourney.co.uk"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 188.214.144.247
indicator_type: ipv4
source: shodan
reverse_dns: podiumpush.co.uk
hosting_provider: cpe:/a:litespeedtech:litespeed_web_server,cpe:/a:getbootstrap:bootstrap
queried_at: 2026-05-27T12:11:30.273553
raw_data:
  {"ports": [80], "vulns": [], "hostnames": ["podiumpush.co.uk"], "tags": [], "cpes": ["cpe:/a:litespeedtech:litespeed_web_server", "cpe:/a:getbootstrap:bootstrap"]}


indicator: 188.214.144.68
indicator_type: ipv4
source: shodan
city: database
reverse_dns: bttt
hosting_provider: cpe:/a:mariadb:mariadb:10.11.14-MariaDB-0ubuntu0.24.04.1
queried_at: 2026-05-27T12:11:32.038043
raw_data:
  {"ports": [3306], "vulns": [], "hostnames": ["bttt"], "tags": ["database"], "cpes": ["cpe:/a:mariadb:mariadb:10.11.14-MariaDB-0ubuntu0.24.04.1"]}


indicator: 188.214.144.79
indicator_type: ipv4
source: shodan
reverse_dns: gwsrag.com
hosting_provider: cpe:/o:canonical:ubuntu_linux,cpe:/a:openbsd:openssh:7.6p1
queried_at: 2026-05-27T12:11:33.820079
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["gwsrag.com"], "tags": [], "cpes": ["cpe:/o:canonical:ubuntu_linux", "cpe:/a:openbsd:openssh:7.6p1"]}


indicator: 193.177.0.106
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: www.fashionxxs.com,fashionxxs.com
hosting_provider: cpe:/a:f5:nginx:1.20.1,cpe:/a:php:php:8.0.30,cpe:/a:vsftpd:vsftpd
queried_at: 2026-05-27T12:11:35.594107
raw_data:
  {"ports": [21, 80, 443], "vulns": ["CVE-2024-3566", "CVE-2007-3205", "CVE-2024-5458", "CVE-2021-3618", "CVE-2023-44487", "CVE-2013-2220", "CVE-2025-23419"], "hostnames": ["www.fashionxxs.com", "fashionxxs.com"], "tags": ["eol-product"], "cpes": ["cpe:/a:f5:nginx:1.20.1", "cpe:/a:php:php:8.0.30", "cpe:/a:vsftpd:vsftpd"]}


indicator: 193.177.0.153
indicator_type: ipv4
source: shodan
city: self-signed,database
reverse_dns: windows.com
queried_at: 2026-05-27T12:11:39.166944
raw_data:
  {"ports": [22, 80, 3306, 3389, 5357], "vulns": ["CVE-2024-8925", "CVE-2025-53020", "CVE-2025-1736", "CVE-2023-6129", "CVE-2025-55753", "CVE-2025-66200", "CVE-2009-3766", "CVE-2024-8927", "CVE-2024-2408", "CVE-2009-3767", "CVE-2023-5678", "CVE-2025-23048", "CVE-2024-38472", "CVE-2024-38473", "CVE-2024-39573", "CVE-2024-36387", "CVE-2013-0942", "CVE-2025-14178", "CVE-2025-1220", "CVE-2013-2220", "CVE-2024-27316", "CVE-2024-9026", "CVE-2009-1390", "CVE-2025-14177", "CVE-2024-38474", "CVE-2024-40898

hosting_provider:
  cpe:/a:mariadb:mariadb,cpe:/a:apache:http_server:2.4.58,cpe:/a:openbsd:openssh:for_Windows_9.5,cpe:/a:openssl:openssl:3.1.3,cpe:/a:php:php:8.2.12


indicator: 193.177.0.170
indicator_type: ipv4
source: shodan
reverse_dns: france108
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T12:11:40.943405
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["france108"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 193.177.0.192
indicator_type: ipv4
source: shodan
city: eol-product,self-signed
reverse_dns: xzu.bicycleclaims.com,mta05.qnt-insights.com
queried_at: 2026-05-27T12:11:44.569677
raw_data:
  {"ports": [22, 443], "vulns": ["CVE-2023-44487", "CVE-2021-23017", "CVE-2021-3618", "CVE-2025-23419"], "hostnames": ["xzu.bicycleclaims.com", "mta05.qnt-insights.com"], "tags": ["eol-product", "self-signed"], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/a:f5:nginx:1.18.0", "cpe:/o:canonical:ubuntu_linux", "cpe:/o:linux:linux_kernel"]}

hosting_provider:
  cpe:/a:openbsd:openssh:9.6p1,cpe:/a:f5:nginx:1.18.0,cpe:/o:canonical:ubuntu_linux,cpe:/o:linux:linux_kernel


indicator: 193.177.0.211
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: sdarotkan.me,monplesk.admin.com,eloquent-newton.176-123-0-81.plesk.page
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx
queried_at: 2026-05-27T12:11:46.343360
raw_data:
  {"ports": [22, 80, 995, 8443], "vulns": [], "hostnames": ["sdarotkan.me", "monplesk.admin.com", "eloquent-newton.176-123-0-81.plesk.page"], "tags": ["self-signed"], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx"]}


indicator: 193.177.0.221
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: v-main
hosting_provider: cpe:/o:linux:linux_kernel,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx:1.24.0
queried_at: 2026-05-27T12:11:48.104797
raw_data:
  {"ports": [8000, 8080], "vulns": ["CVE-2025-23419", "CVE-2023-44487"], "hostnames": ["v-main"], "tags": ["eol-product"], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx:1.24.0"]}


indicator: 193.177.0.224
indicator_type: ipv4
source: shodan
reverse_dns: france167
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T12:11:49.876809
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["france167"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 193.177.0.246
indicator_type: ipv4
source: shodan
city: starttls
reverse_dns: kcgukgcukggkgkg.gyjy,server-193-177-0-246.da.direct
hosting_provider: cpe:/a:pureftpd:pure-ftpd,cpe:/a:apache:http_server:2
queried_at: 2026-05-27T12:11:53.373832
raw_data:
  {"ports": [21, 53, 80], "vulns": [], "hostnames": ["kcgukgcukggkgkg.gyjy", "server-193-177-0-246.da.direct"], "tags": ["starttls"], "cpes": ["cpe:/a:pureftpd:pure-ftpd", "cpe:/a:apache:http_server:2"]}


indicator: 193.177.0.33
indicator_type: ipv4
source: shodan
city: self-signed,database,eol-product,starttls
reverse_dns: server.vk.com.tr,hdfilmizlede.org,www.hdfilmizlede.org
queried_at: 2026-05-27T12:11:55.145659
raw_data:
  {"ports": [21, 25, 53, 111, 143, 443, 465, 587, 993, 995, 2082, 2086, 2087, 3306], "vulns": ["CVE-2018-16845", "CVE-2023-44487", "CVE-2019-9511", "CVE-2019-9513", "CVE-2021-23017", "CVE-2019-9516", "CVE-2019-20372", "CVE-2025-23419", "CVE-2021-3618"], "hostnames": ["server.vk.com.tr", "hdfilmizlede.org", "www.hdfilmizlede.org"], "tags": ["self-signed", "database", "eol-product", "starttls"], "cpes": ["cpe:/a:control-webpanel:webpanel", "cpe:/a:mariadb:mariadb", "cpe:/a:f5:nginx:1.14.1", "cpe:/a:

hosting_provider:
  cpe:/a:control-webpanel:webpanel,cpe:/a:mariadb:mariadb,cpe:/a:f5:nginx:1.14.1,cpe:/a:postfix:postfix,cpe:/a:pureftpd:pure-ftpd


indicator: 193.177.0.46
indicator_type: ipv4
source: shodan
city: proxy
reverse_dns: tgvpn.alexhost.com
queried_at: 2026-05-27T12:11:56.896767
raw_data:
  {"ports": [1080, 3128], "vulns": [], "hostnames": ["tgvpn.alexhost.com"], "tags": ["proxy"], "cpes": []}


indicator: 193.177.0.63
indicator_type: ipv4
source: shodan
city: self-signed,starttls
reverse_dns: jerseyzone.net
queried_at: 2026-05-27T12:12:00.454454
raw_data:
  {"ports": [22, 80, 110, 143, 443, 465, 587, 993, 8888], "vulns": ["CVE-2025-67896", "CVE-2026-40686", "CVE-2026-40684", "CVE-2025-30232", "CVE-2024-39929", "CVE-2023-51766", "CVE-2026-40687", "CVE-2026-40685"], "hostnames": ["jerseyzone.net"], "tags": ["self-signed", "starttls"], "cpes": ["cpe:/a:f5:nginx:1.28.0", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx", "cpe:/a:openbsd:openssh:9.6p1", "cpe:/a:exim:exim:4.97"]}

hosting_provider:
  cpe:/a:f5:nginx:1.28.0,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx,cpe:/a:openbsd:openssh:9.6p1,cpe:/a:exim:exim:4.97


indicator: 193.177.0.65
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: ani.be
hosting_provider: cpe:/a:f5:nginx:1.24.0,cpe:/o:canonical:ubuntu_linux,cpe:/o:linux:linux_kernel
queried_at: 2026-05-27T12:12:02.248497
raw_data:
  {"ports": [80], "vulns": ["CVE-2023-44487", "CVE-2025-23419"], "hostnames": ["ani.be"], "tags": ["eol-product"], "cpes": ["cpe:/a:f5:nginx:1.24.0", "cpe:/o:canonical:ubuntu_linux", "cpe:/o:linux:linux_kernel"]}


indicator: 193.177.0.69
indicator_type: ipv4
source: shodan
reverse_dns: france116
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T12:12:05.902728
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["france116"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 193.177.0.76
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: botechcompany.com,admin.botech.pro,panel.botech.pro
queried_at: 2026-05-27T12:12:07.711436
raw_data:
  {"ports": [22, 80, 443, 8098], "vulns": ["CVE-2025-12084", "CVE-2021-32052", "CVE-2023-44487", "CVE-2020-29396", "CVE-2024-7592", "CVE-2024-6232", "CVE-2025-13836", "CVE-2025-13837", "CVE-2024-9287", "CVE-2026-4519", "CVE-2025-23419", "CVE-2009-3720", "CVE-2025-12781", "CVE-2009-2940", "CVE-2023-27043"], "hostnames": ["botechcompany.com", "admin.botech.pro", "panel.botech.pro"], "tags": ["eol-product"], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/a:f5:nginx:1.24.0", "cpe:/a:python:python:3.12

hosting_provider:
  cpe:/a:openbsd:openssh:9.6p1,cpe:/a:f5:nginx:1.24.0,cpe:/a:python:python:3.12.3,cpe:/o:canonical:ubuntu_linux,cpe:/o:linux:linux_kernel


indicator: 193.177.0.78
indicator_type: ipv4
source: shodan
city: self-signed,database
reverse_dns: ibinvestimentos.info
hosting_provider: cpe:/a:mariadb:mariadb
queried_at: 2026-05-27T12:12:09.489944
raw_data:
  {"ports": [3306, 3389], "vulns": [], "hostnames": ["ibinvestimentos.info"], "tags": ["self-signed", "database"], "cpes": ["cpe:/a:mariadb:mariadb"]}


indicator: 193.233.161.160
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/a:apache:traffic_server
queried_at: 2026-05-27T12:12:22.182477
raw_data:
  {"ports": [443], "vulns": [], "hostnames": ["brb.yahoo.net", "ddl.fp.yahoo.com", "ca.my.yahoo.com", "ca.rogers.yahoo.com", "add.my.yahoo.com", "tw.rd.yahoo.com", "hk.rd.yahoo.com", "mbp.yimg.com", "fr-ca.rogers.yahoo.com", "s.yimg.com", "yahoo.com"], "tags": [], "cpes": ["cpe:/a:apache:traffic_server"]}

reverse_dns:
  brb.yahoo.net,ddl.fp.yahoo.com,ca.my.yahoo.com,ca.rogers.yahoo.com,add.my.yahoo.com,tw.rd.yahoo.com,hk.rd.yahoo.com,mbp.yimg.com,fr-ca.rogers.yahoo.com,s.yimg.com,yahoo.com


indicator: 193.233.161.207
indicator_type: ipv4
source: shodan
reverse_dns: max.ru
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T12:12:29.332073
raw_data:
  {"ports": [22, 443], "vulns": [], "hostnames": ["max.ru"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 193.233.161.243
indicator_type: ipv4
source: shodan
city: self-signed,starttls
reverse_dns: dragonquestportal.site
hosting_provider: cpe:/a:f5:nginx,cpe:/a:exim:exim:4.97
queried_at: 2026-05-27T12:12:45.373186
raw_data:
  {"ports": [53, 443, 465, 587], "vulns": ["CVE-2025-67896", "CVE-2026-40686", "CVE-2026-40684", "CVE-2025-30232", "CVE-2024-39929", "CVE-2023-51766", "CVE-2026-40687", "CVE-2026-40685"], "hostnames": ["dragonquestportal.site"], "tags": ["self-signed", "starttls"], "cpes": ["cpe:/a:f5:nginx", "cpe:/a:exim:exim:4.97"]}


indicator: 193.233.161.254
indicator_type: ipv4
source: shodan
queried_at: 2026-05-27T12:12:50.700227
raw_data:
  {"ports": [2087], "vulns": [], "hostnames": ["wwwqa.microsoft.com", "staticview.microsoft.com", "www.microsoft.com", "microsoft.com", "privacy.microsoft.com", "i.s-microsoft.com", "c.s-microsoft.com"], "tags": [], "cpes": []}

reverse_dns:
  wwwqa.microsoft.com,staticview.microsoft.com,www.microsoft.com,microsoft.com,privacy.microsoft.com,i.s-microsoft.com,c.s-microsoft.com


indicator: 193.27.90.10
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: molu-011
queried_at: 2026-05-27T12:13:52.819052
raw_data:
  {"ports": [22, 80], "vulns": ["CVE-2023-44487", "CVE-2021-23017", "CVE-2021-3618", "CVE-2025-23419"], "hostnames": ["molu-011"], "tags": ["eol-product"], "cpes": ["cpe:/a:f5:nginx:1.18.0", "cpe:/o:canonical:ubuntu_linux", "cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:8.9p1"]}

hosting_provider:
  cpe:/a:f5:nginx:1.18.0,cpe:/o:canonical:ubuntu_linux,cpe:/o:linux:linux_kernel,cpe:/a:openbsd:openssh:8.9p1


indicator: 193.27.90.102
indicator_type: ipv4
source: shodan
reverse_dns: static-telegram.net
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T12:13:54.594288
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["static-telegram.net"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 193.27.90.119
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: ktz-frxv-view.com,redirector.katzteam
hosting_provider: cpe:/a:f5:nginx:1.18.0,cpe:/o:canonical:ubuntu_linux,cpe:/o:linux:linux_kernel
queried_at: 2026-05-27T12:13:59.877541
raw_data:
  {"ports": [80, 443, 5000], "vulns": ["CVE-2023-44487", "CVE-2021-23017", "CVE-2021-3618", "CVE-2025-23419"], "hostnames": ["ktz-frxv-view.com", "redirector.katzteam"], "tags": ["eol-product"], "cpes": ["cpe:/a:f5:nginx:1.18.0", "cpe:/o:canonical:ubuntu_linux", "cpe:/o:linux:linux_kernel"]}


indicator: 193.27.90.120
indicator_type: ipv4
source: shodan
city: eol-product
hosting_provider: cpe:/a:f5:nginx:1.18.0,cpe:/o:canonical:ubuntu_linux,cpe:/o:linux:linux_kernel
queried_at: 2026-05-27T12:14:01.648968
raw_data:
  {"ports": [80, 5000], "vulns": ["CVE-2023-44487", "CVE-2021-23017", "CVE-2021-3618", "CVE-2025-23419"], "hostnames": [], "tags": ["eol-product"], "cpes": ["cpe:/a:f5:nginx:1.18.0", "cpe:/o:canonical:ubuntu_linux", "cpe:/o:linux:linux_kernel"]}


indicator: 193.27.90.124
indicator_type: ipv4
source: shodan
city: eol-product,self-signed,starttls
queried_at: 2026-05-27T12:14:03.405465
raw_data:
  {"ports": [21, 22, 25, 443, 465, 993, 7777, 8888], "vulns": ["CVE-2022-3620", "CVE-2026-40685", "CVE-2024-39929", "CVE-2023-42114", "CVE-2026-40684", "CVE-2023-42115", "CVE-2025-67896", "CVE-2026-40687", "CVE-2023-42117", "CVE-2022-3559", "CVE-2026-40686", "CVE-2023-42116", "CVE-2022-37451", "CVE-2023-42119", "CVE-2023-51766"], "hostnames": [], "tags": ["eol-product", "self-signed", "starttls"], "cpes": ["cpe:/a:exim:exim:4.95", "cpe:/a:f5:nginx", "cpe:/a:f5:nginx:1.26.3", "cpe:/a:openbsd:openss

hosting_provider:
  cpe:/a:exim:exim:4.95,cpe:/a:f5:nginx,cpe:/a:f5:nginx:1.26.3,cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux


indicator: 193.27.90.127
indicator_type: ipv4
source: shodan
city: database,eol-product
reverse_dns: docchi
hosting_provider: cpe:/a:mariadb:mariadb:10.11.14-MariaDB-0%2bdeb12u2,cpe:/a:f5:nginx:1.22.1
queried_at: 2026-05-27T12:14:05.176098
raw_data:
  {"ports": [80, 2020, 3000, 3306, 9090], "vulns": ["CVE-2025-23419", "CVE-2023-44487"], "hostnames": ["docchi"], "tags": ["database", "eol-product"], "cpes": ["cpe:/a:mariadb:mariadb:10.11.14-MariaDB-0%2bdeb12u2", "cpe:/a:f5:nginx:1.22.1"]}


indicator: 193.27.90.163
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: molu-005
queried_at: 2026-05-27T12:14:10.541267
raw_data:
  {"ports": [22, 80], "vulns": ["CVE-2025-23419", "CVE-2021-3618", "CVE-2021-23017", "CVE-2023-44487"], "hostnames": ["molu-005"], "tags": ["eol-product"], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx:1.18.0"]}

hosting_provider:
[cell repeats an earlier one in this file: 107 characters]


indicator: 193.27.90.165
indicator_type: ipv4
source: shodan
reverse_dns: 1.grup
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T12:14:12.300016
raw_data:
  {"ports": [22, 443], "vulns": [], "hostnames": ["1.grup"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 193.27.90.171
indicator_type: ipv4
source: shodan
city: starttls,self-signed
reverse_dns: mail.srv1.intoxicatingwhisper.work
hosting_provider: cpe:/a:postfix:postfix
queried_at: 2026-05-27T12:14:13.943320
raw_data:
  {"ports": [25, 53], "vulns": [], "hostnames": ["mail.srv1.intoxicatingwhisper.work"], "tags": ["starttls", "self-signed"], "cpes": ["cpe:/a:postfix:postfix"]}


indicator: 193.27.90.191
indicator_type: ipv4
source: shodan
reverse_dns: domain.com
hosting_provider: cpe:/a:openresty:openresty,cpe:/a:getbootstrap:bootstrap:3.4.1,cpe:/a:f5:nginx
queried_at: 2026-05-27T12:14:15.698043
raw_data:
  {"ports": [80, 3001, 8080, 8090], "vulns": [], "hostnames": ["domain.com"], "tags": [], "cpes": ["cpe:/a:openresty:openresty", "cpe:/a:getbootstrap:bootstrap:3.4.1", "cpe:/a:f5:nginx"]}


indicator: 193.27.90.211
indicator_type: ipv4
source: shodan
reverse_dns: europa19
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx
queried_at: 2026-05-27T12:14:17.451799
raw_data:
  {"ports": [22, 80], "vulns": [], "hostnames": ["europa19"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx"]}


indicator: 193.27.90.220
indicator_type: ipv4
source: shodan
reverse_dns: tower.wars
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T12:14:19.212117
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["tower.wars"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 193.27.90.248
indicator_type: ipv4
source: shodan
reverse_dns: 111.com
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx
queried_at: 2026-05-27T12:14:20.963418
raw_data:
  {"ports": [22, 80, 9100, 9200], "vulns": [], "hostnames": ["111.com"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx"]}


indicator: 193.27.90.26
indicator_type: ipv4
source: shodan
city: starttls
reverse_dns: server.servershx.site,server.serv92.top
hosting_provider: cpe:/a:exim:exim:4.99.1,cpe:/a:cpanel:cpanel,cpe:/a:exim:exim:4.99.2,cpe:/a:openbsd:openssh:8.0
queried_at: 2026-05-27T12:14:24.535217
raw_data:
  {"ports": [22, 53, 80, 110, 143, 465, 587, 993, 2082, 2083, 2087, 2095], "vulns": ["CVE-2025-26465", "CVE-2023-38408", "CVE-2008-3844", "CVE-2020-14145", "CVE-2023-51767", "CVE-2020-15778", "CVE-2019-16905", "CVE-2025-32728", "CVE-2023-51385", "CVE-2021-36368", "CVE-2007-2768", "CVE-2023-48795", "CVE-2016-20012", "CVE-2021-41617", "CVE-2026-35414"], "hostnames": ["server.servershx.site", "server.serv92.top"], "tags": ["starttls"], "cpes": ["cpe:/a:exim:exim:4.99.1", "cpe:/a:cpanel:cpanel", "cpe:


indicator: 193.27.90.39
indicator_type: ipv4
source: shodan
reverse_dns: racejeet247com2
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T12:14:26.315092
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["racejeet247com2"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 193.27.90.50
indicator_type: ipv4
source: shodan
city: starttls,self-signed
reverse_dns: desirusx.com
hosting_provider: cpe:/a:pureftpd:pure-ftpd,cpe:/a:f5:nginx,cpe:/a:postfix:postfix
queried_at: 2026-05-27T12:14:28.105748
raw_data:
  {"ports": [21, 80, 143, 465, 587], "vulns": [], "hostnames": ["desirusx.com"], "tags": ["starttls", "self-signed"], "cpes": ["cpe:/a:pureftpd:pure-ftpd", "cpe:/a:f5:nginx", "cpe:/a:postfix:postfix"]}


indicator: 193.27.90.51
indicator_type: ipv4
source: shodan
reverse_dns: mail2.fundsloom.com
hosting_provider: cpe:/a:openbsd:openssh:8.7
queried_at: 2026-05-27T12:14:29.887261
raw_data:
  {"ports": [22, 111, 8080], "vulns": ["CVE-2008-3844", "CVE-2026-35387", "CVE-2025-26465", "CVE-2023-38408", "CVE-2023-48795", "CVE-2026-35385", "CVE-2021-41617", "CVE-2026-35386", "CVE-2026-35388", "CVE-2024-6387", "CVE-2023-51767", "CVE-2016-20012", "CVE-2023-51385", "CVE-2026-35414", "CVE-2007-2768", "CVE-2021-36368", "CVE-2025-32728"], "hostnames": ["mail2.fundsloom.com"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.7"]}


indicator: 193.27.90.60
indicator_type: ipv4
source: shodan
reverse_dns: fjsdasf
hosting_provider: cpe:/a:python:python:3.12.3,cpe:/a:palletsprojects:flask:3.1.3
queried_at: 2026-05-27T12:14:31.657294
raw_data:
  {"ports": [445, 5000, 5985], "vulns": ["CVE-2025-13837", "CVE-2024-6232", "CVE-2026-4519", "CVE-2025-13836", "CVE-2025-12084", "CVE-2024-7592", "CVE-2009-2940", "CVE-2021-32052", "CVE-2024-9287", "CVE-2020-29396", "CVE-2023-27043", "CVE-2025-12781", "CVE-2009-3720"], "hostnames": ["fjsdasf"], "tags": [], "cpes": ["cpe:/a:python:python:3.12.3", "cpe:/a:palletsprojects:flask:3.1.3"]}


indicator: 193.27.90.71
indicator_type: ipv4
source: shodan
city: self-signed,starttls
reverse_dns: domains
hosting_provider: cpe:/a:openbsd:openssh:8.9p1
queried_at: 2026-05-27T12:14:33.421802
raw_data:
  {"ports": [22, 25, 53, 110, 995], "vulns": [], "hostnames": ["domains"], "tags": ["self-signed", "starttls"], "cpes": ["cpe:/a:openbsd:openssh:8.9p1"]}


indicator: 193.27.90.77
indicator_type: ipv4
source: shodan
reverse_dns: watchflixad.com
hosting_provider: cpe:/o:canonical:ubuntu_linux,cpe:/a:openbsd:openssh:9.6p1
queried_at: 2026-05-27T12:14:35.174859
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["watchflixad.com"], "tags": [], "cpes": ["cpe:/o:canonical:ubuntu_linux", "cpe:/a:openbsd:openssh:9.6p1"]}


indicator: 193.27.90.86
indicator_type: ipv4
source: shodan
reverse_dns: vps.anabulk.com
hosting_provider: cpe:/a:postfix:postfix,cpe:/a:apache:http_server
queried_at: 2026-05-27T12:14:38.682063
raw_data:
  {"ports": [25, 53, 80, 111, 465, 995], "vulns": [], "hostnames": ["vps.anabulk.com"], "tags": [], "cpes": ["cpe:/a:postfix:postfix", "cpe:/a:apache:http_server"]}


indicator: 193.27.90.99
indicator_type: ipv4
source: shodan
city: self-signed,starttls
reverse_dns: cxfakes.com
hosting_provider: cpe:/a:postfix:postfix,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx,cpe:/a:openbsd:openssh:8.2p1
queried_at: 2026-05-27T12:14:40.429700
raw_data:
  {"ports": [21, 22, 25, 53, 80, 143, 993, 995, 8880], "vulns": [], "hostnames": ["cxfakes.com"], "tags": ["self-signed", "starttls"], "cpes": ["cpe:/a:postfix:postfix", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx", "cpe:/a:openbsd:openssh:8.2p1"]}


indicator: 194.102.105.103
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: git.skateboard.wtf
hosting_provider: cpe:/o:canonical:ubuntu_linux,cpe:/o:linux:linux_kernel,cpe:/a:f5:nginx:1.24.0
queried_at: 2026-05-27T12:14:42.192047
raw_data:
  {"ports": [80, 443, 5001], "vulns": ["CVE-2023-44487", "CVE-2025-23419"], "hostnames": ["git.skateboard.wtf"], "tags": ["eol-product"], "cpes": ["cpe:/o:canonical:ubuntu_linux", "cpe:/o:linux:linux_kernel", "cpe:/a:f5:nginx:1.24.0"]}


indicator: 194.102.105.168
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/a:hp:integrated_lights-out
queried_at: 2026-05-27T12:14:43.954640
raw_data:
  {"ports": [22, 80, 161], "vulns": [], "hostnames": [], "tags": [], "cpes": ["cpe:/a:hp:integrated_lights-out"]}


indicator: 194.102.105.208
indicator_type: ipv4
source: shodan
city: self-signed,starttls
reverse_dns: local.host
queried_at: 2026-05-27T12:14:47.498830
raw_data:
  {"ports": [21, 22, 25, 53, 80, 110, 443, 993], "vulns": ["CVE-2025-67896", "CVE-2026-40686", "CVE-2026-40684", "CVE-2025-30232", "CVE-2024-39929", "CVE-2023-51766", "CVE-2026-40687", "CVE-2026-40685"], "hostnames": ["local.host"], "tags": ["self-signed", "starttls"], "cpes": ["cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx", "cpe:/a:openbsd:openssh:9.6p1", "cpe:/a:pureftpd:pure-ftpd", "cpe:/a:exim:exim:4.97"]}

hosting_provider:
  cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx,cpe:/a:openbsd:openssh:9.6p1,cpe:/a:pureftpd:pure-ftpd,cpe:/a:exim:exim:4.97


indicator: 194.102.105.210
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: local.host
hosting_provider: cpe:/a:f5:nginx
queried_at: 2026-05-27T12:14:49.269908
raw_data:
  {"ports": [53, 80, 443, 995], "vulns": [], "hostnames": ["local.host"], "tags": ["self-signed"], "cpes": ["cpe:/a:f5:nginx"]}


indicator: 194.102.105.218
indicator_type: ipv4
source: shodan
city: self-signed,starttls
reverse_dns: local.host
hosting_provider: cpe:/a:pureftpd:pure-ftpd,cpe:/a:f5:nginx
queried_at: 2026-05-27T12:14:51.029409
raw_data:
  {"ports": [21, 53, 80, 143, 465, 993, 995], "vulns": [], "hostnames": ["local.host"], "tags": ["self-signed", "starttls"], "cpes": ["cpe:/a:pureftpd:pure-ftpd", "cpe:/a:f5:nginx"]}


indicator: 194.102.105.227
indicator_type: ipv4
source: shodan
city: self-signed,starttls
reverse_dns: local.host
queried_at: 2026-05-27T12:14:52.821405
raw_data:
  {"ports": [21, 22, 25, 53, 80, 110, 143, 443, 587, 993], "vulns": [], "hostnames": ["local.host"], "tags": ["self-signed", "starttls"], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/a:pureftpd:pure-ftpd", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx"]}

hosting_provider:
[cell repeats an earlier one in this file: 100 characters]


indicator: 194.102.105.230
indicator_type: ipv4
source: shodan
city: self-signed,starttls
reverse_dns: local.host
hosting_provider: cpe:/a:f5:nginx,cpe:/a:exim:exim:4.97
queried_at: 2026-05-27T12:14:54.578015
raw_data:
  {"ports": [53, 80, 143, 465, 587, 993], "vulns": ["CVE-2025-67896", "CVE-2026-40686", "CVE-2026-40684", "CVE-2025-30232", "CVE-2024-39929", "CVE-2023-51766", "CVE-2026-40687", "CVE-2026-40685"], "hostnames": ["local.host"], "tags": ["self-signed", "starttls"], "cpes": ["cpe:/a:f5:nginx", "cpe:/a:exim:exim:4.97"]}


indicator: 194.102.105.236
indicator_type: ipv4
source: shodan
city: self-signed,starttls
reverse_dns: local.host
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx,cpe:/a:exim:exim:4.97
queried_at: 2026-05-27T12:14:56.339108
raw_data:
  {"ports": [22, 25, 53, 80, 110, 465, 587, 993, 995], "vulns": ["CVE-2025-67896", "CVE-2026-40686", "CVE-2026-40684", "CVE-2025-30232", "CVE-2024-39929", "CVE-2023-51766", "CVE-2026-40687", "CVE-2026-40685"], "hostnames": ["local.host"], "tags": ["self-signed", "starttls"], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx", "cpe:/a:exim:exim:4.97"]}


indicator: 194.102.105.32
indicator_type: ipv4
source: shodan
reverse_dns: acgxmh.com,hpanel.xyz
hosting_provider: cpe:/o:debian:debian_linux,cpe:/a:openbsd:openssh:9.2p1,cpe:/o:linux:linux_kernel,cpe:/a:f5:nginx
queried_at: 2026-05-27T12:14:58.102517
raw_data:
  {"ports": [80, 443, 8176, 8443], "vulns": [], "hostnames": ["acgxmh.com", "hpanel.xyz"], "tags": [], "cpes": ["cpe:/o:debian:debian_linux", "cpe:/a:openbsd:openssh:9.2p1", "cpe:/o:linux:linux_kernel", "cpe:/a:f5:nginx"]}


indicator: 194.102.105.33
indicator_type: ipv4
source: shodan
reverse_dns: hpanel.xyz,acgxmh.com
hosting_provider: cpe:/a:f5:nginx
queried_at: 2026-05-27T12:14:59.853077
raw_data:
  {"ports": [80, 443, 8443], "vulns": [], "hostnames": ["hpanel.xyz", "acgxmh.com"], "tags": [], "cpes": ["cpe:/a:f5:nginx"]}


indicator: 194.102.105.41
indicator_type: ipv4
source: shodan
city: self-signed,starttls
reverse_dns: local.host
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx
queried_at: 2026-05-27T12:15:01.701897
raw_data:
  {"ports": [22, 53, 80, 110, 443, 995], "vulns": [], "hostnames": ["local.host"], "tags": ["self-signed", "starttls"], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx"]}


indicator: 194.102.105.42
indicator_type: ipv4
source: shodan
city: self-signed,starttls
reverse_dns: local.host
hosting_provider: cpe:/a:pureftpd:pure-ftpd,cpe:/a:f5:nginx,cpe:/a:exim:exim:4.97
queried_at: 2026-05-27T12:15:03.494848
raw_data:
  {"ports": [21, 22, 53, 80, 110, 587, 993], "vulns": ["CVE-2025-67896", "CVE-2026-40686", "CVE-2026-40684", "CVE-2025-30232", "CVE-2024-39929", "CVE-2023-51766", "CVE-2026-40687", "CVE-2026-40685"], "hostnames": ["local.host"], "tags": ["self-signed", "starttls"], "cpes": ["cpe:/a:pureftpd:pure-ftpd", "cpe:/a:f5:nginx", "cpe:/a:exim:exim:4.97"]}


indicator: 194.102.105.46
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: ajanbet.com
hosting_provider: cpe:/o:canonical:ubuntu_linux,cpe:/o:linux:linux_kernel,cpe:/a:f5:nginx:1.24.0
queried_at: 2026-05-27T12:15:05.294446
raw_data:
  {"ports": [80], "vulns": ["CVE-2023-44487", "CVE-2025-23419"], "hostnames": ["ajanbet.com"], "tags": ["eol-product"], "cpes": ["cpe:/o:canonical:ubuntu_linux", "cpe:/o:linux:linux_kernel", "cpe:/a:f5:nginx:1.24.0"]}


indicator: 194.102.105.50
indicator_type: ipv4
source: shodan
city: self-signed
hosting_provider: cpe:/a:microsoft:kerberos,cpe:/a:ntp:ntp:3,cpe:/o:microsoft:windows
queried_at: 2026-05-27T12:15:07.052808
raw_data:
  {"ports": [88, 123, 3389], "vulns": [], "hostnames": [], "tags": ["self-signed"], "cpes": ["cpe:/a:microsoft:kerberos", "cpe:/a:ntp:ntp:3", "cpe:/o:microsoft:windows"]}


indicator: 194.102.105.69
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: git.skateboard.wtf
queried_at: 2026-05-27T12:15:12.389399
raw_data:
  {"ports": [22, 80, 443], "vulns": ["CVE-2025-23419", "CVE-2023-44487"], "hostnames": ["git.skateboard.wtf"], "tags": ["eol-product"], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx:1.24.0"]}

hosting_provider:
[cell repeats an earlier one in this file: 107 characters]


indicator: 194.102.105.72
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: api.freeprn.live,freeprn.live,www.freeprn.live
queried_at: 2026-05-27T12:15:14.140440
raw_data:
  {"ports": [22, 443], "vulns": ["CVE-2023-44487", "CVE-2021-23017", "CVE-2021-3618", "CVE-2025-23419"], "hostnames": ["api.freeprn.live", "freeprn.live", "www.freeprn.live"], "tags": ["eol-product"], "cpes": ["cpe:/a:f5:nginx:1.18.0", "cpe:/o:canonical:ubuntu_linux", "cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:8.2p1"]}

hosting_provider:
  cpe:/a:f5:nginx:1.18.0,cpe:/o:canonical:ubuntu_linux,cpe:/o:linux:linux_kernel,cpe:/a:openbsd:openssh:8.2p1


indicator: 194.102.105.89
indicator_type: ipv4
source: shodan
city: starttls,self-signed
reverse_dns: local.host
hosting_provider: cpe:/a:pureftpd:pure-ftpd,cpe:/a:exim:exim:4.97,cpe:/a:f5:nginx
queried_at: 2026-05-27T12:15:15.904443
raw_data:
  {"ports": [21, 22, 53, 80, 143, 443, 587], "vulns": ["CVE-2026-40685", "CVE-2024-39929", "CVE-2026-40684", "CVE-2025-67896", "CVE-2026-40687", "CVE-2025-30232", "CVE-2026-40686", "CVE-2023-51766"], "hostnames": ["local.host"], "tags": ["starttls", "self-signed"], "cpes": ["cpe:/a:pureftpd:pure-ftpd", "cpe:/a:exim:exim:4.97", "cpe:/a:f5:nginx"]}


indicator: 194.102.105.92
indicator_type: ipv4
source: shodan
city: starttls,self-signed
reverse_dns: local.host
hosting_provider: cpe:/a:exim:exim:4.97
queried_at: 2026-05-27T12:15:17.672194
raw_data:
  {"ports": [53, 110, 465, 587, 993], "vulns": ["CVE-2026-40685", "CVE-2024-39929", "CVE-2026-40684", "CVE-2025-67896", "CVE-2026-40687", "CVE-2025-30232", "CVE-2026-40686", "CVE-2023-51766"], "hostnames": ["local.host"], "tags": ["starttls", "self-signed"], "cpes": ["cpe:/a:exim:exim:4.97"]}


indicator: 194.110.247.126
indicator_type: ipv4
source: shodan
reverse_dns: none.com,www.anime-hood.to,anime-hood.to
hosting_provider: cpe:/o:linux:linux_kernel,cpe:/a:openbsd:openssh:9.2p1,cpe:/a:f5:nginx,cpe:/o:debian:debian_linux
queried_at: 2026-05-27T12:15:19.428111
raw_data:
  {"ports": [22, 443], "vulns": [], "hostnames": ["none.com", "www.anime-hood.to", "anime-hood.to"], "tags": [], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:9.2p1", "cpe:/a:f5:nginx", "cpe:/o:debian:debian_linux"]}


indicator: 194.110.247.133
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: ruckerstattungoegk.com,www.ruckerstattungoegk.com,oegksupport
hosting_provider: cpe:/a:f5:nginx:1.18.0,cpe:/o:canonical:ubuntu_linux,cpe:/o:linux:linux_kernel
queried_at: 2026-05-27T12:15:21.197474
raw_data:
  {"ports": [80, 443], "vulns": ["CVE-2023-44487", "CVE-2021-23017", "CVE-2021-3618", "CVE-2025-23419"], "hostnames": ["ruckerstattungoegk.com", "www.ruckerstattungoegk.com", "oegksupport"], "tags": ["eol-product"], "cpes": ["cpe:/a:f5:nginx:1.18.0", "cpe:/o:canonical:ubuntu_linux", "cpe:/o:linux:linux_kernel"]}


indicator: 194.85.251.190
indicator_type: ipv4
source: otx
country: DE
reverse_dns: sneraq.live
queried_at: 2026-05-27T12:15:35.025921
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "ASNone ", "indicator": "194.85.251.190", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["sneraq.live"]}


indicator: 146.19.213.137
indicator_type: ipv4
source: otx
queried_at: 2026-05-27T12:15:51.918085
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "", "country_code": "", "city": "", "asn": "AS200019 alexhost srl", "indicator": "146.19.213.137", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 146.19.213.139
indicator_type: ipv4
source: otx
queried_at: 2026-05-27T12:16:08.785996
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "", "country_code": "", "city": "", "asn": "AS200019 alexhost srl", "indicator": "146.19.213.139", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 146.19.213.140
indicator_type: ipv4
source: otx
reverse_dns: reggelin.top,reqjt.top,midwestimberframes.com,jqdsqqc.gq,centroasdt.ml
queried_at: 2026-05-27T12:16:11.635304
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "", "country_code": "", "city": "", "asn": "AS200019 alexhost srl", "indicator": "146.19.213.140", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 5, "malware_samples": [], "passive_dns": ["reggelin.top", "reqjt.top", "midwestimberframes.com", "jqdsqqc.gq", "centroasdt.ml"]}


indicator: 146.19.213.164
indicator_type: ipv4
source: otx
reverse_dns: bitquantfi.com,mailsendm.top,mailer.mailsendm.top
queried_at: 2026-05-27T12:16:14.450746
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "", "country_code": "", "city": "", "asn": "AS200019 alexhost srl", "indicator": "146.19.213.164", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["bitquantfi.com", "mailsendm.top", "mailer.mailsendm.top"]}


indicator: 146.19.213.171
indicator_type: ipv4
source: otx
reverse_dns: efjklmabghicd.biz,stmsoft.info,www.stmsoft.info,admin.stmsoft.info
queried_at: 2026-05-27T12:16:17.166958
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "", "country_code": "", "city": "", "asn": "AS200019 alexhost srl", "indicator": "146.19.213.171", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 4, "malware_samples": [], "passive_dns": ["efjklmabghicd.biz", "stmsoft.info", "www.stmsoft.info", "admin.stmsoft.info"]}


indicator: 146.19.213.188
indicator_type: ipv4
source: otx
queried_at: 2026-05-27T12:16:34.040161
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "", "country_code": "", "city": "", "asn": "AS200019 alexhost srl", "indicator": "146.19.213.188", "tags": [], "pulses": ["ETIC Cybersecurity  2024-02-26  Port Scan"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 146.19.213.193
indicator_type: ipv4
source: otx
queried_at: 2026-05-27T12:16:37.225015
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "", "country_code": "", "city": "", "asn": "AS200019 alexhost srl", "indicator": "146.19.213.193", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 22, "malware_samples": [], "passive_dns": ["katarinaaline.com", "www.amp.eskort.live", "amp.eskort.live", "www.eskortlar.online", "www.eskortbul.online", "www.mail.eskortbul.online", "www.mail.eskortmeydani.com", "eskortbul.online", "eskortlar.online", "www.mail.eskort.bio", "www.mail.e

reverse_dns:
  katarinaaline.com,www.amp.eskort.live,amp.eskort.live,www.eskortlar.online,www.eskortbul.online,www.mail.eskortbul.online,www.mail.eskortmeydani.com,eskortbul.online,eskortlar.online,www.mail.eskort.bio


indicator: 146.19.213.204
indicator_type: ipv4
source: otx
queried_at: 2026-05-27T12:16:55.063436
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "", "country_code": "", "city": "", "asn": "AS200019 alexhost srl", "indicator": "146.19.213.204", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 146.19.213.206
indicator_type: ipv4
source: otx
reverse_dns: passionlang.live
queried_at: 2026-05-27T12:16:57.831786
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "", "country_code": "", "city": "", "asn": "AS200019 alexhost srl", "indicator": "146.19.213.206", "tags": [], "pulses": [], "malware_count": 1, "passive_dns_count": 1, "malware_samples": ["a9a38ff89db972acd2dc74d81174bed482da90f00a8fdecce23f198b4289d8cc"], "passive_dns": ["passionlang.live"]}


indicator: 146.19.213.212
indicator_type: ipv4
source: otx
queried_at: 2026-05-27T12:17:14.708671
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "", "country_code": "", "city": "", "asn": "AS200019 alexhost srl", "indicator": "146.19.213.212", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 146.19.213.222
indicator_type: ipv4
source: otx
reverse_dns: enel.asia,robloxcom.com,xn--infos-renouvellement-sant-en-linge-z9c.fr
queried_at: 2026-05-27T12:17:17.130823
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "", "country_code": "", "city": "", "asn": "AS200019 alexhost srl", "indicator": "146.19.213.222", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["enel.asia", "robloxcom.com", "xn--infos-renouvellement-sant-en-linge-z9c.fr"]}


indicator: 146.19.213.225
indicator_type: ipv4
source: otx
reverse_dns: theglove.info
queried_at: 2026-05-27T12:17:19.464523
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "", "country_code": "", "city": "", "asn": "AS200019 alexhost srl", "indicator": "146.19.213.225", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["theglove.info"]}


indicator: 146.19.213.226
indicator_type: ipv4
source: otx
reverse_dns: b0chum.de,babytes.com,canada-post-track.info,netflix-gestion-abonnement.fr
queried_at: 2026-05-27T12:17:21.758916
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "", "country_code": "", "city": "", "asn": "AS200019 alexhost srl", "indicator": "146.19.213.226", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 4, "malware_samples": [], "passive_dns": ["b0chum.de", "babytes.com", "canada-post-track.info", "netflix-gestion-abonnement.fr"]}


indicator: 146.19.213.236
indicator_type: ipv4
source: otx
queried_at: 2026-05-27T12:17:24.739506
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "", "country_code": "", "city": "", "asn": "AS200019 alexhost srl", "indicator": "146.19.213.236", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 6, "malware_samples": [], "passive_dns": ["plugbot.top", "www.vertexpeptides.com", "vertexpeptides.com", "ulup.studgainly.xyz", "studgainly.xyz", "accesstd-easyweb.com"]}

reverse_dns:
  plugbot.top,www.vertexpeptides.com,vertexpeptides.com,ulup.studgainly.xyz,studgainly.xyz,accesstd-easyweb.com


indicator: 146.19.213.251
indicator_type: ipv4
source: otx
queried_at: 2026-05-27T12:17:27.242890
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "", "country_code": "", "city": "", "asn": "AS200019 alexhost srl", "indicator": "146.19.213.251", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 11, "malware_samples": [], "passive_dns": ["jevouslavaisdejadit.store", "smtp.jevouslavaisdejadit.store", "blog.haziranbilgi.info", "haziranbilgi.info", "gizlihaberler.info", "turkcebilgim.info", "turkvarbilgi.info", "gezginbilgisi.info", "bilgikilavuzu.info", "tuturnovtv.com", "netflii

reverse_dns:
  jevouslavaisdejadit.store,smtp.jevouslavaisdejadit.store,blog.haziranbilgi.info,haziranbilgi.info,gizlihaberler.info,turkcebilgim.info,turkvarbilgi.info,gezginbilgisi.info,bilgikilavuzu.info,tuturnovtv.com


indicator: 146.19.213.29
indicator_type: ipv4
source: otx
reverse_dns: mlope.top,guardteam.top,guardteam.buzz
queried_at: 2026-05-27T12:17:30.364770
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "", "country_code": "", "city": "", "asn": "AS200019 alexhost srl", "indicator": "146.19.213.29", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["mlope.top", "guardteam.top", "guardteam.buzz"]}


indicator: 146.19.213.3
indicator_type: ipv4
source: otx
reverse_dns: validate.androchem-laboratories.com,mebleeleganckie.com,emt-lentrac.online,emt-etc.sbs
queried_at: 2026-05-27T12:17:32.930316
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "", "country_code": "", "city": "", "asn": "AS200019 alexhost srl", "indicator": "146.19.213.3", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 4, "malware_samples": [], "passive_dns": ["validate.androchem-laboratories.com", "mebleeleganckie.com", "emt-lentrac.online", "emt-etc.sbs"]}


indicator: 146.19.213.31
indicator_type: ipv4
source: otx
queried_at: 2026-05-27T12:17:35.217631
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "", "country_code": "", "city": "", "asn": "AS200019 alexhost srl", "indicator": "146.19.213.31", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 11, "malware_samples": [], "passive_dns": ["spectorstrygu.xyz", "grok-auth.com", "server.absupna.sbs", "schnelliptv.com", "www.schnelliptv.com", "topdigiz.com", "www.topdigiz.com", "www.panel.miptv4k.com", "panel.miptv4k.com", "www.miptv4k.com", "miptv4k.com"]}

reverse_dns:
  spectorstrygu.xyz,grok-auth.com,server.absupna.sbs,schnelliptv.com,www.schnelliptv.com,topdigiz.com,www.topdigiz.com,www.panel.miptv4k.com,panel.miptv4k.com,www.miptv4k.com


indicator: 146.19.213.45
indicator_type: ipv4
source: otx
queried_at: 2026-05-27T12:17:38.054492
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "", "country_code": "", "city": "", "asn": "AS200019 alexhost srl", "indicator": "146.19.213.45", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 11, "malware_samples": [], "passive_dns": ["unlidns.lol", "skchan.lol", "mondial-redistribution.info", "www.vanguard-investor.cc", "vanguard-investor.cc", "vanguard-eb5.com", "vnginv.sbs", "vanguard-visa.com", "subiectum.store", "sabmok14.top", "sabakp13.top"]}

reverse_dns:
  unlidns.lol,skchan.lol,mondial-redistribution.info,www.vanguard-investor.cc,vanguard-investor.cc,vanguard-eb5.com,vnginv.sbs,vanguard-visa.com,subiectum.store,sabmok14.top


indicator: 146.19.213.51
indicator_type: ipv4
source: otx
queried_at: 2026-05-27T12:17:54.899145
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "", "country_code": "", "city": "", "asn": "AS200019 alexhost srl", "indicator": "146.19.213.51", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 146.19.213.75
indicator_type: ipv4
source: otx
queried_at: 2026-05-27T12:17:57.394825
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "", "country_code": "", "city": "", "asn": "AS200019 alexhost srl", "indicator": "146.19.213.75", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 8, "malware_samples": [], "passive_dns": ["grafana.solar.likhogub.ru", "papaw.info", "europoorts.com", "comacine.info", "correctible.info", "roating.info", "askarel.live", "centre-des-amendes.com"]}

reverse_dns:
  grafana.solar.likhogub.ru,papaw.info,europoorts.com,comacine.info,correctible.info,roating.info,askarel.live,centre-des-amendes.com


indicator: 146.19.213.76
indicator_type: ipv4
source: otx
queried_at: 2026-05-27T12:18:14.562672
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "", "country_code": "", "city": "", "asn": "AS200019 alexhost srl", "indicator": "146.19.213.76", "tags": ["cyber security", "Nextray", "malicious", "ioc", "description", "description ip", "phishing", "cve202229266", "indicator type", "indicator"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "TOR EXIT NODE JAN 24", "IOC Records \u2192Provided by @NextRayAI", "H

hosting_provider:
  cyber security,Nextray,malicious,ioc,description,description ip,phishing,cve202229266,indicator type,indicator


indicator: 146.19.213.96
indicator_type: ipv4
source: otx
queried_at: 2026-05-27T12:18:31.517267
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "", "country_code": "", "city": "", "asn": "AS200019 alexhost srl", "indicator": "146.19.213.96", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 159.253.120.118
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-27T12:18:35.725519
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "ASNone ", "indicator": "159.253.120.118", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 19, "malware_samples": [], "passive_dns": ["cp72071.web1empr1esa.eu-a.ctualizaciones.ru", "webmail.dondomini10.com-a.ctualizaciones.ru", "241serrv1iciode3ecor4reo.es-a.ctualizaciones.ru", "www.241serrv1iciode3ecor4reo.es-a.ctualizaciones.ru", "251buz0o0nd3e3co4rreo.com-a.ctuali

reverse_dns:
  cp72071.web1empr1esa.eu-a.ctualizaciones.ru,webmail.dondomini10.com-a.ctualizaciones.ru,241serrv1iciode3ecor4reo.es-a.ctualizaciones.ru,www.241serrv1iciode3ecor4reo.es-a.ctualizaciones.ru,251buz0o0nd3e3co4rreo.com-a.ctualizaciones.ru,www.ctualizaciones.ru,ctualizaciones.ru,239serrv1iciode3ecor4reo.es-a.ctualizaciones.ru,240serrv1iciode3ecor4reo.es-a.ctualizaciones.ru,www.240serrv1iciode3ecor4reo.es-a.ctualizaciones.ru


indicator: 159.253.120.119
indicator_type: ipv4
source: otx
country: RU
reverse_dns: www.mp3ferz.cc,mp3ferz.cc
queried_at: 2026-05-27T12:18:40.340117
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "ASNone ", "indicator": "159.253.120.119", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["www.mp3ferz.cc", "mp3ferz.cc"]}


indicator: 159.253.120.121
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-27T12:18:44.156511
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "ASNone ", "indicator": "159.253.120.121", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 159.253.120.123
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-27T12:18:47.827123
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "ASNone ", "indicator": "159.253.120.123", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 159.253.120.136
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-27T12:19:05.005911
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "ASNone ", "indicator": "159.253.120.136", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 159.253.120.152
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-27T12:19:07.155648
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "ASNone ", "indicator": "159.253.120.152", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 17, "malware_samples": [], "passive_dns": ["www.erneuerung-amazon.com", "erneuerung-amazon.com", "www.critair-expedition.com", "secure-myalpha.com", "critair-expedition.com", "www.mystifying-mclaren.159-253-120-152.plesk.page", "mystifying-mclaren.159-253-120-152.plesk.page", "

reverse_dns:
  www.erneuerung-amazon.com,erneuerung-amazon.com,www.critair-expedition.com,secure-myalpha.com,critair-expedition.com,www.mystifying-mclaren.159-253-120-152.plesk.page,mystifying-mclaren.159-253-120-152.plesk.page,admiring-visvesvaraya.159-253-120-152.plesk.page,www.admiring-visvesvaraya.159-253-120-152.plesk.page,nervous-nightingale.159-253-120-152.plesk.page


indicator: 159.253.120.153
indicator_type: ipv4
source: otx
country: RU
reverse_dns: mshelp58.us,gub.bio
queried_at: 2026-05-27T12:19:09.497860
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "ASNone ", "indicator": "159.253.120.153", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["mshelp58.us", "gub.bio"]}


indicator: 159.253.120.176
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-27T12:19:11.609481
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "ASNone ", "indicator": "159.253.120.176", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 6, "malware_samples": [], "passive_dns": ["sz-hdhy.site", "leakyhub.com", "mail24kali.online", "www.aide-carte.com", "aide-carte.com", "wizardly-diffie.159-253-120-176.plesk.page"]}

reverse_dns:
  sz-hdhy.site,leakyhub.com,mail24kali.online,www.aide-carte.com,aide-carte.com,wizardly-diffie.159-253-120-176.plesk.page


indicator: 159.253.120.185
indicator_type: ipv4
source: otx
country: RU
reverse_dns: torlock.com,www.torlock.com
hosting_provider: mirai botnet,linux,iocs,domain port,gs005,gs003,gs008,tpot19,honeypot,la-safe.org
queried_at: 2026-05-27T12:19:13.695710
raw_data:
  {"pulse_count": 4, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "ASNone ", "indicator": "159.253.120.185", "tags": ["mirai botnet", "linux", "iocs", "domain port", "gs005", "gs003", "gs008", "tpot19", "honeypot", "la-safe.org", "tsec", "compromise ipv4", "mirai", "combinations"], "pulses": ["Mirai Botnet IOCs - Part 3 - SEC-1275-1", "Mirai Botnet IOCs - Part 3 - SEC-1275-1. [Pulse copied from Gnostis]", "LCIA:HoneyNet:2022", "LCIA:HoneyNet:December


indicator: 159.253.120.189
indicator_type: ipv4
source: otx
country: RU
reverse_dns: photo-tan-erneuernung.top,stan-erneuern.top,marrow.lol,calominat.store,mufg-au.icu
queried_at: 2026-05-27T12:19:27.834135
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "ASNone ", "indicator": "159.253.120.189", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 5, "malware_samples": [], "passive_dns": ["photo-tan-erneuernung.top", "stan-erneuern.top", "marrow.lol", "calominat.store", "mufg-au.icu"]}


indicator: 159.253.120.191
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-27T12:19:30.299525
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "ASNone ", "indicator": "159.253.120.191", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 11, "malware_samples": [], "passive_dns": ["dymovoymarket.shop", "dymovoyplus.shop", "dymovoyprofi.shop", "dymovoy24.shop", "dymovoyline.shop", "dymovoystore.shop", "www.gomaxiglobal.cam", "gomaxiglobal.cam", "admin.gomaxiglobal.cam", "clientorange.com", "unruffled-liskov.159-2

reverse_dns:
  dymovoymarket.shop,dymovoyplus.shop,dymovoyprofi.shop,dymovoy24.shop,dymovoyline.shop,dymovoystore.shop,www.gomaxiglobal.cam,gomaxiglobal.cam,admin.gomaxiglobal.cam,clientorange.com


indicator: 159.253.120.193
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-27T12:19:32.312992
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "ASNone ", "indicator": "159.253.120.193", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 159.253.120.201
indicator_type: ipv4
source: otx
country: RU
reverse_dns: renouveler-cpam.info
hosting_provider: LAMP,malicious,cisco,sftp,cowrie,dionaea,tanner,sip,honeytrap,sentrypeer
queried_at: 2026-05-27T12:19:35.122161
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "ASNone ", "indicator": "159.253.120.201", "tags": ["LAMP", "malicious", "cisco", "sftp", "cowrie", "dionaea", "tanner", "sip", "honeytrap", "sentrypeer", "ssh", "conpot", "heralding"], "pulses": ["LCIA HoneyNet Data - July 2025 - ConPot"], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["renouveler-cpam.info"]}


indicator: 159.253.120.232
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-27T12:19:37.416864
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "ASNone ", "indicator": "159.253.120.232", "tags": [], "pulses": [], "malware_count": 2, "passive_dns_count": 8, "malware_samples": ["20f8f8fb3c03b67c663bc259fda12b9b6ba0e935e1ced305af46680c3ddfb583", "b7312f805db17d912c6489eb125d1783978400f0dc33ec352645cea7b8122233"], "passive_dns": ["www.cryptomaster.ai", "apnj2.top", "secure9j-bbva.4nmn.com", "secure9w-swedbank.4nmn.com", "www.ethli

reverse_dns:
  www.cryptomaster.ai,apnj2.top,secure9j-bbva.4nmn.com,secure9w-swedbank.4nmn.com,www.ethlivetest.duckdns.org,ethlivetest.duckdns.org,159-253-120-232.cprapid.com,www.159-253-120-232.cprapid.com


indicator: 159.253.120.236
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-27T12:19:40.074251
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "ASNone ", "indicator": "159.253.120.236", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 13, "malware_samples": [], "passive_dns": ["tabachkastore.shop", "tabachka-ryadom.shop", "tabachkaonline.shop", "udoma-tabachka.shop", "domtabachki.shop", "tabachka-u-domma.shop", "tabachka-shop.shop", "zjfret.blog", "yuna1.top", "transit-ups.net", "tracking-deutschpost.de", "c

reverse_dns:
  tabachkastore.shop,tabachka-ryadom.shop,tabachkaonline.shop,udoma-tabachka.shop,domtabachki.shop,tabachka-u-domma.shop,tabachka-shop.shop,zjfret.blog,yuna1.top,transit-ups.net


indicator: 159.253.120.244
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-27T12:19:44.369822
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "ASNone ", "indicator": "159.253.120.244", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 7, "malware_samples": [], "passive_dns": ["testnewdomaintest.top", "airdropjupiter.com", "altlayer-binance.com", "jupairdrop.xyz", "drop-avax.com", "jup-aidrop.com", "airdrop-avax.com"]}

reverse_dns:
  testnewdomaintest.top,airdropjupiter.com,altlayer-binance.com,jupairdrop.xyz,drop-avax.com,jup-aidrop.com,airdrop-avax.com


indicator: 159.253.120.252
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-27T12:19:46.673752
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "ASNone ", "indicator": "159.253.120.252", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 31, "malware_samples": [], "passive_dns": ["avmoo.shop", "btsow.space", "btsow.live", "btsow.lol", "avmoo.website", "btsow.pics", "btsow.monster", "btsow.yachts", "btsow.motorcycles", "btsow.homes", "btsow.makeup", "btsow.skin", "btsow.bond", "btsow.quest", "avmoo.online", "avm

reverse_dns:
  avmoo.shop,btsow.space,btsow.live,btsow.lol,avmoo.website,btsow.pics,btsow.monster,btsow.yachts,btsow.motorcycles,btsow.homes


indicator: 159.253.120.37
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-27T12:19:48.764238
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "ASNone ", "indicator": "159.253.120.37", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 19, "malware_samples": [], "passive_dns": ["naptolluckydraw.com.lycamobile-lotterywinner.com", "naptolluckydraw.com", "www.naptolluckydraw.com.lycamobile-lotterywinner.com", "lycamobile-lotterywinner.com", "agriculturefertilizerdealership.in.lycamobile-lotterywinner.com", "www.a

reverse_dns:
  naptolluckydraw.com.lycamobile-lotterywinner.com,naptolluckydraw.com,www.naptolluckydraw.com.lycamobile-lotterywinner.com,lycamobile-lotterywinner.com,agriculturefertilizerdealership.in.lycamobile-lotterywinner.com,www.agriculturefertilizerdealership.in.lycamobile-lotterywinner.com,agriculturefertilizerdealership.in,seasonoflove.live,seasonoflove.live.lycamobile-lotterywinner.com,www.seasonoflove.live.lycamobile-lotterywinner.com


indicator: 159.253.120.49
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-27T12:19:50.852646
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "ASNone ", "indicator": "159.253.120.49", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 26, "malware_samples": [], "passive_dns": ["www.muzsgb.ru", "x-minus0vka.ru", "www.x-minus0vka.ru", "i-docx.ru", "radio-fan.ru", "www.lotto-smart.ru", "victoriadaineko.ru", "www.victoriadaineko.ru", "justinvite38.ru", "www.justinvite38.ru", "bonadeaclub.ru", "www.energydr.ru", "

reverse_dns:
  www.muzsgb.ru,x-minus0vka.ru,www.x-minus0vka.ru,i-docx.ru,radio-fan.ru,www.lotto-smart.ru,victoriadaineko.ru,www.victoriadaineko.ru,justinvite38.ru,www.justinvite38.ru


indicator: 159.253.120.73
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-05-27T12:19:53.284708
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "ASNone ", "indicator": "159.253.120.73", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 7, "malware_samples": [], "passive_dns": ["mudlesfich.my", "wedingorangfacturetion.my", "startrefacturation.my", "abcorang-5fbd.com", "resendfacturattion.art", "www.pronetwebserver.com", "pronetwebserver.com"]}

reverse_dns:
  mudlesfich.my,wedingorangfacturetion.my,startrefacturation.my,abcorang-5fbd.com,resendfacturattion.art,www.pronetwebserver.com,pronetwebserver.com


indicator: 159.253.120.92
indicator_type: ipv4
source: otx
country: RU
reverse_dns: yemekalemi.com
queried_at: 2026-05-27T12:19:56.768487
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "ASNone ", "indicator": "159.253.120.92", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["yemekalemi.com"]}


indicator: 159.253.120.93
indicator_type: ipv4
source: otx
country: RU
reverse_dns: finpuls.online,beautiful-williams.159-253-120-93.plesk.page
queried_at: 2026-05-27T12:20:11.273336
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "ASNone ", "indicator": "159.253.120.93", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["finpuls.online", "beautiful-williams.159-253-120-93.plesk.page"]}


indicator: 176.116.0.192
indicator_type: ipv4
source: otx
country: TR
city: Istanbul
queried_at: 2026-05-27T12:20:16.095565
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "T\u00fcrkiye", "country_code": "TR", "city": "Istanbul", "asn": "AS48108 sole trader malkov dmitrii vladimirovich", "indicator": "176.116.0.192", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 176.116.0.223
indicator_type: ipv4
source: otx
country: TR
city: Istanbul
queried_at: 2026-05-27T12:20:23.292670
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "T\u00fcrkiye", "country_code": "TR", "city": "Istanbul", "asn": "AS48108 sole trader malkov dmitrii vladimirovich", "indicator": "176.116.0.223", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 176.116.0.245
indicator_type: ipv4
source: otx
country: TR
city: Istanbul
queried_at: 2026-05-27T12:20:25.465563
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "T\u00fcrkiye", "country_code": "TR", "city": "Istanbul", "asn": "AS48108 sole trader malkov dmitrii vladimirovich", "indicator": "176.116.0.245", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 176.116.0.41
indicator_type: ipv4
source: otx
country: TR
city: Istanbul
queried_at: 2026-05-27T12:20:28.212236
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "T\u00fcrkiye", "country_code": "TR", "city": "Istanbul", "asn": "AS48108 sole trader malkov dmitrii vladimirovich", "indicator": "176.116.0.41", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 176.116.0.55
indicator_type: ipv4
source: otx
country: TR
city: Istanbul
queried_at: 2026-05-27T12:20:31.099462
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "T\u00fcrkiye", "country_code": "TR", "city": "Istanbul", "asn": "AS48108 sole trader malkov dmitrii vladimirovich", "indicator": "176.116.0.55", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 176.116.0.6
indicator_type: ipv4
source: otx
country: TR
city: Istanbul
queried_at: 2026-05-27T12:20:33.368688
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "T\u00fcrkiye", "country_code": "TR", "city": "Istanbul", "asn": "AS48108 sole trader malkov dmitrii vladimirovich", "indicator": "176.116.0.6", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 176.123.10.110
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
hosting_provider: webscan,bruteforce,auto-generated security,badrequest,probing,webscanner
queried_at: 2026-05-27T12:20:36.095591
raw_data:
  {"pulse_count": 38, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.10.110", "tags": ["webscan", "bruteforce", "auto-generated security", "badrequest", "probing", "webscanner"], "pulses": ["Webscanners with Bad Requests - HTTP Status 400 - 1/20/2018 thru current day", "jan2,2025 clone Auto-generated Pulse CREATED 1 YEAR AGO MODIFIED 1 YEAR AGO by AlessandroFiori", "jan2.2025clone-Auto-generated Pu


indicator: 176.123.10.114
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
queried_at: 2026-05-27T12:20:39.199908
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.10.114", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 8, "malware_samples": [], "passive_dns": ["176-123-10-114.forexcracked.com", "motv.top", "panel.motv.top", "panel2.motv.top", "theactualpanel.motv.top", "thewebpanel.motv.top", "www.motvtool.cloud", "motvtool.cloud"]}

reverse_dns:
  176-123-10-114.forexcracked.com,motv.top,panel.motv.top,panel2.motv.top,theactualpanel.motv.top,thewebpanel.motv.top,www.motvtool.cloud,motvtool.cloud


indicator: 176.123.10.120
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: vaishyavivaah.com
queried_at: 2026-05-27T12:20:42.017832
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.10.120", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["vaishyavivaah.com"]}


indicator: 176.123.10.158
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: alex.elter.live
hosting_provider: demonbot,sbidiot,patch,dgfa,urlhaus,fuze,ovh bypass,’m,first,developer
queried_at: 2026-05-27T12:20:44.626447
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.10.158", "tags": ["demonbot", "sbidiot", "patch", "dgfa", "urlhaus", "fuze", "ovh bypass", "\u2019m", "first", "developer", "diseases", "revenge", "ddos", "c server", "sbidiot iot", "blog", "personal", "overview author", "hydra", "arcade"], "pulses": ["SBIDIOT IoT Malware: miner edition \u00b7 Brian Stadnicki"], "malware_count": 0,


indicator: 176.123.10.210
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: www.orlovpro.ru,infovol.ga,inversiapro.ru,zaborlux63.ru,www.tlt-models.ru,tlt-models.ru,orlovpro.ru
queried_at: 2026-05-27T12:20:47.504155
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.10.210", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 7, "malware_samples": [], "passive_dns": ["www.orlovpro.ru", "infovol.ga", "inversiapro.ru", "zaborlux63.ru", "www.tlt-models.ru", "tlt-models.ru", "orlovpro.ru"]}


indicator: 176.123.10.216
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: cardshare.zonies.xyz
queried_at: 2026-05-27T12:20:54.392338
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.10.216", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["cardshare.zonies.xyz"]}


indicator: 176.123.10.5
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
queried_at: 2026-05-27T12:21:02.339864
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.10.5", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 10, "malware_samples": [], "passive_dns": ["33hf0ghc.176-123-10-5.cprapid.com", "wn8xtgc5093-rbg.176-123-10-5.cprapid.com", "myserveris.top", "www.fmovies.bid", "www.movietv4u.com", "movietv4u.com", "www.server.myserveris.top", "server.myserveris.top", "176-1

reverse_dns:
  33hf0ghc.176-123-10-5.cprapid.com,wn8xtgc5093-rbg.176-123-10-5.cprapid.com,myserveris.top,www.fmovies.bid,www.movietv4u.com,movietv4u.com,www.server.myserveris.top,server.myserveris.top,176-123-10-5.cprapid.com,www.176-123-10-5.cprapid.com


indicator: 176.123.10.56
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
hosting_provider: VPN,webscan,bruteforce,badrequest,probing,webscanner,TOR
queried_at: 2026-05-27T12:21:06.566773
raw_data:
  {"pulse_count": 15, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.10.56", "tags": ["VPN", "webscan", "bruteforce", "badrequest", "probing", "webscanner", "TOR"], "pulses": ["test", "test", "test", "test", "test", "Ste", "Ste", "Ste", "20220127clone", "20220127clone", "20220127clone", "20220127clone", "0", "0", "test"], "malware_count": 0, "passive_dns_count": 30, "malware_samples": [], "passive_

reverse_dns:
  33streaminggratuit.fr,cpasflix.fr,ma-pergola.eu,www.ma-pergola.eu,blablastream.dev,www.voyage-en-famille.com,veterinaire-dillies.com,www.veterinaire-dillies.com,www.guillet-leveau.com,guillet-leveau.com


indicator: 176.123.10.61
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
queried_at: 2026-05-27T12:21:08.877425
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.10.61", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 7, "malware_samples": [], "passive_dns": ["fl5.flvto.biz", "fl11.flvto.biz", "fl12.flvto.biz", "fl14.flvto.biz", "fl13.flvto.biz", "fl15.flvto.biz", "succinylsrulfathiazole.com"]}

reverse_dns:
  fl5.flvto.biz,fl11.flvto.biz,fl12.flvto.biz,fl14.flvto.biz,fl13.flvto.biz,fl15.flvto.biz,succinylsrulfathiazole.com


indicator: 176.123.10.85
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
queried_at: 2026-05-27T12:21:14.825257
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.10.85", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 23, "malware_samples": [], "passive_dns": ["aevoldbirtimp.com", "styltendtrpe.com", "1.ru-massa.vip", "1.rumassa.org", "1.rumassa.net", "www.rumassa.com", "rumassa.com", "1.rumassa.com", "ru-massa.vip", "1.ru-massa.mobi", "www.ru-massa.mobi", "ru-massa.mobi"

reverse_dns:
  aevoldbirtimp.com,styltendtrpe.com,1.ru-massa.vip,1.rumassa.org,1.rumassa.net,www.rumassa.com,rumassa.com,1.rumassa.com,ru-massa.vip,1.ru-massa.mobi


indicator: 176.123.10.96
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
queried_at: 2026-05-27T12:21:17.135973
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.10.96", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 21, "malware_samples": [], "passive_dns": ["mbkayan.com", "zrivathzligrsnizler.xyz", "zrivathzlistenniz.xyz", "zrivathzllisvunbgrsniz.xyz", "zrivathznllisvunbgrsnlerniz.xyz", "selcuksports142.buzz", "hzlinizgrislerbruda.shop", "mbkayaniz.shop", "fibalcinakli

reverse_dns:
  mbkayan.com,zrivathzligrsnizler.xyz,zrivathzlistenniz.xyz,zrivathzllisvunbgrsniz.xyz,zrivathznllisvunbgrsnlerniz.xyz,selcuksports142.buzz,hzlinizgrislerbruda.shop,mbkayaniz.shop,fibalcinakliyat.shop,gungorlernakliyat.xyz


indicator: 176.123.11.103
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: flirtcourt.info,splashyfrolic.info,passion-seeds.live
queried_at: 2026-05-27T12:21:19.434050
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.11.103", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["flirtcourt.info", "splashyfrolic.info", "passion-seeds.live"]}


indicator: 176.123.11.105
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: drenchedexcitement.info,upskirtview.live
queried_at: 2026-05-27T12:21:21.852372
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.11.105", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["drenchedexcitement.info", "upskirtview.live"]}


indicator: 176.123.11.11
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: date-ibook.info,mistressfind.live,clubs-honey.live,nymphomanin-lutschen.com
queried_at: 2026-05-27T12:21:24.967907
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.11.11", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 4, "malware_samples": [], "passive_dns": ["date-ibook.info", "mistressfind.live", "clubs-honey.live", "nymphomanin-lutschen.com"]}


indicator: 176.123.11.115
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: rare-mistfit.life,matchingcore.info,candycamera.live
queried_at: 2026-05-27T12:21:27.308551
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.11.115", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["rare-mistfit.life", "matchingcore.info", "candycamera.live"]}


indicator: 176.123.11.117
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: joydatesite.live,datingbars.live,infodating.live,go-go-girls.live
queried_at: 2026-05-27T12:21:29.406040
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.11.117", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 4, "malware_samples": [], "passive_dns": ["joydatesite.live", "datingbars.live", "infodating.live", "go-go-girls.live"]}


indicator: 176.123.11.127
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: dateherecloud.life,socialhook.live,datemarket.art,wings-of-amour.com
queried_at: 2026-05-27T12:21:31.798547
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.11.127", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 4, "malware_samples": [], "passive_dns": ["dateherecloud.life", "socialhook.live", "datemarket.art", "wings-of-amour.com"]}


indicator: 176.123.11.13
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: girl-glue.info,checkyour-mate.com
queried_at: 2026-05-27T12:21:34.051518
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.11.13", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["girl-glue.info", "checkyour-mate.com"]}


indicator: 176.123.11.130
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: headsuper.live,sabrosoescote.info,fairladies.cloud,loveforlive.eu
queried_at: 2026-05-27T12:21:36.432609
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.11.130", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 4, "malware_samples": [], "passive_dns": ["headsuper.live", "sabrosoescote.info", "fairladies.cloud", "loveforlive.eu"]}


indicator: 176.123.11.133
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: cougar-hungry.info,postgarden.life,excuse-co.eu
queried_at: 2026-05-27T12:21:39.087984
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.11.133", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["cougar-hungry.info", "postgarden.life", "excuse-co.eu"]}


indicator: 176.123.11.134
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
queried_at: 2026-05-27T12:21:43.117298
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.11.134", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 6, "malware_samples": [], "passive_dns": ["near-bygirls.info", "loveflu.eu", "fileamore.live", "gentlebabes.live", "datingmsgcentre.live", "evening-datesite.eu"]}

reverse_dns:
  near-bygirls.info,loveflu.eu,fileamore.live,gentlebabes.live,datingmsgcentre.live,evening-datesite.eu


indicator: 176.123.11.142
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: lime-breed.live,camholes.live,kitty-meet.live,privatesender.live
queried_at: 2026-05-27T12:21:45.256750
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.11.142", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 4, "malware_samples": [], "passive_dns": ["lime-breed.live", "camholes.live", "kitty-meet.live", "privatesender.live"]}


indicator: 176.123.11.152
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: ladygoo.live,finelovers.life,tastyboobs.live,hotpost-foryou.eu
queried_at: 2026-05-27T12:21:48.074037
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.11.152", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 4, "malware_samples": [], "passive_dns": ["ladygoo.live", "finelovers.life", "tastyboobs.live", "hotpost-foryou.eu"]}


indicator: 176.123.11.164
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: do-cums.info,dudengirls.info,hotmatchlog.live,indi-locators.info,sms-timeshop.eu
queried_at: 2026-05-27T12:21:50.618141
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.11.164", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 5, "malware_samples": [], "passive_dns": ["do-cums.info", "dudengirls.info", "hotmatchlog.live", "indi-locators.info", "sms-timeshop.eu"]}


indicator: 176.123.11.165
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
queried_at: 2026-05-27T12:22:07.591210
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.11.165", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 176.123.11.169
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: questor-rooms.life,camsforlove.eu,foobardate.com,everwitches.com
queried_at: 2026-05-27T12:22:10.025496
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.11.169", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 4, "malware_samples": [], "passive_dns": ["questor-rooms.life", "camsforlove.eu", "foobardate.com", "everwitches.com"]}


indicator: 176.123.11.171
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: mailtaxer.live,online-pleasures.com
queried_at: 2026-05-27T12:22:12.417648
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.11.171", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["mailtaxer.live", "online-pleasures.com"]}


indicator: 176.123.11.172
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: datecloud.live,mygoodmatch.live,matchpass.art,changeyourpartner.eu
queried_at: 2026-05-27T12:22:17.157492
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.11.172", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 4, "malware_samples": [], "passive_dns": ["datecloud.live", "mygoodmatch.live", "matchpass.art", "changeyourpartner.eu"]}


indicator: 176.123.11.175
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: cemail-posts.live,flirtprivateer.live,realbulkdate.live,flirtymail.live
queried_at: 2026-05-27T12:22:19.237093
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.11.175", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 4, "malware_samples": [], "passive_dns": ["cemail-posts.live", "flirtprivateer.live", "realbulkdate.live", "flirtymail.live"]}


indicator: 176.123.11.179
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: clock4u.life,strip-mask.com,hot-topgirls.live
queried_at: 2026-05-27T12:22:21.862108
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.11.179", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["clock4u.life", "strip-mask.com", "hot-topgirls.live"]}


indicator: 176.123.11.184
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: antarcticus.live
queried_at: 2026-05-27T12:22:23.909224
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.11.184", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["antarcticus.live"]}


indicator: 176.123.11.194
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: superbus.info,horny-near.life,eromirror.com,atlantic-girls.live,dating-library.live
queried_at: 2026-05-27T12:22:25.979626
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.11.194", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 5, "malware_samples": [], "passive_dns": ["superbus.info", "horny-near.life", "eromirror.com", "atlantic-girls.live", "dating-library.live"]}


indicator: 176.123.11.196
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: carinatus.live,rainyantics.info,sexualcurrency.live,atlanticladies.live
queried_at: 2026-05-27T12:22:29.139885
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.11.196", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 4, "malware_samples": [], "passive_dns": ["carinatus.live", "rainyantics.info", "sexualcurrency.live", "atlanticladies.live"]}


indicator: 176.123.11.203
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: miniflirtin.life,noreplyclue.eu,mini-dolly.live
queried_at: 2026-05-27T12:22:31.456441
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.11.203", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["miniflirtin.life", "noreplyclue.eu", "mini-dolly.live"]}


indicator: 176.123.11.205
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
queried_at: 2026-05-27T12:22:48.312928
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.11.205", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 176.123.11.208
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
queried_at: 2026-05-27T12:22:50.506457
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.11.208", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 6, "malware_samples": [], "passive_dns": ["psammophis.live", "pretty-girlscloud.info", "organic-closeness.live", "pilotamour.live", "fraujunge.com", "swingerpoint.live"]}

reverse_dns:
  psammophis.live,pretty-girlscloud.info,organic-closeness.live,pilotamour.live,fraujunge.com,swingerpoint.live


indicator: 176.123.11.210
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
queried_at: 2026-05-27T12:23:07.368905
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.11.210", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 176.123.11.212
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
queried_at: 2026-05-27T12:23:24.220721
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.11.212", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 176.123.11.216
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: cryptophis.live,pleisure-meet.eu,cuteasses.live,hookup-club.live
queried_at: 2026-05-27T12:23:27.807323
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.11.216", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 4, "malware_samples": [], "passive_dns": ["cryptophis.live", "pleisure-meet.eu", "cuteasses.live", "hookup-club.live"]}


indicator: 176.123.11.222
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: feelrealyou.live,xtra-madchen.com,seculine.live,amateurmate.live,ladyfordaddy.live
queried_at: 2026-05-27T12:23:30.415334
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.11.222", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 5, "malware_samples": [], "passive_dns": ["feelrealyou.live", "xtra-madchen.com", "seculine.live", "amateurmate.live", "ladyfordaddy.live"]}


indicator: 176.123.11.23
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: giga-nights.life,4somedate.info,match-youth.live
queried_at: 2026-05-27T12:23:34.514807
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.11.23", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["giga-nights.life", "4somedate.info", "match-youth.live"]}


indicator: 176.123.11.233
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
queried_at: 2026-05-27T12:23:51.404117
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.11.233", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 176.123.11.238
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
queried_at: 2026-05-27T12:24:08.240246
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.11.238", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 176.123.11.239
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
queried_at: 2026-05-27T12:24:25.273422
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.11.239", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 176.123.11.243
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: rollonfire.life,predolls.live,pickup-a-lady.ltd
queried_at: 2026-05-27T12:24:27.623659
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.11.243", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["rollonfire.life", "predolls.live", "pickup-a-lady.ltd"]}


indicator: 176.123.11.245
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: olivaceus.info,bestofme.life,quickermatch.eu,imyour-match.live,makeme-hot.live
queried_at: 2026-05-27T12:24:30.308674
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.11.245", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 5, "malware_samples": [], "passive_dns": ["olivaceus.info", "bestofme.life", "quickermatch.eu", "imyour-match.live", "makeme-hot.live"]}


indicator: 176.123.11.248
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
queried_at: 2026-05-27T12:24:32.721085
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.11.248", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 7, "malware_samples": [], "passive_dns": ["signata.info", "badgirls-passion.life", "amourstools.info", "lightprodate.info", "cougarscope.live", "discountbutts.live", "individuals-4u.eu"]}

reverse_dns:
  signata.info,badgirls-passion.life,amourstools.info,lightprodate.info,cougarscope.live,discountbutts.live,individuals-4u.eu


indicator: 176.123.11.249
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: hotter-thanever.info,sinful-nuts.info,heart-beats.live
queried_at: 2026-05-27T12:24:34.810415
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.11.249", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["hotter-thanever.info", "sinful-nuts.info", "heart-beats.live"]}


indicator: 176.123.11.31
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: thumbdeals.live,fordatesite.info,welove-date.live,pinup-girls.info
queried_at: 2026-05-27T12:24:36.927254
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.11.31", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 4, "malware_samples": [], "passive_dns": ["thumbdeals.live", "fordatesite.info", "welove-date.live", "pinup-girls.info"]}


indicator: 176.123.11.4
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: strongattract.live,girlfriendchick.live,sensationpoint.live,povcam-version.live
queried_at: 2026-05-27T12:24:39.043137
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.11.4", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 4, "malware_samples": [], "passive_dns": ["strongattract.live", "girlfriendchick.live", "sensationpoint.live", "povcam-version.live"]}


indicator: 176.123.11.40
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: easyday-girls.eu
queried_at: 2026-05-27T12:24:41.112528
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.11.40", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["easyday-girls.eu"]}


indicator: 176.123.11.47
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: bothropsidus.life,flirtflow.live,realitydolls.live
queried_at: 2026-05-27T12:24:43.870725
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.11.47", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["bothropsidus.life", "flirtflow.live", "realitydolls.live"]}


indicator: 176.123.11.51
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: maidate.live,flirtolover.live,vector-tests.info
queried_at: 2026-05-27T12:24:46.060542
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.11.51", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["maidate.live", "flirtolover.live", "vector-tests.info"]}


indicator: 176.123.11.53
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: crotalus.life,great-mateplace.live,datingart.life,darling-night.live
queried_at: 2026-05-27T12:24:51.594895
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.11.53", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 4, "malware_samples": [], "passive_dns": ["crotalus.life", "great-mateplace.live", "datingart.life", "darling-night.live"]}


indicator: 176.123.11.70
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: rencontre-time.live,pervertpoints.live,find-your-harlot.live,crazy-webchats.eu
queried_at: 2026-05-27T12:24:59.050854
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.11.70", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 4, "malware_samples": [], "passive_dns": ["rencontre-time.live", "pervertpoints.live", "find-your-harlot.live", "crazy-webchats.eu"]}


indicator: 176.123.11.73
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
queried_at: 2026-05-27T12:25:15.940720
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.11.73", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 176.123.11.79
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: payfor-kissing.life,lively-experience.live,komplimentary.com
queried_at: 2026-05-27T12:25:19.909197
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.11.79", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["payfor-kissing.life", "lively-experience.live", "komplimentary.com"]}


indicator: 176.123.11.81
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: goodholesite.live,caty-body.com,sweatmeta.art,horny-newsletter.com
queried_at: 2026-05-27T12:25:22.680641
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.11.81", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 4, "malware_samples": [], "passive_dns": ["goodholesite.live", "caty-body.com", "sweatmeta.art", "horny-newsletter.com"]}


indicator: 176.123.11.85
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
queried_at: 2026-05-27T12:25:39.584117
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.11.85", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 176.123.11.96
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
queried_at: 2026-05-27T12:25:42.443202
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.11.96", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 6, "malware_samples": [], "passive_dns": ["heterodonter.live", "nightedit.life", "locatethe-mate.info", "lady-fiend.live", "lovebarbredy.live", "night-dates.eu"]}

reverse_dns:
  heterodonter.live,nightedit.life,locatethe-mate.info,lady-fiend.live,lovebarbredy.live,night-dates.eu


indicator: 176.123.11.98
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: nice-meetings.live,crushrules.live,singles-onlinechats.live
queried_at: 2026-05-27T12:25:51.366513
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.11.98", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["nice-meetings.live", "crushrules.live", "singles-onlinechats.live"]}


indicator: 176.123.5.106
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
hosting_provider: tpot19,honeypot,la-safe.org,tsec
queried_at: 2026-05-27T12:26:07.104727
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.5.106", "tags": ["tpot19", "honeypot", "la-safe.org", "tsec"], "pulses": ["LCIA:HoneyNet:2022", "LCIA:HoneyNet:June 2022"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 176.123.5.11
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
hosting_provider: tpot19,honeypot,la-safe.org,tsec
queried_at: 2026-05-27T12:26:17.944100
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.5.11", "tags": ["tpot19", "honeypot", "la-safe.org", "tsec"], "pulses": ["LCIA:HoneyNet:2022", "LCIA:HoneyNet:June 2022"], "malware_count": 0, "passive_dns_count": 7, "malware_samples": [], "passive_dns": ["okjchain.net", "monsieur-croque.com", "univers-mario.com", "t.vgk94.top", "smtracking.writingassistance.com", "smtracking.writ

reverse_dns:
  okjchain.net,monsieur-croque.com,univers-mario.com,t.vgk94.top,smtracking.writingassistance.com,smtracking.writingassist.swp23.com,vgk94.top


indicator: 176.123.5.121
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: tlhg.club,dl.tlhg.club,u.tlhg.club
hosting_provider: tpot19,honeypot,la-safe.org,tsec
queried_at: 2026-05-27T12:26:28.486255
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.5.121", "tags": ["tpot19", "honeypot", "la-safe.org", "tsec"], "pulses": ["LCIA:HoneyNet:2022", "LCIA:HoneyNet:June 2022"], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["tlhg.club", "dl.tlhg.club", "u.tlhg.club"]}


indicator: 176.123.5.137
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
hosting_provider: tpot19,honeypot,la-safe.org,tsec
queried_at: 2026-05-27T12:26:30.822083
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.5.137", "tags": ["tpot19", "honeypot", "la-safe.org", "tsec"], "pulses": ["LCIA:HoneyNet:2022", "LCIA:HoneyNet:June 2022"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 176.123.5.139
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
hosting_provider: tpot19,honeypot,la-safe.org,tsec
queried_at: 2026-05-27T12:26:32.979272
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.5.139", "tags": ["tpot19", "honeypot", "la-safe.org", "tsec"], "pulses": ["LCIA:HoneyNet:2022", "LCIA:HoneyNet:June 2022"], "malware_count": 0, "passive_dns_count": 33, "malware_samples": [], "passive_dns": ["paypalamericanpro.pro", "i-law.agency", "uspaypalbot.pro", "usmetabot.pro", "paypalbotus.pro", "metabotus.pro", "getearntoda

reverse_dns:
  paypalamericanpro.pro,i-law.agency,uspaypalbot.pro,usmetabot.pro,paypalbotus.pro,metabotus.pro,getearntoday.info,metamastermind.pro,mastercashnow.network,limitedcashflow.network


indicator: 176.123.5.142
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: supervpn.website,www.devme.ro,devme.ro,vm.devme.ro,q4news.devme.ro
hosting_provider: tpot19,honeypot,la-safe.org,tsec
queried_at: 2026-05-27T12:26:35.405200
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.5.142", "tags": ["tpot19", "honeypot", "la-safe.org", "tsec"], "pulses": ["LCIA:HoneyNet:2022", "LCIA:HoneyNet:June 2022"], "malware_count": 0, "passive_dns_count": 5, "malware_samples": [], "passive_dns": ["supervpn.website", "www.devme.ro", "devme.ro", "vm.devme.ro", "q4news.devme.ro"]}


indicator: 176.123.5.144
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
hosting_provider: tpot19,honeypot,la-safe.org,tsec
queried_at: 2026-05-27T12:26:37.848655
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.5.144", "tags": ["tpot19", "honeypot", "la-safe.org", "tsec"], "pulses": ["LCIA:HoneyNet:2022", "LCIA:HoneyNet:June 2022"], "malware_count": 0, "passive_dns_count": 7, "malware_samples": [], "passive_dns": ["www.buyivermectin6mgonline.com", "buyivermectin6mgonline.com", "pharmacyemailinquiry.com", "curetypes.com", "imvucreditsgener

reverse_dns:
  www.buyivermectin6mgonline.com,buyivermectin6mgonline.com,pharmacyemailinquiry.com,curetypes.com,imvucreditsgenerator.com,ssocodes.com,www.ssocodes.com


indicator: 176.123.5.150
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: ns1.cupparadise.net
hosting_provider: tpot19,honeypot,VPN,la-safe.org,tsec,TOR
queried_at: 2026-05-27T12:26:40.373037
raw_data:
  {"pulse_count": 7, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.5.150", "tags": ["tpot19", "honeypot", "VPN", "la-safe.org", "tsec", "TOR"], "pulses": ["LCIA:HoneyNet:2022", "test", "test", "test", "test", "test", "LCIA:HoneyNet:June 2022"], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["ns1.cupparadise.net"]}


indicator: 176.123.5.169
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
hosting_provider: tpot19,honeypot,la-safe.org,tsec
queried_at: 2026-05-27T12:26:44.874920
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.5.169", "tags": ["tpot19", "honeypot", "la-safe.org", "tsec"], "pulses": ["LCIA:HoneyNet:2022", "LCIA:HoneyNet:June 2022"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 176.123.5.171
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
hosting_provider: tpot19,honeypot,la-safe.org,tsec
queried_at: 2026-05-27T12:26:47.288991
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.5.171", "tags": ["tpot19", "honeypot", "la-safe.org", "tsec"], "pulses": ["LCIA:HoneyNet:2022", "LCIA:HoneyNet:June 2022"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 176.123.5.178
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: blogglobal.xyz
hosting_provider: tpot19,honeypot,la-safe.org,tsec
queried_at: 2026-05-27T12:26:49.551626
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.5.178", "tags": ["tpot19", "honeypot", "la-safe.org", "tsec"], "pulses": ["LCIA:HoneyNet:2022", "LCIA:HoneyNet:June 2022"], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["blogglobal.xyz"]}


indicator: 176.123.5.182
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
hosting_provider: tpot19,honeypot,la-safe.org,tsec
queried_at: 2026-05-27T12:26:53.031135
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.5.182", "tags": ["tpot19", "honeypot", "la-safe.org", "tsec"], "pulses": ["LCIA:HoneyNet:2022", "LCIA:HoneyNet:June 2022"], "malware_count": 0, "passive_dns_count": 31, "malware_samples": [], "passive_dns": ["www.clashslots.com", "unreal-battles.net", "www.unreal-battles.net", "topup4all.com", "www.topup4all.com", "www.shoothappier

reverse_dns:
  www.clashslots.com,unreal-battles.net,www.unreal-battles.net,topup4all.com,www.topup4all.com,www.shoothappier.com,shoothappier.com,standwiththeasa.org,www.standwiththeasa.org,www.mobile-nova.com


indicator: 176.123.5.191
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: thunderdrainer.is
hosting_provider: tpot19,honeypot,la-safe.org,tsec
queried_at: 2026-05-27T12:26:56.009295
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.5.191", "tags": ["tpot19", "honeypot", "la-safe.org", "tsec"], "pulses": ["LCIA:HoneyNet:2022", "LCIA:HoneyNet:June 2022"], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["thunderdrainer.is"]}


indicator: 176.123.5.194
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
hosting_provider: tpot19,honeypot,la-safe.org,tsec
queried_at: 2026-05-27T12:26:58.099195
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.5.194", "tags": ["tpot19", "honeypot", "la-safe.org", "tsec"], "pulses": ["LCIA:HoneyNet:2022", "LCIA:HoneyNet:June 2022"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 176.123.5.208
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
hosting_provider: tpot19,honeypot,la-safe.org,tsec
queried_at: 2026-05-27T12:27:00.554951
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.5.208", "tags": ["tpot19", "honeypot", "la-safe.org", "tsec"], "pulses": ["LCIA:HoneyNet:2022", "LCIA:HoneyNet:June 2022"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 176.123.5.218
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: nonton-movie21.com,www.nonton-movie21.com
hosting_provider: tpot19,honeypot,la-safe.org,tsec
queried_at: 2026-05-27T12:27:03.012912
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.5.218", "tags": ["tpot19", "honeypot", "la-safe.org", "tsec"], "pulses": ["LCIA:HoneyNet:2022", "LCIA:HoneyNet:June 2022"], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["nonton-movie21.com", "www.nonton-movie21.com"]}


indicator: 176.123.5.23
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
queried_at: 2026-05-27T12:27:06.208221
raw_data:
  {"pulse_count": 15, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.5.23", "tags": ["tpot19", "honeypot", "VPN", "webscan", "la-safe.org", "tsec", "webscanner, bruteforce, web app attack", "probing", "scanning", "TOR"], "pulses": ["web2", "LCIA:HoneyNet:2022", "test", "test", "test", "test", "test", "LCIA:HoneyNet:June 2022", "ossim", "ossim", "Ellelevlen", "Ellelevlen", "Ellelevlen", "Ellelevlen"

reverse_dns:
  electriccancel.com,whmcs.work,whmcs.pub,whmcs.run,license.pub,license.cool,mail.magispower.work,dreammarkettor.info,darkwebdrugs.online,empiremarket.link

hosting_provider:
  tpot19,honeypot,VPN,webscan,la-safe.org,tsec,webscanner, bruteforce, web app attack,probing,scanning,TOR


indicator: 176.123.5.232
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: mo.xhxhw.cf,ro.tinyfish.pp.ua,rd.xhxhw.cf
hosting_provider: tpot19,honeypot,la-safe.org,tsec
queried_at: 2026-05-27T12:27:13.863840
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.5.232", "tags": ["tpot19", "honeypot", "la-safe.org", "tsec"], "pulses": ["LCIA:HoneyNet:2022", "LCIA:HoneyNet:June 2022"], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["mo.xhxhw.cf", "ro.tinyfish.pp.ua", "rd.xhxhw.cf"]}


indicator: 176.123.5.242
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
hosting_provider: tpot19,honeypot,la-safe.org,tsec
queried_at: 2026-05-27T12:27:16.189160
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.5.242", "tags": ["tpot19", "honeypot", "la-safe.org", "tsec"], "pulses": ["LCIA:HoneyNet:2022", "LCIA:HoneyNet:June 2022"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 176.123.5.35
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: blueprintingtools.com
hosting_provider: tpot19,honeypot,la-safe.org,tsec
queried_at: 2026-05-27T12:27:18.604473
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.5.35", "tags": ["tpot19", "honeypot", "la-safe.org", "tsec"], "pulses": ["LCIA:HoneyNet:2022", "LCIA:HoneyNet:June 2022"], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["blueprintingtools.com"]}


indicator: 176.123.5.64
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
hosting_provider: tpot19,honeypot,la-safe.org,tsec
queried_at: 2026-05-27T12:27:24.103905
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.5.64", "tags": ["tpot19", "honeypot", "la-safe.org", "tsec"], "pulses": ["LCIA:HoneyNet:2022", "LCIA:HoneyNet:June 2022"], "malware_count": 0, "passive_dns_count": 20, "malware_samples": [], "passive_dns": ["licenses.top", "whmcs.vip", "jumpservers.com", "ovhreseller.com", "icdecoder.com", "usdthosting.com", "hostnulled.com", "modu

reverse_dns:
  licenses.top,whmcs.vip,jumpservers.com,ovhreseller.com,icdecoder.com,usdthosting.com,hostnulled.com,modulesbase.com,phpdec.com,whmcscheap.com


indicator: 176.123.5.76
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
hosting_provider: tpot19,honeypot,la-safe.org,tsec
queried_at: 2026-05-27T12:27:26.161574
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.5.76", "tags": ["tpot19", "honeypot", "la-safe.org", "tsec"], "pulses": ["LCIA:HoneyNet:2022", "LCIA:HoneyNet:June 2022"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 176.123.5.82
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
hosting_provider: tpot19,honeypot,la-safe.org,tsec
queried_at: 2026-05-27T12:27:28.199873
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.5.82", "tags": ["tpot19", "honeypot", "la-safe.org", "tsec"], "pulses": ["LCIA:HoneyNet:2022", "LCIA:HoneyNet:June 2022"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 176.123.5.83
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
hosting_provider: tpot19,honeypot,la-safe.org,tsec
queried_at: 2026-05-27T12:27:30.386147
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.5.83", "tags": ["tpot19", "honeypot", "la-safe.org", "tsec"], "pulses": ["LCIA:HoneyNet:2022", "LCIA:HoneyNet:June 2022"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 176.123.5.86
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: cabin-size.net,www.cabin-size.net
hosting_provider: tpot19,honeypot,la-safe.org,tsec
queried_at: 2026-05-27T12:27:32.752710
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.5.86", "tags": ["tpot19", "honeypot", "la-safe.org", "tsec"], "pulses": ["LCIA:HoneyNet:2022", "LCIA:HoneyNet:June 2022"], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["cabin-size.net", "www.cabin-size.net"]}


indicator: 176.123.5.90
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: get-seo-solutions.com
hosting_provider: tpot19,honeypot,la-safe.org,tsec
queried_at: 2026-05-27T12:27:35.074224
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.5.90", "tags": ["tpot19", "honeypot", "la-safe.org", "tsec"], "pulses": ["LCIA:HoneyNet:2022", "LCIA:HoneyNet:June 2022"], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["get-seo-solutions.com"]}


indicator: 176.123.5.97
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
hosting_provider: tpot19,honeypot,la-safe.org,tsec
queried_at: 2026-05-27T12:27:37.104856
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.5.97", "tags": ["tpot19", "honeypot", "la-safe.org", "tsec"], "pulses": ["LCIA:HoneyNet:2022", "LCIA:HoneyNet:June 2022"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 176.123.6.109
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
queried_at: 2026-05-27T12:27:39.602264
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.6.109", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 10, "malware_samples": [], "passive_dns": ["camshowrecord.net", "0gomovies.rs", "0gomovies.it", "0gomovies.pm", "ww0.5gomovies.to", "www.0gomovies.tv", "0gomovies.tv", "mail.losbodyfat.work", "mail.hyperlocent.work", "william.hyperlocent.work"]}

reverse_dns:
  camshowrecord.net,0gomovies.rs,0gomovies.it,0gomovies.pm,ww0.5gomovies.to,www.0gomovies.tv,0gomovies.tv,mail.losbodyfat.work,mail.hyperlocent.work,william.hyperlocent.work


indicator: 176.123.6.112
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
queried_at: 2026-05-27T12:27:41.639606
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.6.112", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 176.123.6.113
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
queried_at: 2026-05-27T12:27:43.876453
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.6.113", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 176.123.6.121
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
queried_at: 2026-05-27T12:27:46.150337
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.6.121", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 9, "malware_samples": [], "passive_dns": ["176-123-6-121.cprapid.com", "vikingiptv-nu.com", "pureiptv-fr.com", "oceanifyseo.com", "edgetv-official.com", "oceanseos-sw.com", "vidgamezsource.cc", "maxyourrev.org", "simplemonths.com"]}

reverse_dns:
  176-123-6-121.cprapid.com,vikingiptv-nu.com,pureiptv-fr.com,oceanifyseo.com,edgetv-official.com,oceanseos-sw.com,vidgamezsource.cc,maxyourrev.org,simplemonths.com


indicator: 176.123.6.122
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
queried_at: 2026-05-27T12:27:48.293761
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.6.122", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 176.123.6.132
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
hosting_provider: alienvault,ek,sundown,exploit kit,Port Scan
queried_at: 2026-05-27T12:27:51.683500
raw_data:
  {"pulse_count": 12, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.6.132", "tags": ["alienvault", "ek", "sundown", "exploit kit", "Port Scan"], "pulses": ["AV Labs: Sundown Exploit Kit Indicators", "DDoS Targeting TCP/UDP DST PORT 25444", "ETIC Cybersecurity  2024-05-29  Port Scan", "ETIC Cybersecurity  2024-05-28  Port Scan", "2023 Port Scanners", "ETIC Cybersecurity  2024-05-27  Port Scan", "ET

reverse_dns:
  50c0ef0327f52c50.dyndns.dappnode.io,staging.gkhair.com,whoknowsshitheadforyoutoudrunkfuckyou.co.vu,averagetheskidfellow.co.vu,susoopa.co.vu,galabravosmon.com,ramno.ru


indicator: 176.123.6.135
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
hosting_provider: iocs,date,api export,ioc,compromise,threatfox,requests share,iocs data,malware,iocs request
queried_at: 2026-05-27T12:27:53.837385
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.6.135", "tags": ["iocs", "date", "api export", "ioc", "compromise", "threatfox", "requests share", "iocs data", "malware", "iocs request", "iocs ioc", "nexus", "indicator of compromise", "nexus browse", "database"], "pulses": ["Recent Android Based #Nexus #Android #Banking #Botnet in the market ."], "malware_count": 0, "passive_dns


indicator: 176.123.6.162
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: black-in.fun
queried_at: 2026-05-27T12:27:56.094050
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.6.162", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["black-in.fun"]}


indicator: 176.123.6.174
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: xgse006.cyou
queried_at: 2026-05-27T12:27:58.457440
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.6.174", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["xgse006.cyou"]}


indicator: 176.123.6.187
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: img.678dl.net,r18.678dl.net,678dl.net
queried_at: 2026-05-27T12:28:00.828839
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.6.187", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["img.678dl.net", "r18.678dl.net", "678dl.net"]}


indicator: 176.123.6.189
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
queried_at: 2026-05-27T12:28:03.580018
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.6.189", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 8, "malware_samples": [], "passive_dns": ["allint.icu", "m01.imgmaze.com", "imgmaze.com", "imgrock.net", "r01.imgrock.net", "imgrock.pw", "imgview.net", "imgview.pw"]}

reverse_dns:
  allint.icu,m01.imgmaze.com,imgmaze.com,imgrock.net,r01.imgrock.net,imgrock.pw,imgview.net,imgview.pw


indicator: 176.123.6.196
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
queried_at: 2026-05-27T12:28:06.307431
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.6.196", "tags": [], "pulses": ["C2 Servers & Virus Providers & Malware Hashes"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 176.123.6.20
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
hosting_provider: VPN,TOR
queried_at: 2026-05-27T12:28:08.638849
raw_data:
  {"pulse_count": 5, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.6.20", "tags": ["VPN", "TOR"], "pulses": ["test", "test", "test", "test", "test"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 176.123.6.215
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: c22bf971d7ef6fa5.dyndns.dappnode.io,www.tibolli.net,tibolli.net
hosting_provider: Port Scan
queried_at: 2026-05-27T12:28:11.486675
raw_data:
  {"pulse_count": 10, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.6.215", "tags": ["Port Scan"], "pulses": ["ETIC Cybersecurity  2024-05-30  Port Scan", "ETIC Cybersecurity  2024-05-29  Port Scan", "ETIC Cybersecurity  2024-05-28  Port Scan", "2023 Port Scanners", "ETIC Cybersecurity  2024-05-27  Port Scan", "ETIC Cybersecurity  2024-05-24  Port Scan", "ETIC Cybersecurity  2024-05-23  Port Scan"


indicator: 176.123.6.217
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: cdn.tibolli.com,edu.gkhair.com,1a-gewinn.info
queried_at: 2026-05-27T12:28:17.633132
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.6.217", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["cdn.tibolli.com", "edu.gkhair.com", "1a-gewinn.info"]}


indicator: 176.123.6.218
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: voice.vantibolli.com
queried_at: 2026-05-27T12:28:20.235308
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.6.218", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["voice.vantibolli.com"]}


indicator: 176.123.6.225
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
hosting_provider: iframe,malicious,communicating,presenoker,conduit,doj,fakealert,blacklist,dhs,spammer
queried_at: 2026-05-27T12:28:28.290090
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.6.225", "tags": ["iframe", "malicious", "communicating", "presenoker", "conduit", "doj", "fakealert", "blacklist", "dhs", "spammer", "cisco umbrella", "fraud services", "unsafe", "heur", "interpol", "swrort", "hacker", "startpage", "zbot", "tulach", "applicunwnt", "win64", "cia", "malicious site", "million", "phishing site", "clean

reverse_dns:
  uz.spendbitcoins.com,tr.spendbitcoins.com,vn.spendbitcoins.com,sk.spendbitcoins.com,zm.spendbitcoins.com,si.spendbitcoins.com,pk.spendbitcoins.com,mz.spendbitcoins.com,vc.spendbitcoins.com,ru.spendbitcoins.com


indicator: 176.123.6.230
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
queried_at: 2026-05-27T12:28:30.407079
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.6.230", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 176.123.6.233
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: sweetdating.fun
queried_at: 2026-05-27T12:28:33.963936
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.6.233", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["sweetdating.fun"]}


indicator: 176.123.6.235
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
queried_at: 2026-05-27T12:28:50.875733
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.6.235", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": []}


indicator: 176.123.6.24
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: nchosx.com,online4sales.xyz
queried_at: 2026-05-27T12:28:55.908247
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.6.24", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["nchosx.com", "online4sales.xyz"]}


indicator: 176.123.6.71
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
queried_at: 2026-05-27T12:29:00.266270
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.6.71", "tags": [], "pulses": [], "malware_count": 1, "passive_dns_count": 8, "malware_samples": ["fc7ee0a9cffabfd03e1b972bcbfd4504289482f86c83c391165ebe5253995ef9"], "passive_dns": ["neo3dmultimedia.com", "newstation.top", "statcom.top", "newhour.top", "eabby.top", "covina.gxonewatchx.work", "mail.gxonewatchx.work", "176.123.6.71"]

reverse_dns:
  neo3dmultimedia.com,newstation.top,statcom.top,newhour.top,eabby.top,covina.gxonewatchx.work,mail.gxonewatchx.work,176.123.6.71


indicator: 176.123.6.8
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: orderz.org
queried_at: 2026-05-27T12:29:02.409029
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.6.8", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["orderz.org"]}


indicator: 176.123.6.92
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: jako.tech
queried_at: 2026-05-27T12:29:04.504169
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.6.92", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["jako.tech"]}


indicator: 176.123.7.102
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
hosting_provider: present dec,accept,discovery att,cheat service,checkin,port,united states,msie,files,present sep
queried_at: 2026-05-27T12:29:11.116675
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.7.102", "tags": ["present dec", "accept", "discovery att", "cheat service", "checkin", "port", "united states", "msie", "files", "present sep", "germany unknown", "comments", "backdoor", "wow64", "intel", "dock", "france asn", "VPN", "present apr", "g2 c", "ip address", "china unknown", "america flag", "md5 add", "reverse dns", "d


indicator: 176.123.7.123
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: 80-one.com,pallievanpallie.info
queried_at: 2026-05-27T12:29:13.764415
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.7.123", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["80-one.com", "pallievanpallie.info"]}


indicator: 176.123.7.139
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: s1.xup.to
queried_at: 2026-05-27T12:29:16.101909
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.7.139", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["s1.xup.to"]}


indicator: 176.123.7.154
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
queried_at: 2026-05-27T12:29:21.448342
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.7.154", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 6, "malware_samples": [], "passive_dns": ["id-en.cc", "apple.login.id-en.cc", "abs-0.login.id-en.cc", "ads-api.login.id-en.cc", "play.login.id-en.cc", "api.id-en.cc"]}

reverse_dns:
  id-en.cc,apple.login.id-en.cc,abs-0.login.id-en.cc,ads-api.login.id-en.cc,play.login.id-en.cc,api.id-en.cc


indicator: 176.123.7.185
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: iso.selinux.club
queried_at: 2026-05-27T12:29:23.720271
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.7.185", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["iso.selinux.club"]}


indicator: 176.123.7.187
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
queried_at: 2026-05-27T12:29:26.712711
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.7.187", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 11, "malware_samples": [], "passive_dns": ["vavadadex.com", "mellstroywins.com", "sng.sportplus.live", "pl14.sportplus.live", "tr.sportplus.live", "en84.sportplus.live", "it47.sportplus.live", "en12.sportplus.live", "en54.sportplus.live", "it37.sportplus.liv

reverse_dns:
  vavadadex.com,mellstroywins.com,sng.sportplus.live,pl14.sportplus.live,tr.sportplus.live,en84.sportplus.live,it47.sportplus.live,en12.sportplus.live,en54.sportplus.live,it37.sportplus.live


indicator: 176.123.7.189
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: aubinahrensphoto.com
queried_at: 2026-05-27T12:29:39.643151
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.7.189", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["aubinahrensphoto.com"]}


indicator: 176.123.7.191
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: 176-123-7-191.cprapid.com,l23d882a.justinstalledpanel.com,carte-netflix.com
queried_at: 2026-05-27T12:29:41.995539
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.7.191", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["176-123-7-191.cprapid.com", "l23d882a.justinstalledpanel.com", "carte-netflix.com"]}


indicator: 176.123.7.192
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
queried_at: 2026-05-27T12:29:44.359884
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.7.192", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 35, "malware_samples": [], "passive_dns": ["audiokniga.com.ua", "siteknig.com", "kniga-online.org", "knigi-audio.info", "topreading.net", "topreading.ru", "vse-knigi.club", "audio-knigi.org", "baza-knig.info", "o-audiobook.club", "knigi-audio.net", "cdnpdf.c

reverse_dns:
  audiokniga.com.ua,siteknig.com,kniga-online.org,knigi-audio.info,topreading.net,topreading.ru,vse-knigi.club,audio-knigi.org,baza-knig.info,o-audiobook.club


indicator: 176.123.7.193
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: mellstroygit.com,nekocas.com,btc.bpw.sc,176.123.7.193
hosting_provider: honeypot,mailoney,fatt,sensor-tagged,tcp,mirai,cowrie,scan,dionaea,p0f
queried_at: 2026-05-27T12:29:46.590651
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.7.193", "tags": ["honeypot", "mailoney", "fatt", "sensor-tagged", "tcp", "mirai", "cowrie", "scan", "dionaea", "p0f", "tanner", "Malicious IP", "honeytrap", "tpot", "sentrypeer", "suricata", "botnet", "blacklist"], "pulses": ["Honeypot Data \u2013 T-Pot \u2013 Sydney, Australia \u2013 November 2025", "Scan port 8080 HTTP and proxy 


indicator: 176.123.7.196
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: keycold.com,hardposters.com,tipdoor.com,onlinecasinolook.com
queried_at: 2026-05-27T12:29:49.259669
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.7.196", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 4, "malware_samples": [], "passive_dns": ["keycold.com", "hardposters.com", "tipdoor.com", "onlinecasinolook.com"]}


indicator: 176.123.7.199
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
queried_at: 2026-05-27T12:29:51.301296
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.7.199", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 176.123.7.203
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
queried_at: 2026-05-27T12:29:53.366072
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.7.203", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 10, "malware_samples": [], "passive_dns": ["fl7.flv-to.com", "fl9.flv-to.com", "fl10.flv-to.com", "fl10.video-to-mp3-converter.com", "fl9.video-to-mp3-converter.com", "fl8.flv-to.com", "fl8.video-to-mp3-converter.com", "fl7.video-to-mp3-converter.com", "secu

reverse_dns:
  fl7.flv-to.com,fl9.flv-to.com,fl10.flv-to.com,fl10.video-to-mp3-converter.com,fl9.video-to-mp3-converter.com,fl8.flv-to.com,fl8.video-to-mp3-converter.com,fl7.video-to-mp3-converter.com,secure-onlinegb.com,eryamanhots.com


indicator: 176.123.7.229
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: tw.singlelogin.site,sr.singlelogin.site,singlelogin.click,singlelogin.site,singlelogin.asia
queried_at: 2026-05-27T12:29:55.519142
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.7.229", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 5, "malware_samples": [], "passive_dns": ["tw.singlelogin.site", "sr.singlelogin.site", "singlelogin.click", "singlelogin.site", "singlelogin.asia"]}


indicator: 176.123.7.233
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
hosting_provider: cyber security,Nextray,malicious,ioc,phishing
queried_at: 2026-05-27T12:29:57.718055
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.7.233", "tags": ["cyber security", "Nextray", "malicious", "ioc", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created

reverse_dns:
  app.ppmail.pp.ua,ppmail.pp.ua,mail-ml1-f01.ymca.one,mail.ymca.one,www.arcadegaming.xyz,arcadegaming.xyz


indicator: 176.123.7.235
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: www.flixitube.com,flixitube.com,leakimedia.com
queried_at: 2026-05-27T12:30:04.989572
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.7.235", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["www.flixitube.com", "flixitube.com", "leakimedia.com"]}


indicator: 176.123.7.246
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
queried_at: 2026-05-27T12:30:07.510013
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.7.246", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 176.123.7.250
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
reverse_dns: image.claimstimmoney.com,progressivepioneers.com,xff015.xyz
queried_at: 2026-05-27T12:30:12.447011
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.7.250", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["image.claimstimmoney.com", "progressivepioneers.com", "xff015.xyz"]}


indicator: 176.123.7.37
indicator_type: ipv4
source: otx
country: MD
city: Chisinau
queried_at: 2026-05-27T12:30:17.504143
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Moldova, Republic of", "country_code": "MD", "city": "Chisinau", "asn": "AS200019 alexhost srl", "indicator": "176.123.7.37", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 22, "malware_samples": [], "passive_dns": ["www.gratisspilpc.dk", "gratisspilpc.dk", "herunterladen-spiele-pc.de", "www.dzikwlesie-dk.xyz", "www.dzikwlesie-it.xyz", "dzikwlesie-it.xyz", "spilgratispc.dk", "www.spilgratispc.dk", "pcgamingsite.com", "www.pcgami

reverse_dns:
  www.gratisspilpc.dk,gratisspilpc.dk,herunterladen-spiele-pc.de,www.dzikwlesie-dk.xyz,www.dzikwlesie-it.xyz,dzikwlesie-it.xyz,spilgratispc.dk,www.spilgratispc.dk,pcgamingsite.com,www.pcgamingsite.com


indicator: 194.110.247.199
indicator_type: ipv4
source: shodan
reverse_dns: agent.com
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T18:00:25.770962
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["agent.com"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 194.110.247.2
indicator_type: ipv4
source: shodan
city: starttls,self-signed
reverse_dns: vps42
queried_at: 2026-05-27T18:00:27.575680
raw_data:
  {"ports": [22, 25, 110, 443, 993, 8888], "vulns": ["CVE-2022-3620", "CVE-2026-40685", "CVE-2024-39929", "CVE-2023-42114", "CVE-2026-40684", "CVE-2023-42115", "CVE-2025-67896", "CVE-2026-40687", "CVE-2023-42117", "CVE-2022-3559", "CVE-2026-40686", "CVE-2023-42116", "CVE-2022-37451", "CVE-2023-42119", "CVE-2023-51766"], "hostnames": ["vps42"], "tags": ["starttls", "self-signed"], "cpes": ["cpe:/a:f5:nginx:1.30.0", "cpe:/a:exim:exim:4.95", "cpe:/a:f5:nginx", "cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:

hosting_provider:
  cpe:/a:f5:nginx:1.30.0,cpe:/a:exim:exim:4.95,cpe:/a:f5:nginx,cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux


indicator: 194.110.247.211
indicator_type: ipv4
source: shodan
city: starttls,self-signed
reverse_dns: ticketsbingoes.com
hosting_provider: cpe:/a:f5:nginx
queried_at: 2026-05-27T18:00:29.362871
raw_data:
  {"ports": [21, 25, 53, 80, 443, 465, 587, 993, 995, 8083], "vulns": [], "hostnames": ["ticketsbingoes.com"], "tags": ["starttls", "self-signed"], "cpes": ["cpe:/a:f5:nginx"]}


indicator: 194.110.247.224
indicator_type: ipv4
source: shodan
reverse_dns: thebrasscoq.com,moldova
hosting_provider: cpe:/o:canonical:ubuntu_linux,cpe:/a:openbsd:openssh:8.2p1
queried_at: 2026-05-27T18:00:31.272085
raw_data:
  {"ports": [22, 80, 443], "vulns": [], "hostnames": ["thebrasscoq.com", "moldova"], "tags": [], "cpes": ["cpe:/o:canonical:ubuntu_linux", "cpe:/a:openbsd:openssh:8.2p1"]}


indicator: 194.110.247.250
indicator_type: ipv4
source: shodan
reverse_dns: secretroom.md
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T18:00:34.921553
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["secretroom.md"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 194.110.247.251
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: servercloud
hosting_provider: cpe:/a:jquery:jquery,cpe:/a:f5:nginx,cpe:/a:getbootstrap:bootstrap
queried_at: 2026-05-27T18:00:36.761889
raw_data:
  {"ports": [80, 8443], "vulns": [], "hostnames": ["servercloud"], "tags": ["self-signed"], "cpes": ["cpe:/a:jquery:jquery", "cpe:/a:f5:nginx", "cpe:/a:getbootstrap:bootstrap"]}


indicator: 194.110.247.252
indicator_type: ipv4
source: shodan
city: starttls
reverse_dns: x69.io,3gp.io
hosting_provider: cpe:/a:apache:http_server,cpe:/a:postfix:postfix
queried_at: 2026-05-27T18:00:38.700092
raw_data:
  {"ports": [21, 25, 80, 110, 143, 465, 587, 993, 995, 2222], "vulns": [], "hostnames": ["x69.io", "3gp.io"], "tags": ["starttls"], "cpes": ["cpe:/a:apache:http_server", "cpe:/a:postfix:postfix"]}


indicator: 194.110.247.253
indicator_type: ipv4
source: shodan
reverse_dns: srv1.meusite.com
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T18:00:40.529216
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["srv1.meusite.com"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 194.110.247.52
indicator_type: ipv4
source: shodan
reverse_dns: svenska-slots-online.com,host.com
hosting_provider: cpe:/a:f5:nginx
queried_at: 2026-05-27T18:00:42.362660
raw_data:
  {"ports": [443], "vulns": [], "hostnames": ["svenska-slots-online.com", "host.com"], "tags": [], "cpes": ["cpe:/a:f5:nginx"]}


indicator: 194.110.247.66
indicator_type: ipv4
source: shodan
reverse_dns: verachannels
hosting_provider: cpe:/o:canonical:ubuntu_linux,cpe:/a:openbsd:openssh:7.6p1
queried_at: 2026-05-27T18:00:44.234133
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["verachannels"], "tags": [], "cpes": ["cpe:/o:canonical:ubuntu_linux", "cpe:/a:openbsd:openssh:7.6p1"]}


indicator: 194.110.247.76
indicator_type: ipv4
source: shodan
city: eol-product,self-signed
reverse_dns: vitaminshoppen.com
queried_at: 2026-05-27T18:00:47.901168
raw_data:
  {"ports": [22, 80, 443], "vulns": ["CVE-2023-44487", "CVE-2025-23419"], "hostnames": ["vitaminshoppen.com"], "tags": ["eol-product", "self-signed"], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/o:linux:linux_kernel", "cpe:/a:f5:nginx:1.24.0"]}

hosting_provider:
  cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux,cpe:/o:linux:linux_kernel,cpe:/a:f5:nginx:1.24.0


indicator: 194.110.247.82
indicator_type: ipv4
source: shodan
reverse_dns: 2puck.puck,akashevskaya.ru
hosting_provider: cpe:/o:linux:linux_kernel,cpe:/o:debian:debian_linux,cpe:/a:openbsd:openssh:10.0p2
queried_at: 2026-05-27T18:00:49.747621
raw_data:
  {"ports": [22, 5000], "vulns": [], "hostnames": ["2puck.puck", "akashevskaya.ru"], "tags": [], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/o:debian:debian_linux", "cpe:/a:openbsd:openssh:10.0p2"]}


indicator: 194.110.247.95
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: devhub.md
hosting_provider: cpe:/o:canonical:ubuntu_linux,cpe:/o:linux:linux_kernel,cpe:/a:f5:nginx:1.24.0
queried_at: 2026-05-27T18:00:51.697299
raw_data:
  {"ports": [80], "vulns": ["CVE-2023-44487", "CVE-2025-23419"], "hostnames": ["devhub.md"], "tags": ["eol-product"], "cpes": ["cpe:/o:canonical:ubuntu_linux", "cpe:/o:linux:linux_kernel", "cpe:/a:f5:nginx:1.24.0"]}


indicator: 194.110.247.97
indicator_type: ipv4
source: shodan
reverse_dns: domain.com
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T18:00:53.589522
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["domain.com"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 2.59.219.118
indicator_type: ipv4
source: shodan
reverse_dns: cypher.pro
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T18:00:59.100912
raw_data:
  {"ports": [22, 3001], "vulns": [], "hostnames": ["cypher.pro"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 2.59.219.39
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: switzerland
queried_at: 2026-05-27T18:01:08.235092
raw_data:
  {"ports": [22, 80, 2222, 9999], "vulns": ["CVE-2025-23419", "CVE-2023-44487"], "hostnames": ["switzerland"], "tags": ["eol-product"], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx:1.24.0"]}

hosting_provider:
[cell repeats an earlier one in this file: 107 characters]


indicator: 213.232.235.201
indicator_type: ipv4
source: shodan
city: self-signed
hosting_provider: cpe:/a:microsoft:internet_information_services:10.0,cpe:/o:microsoft:windows
queried_at: 2026-05-27T18:01:11.883995
raw_data:
  {"ports": [80, 135, 3389, 5985, 8880, 47001], "vulns": [], "hostnames": [], "tags": ["self-signed"], "cpes": ["cpe:/a:microsoft:internet_information_services:10.0", "cpe:/o:microsoft:windows"]}


indicator: 213.232.235.212
indicator_type: ipv4
source: shodan
reverse_dns: ru1.henull.com
hosting_provider: cpe:/a:golang:go,cpe:/a:caddyserver:caddy
queried_at: 2026-05-27T18:01:13.697517
raw_data:
  {"ports": [80], "vulns": [], "hostnames": ["ru1.henull.com"], "tags": [], "cpes": ["cpe:/a:golang:go", "cpe:/a:caddyserver:caddy"]}


indicator: 213.232.235.41
indicator_type: ipv4
source: shodan
reverse_dns: ns.cloudflare.com,cloudflare.com,secondary.cloudflare.com,smeyrnveewr.xyz
hosting_provider: cpe:/a:cloudflare:cloudflare
queried_at: 2026-05-27T18:01:15.478360
raw_data:
  {"ports": [443, 5000], "vulns": [], "hostnames": ["ns.cloudflare.com", "cloudflare.com", "secondary.cloudflare.com", "smeyrnveewr.xyz"], "tags": [], "cpes": ["cpe:/a:cloudflare:cloudflare"]}


indicator: 217.156.123.66
indicator_type: ipv4
source: shodan
city: database,eol-product
hosting_provider: cpe:/a:oracle:mysql:5.6.41,cpe:/a:f5:nginx
queried_at: 2026-05-27T18:01:17.314858
raw_data:
  {"ports": [80, 443, 3306], "vulns": ["CVE-2019-2741", "CVE-2018-3251", "CVE-2016-5443", "CVE-2023-22028", "CVE-2017-3529", "CVE-2016-5442", "CVE-2019-2529", "CVE-2018-3133", "CVE-2017-3465", "CVE-2018-3282", "CVE-2018-3276", "CVE-2020-2804", "CVE-2016-0663", "CVE-2020-14760", "CVE-2020-2779", "CVE-2017-3460", "CVE-2020-14765", "CVE-2018-3061", "CVE-2016-0667", "CVE-2017-3650", "CVE-2018-3123", "CVE-2019-2614", "CVE-2017-10284", "CVE-2018-3247", "CVE-2020-14846", "CVE-2017-3637", "CVE-2016-0656",

reverse_dns:
  bakanju.com,kanjugo.com,www.kanjua.com,www.kanjugo.com,kanjugg.com,kanjua.com,www.kanjugg.com,www.bakanju.com


indicator: 217.156.123.82
indicator_type: ipv4
source: shodan
city: starttls,self-signed
hosting_provider: cpe:/a:f5:nginx
queried_at: 2026-05-27T18:01:19.110645
raw_data:
  {"ports": [21, 443, 8443], "vulns": [], "hostnames": ["217.156.123.89.hosttech.space", "217.156.123.66.hosttech.space", "hosttech.space", "217.156.123.85.hosttech.space", "217.156.123.88.hosttech.space", "217.156.123.65.hosttech.space", "217.156.123.82.hosttech.space", "217.156.123.83.hosttech.space", "217.156.123.86.hosttech.space", "217.156.123.62.hosttech.space", "217.156.123.44.hosttech.space"], "tags": ["starttls", "self-signed"], "cpes": ["cpe:/a:f5:nginx"]}

reverse_dns:
  217.156.123.89.hosttech.space,217.156.123.66.hosttech.space,hosttech.space,217.156.123.85.hosttech.space,217.156.123.88.hosttech.space,217.156.123.65.hosttech.space,217.156.123.82.hosttech.space,217.156.123.83.hosttech.space,217.156.123.86.hosttech.space,217.156.123.62.hosttech.space,217.156.123.44.hosttech.space


indicator: 45.145.0.14
indicator_type: ipv4
source: shodan
reverse_dns: static.14.0.145.45.ip.webhost1.net
hosting_provider: cpe:/a:ntp:ntp:3
queried_at: 2026-05-27T18:01:22.710603
raw_data:
  {"ports": [53, 123], "vulns": [], "hostnames": ["static.14.0.145.45.ip.webhost1.net"], "tags": [], "cpes": ["cpe:/a:ntp:ntp:3"]}


indicator: 45.145.0.253
indicator_type: ipv4
source: shodan
city: eol-product,database
reverse_dns: v10.webhost1.ru
hosting_provider: cpe:/a:f5:nginx:1.20.2,cpe:/a:mariadb:mariadb
queried_at: 2026-05-27T18:01:24.522045
raw_data:
  {"ports": [80, 443, 3306, 5915, 5919], "vulns": ["CVE-2023-44487", "CVE-2021-3618", "CVE-2025-23419"], "hostnames": ["v10.webhost1.ru"], "tags": ["eol-product", "database"], "cpes": ["cpe:/a:f5:nginx:1.20.2", "cpe:/a:mariadb:mariadb"]}


indicator: 45.145.0.58
indicator_type: ipv4
source: shodan
city: self-signed,starttls
reverse_dns: static.58.0.145.45.ip.webhost1.net
hosting_provider: cpe:/a:exim:exim:4.93
queried_at: 2026-05-27T18:01:26.328750
raw_data:
  {"ports": [21, 25, 53, 110, 444, 587, 993, 995, 1080], "vulns": ["CVE-2020-28015", "CVE-2023-42114", "CVE-2025-67896", "CVE-2020-28007", "CVE-2026-40686", "CVE-2020-28016", "CVE-2020-28011", "CVE-2022-3559", "CVE-2023-42116", "CVE-2023-42117", "CVE-2020-28024", "CVE-2020-28013", "CVE-2021-38371", "CVE-2020-28019", "CVE-2020-28018", "CVE-2024-39929", "CVE-2026-40687", "CVE-2020-28021", "CVE-2020-28009", "CVE-2020-12783", "CVE-2020-28022", "CVE-2023-51766", "CVE-2020-28012", "CVE-2020-28023", "CVE


indicator: 45.145.0.69
indicator_type: ipv4
source: shodan
city: eol-product,database,self-signed,starttls
reverse_dns: static.69.0.145.45.ip.webhost1.net
hosting_provider: cpe:/a:oracle:mysql,cpe:/a:exim:exim:4.93,cpe:/a:f5:nginx:1.24.0,cpe:/a:f5:nginx
queried_at: 2026-05-27T18:01:28.126283
raw_data:
  {"ports": [21, 25, 110, 443, 465, 587, 993, 995, 3306, 8888], "vulns": ["CVE-2020-28019", "CVE-2026-40685", "CVE-2024-39929", "CVE-2023-42114", "CVE-2020-28010", "CVE-2020-28021", "CVE-2026-40684", "CVE-2026-40687", "CVE-2021-27216", "CVE-2023-42116", "CVE-2023-44487", "CVE-2020-28015", "CVE-2020-28026", "CVE-2020-28011", "CVE-2020-28013", "CVE-2025-67896", "CVE-2022-3559", "CVE-2020-28022", "CVE-2026-40686", "CVE-2023-42119", "CVE-2021-38371", "CVE-2020-12783", "CVE-2020-28009", "CVE-2020-28012


indicator: 45.148.244.104
indicator_type: ipv4
source: shodan
city: eol-product,database
reverse_dns: hicine.app,adwik.eu,www.adwik.eu
queried_at: 2026-05-27T18:01:33.461392
raw_data:
  {"ports": [80, 443, 631, 3000, 5000, 5001, 9000, 27017], "vulns": ["CVE-2023-3817", "CVE-2025-69421", "CVE-2026-28390", "CVE-2026-22795", "CVE-2025-69418", "CVE-2025-68160", "CVE-2025-69420", "CVE-2023-4807", "CVE-2014-8180", "CVE-2026-28387", "CVE-2022-2068", "CVE-2022-0778", "CVE-2023-44487", "CVE-2023-0215", "CVE-2021-3449", "CVE-2021-23841", "CVE-2022-4450", "CVE-2019-0190", "CVE-2023-0286", "CVE-2022-1292", "CVE-2023-5678", "CVE-2009-3767", "CVE-2020-1971", "CVE-2025-69419", "CVE-2026-28389

hosting_provider:
  cpe:/a:mongodb:mongodb:4.4.29,cpe:/o:linux:linux_kernel,cpe:/a:expressjs:express,cpe:/a:f5:nginx:1.24.0,cpe:/a:minio:minio,cpe:/o:canonical:ubuntu_linux,cpe:/a:openssl:openssl:1.1.1f,cpe:/a:nodejs:node.js


indicator: 45.148.244.118
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: trainer.sites
queried_at: 2026-05-27T18:01:37.044025
raw_data:
  {"ports": [22, 80, 443, 8443], "vulns": [], "hostnames": ["trainer.sites"], "tags": ["self-signed"], "cpes": ["cpe:/a:getbootstrap:bootstrap", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx", "cpe:/a:openbsd:openssh:8.9p1", "cpe:/a:jquery:jquery"]}

hosting_provider:
  cpe:/a:getbootstrap:bootstrap,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx,cpe:/a:openbsd:openssh:8.9p1,cpe:/a:jquery:jquery


indicator: 45.148.244.12
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: trainer.sites15
queried_at: 2026-05-27T18:01:38.844713
raw_data:
  {"ports": [22, 443, 8443], "vulns": [], "hostnames": ["trainer.sites15"], "tags": ["self-signed"], "cpes": ["cpe:/a:jquery:jquery", "cpe:/a:f5:nginx", "cpe:/a:openbsd:openssh:8.9p1", "cpe:/a:getbootstrap:bootstrap", "cpe:/o:canonical:ubuntu_linux"]}

hosting_provider:
  cpe:/a:jquery:jquery,cpe:/a:f5:nginx,cpe:/a:openbsd:openssh:8.9p1,cpe:/a:getbootstrap:bootstrap,cpe:/o:canonical:ubuntu_linux


indicator: 45.148.244.140
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: novo1
hosting_provider: cpe:/a:postfix:postfix
queried_at: 2026-05-27T18:01:40.604511
raw_data:
  {"ports": [465, 993, 995], "vulns": [], "hostnames": ["novo1"], "tags": ["self-signed"], "cpes": ["cpe:/a:postfix:postfix"]}


indicator: 45.148.244.143
indicator_type: ipv4
source: shodan
city: self-signed,starttls
reverse_dns: barbara009matthews
hosting_provider: cpe:/a:f5:nginx:1.28.2,cpe:/a:exim:exim:4.95,cpe:/a:f5:nginx
queried_at: 2026-05-27T18:01:42.400649
raw_data:
  {"ports": [21, 25, 110, 443, 465, 993, 7777, 10050], "vulns": ["CVE-2023-42117", "CVE-2023-42114", "CVE-2025-67896", "CVE-2022-37451", "CVE-2023-42115", "CVE-2026-40686", "CVE-2026-40684", "CVE-2024-39929", "CVE-2022-3620", "CVE-2022-3559", "CVE-2023-51766", "CVE-2023-42116", "CVE-2026-40687", "CVE-2023-42119", "CVE-2026-40685"], "hostnames": ["barbara009matthews"], "tags": ["self-signed", "starttls"], "cpes": ["cpe:/a:f5:nginx:1.28.2", "cpe:/a:exim:exim:4.95", "cpe:/a:f5:nginx"]}


indicator: 45.148.244.156
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: diaudwty.net,www.dampfergunstige.de,dampfergunstige.de
hosting_provider: cpe:/a:f5:nginx:1.8.1,cpe:/a:apache:http_server
queried_at: 2026-05-27T18:01:44.193840
raw_data:
  {"ports": [88, 443], "vulns": ["CVE-2016-4450", "CVE-2017-7529", "CVE-2019-20372", "CVE-2018-16845", "CVE-2017-20005", "CVE-2021-3618", "CVE-2016-1247", "CVE-2021-23017"], "hostnames": ["diaudwty.net", "www.dampfergunstige.de", "dampfergunstige.de"], "tags": ["eol-product"], "cpes": ["cpe:/a:f5:nginx:1.8.1", "cpe:/a:apache:http_server"]}


indicator: 45.148.244.167
indicator_type: ipv4
source: shodan
reverse_dns: greyprocessing.com
hosting_provider: cpe:/a:f5:nginx:1.29.3
queried_at: 2026-05-27T18:01:46.040797
raw_data:
  {"ports": [80], "vulns": [], "hostnames": ["greyprocessing.com"], "tags": [], "cpes": ["cpe:/a:f5:nginx:1.29.3"]}


indicator: 45.148.244.174
indicator_type: ipv4
source: shodan
city: eol-product,self-signed,starttls
hosting_provider: cpe:/a:f5:nginx:1.26.3,cpe:/a:exim:exim:4.98.2,cpe:/a:openbsd:openssh:8.0
queried_at: 2026-05-27T18:01:47.845276
raw_data:
  {"ports": [21, 22, 53, 80, 143, 465, 587], "vulns": ["CVE-2008-3844", "CVE-2020-15778", "CVE-2025-26465", "CVE-2023-38408", "CVE-2026-40685", "CVE-2026-40684", "CVE-2026-35385", "CVE-2021-41617", "CVE-2026-40687", "CVE-2026-35386", "CVE-2023-51767", "CVE-2025-32728", "CVE-2025-67896", "CVE-2026-35388", "CVE-2026-40686", "CVE-2023-51385", "CVE-2023-48795", "CVE-2026-35414", "CVE-2007-2768", "CVE-2019-16905", "CVE-2016-20012", "CVE-2026-35387", "CVE-2020-14145", "CVE-2021-36368"], "hostnames": [],


indicator: 45.148.244.185
indicator_type: ipv4
source: shodan
city: starttls
reverse_dns: mail.vuinsider.com
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/a:f5:nginx
queried_at: 2026-05-27T18:01:49.594374
raw_data:
  {"ports": [21, 22, 25, 53, 80, 465, 587, 995, 8083], "vulns": [], "hostnames": ["mail.vuinsider.com"], "tags": ["starttls"], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/a:f5:nginx"]}


indicator: 45.148.244.19
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: filecr.com
hosting_provider: cpe:/a:grafana:grafana:12.1.1
queried_at: 2026-05-27T18:01:51.376409
raw_data:
  {"ports": [3000], "vulns": ["CVE-2026-21722", "CVE-2026-33375", "CVE-2025-12141", "CVE-2026-21720", "CVE-2026-21727", "CVE-2026-21721", "CVE-2025-41115"], "hostnames": ["filecr.com"], "tags": ["eol-product"], "cpes": ["cpe:/a:grafana:grafana:12.1.1"]}


indicator: 45.148.244.196
indicator_type: ipv4
source: shodan
reverse_dns: medidownload.com
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T18:01:53.142394
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["medidownload.com"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 45.148.244.197
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/a:openresty:openresty,cpe:/a:f5:nginx
queried_at: 2026-05-27T18:01:54.897100
raw_data:
  {"ports": [53, 81, 443], "vulns": [], "hostnames": [], "tags": [], "cpes": ["cpe:/a:openresty:openresty", "cpe:/a:f5:nginx"]}


indicator: 45.148.244.205
indicator_type: ipv4
source: shodan
city: eol-product
queried_at: 2026-05-27T18:01:58.425678
raw_data:
  {"ports": [22, 443, 8443], "vulns": ["CVE-2023-44487", "CVE-2025-23419"], "hostnames": ["www.microsoft.com", "nektariy.dulo.buzz", "staticview.microsoft.com", "privacy.microsoft.com", "i.s-microsoft.com", "c.s-microsoft.com", "microsoft.com", "wwwqa.microsoft.com"], "tags": ["eol-product"], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/o:linux:linux_kernel", "cpe:/a:f5:nginx:1.24.0"]}

reverse_dns:
  www.microsoft.com,nektariy.dulo.buzz,staticview.microsoft.com,privacy.microsoft.com,i.s-microsoft.com,c.s-microsoft.com,microsoft.com,wwwqa.microsoft.com

hosting_provider:
[cell repeats an earlier one in this file: 107 characters]


indicator: 45.148.244.212
indicator_type: ipv4
source: shodan
reverse_dns: wp-qs
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T18:02:00.227171
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["wp-qs"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 45.148.244.221
indicator_type: ipv4
source: shodan
reverse_dns: server.emanueltorrent.ro
queried_at: 2026-05-27T18:02:03.791686
raw_data:
  {"ports": [22, 80, 113, 7001], "vulns": [], "hostnames": ["server.emanueltorrent.ro"], "tags": [], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:9.2p1", "cpe:/a:apache:http_server:2.4.67", "cpe:/o:debian:debian_linux"]}

hosting_provider:
  cpe:/o:linux:linux_kernel,cpe:/a:openbsd:openssh:9.2p1,cpe:/a:apache:http_server:2.4.67,cpe:/o:debian:debian_linux


indicator: 45.148.244.232
indicator_type: ipv4
source: shodan
city: self-signed,eol-product,starttls
hosting_provider: cpe:/a:f5:nginx:1.26.3,cpe:/a:exim:exim:4.98.2,cpe:/a:openbsd:openssh:8.0
queried_at: 2026-05-27T18:02:05.582872
raw_data:
  {"ports": [21, 22, 25, 53, 80, 110, 443], "vulns": ["CVE-2025-26465", "CVE-2025-67896", "CVE-2023-38408", "CVE-2008-3844", "CVE-2020-14145", "CVE-2023-51767", "CVE-2020-15778", "CVE-2019-16905", "CVE-2025-32728", "CVE-2023-51385", "CVE-2021-36368", "CVE-2007-2768", "CVE-2023-48795", "CVE-2016-20012", "CVE-2021-41617", "CVE-2026-35414"], "hostnames": [], "tags": ["self-signed", "eol-product", "starttls"], "cpes": ["cpe:/a:f5:nginx:1.26.3", "cpe:/a:exim:exim:4.98.2", "cpe:/a:openbsd:openssh:8.0"]}


indicator: 45.148.244.26
indicator_type: ipv4
source: shodan
reverse_dns: bzoneder.ru
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T18:02:09.166528
raw_data:
  {"ports": [22, 8080], "vulns": [], "hostnames": ["bzoneder.ru"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 45.148.244.29
indicator_type: ipv4
source: shodan
city: self-signed,eol-product,starttls
reverse_dns: tigr
hosting_provider: cpe:/o:linux:linux_kernel,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx:1.24.0
queried_at: 2026-05-27T18:02:10.946131
raw_data:
  {"ports": [25, 80, 143], "vulns": ["CVE-2025-23419", "CVE-2023-44487"], "hostnames": ["tigr"], "tags": ["self-signed", "eol-product", "starttls"], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx:1.24.0"]}


indicator: 45.148.244.32
indicator_type: ipv4
source: shodan
city: database,eol-product
reverse_dns: www.dampfkit.de,diaudwty.net,dampfkit.de
hosting_provider: cpe:/a:apache:http_server,cpe:/a:f5:nginx:1.8.1,cpe:/a:oracle:mysql
queried_at: 2026-05-27T18:02:12.742139
raw_data:
  {"ports": [88, 443, 3306], "vulns": ["CVE-2018-16845", "CVE-2017-7529", "CVE-2016-4450", "CVE-2016-1247", "CVE-2017-20005", "CVE-2021-23017", "CVE-2019-20372", "CVE-2021-3618"], "hostnames": ["www.dampfkit.de", "diaudwty.net", "dampfkit.de"], "tags": ["database", "eol-product"], "cpes": ["cpe:/a:apache:http_server", "cpe:/a:f5:nginx:1.8.1", "cpe:/a:oracle:mysql"]}


indicator: 45.148.244.49
indicator_type: ipv4
source: shodan
city: self-signed,eol-product,starttls
reverse_dns: mail.srv1.getmeltinglove.live
hosting_provider: cpe:/a:f5:nginx:1.18.0,cpe:/a:postfix:postfix
queried_at: 2026-05-27T18:02:14.575775
raw_data:
  {"ports": [25, 53, 80], "vulns": ["CVE-2025-23419", "CVE-2021-3618", "CVE-2021-23017", "CVE-2023-44487"], "hostnames": ["mail.srv1.getmeltinglove.live"], "tags": ["self-signed", "eol-product", "starttls"], "cpes": ["cpe:/a:f5:nginx:1.18.0", "cpe:/a:postfix:postfix"]}


indicator: 45.148.244.60
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: domain.com
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T18:02:18.121145
raw_data:
  {"ports": [22, 443], "vulns": [], "hostnames": ["domain.com"], "tags": ["self-signed"], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 45.148.244.8
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: www.ecigarettepascher.com,ocisuetll.net,ecigarettepascher.com
hosting_provider: cpe:/a:apache:http_server,cpe:/a:f5:nginx:1.8.1
queried_at: 2026-05-27T18:02:23.313662
raw_data:
  {"ports": [88, 443], "vulns": ["CVE-2018-16845", "CVE-2017-7529", "CVE-2016-4450", "CVE-2016-1247", "CVE-2017-20005", "CVE-2021-23017", "CVE-2019-20372", "CVE-2021-3618"], "hostnames": ["www.ecigarettepascher.com", "ocisuetll.net", "ecigarettepascher.com"], "tags": ["eol-product"], "cpes": ["cpe:/a:apache:http_server", "cpe:/a:f5:nginx:1.8.1"]}


indicator: 45.152.162.11
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux,cpe:/a:apache:http_server:2.4.58
queried_at: 2026-05-27T18:02:25.095887
raw_data:
  {"ports": [22, 80], "vulns": ["CVE-2024-43394", "CVE-2026-24072", "CVE-2026-34059", "CVE-2024-38473", "CVE-2023-38709", "CVE-2024-42516", "CVE-2025-55753", "CVE-2024-43204", "CVE-2025-65082", "CVE-2025-53020", "CVE-2013-0942", "CVE-2026-33523", "CVE-2024-38472", "CVE-2026-34032", "CVE-2024-38475", "CVE-2012-4001", "CVE-2009-2299", "CVE-2007-4723", "CVE-2025-49630", "CVE-2026-33857", "CVE-2024-38474", "CVE-2024-36387", "CVE-2024-47252", "CVE-2012-3526", "CVE-2013-4365", "CVE-2026-29169", "CVE-202


indicator: 45.152.162.110
indicator_type: ipv4
source: shodan
reverse_dns: france20.me
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T18:02:26.870171
raw_data:
  {"ports": [22, 8080], "vulns": [], "hostnames": ["france20.me"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 45.152.162.128
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: newtwo
hosting_provider: cpe:/o:canonical:ubuntu_linux,cpe:/o:linux:linux_kernel,cpe:/a:f5:nginx:1.24.0,cpe:/a:ntp:ntp:3
queried_at: 2026-05-27T18:02:28.662912
raw_data:
  {"ports": [80, 123, 8000], "vulns": ["CVE-2023-44487", "CVE-2025-23419"], "hostnames": ["newtwo"], "tags": ["eol-product"], "cpes": ["cpe:/o:canonical:ubuntu_linux", "cpe:/o:linux:linux_kernel", "cpe:/a:f5:nginx:1.24.0", "cpe:/a:ntp:ntp:3"]}


indicator: 45.152.162.196
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: digta.or
hosting_provider: cpe:/o:linux:linux_kernel,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx:1.24.0
queried_at: 2026-05-27T18:02:30.425671
raw_data:
  {"ports": [80], "vulns": ["CVE-2025-23419", "CVE-2023-44487"], "hostnames": ["digta.or"], "tags": ["eol-product"], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx:1.24.0"]}


indicator: 45.152.162.247
indicator_type: ipv4
source: shodan
city: starttls,self-signed
reverse_dns: mmpe.velvetrax.shop
hosting_provider: cpe:/a:postfix:postfix
queried_at: 2026-05-27T18:02:32.238037
raw_data:
  {"ports": [25, 111], "vulns": [], "hostnames": ["mmpe.velvetrax.shop"], "tags": ["starttls", "self-signed"], "cpes": ["cpe:/a:postfix:postfix"]}


indicator: 45.152.162.29
indicator_type: ipv4
source: shodan
reverse_dns: lobo
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T18:02:35.811435
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["lobo"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 45.152.162.60
indicator_type: ipv4
source: shodan
reverse_dns: hdpc.site
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T18:02:37.638957
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["hdpc.site"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 45.152.162.64
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: checkout.madstilbud.com
hosting_provider: cpe:/a:f5:nginx:1.20.1
queried_at: 2026-05-27T18:02:39.452328
raw_data:
  {"ports": [80, 111, 443], "vulns": ["CVE-2025-23419", "CVE-2021-3618", "CVE-2023-44487"], "hostnames": ["checkout.madstilbud.com"], "tags": ["eol-product"], "cpes": ["cpe:/a:f5:nginx:1.20.1"]}


indicator: 45.152.162.69
indicator_type: ipv4
source: shodan
reverse_dns: france35.me,france35.clearorbitllc.com
queried_at: 2026-05-27T18:02:41.206864
raw_data:
  {"ports": [443, 8080], "vulns": [], "hostnames": ["france35.me", "france35.clearorbitllc.com"], "tags": [], "cpes": []}


indicator: 45.155.54.103
indicator_type: ipv4
source: shodan
reverse_dns: hip.fr-1.ibcs,hetzner.com
queried_at: 2026-05-27T18:03:08.396230
raw_data:
  {"ports": [8443], "vulns": [], "hostnames": ["hip.fr-1.ibcs", "hetzner.com"], "tags": [], "cpes": []}


indicator: 45.155.54.114
indicator_type: ipv4
source: shodan
reverse_dns: hip.fr-1.ibcs
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T18:03:10.223968
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["hip.fr-1.ibcs"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 45.155.54.135
indicator_type: ipv4
source: shodan
reverse_dns: hip.fr-1.ibcs
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T18:03:17.348039
raw_data:
  {"ports": [22, 443], "vulns": [], "hostnames": ["hip.fr-1.ibcs"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 45.155.54.19
indicator_type: ipv4
source: shodan
queried_at: 2026-05-27T18:03:22.739188
raw_data:
  {"ports": [8080, 9443], "vulns": [], "hostnames": ["yandex.lv", "yandex.tr", "yandex.az", "yandex.de", "yandex.lt", "yandex.md", "yandex.jobs", "yandex.com.am", "yandex.aero", "yandex.ru", "yandex.by", "yandex.co.il", "yandex.uz", "xn--d1acpjx3f.xn--p1ai", "yandex.org", "yandex.kz", "yandex.it", "yandex.com", "yandex.tm", "yandex.net", "yandex.com.ge", "yandex.ee", "hip.fr-1.ibcs", "ya.ru", "yandex.fr", "yandex.com.tr", "yandex.tj"], "tags": [], "cpes": []}

reverse_dns:
  yandex.lv,yandex.tr,yandex.az,yandex.de,yandex.lt,yandex.md,yandex.jobs,yandex.com.am,yandex.aero,yandex.ru,yandex.by,yandex.co.il,yandex.uz,xn--d1acpjx3f.xn--p1ai,yandex.org,yandex.kz,yandex.it,yandex.com,yandex.tm,yandex.net,yandex.com.ge,yandex.ee,hip.fr-1.ibcs,ya.ru,yandex.fr,yandex.com.tr,yandex.tj


indicator: 45.155.54.6
indicator_type: ipv4
source: shodan
queried_at: 2026-05-27T18:03:31.675484
raw_data:
  {"ports": [443, 2222], "vulns": [], "hostnames": ["vk.link", "hip.fr-1.ibcs", "vkvideo.ru", "vkontakte.ru", "m.vk.ru", "vk.cc", "vk.com", "vk.ru", "vk.design", "stats.vk-portal.net", "api.vk.com", "vk.me", "m.vk.com", "vkontakte.com", "api.vk.ru"], "tags": [], "cpes": []}

reverse_dns:
  vk.link,hip.fr-1.ibcs,vkvideo.ru,vkontakte.ru,m.vk.ru,vk.cc,vk.com,vk.ru,vk.design,stats.vk-portal.net,api.vk.com,vk.me,m.vk.com,vkontakte.com,api.vk.ru


indicator: 45.155.54.72
indicator_type: ipv4
source: shodan
city: database
hosting_provider: cpe:/a:yandex:clickhouse:26.4.2.10
queried_at: 2026-05-27T18:03:35.363577
raw_data:
  {"ports": [9009], "vulns": [], "hostnames": [], "tags": ["database"], "cpes": ["cpe:/a:yandex:clickhouse:26.4.2.10"]}


indicator: 45.86.86.107
indicator_type: ipv4
source: shodan
reverse_dns: homenetwork.ro
hosting_provider: cpe:/a:openbsd:openssh:7.4
queried_at: 2026-05-27T18:03:44.248163
raw_data:
  {"ports": [22], "vulns": ["CVE-2008-3844", "CVE-2020-15778", "CVE-2025-26465", "CVE-2023-38408", "CVE-2019-6110", "CVE-2026-35385", "CVE-2021-41617", "CVE-2026-35386", "CVE-2018-15473", "CVE-2019-6111", "CVE-2023-51767", "CVE-2025-32728", "CVE-2026-35388", "CVE-2023-51385", "CVE-2023-48795", "CVE-2019-6109", "CVE-2026-35414", "CVE-2007-2768", "CVE-2016-20012", "CVE-2018-15919", "CVE-2018-20685", "CVE-2026-35387", "CVE-2020-14145", "CVE-2017-15906", "CVE-2021-36368"], "hostnames": ["homenetwork.r


indicator: 45.86.86.109
indicator_type: ipv4
source: shodan
city: self-signed,starttls
reverse_dns: stormtigerforges.com,mldv.vpcserver.com
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T18:03:46.012227
raw_data:
  {"ports": [21, 22, 25], "vulns": [], "hostnames": ["stormtigerforges.com", "mldv.vpcserver.com"], "tags": ["self-signed", "starttls"], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 45.86.86.135
indicator_type: ipv4
source: shodan
reverse_dns: ngds.asia,www.caomei.org,caomei.org
hosting_provider: cpe:/a:f5:nginx
queried_at: 2026-05-27T18:03:47.791237
raw_data:
  {"ports": [443], "vulns": [], "hostnames": ["ngds.asia", "www.caomei.org", "caomei.org"], "tags": [], "cpes": ["cpe:/a:f5:nginx"]}


indicator: 45.86.86.142
indicator_type: ipv4
source: shodan
city: eol-product,self-signed,starttls
reverse_dns: kaasmarkthoorn.nl
hosting_provider: cpe:/a:f5:nginx:1.26.2,cpe:/a:exim:exim:4.97
queried_at: 2026-05-27T18:03:49.584275
raw_data:
  {"ports": [25, 143, 443, 465, 587, 993], "vulns": ["CVE-2026-40685", "CVE-2024-39929", "CVE-2026-40684", "CVE-2025-67896", "CVE-2026-40687", "CVE-2025-30232", "CVE-2026-40686", "CVE-2023-51766", "CVE-2025-23419"], "hostnames": ["kaasmarkthoorn.nl"], "tags": ["eol-product", "self-signed", "starttls"], "cpes": ["cpe:/a:f5:nginx:1.26.2", "cpe:/a:exim:exim:4.97"]}


indicator: 45.86.86.174
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: im
hosting_provider: cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx:1.14.0,cpe:/o:linux:linux_kernel
queried_at: 2026-05-27T18:03:51.380704
raw_data:
  {"ports": [80], "vulns": ["CVE-2019-9513", "CVE-2021-23017", "CVE-2019-20372", "CVE-2018-16844", "CVE-2018-16845", "CVE-2021-3618", "CVE-2018-16843", "CVE-2019-9516", "CVE-2023-44487", "CVE-2019-9511", "CVE-2025-23419"], "hostnames": ["im"], "tags": ["eol-product"], "cpes": ["cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx:1.14.0", "cpe:/o:linux:linux_kernel"]}


indicator: 45.86.86.185
indicator_type: ipv4
source: shodan
reverse_dns: hosting.hosty.ro
hosting_provider: cpe:/a:openbsd:openssh:7.4
queried_at: 2026-05-27T18:03:53.171154
raw_data:
  {"ports": [22], "vulns": ["CVE-2008-3844", "CVE-2020-15778", "CVE-2025-26465", "CVE-2023-38408", "CVE-2019-6110", "CVE-2026-35385", "CVE-2021-41617", "CVE-2026-35386", "CVE-2018-15473", "CVE-2019-6111", "CVE-2023-51767", "CVE-2025-32728", "CVE-2026-35388", "CVE-2023-51385", "CVE-2023-48795", "CVE-2019-6109", "CVE-2026-35414", "CVE-2007-2768", "CVE-2016-20012", "CVE-2018-15919", "CVE-2018-20685", "CVE-2026-35387", "CVE-2020-14145", "CVE-2017-15906", "CVE-2021-36368"], "hostnames": ["hosting.hosty


indicator: 45.86.86.190
indicator_type: ipv4
source: shodan
reverse_dns: pcdownload
hosting_provider: cpe:/o:canonical:ubuntu_linux,cpe:/a:openbsd:openssh:8.2p1
queried_at: 2026-05-27T18:03:54.936317
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["pcdownload"], "tags": [], "cpes": ["cpe:/o:canonical:ubuntu_linux", "cpe:/a:openbsd:openssh:8.2p1"]}


indicator: 45.86.86.198
indicator_type: ipv4
source: shodan
city: eol-product
hosting_provider: cpe:/a:f5:nginx:1.27.5,cpe:/a:openbsd:openssh:8.7
queried_at: 2026-05-27T18:03:56.728433
raw_data:
  {"ports": [22, 80, 111, 443], "vulns": ["CVE-2008-3844", "CVE-2026-35387", "CVE-2025-26465", "CVE-2023-38408", "CVE-2023-48795", "CVE-2026-35385", "CVE-2021-41617", "CVE-2026-35386", "CVE-2026-35388", "CVE-2024-6387", "CVE-2023-51767", "CVE-2016-20012", "CVE-2023-51385", "CVE-2026-35414", "CVE-2007-2768", "CVE-2021-36368", "CVE-2025-32728"], "hostnames": [], "tags": ["eol-product"], "cpes": ["cpe:/a:f5:nginx:1.27.5", "cpe:/a:openbsd:openssh:8.7"]}


indicator: 45.86.86.251
indicator_type: ipv4
source: shodan
city: starttls,self-signed
reverse_dns: v4-sever.com
hosting_provider: cpe:/a:ntp:ntp:3,cpe:/a:exim:exim:4.95
queried_at: 2026-05-27T18:04:00.310042
raw_data:
  {"ports": [25, 53, 123, 587, 993], "vulns": ["CVE-2022-3620", "CVE-2026-40685", "CVE-2024-39929", "CVE-2023-42114", "CVE-2026-40684", "CVE-2023-42115", "CVE-2025-67896", "CVE-2026-40687", "CVE-2023-42117", "CVE-2022-3559", "CVE-2022-37451", "CVE-2023-42116", "CVE-2026-40686", "CVE-2023-42119", "CVE-2023-51766"], "hostnames": ["v4-sever.com"], "tags": ["starttls", "self-signed"], "cpes": ["cpe:/a:ntp:ntp:3", "cpe:/a:exim:exim:4.95"]}


indicator: 45.86.86.29
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: server.pasikiskiakopustas.com,mail.vid-cdn.xyz
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx
queried_at: 2026-05-27T18:04:02.120246
raw_data:
  {"ports": [22, 80, 443, 8083], "vulns": [], "hostnames": ["server.pasikiskiakopustas.com", "mail.vid-cdn.xyz"], "tags": ["self-signed"], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx"]}


indicator: 45.86.86.4
indicator_type: ipv4
source: shodan
reverse_dns: no.domain
hosting_provider: cpe:/o:linux:linux_kernel,cpe:/o:debian:debian_linux,cpe:/a:openbsd:openssh:10.0p2
queried_at: 2026-05-27T18:04:03.902553
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["no.domain"], "tags": [], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/o:debian:debian_linux", "cpe:/a:openbsd:openssh:10.0p2"]}


indicator: 45.86.86.47
indicator_type: ipv4
source: shodan
city: eol-product,database
reverse_dns: el
hosting_provider: cpe:/a:oracle:mysql:8.0.42-0ubuntu0.20.04.1
queried_at: 2026-05-27T18:04:05.653896
raw_data:
  {"ports": [3306], "vulns": [], "hostnames": ["el"], "tags": ["eol-product", "database"], "cpes": ["cpe:/a:oracle:mysql:8.0.42-0ubuntu0.20.04.1"]}


indicator: 45.86.86.73
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: vps.com
hosting_provider: cpe:/a:golang:go,cpe:/a:caddyserver:caddy
queried_at: 2026-05-27T18:04:10.947945
raw_data:
  {"ports": [443, 4443], "vulns": [], "hostnames": ["vps.com"], "tags": ["self-signed"], "cpes": ["cpe:/a:golang:go", "cpe:/a:caddyserver:caddy"]}


indicator: 45.90.97.2
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: srv3.example.com,gamesloader.ru,rpg.codegru-games.ru
queried_at: 2026-05-27T18:04:14.585736
raw_data:
  {"ports": [22, 80, 443, 2083, 2087], "vulns": ["CVE-2023-44487", "CVE-2025-23419"], "hostnames": ["srv3.example.com", "gamesloader.ru", "rpg.codegru-games.ru"], "tags": ["eol-product"], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/o:linux:linux_kernel", "cpe:/a:f5:nginx:1.24.0"]}

hosting_provider:
[cell repeats an earlier one in this file: 107 characters]


indicator: 45.90.97.238
indicator_type: ipv4
source: shodan
reverse_dns: rv1.example.com,entry2-france-5
queried_at: 2026-05-27T18:04:16.387855
raw_data:
  {"ports": [5985, 10050], "vulns": [], "hostnames": ["rv1.example.com", "entry2-france-5"], "tags": [], "cpes": []}


indicator: 45.90.97.47
indicator_type: ipv4
source: shodan
city: proxy
reverse_dns: domaindmca.com
hosting_provider: cpe:/a:f5:nginx
queried_at: 2026-05-27T18:04:18.217010
raw_data:
  {"ports": [80, 443, 1080, 3128], "vulns": [], "hostnames": ["domaindmca.com"], "tags": ["proxy"], "cpes": ["cpe:/a:f5:nginx"]}


indicator: 45.93.8.107
indicator_type: ipv4
source: shodan
city: eol-product
queried_at: 2026-05-27T18:04:21.838852
raw_data:
  {"ports": [22, 80, 3000, 9091], "vulns": ["CVE-2025-23419", "CVE-2021-3618", "CVE-2021-23017", "CVE-2023-44487"], "hostnames": [], "tags": ["eol-product"], "cpes": ["cpe:/a:openbsd:openssh:8.2p1", "cpe:/a:transmissionbt:transmission", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx:1.18.0", "cpe:/o:linux:linux_kernel"]}

hosting_provider:
  cpe:/a:openbsd:openssh:8.2p1,cpe:/a:transmissionbt:transmission,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx:1.18.0,cpe:/o:linux:linux_kernel


indicator: 45.93.8.116
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: redirector.arturteam,frx-invest-tt-view.com
queried_at: 2026-05-27T18:04:23.676462
raw_data:
  {"ports": [22, 443, 5000], "vulns": ["CVE-2025-23419", "CVE-2021-3618", "CVE-2021-23017", "CVE-2023-44487"], "hostnames": ["redirector.arturteam", "frx-invest-tt-view.com"], "tags": ["eol-product"], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx:1.18.0"]}

hosting_provider:
[cell repeats an earlier one in this file: 107 characters]


indicator: 45.93.8.153
indicator_type: ipv4
source: shodan
city: starttls,self-signed
reverse_dns: www.lovetorrent.net,lovetorrent.net
queried_at: 2026-05-27T18:04:27.300412
raw_data:
  {"ports": [21, 22, 25, 123, 443, 465, 587], "vulns": ["CVE-2026-40685", "CVE-2024-39929", "CVE-2026-40684", "CVE-2025-67896", "CVE-2026-40687", "CVE-2025-30232", "CVE-2026-40686", "CVE-2023-51766"], "hostnames": ["www.lovetorrent.net", "lovetorrent.net"], "tags": ["starttls", "self-signed"], "cpes": ["cpe:/a:exim:exim:4.97", "cpe:/a:f5:nginx", "cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:ntp:ntp:3"]}

hosting_provider:
  cpe:/a:exim:exim:4.97,cpe:/a:f5:nginx,cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux,cpe:/a:ntp:ntp:3


indicator: 45.93.8.188
indicator_type: ipv4
source: shodan
city: starttls,self-signed
reverse_dns: maureen810shelton
hosting_provider: cpe:/a:f5:nginx:1.28.1,cpe:/a:exim:exim:4.95,cpe:/a:f5:nginx
queried_at: 2026-05-27T18:04:30.865436
raw_data:
  {"ports": [110, 143, 443, 465, 993, 7777], "vulns": ["CVE-2022-3620", "CVE-2024-39929", "CVE-2023-42114", "CVE-2023-42115", "CVE-2025-67896", "CVE-2023-42117", "CVE-2022-3559", "CVE-2022-37451", "CVE-2023-42116", "CVE-2023-42119", "CVE-2023-51766"], "hostnames": ["maureen810shelton"], "tags": ["starttls", "self-signed"], "cpes": ["cpe:/a:f5:nginx:1.28.1", "cpe:/a:exim:exim:4.95", "cpe:/a:f5:nginx"]}


indicator: 45.93.8.26
indicator_type: ipv4
source: shodan
city: database,starttls
reverse_dns: 45-93-8-26.cprapid.com,festgeldsucher.de
hosting_provider: cpe:/a:exim:exim:4.99.1,cpe:/a:cpanel:cpanel,cpe:/a:mariadb:mariadb
queried_at: 2026-05-27T18:04:34.425638
raw_data:
  {"ports": [53, 110, 111, 465, 587, 993, 995, 2083, 3306], "vulns": ["CVE-2026-40686", "CVE-2026-40684", "CVE-2026-40687", "CVE-2026-40685"], "hostnames": ["45-93-8-26.cprapid.com", "festgeldsucher.de"], "tags": ["database", "starttls"], "cpes": ["cpe:/a:exim:exim:4.99.1", "cpe:/a:cpanel:cpanel", "cpe:/a:mariadb:mariadb"]}


indicator: 45.93.8.82
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: funinrace.com,funinrace247.com
hosting_provider: cpe:/o:linux:linux_kernel,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx:1.18.0
queried_at: 2026-05-27T18:04:36.180129
raw_data:
  {"ports": [443], "vulns": ["CVE-2025-23419", "CVE-2021-3618", "CVE-2021-23017", "CVE-2023-44487"], "hostnames": ["funinrace.com", "funinrace247.com"], "tags": ["eol-product"], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx:1.18.0"]}


indicator: 45.93.9.139
indicator_type: ipv4
source: shodan
city: eol-product,self-signed
reverse_dns: g262.turbosplayer.com,nation.governmentussr.com,api.governmentussr.com
queried_at: 2026-05-27T18:04:41.565355
raw_data:
  {"ports": [22, 80, 443, 3000, 8443, 9001], "vulns": ["CVE-2023-44487", "CVE-2025-23419"], "hostnames": ["g262.turbosplayer.com", "nation.governmentussr.com", "api.governmentussr.com"], "tags": ["eol-product", "self-signed"], "cpes": ["cpe:/a:jquery:jquery", "cpe:/a:expressjs:express", "cpe:/a:f5:nginx:1.24.0", "cpe:/a:f5:nginx", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:openbsd:openssh:9.6p1", "cpe:/a:getbootstrap:bootstrap", "cpe:/a:minio:minio", "cpe:/a:nodejs:node.js", "cpe:/o:linux:linux_kern

hosting_provider:
  cpe:/a:jquery:jquery,cpe:/a:expressjs:express,cpe:/a:f5:nginx:1.24.0,cpe:/a:f5:nginx,cpe:/o:canonical:ubuntu_linux,cpe:/a:openbsd:openssh:9.6p1,cpe:/a:getbootstrap:bootstrap,cpe:/a:minio:minio,cpe:/a:nodejs:node.js,cpe:/o:linux:linux_kernel


indicator: 45.93.9.155
indicator_type: ipv4
source: shodan
reverse_dns: eu3.streampanel.pro
hosting_provider: cpe:/a:f5:nginx
queried_at: 2026-05-27T18:04:43.390640
raw_data:
  {"ports": [80], "vulns": [], "hostnames": ["eu3.streampanel.pro"], "tags": [], "cpes": ["cpe:/a:f5:nginx"]}


indicator: 45.93.9.156
indicator_type: ipv4
source: shodan
queried_at: 2026-05-27T18:04:45.175694
raw_data:
  {"ports": [8443, 9100], "vulns": [], "hostnames": ["tor4.dedushka.top", "userapi.com", "vkuservideo.net", "vkuserdocs.ru", "vkuseraudio.com", "vkuseraudio.net", "vkuservideo.com", "vkuserphoto.ru", "vkuservideo.ru", "vkuseraudio.ru"], "tags": [], "cpes": []}

reverse_dns:
  tor4.dedushka.top,userapi.com,vkuservideo.net,vkuserdocs.ru,vkuseraudio.com,vkuseraudio.net,vkuservideo.com,vkuserphoto.ru,vkuservideo.ru,vkuseraudio.ru


indicator: 45.93.9.171
indicator_type: ipv4
source: shodan
queried_at: 2026-05-27T18:04:46.979866
raw_data:
  {"ports": [443], "vulns": [], "hostnames": ["explore.amd.com", "shop.amd.com", "verification.amd.com", "mars.amd.com", "support.amd.com", "amd.com", "radeon.com", "shop-eu-de.amd.com", "account.amd.com", "shop-ca-en.amd.com", "connect-sit.amd.com", "gpuopen.com", "shop-us-en.amd.com", "pro.radeon.com", "instinct.radeon.com", "support-sit.amd.com", "shop-eu-en.amd.com", "drivers.amd.com", "gaming.radeon.com", "www.radeon.com", "shop-eu-fr.amd.com", "download.amd.com", "dev.server", "creators.rade

reverse_dns:
  explore.amd.com,shop.amd.com,verification.amd.com,mars.amd.com,support.amd.com,amd.com,radeon.com,shop-eu-de.amd.com,account.amd.com,shop-ca-en.amd.com,connect-sit.amd.com,gpuopen.com,shop-us-en.amd.com,pro.radeon.com,instinct.radeon.com,support-sit.amd.com,shop-eu-en.amd.com,drivers.amd.com,gaming.radeon.com,www.radeon.com,shop-eu-fr.amd.com,download.amd.com,dev.server,creators.radeon.com,www.amd.com,www.gpuopen.com,connect.amd.com,products.amd.com,search.amd.com


indicator: 45.93.9.182
indicator_type: ipv4
source: shodan
reverse_dns: srv1.swvds.com
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T18:04:48.758041
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["srv1.swvds.com"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 45.93.9.194
indicator_type: ipv4
source: shodan
city: self-signed,starttls
reverse_dns: mail.lingua-horizon.ro,lingua-horizon.ro
hosting_provider: cpe:/a:postfix:postfix
queried_at: 2026-05-27T18:04:50.523546
raw_data:
  {"ports": [25, 110, 143, 465, 993], "vulns": [], "hostnames": ["mail.lingua-horizon.ro", "lingua-horizon.ro"], "tags": ["self-signed", "starttls"], "cpes": ["cpe:/a:postfix:postfix"]}


indicator: 45.93.9.215
indicator_type: ipv4
source: shodan
city: self-signed,starttls
reverse_dns: australia9,9pokies.net
queried_at: 2026-05-27T18:04:55.886008
raw_data:
  {"ports": [21, 22, 80, 443, 888], "vulns": [], "hostnames": ["australia9", "9pokies.net"], "tags": ["self-signed", "starttls"], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/a:pureftpd:pure-ftpd", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx"]}

hosting_provider:
  cpe:/a:openbsd:openssh:8.9p1,cpe:/a:pureftpd:pure-ftpd,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx


indicator: 45.93.9.249
indicator_type: ipv4
source: shodan
reverse_dns: se1-svoy-exit
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T18:04:59.398310
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["se1-svoy-exit"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 5.181.0.106
indicator_type: ipv4
source: shodan
city: self-signed,starttls
reverse_dns: jared1999schultz
hosting_provider: cpe:/a:f5:nginx:1.28.0,cpe:/a:exim:exim:4.95,cpe:/a:f5:nginx
queried_at: 2026-05-27T18:05:42.216826
raw_data:
  {"ports": [25, 110, 143, 443, 587, 995, 8888], "vulns": ["CVE-2023-42117", "CVE-2023-42114", "CVE-2025-67896", "CVE-2022-37451", "CVE-2023-42115", "CVE-2026-40686", "CVE-2026-40684", "CVE-2024-39929", "CVE-2022-3620", "CVE-2022-3559", "CVE-2023-51766", "CVE-2023-42116", "CVE-2026-40687", "CVE-2023-42119", "CVE-2026-40685"], "hostnames": ["jared1999schultz"], "tags": ["self-signed", "starttls"], "cpes": ["cpe:/a:f5:nginx:1.28.0", "cpe:/a:exim:exim:4.95", "cpe:/a:f5:nginx"]}


indicator: 5.181.0.12
indicator_type: ipv4
source: shodan
reverse_dns: second-proxy.cc
hosting_provider: cpe:/a:openbsd:openssh:8.7
queried_at: 2026-05-27T18:05:44.019564
raw_data:
  {"ports": [22, 111, 8080], "vulns": ["CVE-2025-26465", "CVE-2026-35388", "CVE-2023-38408", "CVE-2008-3844", "CVE-2026-35387", "CVE-2023-51767", "CVE-2026-35385", "CVE-2021-36368", "CVE-2024-6387", "CVE-2025-32728", "CVE-2026-35386", "CVE-2023-51385", "CVE-2007-2768", "CVE-2023-48795", "CVE-2016-20012", "CVE-2021-41617", "CVE-2026-35414"], "hostnames": ["second-proxy.cc"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.7"]}


indicator: 5.181.0.155
indicator_type: ipv4
source: shodan
city: self-signed,starttls
reverse_dns: europa16
hosting_provider: cpe:/a:pureftpd:pure-ftpd
queried_at: 2026-05-27T18:05:45.829456
raw_data:
  {"ports": [21], "vulns": [], "hostnames": ["europa16"], "tags": ["self-signed", "starttls"], "cpes": ["cpe:/a:pureftpd:pure-ftpd"]}


indicator: 5.181.0.161
indicator_type: ipv4
source: shodan
reverse_dns: ilserver2026
hosting_provider: cpe:/a:microsoft:internet_information_services:10.0,cpe:/o:microsoft:windows
queried_at: 2026-05-27T18:05:47.660581
raw_data:
  {"ports": [80], "vulns": [], "hostnames": ["ilserver2026"], "tags": [], "cpes": ["cpe:/a:microsoft:internet_information_services:10.0", "cpe:/o:microsoft:windows"]}


indicator: 5.181.0.2
indicator_type: ipv4
source: shodan
city: self-signed,starttls
reverse_dns: margaretjohnson
queried_at: 2026-05-27T18:05:51.201196
raw_data:
  {"ports": [22, 80, 110, 443, 587, 993, 7777, 8888], "vulns": ["CVE-2023-42117", "CVE-2023-42114", "CVE-2025-67896", "CVE-2022-37451", "CVE-2023-42115", "CVE-2026-40686", "CVE-2026-40684", "CVE-2024-39929", "CVE-2022-3620", "CVE-2022-3559", "CVE-2023-51766", "CVE-2023-42116", "CVE-2026-40687", "CVE-2023-42119", "CVE-2026-40685"], "hostnames": ["margaretjohnson"], "tags": ["self-signed", "starttls"], "cpes": ["cpe:/a:f5:nginx:1.28.1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx", "cpe:/a:ope

hosting_provider:
  cpe:/a:f5:nginx:1.28.1,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx,cpe:/a:openbsd:openssh:8.9p1,cpe:/a:exim:exim:4.95


indicator: 5.181.0.23
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: pandex-1
hosting_provider: cpe:/o:canonical:ubuntu_linux,cpe:/o:linux:linux_kernel,cpe:/a:f5:nginx:1.24.0
queried_at: 2026-05-27T18:05:52.969500
raw_data:
  {"ports": [80, 8080], "vulns": ["CVE-2023-44487", "CVE-2025-23419"], "hostnames": ["pandex-1"], "tags": ["eol-product"], "cpes": ["cpe:/o:canonical:ubuntu_linux", "cpe:/o:linux:linux_kernel", "cpe:/a:f5:nginx:1.24.0"]}


indicator: 5.181.0.29
indicator_type: ipv4
source: shodan
reverse_dns: myserver1.com
hosting_provider: cpe:/a:f5:nginx,cpe:/a:f5:nginx:1.29.0
queried_at: 2026-05-27T18:05:58.578574
raw_data:
  {"ports": [80, 8080], "vulns": [], "hostnames": ["myserver1.com"], "tags": [], "cpes": ["cpe:/a:f5:nginx", "cpe:/a:f5:nginx:1.29.0"]}


indicator: 5.181.0.5
indicator_type: ipv4
source: shodan
city: eol-product
queried_at: 2026-05-27T18:06:00.360030
raw_data:
  {"ports": [22, 80], "vulns": ["CVE-2023-44487", "CVE-2021-23017", "CVE-2021-3618", "CVE-2025-23419"], "hostnames": [], "tags": ["eol-product"], "cpes": ["cpe:/a:f5:nginx:1.18.0", "cpe:/o:canonical:ubuntu_linux", "cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:8.9p1"]}

hosting_provider:
  cpe:/a:f5:nginx:1.18.0,cpe:/o:canonical:ubuntu_linux,cpe:/o:linux:linux_kernel,cpe:/a:openbsd:openssh:8.9p1


indicator: 5.181.0.50
indicator_type: ipv4
source: shodan
city: self-signed,starttls
reverse_dns: voodoostreams.net,www.voodoostreams.net
hosting_provider: cpe:/a:litespeedtech:litespeed_web_server,cpe:/a:pureftpd:pure-ftpd,cpe:/a:postfix:postfix
queried_at: 2026-05-27T18:06:02.140321
raw_data:
  {"ports": [21, 25, 53, 443, 993, 8090, 8888], "vulns": [], "hostnames": ["voodoostreams.net", "www.voodoostreams.net"], "tags": ["self-signed", "starttls"], "cpes": ["cpe:/a:litespeedtech:litespeed_web_server", "cpe:/a:pureftpd:pure-ftpd", "cpe:/a:postfix:postfix"]}


indicator: 5.181.0.79
indicator_type: ipv4
source: shodan
reverse_dns: senzor.dev
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T18:06:05.760753
raw_data:
  {"ports": [22, 80, 6002], "vulns": [], "hostnames": ["senzor.dev"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 5.181.0.96
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: p1.cdnarc.com
hosting_provider: cpe:/a:f5:nginx:1.18.0,cpe:/o:canonical:ubuntu_linux,cpe:/o:linux:linux_kernel
queried_at: 2026-05-27T18:06:09.359745
raw_data:
  {"ports": [80], "vulns": ["CVE-2023-44487", "CVE-2021-23017", "CVE-2021-3618", "CVE-2025-23419"], "hostnames": ["p1.cdnarc.com"], "tags": ["eol-product"], "cpes": ["cpe:/a:f5:nginx:1.18.0", "cpe:/o:canonical:ubuntu_linux", "cpe:/o:linux:linux_kernel"]}


indicator: 5.181.1.133
indicator_type: ipv4
source: shodan
city: self-signed
hosting_provider: cpe:/a:jquery:jquery,cpe:/a:f5:nginx,cpe:/a:getbootstrap:bootstrap
queried_at: 2026-05-27T18:06:14.654448
raw_data:
  {"ports": [80, 8443], "vulns": [], "hostnames": [], "tags": ["self-signed"], "cpes": ["cpe:/a:jquery:jquery", "cpe:/a:f5:nginx", "cpe:/a:getbootstrap:bootstrap"]}


indicator: 5.181.1.40
indicator_type: ipv4
source: shodan
city: eol-product,self-signed
reverse_dns: roulette.cool
hosting_provider: cpe:/a:openbsd:openssh:for_Windows_9.5,cpe:/a:f5:nginx:1.27.5
queried_at: 2026-05-27T18:06:16.403888
raw_data:
  {"ports": [22, 135, 443, 445, 3000, 5985, 5986], "vulns": ["CVE-2020-0796"], "hostnames": ["roulette.cool"], "tags": ["eol-product", "self-signed"], "cpes": ["cpe:/a:openbsd:openssh:for_Windows_9.5", "cpe:/a:f5:nginx:1.27.5"]}


indicator: 5.63.19.14
indicator_type: ipv4
source: shodan
city: self-signed,database,starttls
hosting_provider: cpe:/a:oracle:mysql,cpe:/a:exim:exim:4.93,cpe:/a:f5:nginx
queried_at: 2026-05-27T18:06:19.949547
raw_data:
  {"ports": [21, 53, 80, 110, 465, 587, 995, 3306], "vulns": ["CVE-2020-28015", "CVE-2023-42114", "CVE-2025-67896", "CVE-2020-28007", "CVE-2020-28016", "CVE-2020-28011", "CVE-2022-3559", "CVE-2023-42116", "CVE-2023-42117", "CVE-2020-28024", "CVE-2020-28013", "CVE-2021-38371", "CVE-2020-28019", "CVE-2020-28018", "CVE-2024-39929", "CVE-2020-28021", "CVE-2020-28009", "CVE-2020-12783", "CVE-2020-28022", "CVE-2023-51766", "CVE-2020-28012", "CVE-2020-28023", "CVE-2020-28025", "CVE-2022-37451", "CVE-2023


indicator: 5.63.19.72
indicator_type: ipv4
source: shodan
city: eol-product
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/a:f5:nginx:1.26.3,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T18:06:25.278735
raw_data:
  {"ports": [22, 80], "vulns": [], "hostnames": [], "tags": ["eol-product"], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/a:f5:nginx:1.26.3", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 78.40.116.10
indicator_type: ipv4
source: shodan
city: starttls,self-signed
reverse_dns: marsha9murray
queried_at: 2026-05-27T18:06:28.861149
raw_data:
  {"ports": [22, 143, 443, 465, 993, 8888], "vulns": ["CVE-2022-3620", "CVE-2024-39929", "CVE-2023-42114", "CVE-2023-42115", "CVE-2025-67896", "CVE-2023-42117", "CVE-2022-3559", "CVE-2022-37451", "CVE-2023-42116", "CVE-2023-42119", "CVE-2023-51766"], "hostnames": ["marsha9murray"], "tags": ["starttls", "self-signed"], "cpes": ["cpe:/a:f5:nginx:1.28.2", "cpe:/a:exim:exim:4.95", "cpe:/a:f5:nginx", "cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}

hosting_provider:
  cpe:/a:f5:nginx:1.28.2,cpe:/a:exim:exim:4.95,cpe:/a:f5:nginx,cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux


indicator: 78.40.116.102
indicator_type: ipv4
source: shodan
city: eol-product
hosting_provider: cpe:/o:canonical:ubuntu_linux,cpe:/o:linux:linux_kernel,cpe:/a:f5:nginx:1.24.0
queried_at: 2026-05-27T18:06:30.661903
raw_data:
  {"ports": [80], "vulns": ["CVE-2023-44487", "CVE-2025-23419"], "hostnames": [], "tags": ["eol-product"], "cpes": ["cpe:/o:canonical:ubuntu_linux", "cpe:/o:linux:linux_kernel", "cpe:/a:f5:nginx:1.24.0"]}


indicator: 78.40.116.114
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: my.com,st-8.dog-app.com
queried_at: 2026-05-27T18:06:32.453410
raw_data:
  {"ports": [22, 443], "vulns": ["CVE-2025-23419", "CVE-2023-44487"], "hostnames": ["my.com", "st-8.dog-app.com"], "tags": ["eol-product"], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx:1.24.0"]}

hosting_provider:
[cell repeats an earlier one in this file: 107 characters]


indicator: 78.40.116.136
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: se6.dedushka.top,akashi.vk-portal.net
hosting_provider: cpe:/a:f5:nginx:1.27.0
queried_at: 2026-05-27T18:06:38.007715
raw_data:
  {"ports": [443, 4443, 8080, 8443, 9191], "vulns": ["CVE-2025-23419"], "hostnames": ["se6.dedushka.top", "akashi.vk-portal.net"], "tags": ["eol-product"], "cpes": ["cpe:/a:f5:nginx:1.27.0"]}


indicator: 78.40.116.151
indicator_type: ipv4
source: shodan
reverse_dns: hostval.com
hosting_provider: cpe:/a:apache:http_server:2.4.52,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T18:06:39.769583
raw_data:
  {"ports": [80], "vulns": ["CVE-2025-53020", "CVE-2022-22721", "CVE-2023-45802", "CVE-2025-55753", "CVE-2025-66200", "CVE-2006-20001", "CVE-2025-23048", "CVE-2013-0942", "CVE-2023-31122", "CVE-2024-38472", "CVE-2024-38473", "CVE-2022-30556", "CVE-2024-39573", "CVE-2024-27316", "CVE-2022-23943", "CVE-2023-25690", "CVE-2022-22719", "CVE-2022-36760", "CVE-2024-38474", "CVE-2024-40898", "CVE-2011-1176", "CVE-2024-43204", "CVE-2022-28614", "CVE-2009-2299", "CVE-2012-4360", "CVE-2009-0796", "CVE-2013-2


indicator: 78.40.116.2
indicator_type: ipv4
source: shodan
reverse_dns: bshorts-app.bastyon.ir,bastyon.ir,downloader.bastyon.ir,apptest.bastyon.ir,bible.bastyon.ir
hosting_provider: cpe:/a:f5:nginx
queried_at: 2026-05-27T18:06:45.050148
raw_data:
  {"ports": [80, 443], "vulns": [], "hostnames": ["bshorts-app.bastyon.ir", "bastyon.ir", "downloader.bastyon.ir", "apptest.bastyon.ir", "bible.bastyon.ir"], "tags": [], "cpes": ["cpe:/a:f5:nginx"]}


indicator: 78.40.116.230
indicator_type: ipv4
source: shodan
reverse_dns: sweden.vps
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx
queried_at: 2026-05-27T18:06:50.370842
raw_data:
  {"ports": [22, 80], "vulns": [], "hostnames": ["sweden.vps"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx"]}


indicator: 78.40.116.231
indicator_type: ipv4
source: shodan
city: self-signed,starttls
reverse_dns: wsodl
hosting_provider: cpe:/o:canonical:ubuntu_linux,cpe:/a:apache:http_server:2.4.58,cpe:/a:postfix:postfix
queried_at: 2026-05-27T18:06:52.151037
raw_data:
  {"ports": [25, 80], "vulns": ["CVE-2025-53020", "CVE-2025-55753", "CVE-2025-66200", "CVE-2025-23048", "CVE-2013-0942", "CVE-2024-38472", "CVE-2024-38473", "CVE-2024-36387", "CVE-2024-39573", "CVE-2026-29169", "CVE-2026-24072", "CVE-2024-27316", "CVE-2026-33857", "CVE-2026-34059", "CVE-2026-33006", "CVE-2026-33523", "CVE-2024-38474", "CVE-2024-40898", "CVE-2011-1176", "CVE-2024-43204", "CVE-2009-2299", "CVE-2012-4360", "CVE-2026-34032", "CVE-2009-0796", "CVE-2013-2765", "CVE-2012-3526", "CVE-2024


indicator: 78.40.116.238
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: TRAINER.SITES21
queried_at: 2026-05-27T18:06:53.913441
raw_data:
  {"ports": [22, 80, 8443], "vulns": [], "hostnames": ["TRAINER.SITES21"], "tags": ["self-signed"], "cpes": ["cpe:/a:jquery:jquery", "cpe:/a:f5:nginx", "cpe:/a:openbsd:openssh:8.9p1", "cpe:/a:getbootstrap:bootstrap", "cpe:/o:canonical:ubuntu_linux"]}

hosting_provider:
  cpe:/a:jquery:jquery,cpe:/a:f5:nginx,cpe:/a:openbsd:openssh:8.9p1,cpe:/a:getbootstrap:bootstrap,cpe:/o:canonical:ubuntu_linux


indicator: 78.40.116.241
indicator_type: ipv4
source: shodan
reverse_dns: common
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx
queried_at: 2026-05-27T18:06:55.736110
raw_data:
  {"ports": [22, 9100, 9200], "vulns": [], "hostnames": ["common"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx"]}


indicator: 78.40.116.25
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: akashi.vk-portal.net,se4.dedushka.top,s4.dedushka.top
hosting_provider: cpe:/a:jquery:jquery:3.5.1,cpe:/a:getbootstrap:bootstrap,cpe:/a:f5:nginx:1.27.0
queried_at: 2026-05-27T18:06:57.531794
raw_data:
  {"ports": [443, 2083, 8080, 8443, 9100, 9200], "vulns": ["CVE-2025-23419"], "hostnames": ["akashi.vk-portal.net", "se4.dedushka.top", "s4.dedushka.top"], "tags": ["eol-product"], "cpes": ["cpe:/a:jquery:jquery:3.5.1", "cpe:/a:getbootstrap:bootstrap", "cpe:/a:f5:nginx:1.27.0"]}


indicator: 78.40.116.36
indicator_type: ipv4
source: shodan
reverse_dns: uvuvu.ru
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T18:06:59.315057
raw_data:
  {"ports": [22, 1080], "vulns": [], "hostnames": ["uvuvu.ru"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 78.40.116.48
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/a:apache:traffic_server
queried_at: 2026-05-27T18:07:02.841890
raw_data:
  {"ports": [443], "vulns": [], "hostnames": ["brb.yahoo.net", "ddl.fp.yahoo.com", "ca.my.yahoo.com", "ca.rogers.yahoo.com", "add.my.yahoo.com", "tw.rd.yahoo.com", "hk.rd.yahoo.com", "mbp.yimg.com", "fr-ca.rogers.yahoo.com", "s.yimg.com", "yahoo.com", "srv02.ridllc.pro"], "tags": [], "cpes": ["cpe:/a:apache:traffic_server"]}

reverse_dns:
  brb.yahoo.net,ddl.fp.yahoo.com,ca.my.yahoo.com,ca.rogers.yahoo.com,add.my.yahoo.com,tw.rd.yahoo.com,hk.rd.yahoo.com,mbp.yimg.com,fr-ca.rogers.yahoo.com,s.yimg.com,yahoo.com,srv02.ridllc.pro


indicator: 78.40.116.50
indicator_type: ipv4
source: shodan
city: starttls,self-signed
reverse_dns: jessica11hawkins
queried_at: 2026-05-27T18:07:04.633701
raw_data:
  {"ports": [22, 110, 443, 587, 8888], "vulns": ["CVE-2022-3620", "CVE-2026-40685", "CVE-2024-39929", "CVE-2023-42114", "CVE-2026-40684", "CVE-2023-42115", "CVE-2025-67896", "CVE-2026-40687", "CVE-2023-42117", "CVE-2022-3559", "CVE-2026-40686", "CVE-2023-42116", "CVE-2022-37451", "CVE-2023-42119", "CVE-2023-51766"], "hostnames": ["jessica11hawkins"], "tags": ["starttls", "self-signed"], "cpes": ["cpe:/a:f5:nginx:1.28.2", "cpe:/a:exim:exim:4.95", "cpe:/a:f5:nginx", "cpe:/a:openbsd:openssh:8.9p1", "

hosting_provider:
  cpe:/a:f5:nginx:1.28.2,cpe:/a:exim:exim:4.95,cpe:/a:f5:nginx,cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux


indicator: 78.40.116.69
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: tippiscalc.com
queried_at: 2026-05-27T18:07:08.194551
raw_data:
  {"ports": [22, 443, 8443], "vulns": [], "hostnames": ["tippiscalc.com"], "tags": ["self-signed"], "cpes": ["cpe:/a:jquery:jquery", "cpe:/a:f5:nginx", "cpe:/a:getbootstrap:bootstrap", "cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}

hosting_provider:
  cpe:/a:jquery:jquery,cpe:/a:f5:nginx,cpe:/a:getbootstrap:bootstrap,cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux


indicator: 78.40.116.73
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: ae1-64.sto-cr1.retn.ltd,gate
queried_at: 2026-05-27T18:07:09.977609
raw_data:
  {"ports": [22, 443], "vulns": ["CVE-2024-3566", "CVE-2025-14180", "CVE-2024-11234", "CVE-2013-2220", "CVE-2024-11233", "CVE-2019-0190", "CVE-2009-3767", "CVE-2023-5678", "CVE-2024-8927", "CVE-2007-4723", "CVE-2024-8926", "CVE-2025-49630", "CVE-2026-33857", "CVE-2024-36387", "CVE-2024-47252", "CVE-2024-8929", "CVE-2024-40898", "CVE-2011-2688", "CVE-2009-1390", "CVE-2025-23048", "CVE-2025-1736", "CVE-2024-27316", "CVE-2024-11236", "CVE-2024-8932", "CVE-2020-11023", "CVE-2023-6129", "CVE-2024-43394

hosting_provider:
  cpe:/a:php:php:8.2.12,cpe:/a:jquery:jquery:1.10.2,cpe:/a:openssl:openssl:3.1.3,cpe:/a:apache:http_server:2.4.58,cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux


indicator: 78.40.116.92
indicator_type: ipv4
source: shodan
city: database
reverse_dns: wgalex
hosting_provider: cpe:/o:canonical:ubuntu_linux,cpe:/a:apache:http_server:2.4.41,cpe:/a:oracle:mysql
queried_at: 2026-05-27T18:07:13.523256
raw_data:
  {"ports": [80, 3306], "vulns": ["CVE-2021-44224", "CVE-2021-30641", "CVE-2022-28614", "CVE-2007-4723", "CVE-2025-49630", "CVE-2026-33857", "CVE-2024-47252", "CVE-2021-32786", "CVE-2020-35452", "CVE-2024-40898", "CVE-2020-13938", "CVE-2011-2688", "CVE-2019-17567", "CVE-2025-23048", "CVE-2022-28330", "CVE-2024-27316", "CVE-2022-26377", "CVE-2020-9490", "CVE-2021-33193", "CVE-2022-22721", "CVE-2022-31813", "CVE-2024-43394", "CVE-2023-45802", "CVE-2023-38709", "CVE-2021-32785", "CVE-2025-65082", "CV


indicator: 78.40.117.118
indicator_type: ipv4
source: shodan
reverse_dns: vps8.com
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T18:07:15.318748
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["vps8.com"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 78.40.117.147
indicator_type: ipv4
source: shodan
city: self-signed,starttls
reverse_dns: 1gocasino-at.com,europa7
queried_at: 2026-05-27T18:07:20.690582
raw_data:
  {"ports": [21, 22, 443], "vulns": [], "hostnames": ["1gocasino-at.com", "europa7"], "tags": ["self-signed", "starttls"], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/a:pureftpd:pure-ftpd", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx"]}

hosting_provider:
  cpe:/a:openbsd:openssh:8.9p1,cpe:/a:pureftpd:pure-ftpd,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx


indicator: 78.40.117.156
indicator_type: ipv4
source: shodan
reverse_dns: dfctnet.com
hosting_provider: cpe:/o:debian:debian_linux,cpe:/o:linux:linux_kernel,cpe:/a:openbsd:openssh:10.0p2
queried_at: 2026-05-27T18:07:22.491388
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["dfctnet.com"], "tags": [], "cpes": ["cpe:/o:debian:debian_linux", "cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:10.0p2"]}


indicator: 78.40.117.21
indicator_type: ipv4
source: shodan
reverse_dns: neo.sweden.com.se
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T18:07:24.339114
raw_data:
  {"ports": [22, 80], "vulns": [], "hostnames": ["neo.sweden.com.se"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 78.40.117.229
indicator_type: ipv4
source: shodan
reverse_dns: neo.sweden.com.se,images.apple.com
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T18:07:26.111814
raw_data:
  {"ports": [22, 80, 8443, 9443], "vulns": [], "hostnames": ["neo.sweden.com.se", "images.apple.com"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 78.40.117.245
indicator_type: ipv4
source: shodan
reverse_dns: alghafmarine.com
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux,cpe:/a:apache:http_server:2.4.52
queried_at: 2026-05-27T18:07:29.695092
raw_data:
  {"ports": [22, 80], "vulns": ["CVE-2023-31122", "CVE-2022-31813", "CVE-2024-43394", "CVE-2023-45802", "CVE-2023-38709", "CVE-2024-38473", "CVE-2022-22721", "CVE-2023-25690", "CVE-2024-42516", "CVE-2025-55753", "CVE-2024-43204", "CVE-2025-65082", "CVE-2025-53020", "CVE-2013-0942", "CVE-2024-38472", "CVE-2024-38475", "CVE-2022-28614", "CVE-2012-4001", "CVE-2009-2299", "CVE-2022-36760", "CVE-2007-4723", "CVE-2025-49630", "CVE-2024-38474", "CVE-2024-47252", "CVE-2012-3526", "CVE-2022-28615", "CVE-20


indicator: 78.40.117.248
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: ddex,web-socket-api.com
hosting_provider: cpe:/a:php:php:8.1.34,cpe:/a:f5:nginx:1.29.1
queried_at: 2026-05-27T18:07:31.475146
raw_data:
  {"ports": [80, 443, 5007], "vulns": ["CVE-2007-3205", "CVE-2024-3566", "CVE-2013-2220"], "hostnames": ["ddex", "web-socket-api.com"], "tags": ["eol-product"], "cpes": ["cpe:/a:php:php:8.1.34", "cpe:/a:f5:nginx:1.29.1"]}


indicator: 78.40.117.41
indicator_type: ipv4
source: shodan
reverse_dns: swe1.tssv.link,swe.tssv.link
hosting_provider: cpe:/a:f5:nginx
queried_at: 2026-05-27T18:07:35.047018
raw_data:
  {"ports": [80, 443], "vulns": [], "hostnames": ["swe1.tssv.link", "swe.tssv.link"], "tags": [], "cpes": ["cpe:/a:f5:nginx"]}


indicator: 78.40.117.82
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/a:microsoft:internet_information_services:10.0,cpe:/o:microsoft:windows
queried_at: 2026-05-27T18:07:42.124734
raw_data:
  {"ports": [80, 135], "vulns": [], "hostnames": [], "tags": [], "cpes": ["cpe:/a:microsoft:internet_information_services:10.0", "cpe:/o:microsoft:windows"]}


indicator: 81.180.92.106
indicator_type: ipv4
source: shodan
reverse_dns: krone.evnk.io
hosting_provider: cpe:/a:openbsd:openssh
queried_at: 2026-05-27T18:07:45.686693
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["krone.evnk.io"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh"]}


indicator: 81.180.92.155
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: crm.masna.marketing
queried_at: 2026-05-27T18:07:51.108494
raw_data:
  {"ports": [22, 80, 8080], "vulns": ["CVE-2023-44487", "CVE-2025-23419"], "hostnames": ["crm.masna.marketing"], "tags": ["eol-product"], "cpes": ["cpe:/a:f5:nginx:1.24.0", "cpe:/a:php:php:8.4.19", "cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/o:linux:linux_kernel"]}

hosting_provider:
  cpe:/a:f5:nginx:1.24.0,cpe:/a:php:php:8.4.19,cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux,cpe:/o:linux:linux_kernel


indicator: 81.180.92.213
indicator_type: ipv4
source: shodan
city: self-signed,starttls
reverse_dns: glpai
hosting_provider: cpe:/a:exim:exim:4.95
queried_at: 2026-05-27T18:07:54.730240
raw_data:
  {"ports": [25, 53, 143, 465], "vulns": ["CVE-2023-42117", "CVE-2023-42114", "CVE-2025-67896", "CVE-2022-37451", "CVE-2023-42115", "CVE-2026-40686", "CVE-2026-40684", "CVE-2024-39929", "CVE-2022-3620", "CVE-2022-3559", "CVE-2023-51766", "CVE-2023-42116", "CVE-2026-40687", "CVE-2023-42119", "CVE-2026-40685"], "hostnames": ["glpai"], "tags": ["self-signed", "starttls"], "cpes": ["cpe:/a:exim:exim:4.95"]}


indicator: 81.180.92.38
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: vvproxy-alxhstrm-2.prod.veoveo.tech
hosting_provider: cpe:/o:linux:linux_kernel,cpe:/a:openbsd:openssh:9.2p1,cpe:/a:f5:nginx,cpe:/o:debian:debian_linux
queried_at: 2026-05-27T18:07:58.286836
raw_data:
  {"ports": [22, 80, 443, 8080], "vulns": [], "hostnames": ["vvproxy-alxhstrm-2.prod.veoveo.tech"], "tags": ["self-signed"], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:9.2p1", "cpe:/a:f5:nginx", "cpe:/o:debian:debian_linux"]}


indicator: 81.180.92.86
indicator_type: ipv4
source: shodan
reverse_dns: romania
queried_at: 2026-05-27T18:08:03.688870
raw_data:
  {"ports": [80], "vulns": ["CVE-2023-31122", "CVE-2022-31813", "CVE-2020-11023", "CVE-2024-43394", "CVE-2023-45802", "CVE-2020-11022", "CVE-2026-24072", "CVE-2026-34059", "CVE-2024-38473", "CVE-2023-38709", "CVE-2022-22721", "CVE-2023-25690", "CVE-2024-42516", "CVE-2025-55753", "CVE-2024-43204", "CVE-2025-65082", "CVE-2025-53020", "CVE-2013-0942", "CVE-2026-33523", "CVE-2024-38472", "CVE-2026-34032", "CVE-2024-38475", "CVE-2022-28614", "CVE-2012-4001", "CVE-2009-2299", "CVE-2022-36760", "CVE-2007

hosting_provider:
  cpe:/a:cloudflare:cloudflare,cpe:/a:jquery:jquery:2.1.3,cpe:/o:canonical:ubuntu_linux,cpe:/a:apache:http_server:2.4.52


indicator: 81.180.93.120
indicator_type: ipv4
source: shodan
reverse_dns: rom1
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T18:08:09.129317
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["rom1"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 81.180.93.124
indicator_type: ipv4
source: shodan
reverse_dns: zqd.gogobolaku.com
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx
queried_at: 2026-05-27T18:08:10.923915
raw_data:
  {"ports": [22, 25, 80], "vulns": [], "hostnames": ["zqd.gogobolaku.com"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx"]}


indicator: 81.180.93.167
indicator_type: ipv4
source: shodan
city: tor
reverse_dns: alpenwall.codeberg.page
queried_at: 2026-05-27T18:08:12.723683
raw_data:
  {"ports": [443], "vulns": [], "hostnames": ["alpenwall.codeberg.page"], "tags": ["tor"], "cpes": []}


indicator: 81.180.93.178
indicator_type: ipv4
source: shodan
reverse_dns: www.repskillers.com,repskillers.com,wp.repskillers.com,cutegirlclub.com
hosting_provider: cpe:/a:openresty:openresty,cpe:/a:f5:nginx
queried_at: 2026-05-27T18:08:14.498946
raw_data:
  {"ports": [80, 443], "vulns": [], "hostnames": ["www.repskillers.com", "repskillers.com", "wp.repskillers.com", "cutegirlclub.com"], "tags": [], "cpes": ["cpe:/a:openresty:openresty", "cpe:/a:f5:nginx"]}


indicator: 81.180.93.54
indicator_type: ipv4
source: shodan
reverse_dns: mirror-dms-alxhst-9.prod.dats.host,1r4o1ex50dmst.com
hosting_provider: cpe:/a:f5:nginx
queried_at: 2026-05-27T18:08:19.829898
raw_data:
  {"ports": [80, 443], "vulns": [], "hostnames": ["mirror-dms-alxhst-9.prod.dats.host", "1r4o1ex50dmst.com"], "tags": [], "cpes": ["cpe:/a:f5:nginx"]}


indicator: 81.180.93.83
indicator_type: ipv4
source: shodan
reverse_dns: oglenyaboss
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T18:08:21.642873
raw_data:
  {"ports": [22, 80], "vulns": [], "hostnames": ["oglenyaboss"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 85.120.81.151
indicator_type: ipv4
source: shodan
city: starttls,database,self-signed
reverse_dns: tomttovskaya.com
hosting_provider: cpe:/a:exim:exim:4.96,cpe:/a:oracle:mysql,cpe:/a:f5:nginx:1.28.0,cpe:/a:f5:nginx
queried_at: 2026-05-27T18:08:43.053571
raw_data:
  {"ports": [21, 25, 80, 143, 443, 465, 587, 993, 3306, 7777], "vulns": ["CVE-2022-3620", "CVE-2026-40685", "CVE-2024-39929", "CVE-2023-42114", "CVE-2026-40684", "CVE-2023-42115", "CVE-2025-67896", "CVE-2026-40687", "CVE-2025-30232", "CVE-2023-42117", "CVE-2022-3559", "CVE-2026-40686", "CVE-2023-42116", "CVE-2023-42119", "CVE-2023-51766"], "hostnames": ["tomttovskaya.com"], "tags": ["starttls", "database", "self-signed"], "cpes": ["cpe:/a:exim:exim:4.96", "cpe:/a:oracle:mysql", "cpe:/a:f5:nginx:1.


indicator: 85.120.81.163
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: jobdaheim.online
hosting_provider: cpe:/o:canonical:ubuntu_linux,cpe:/o:linux:linux_kernel,cpe:/a:f5:nginx:1.24.0
queried_at: 2026-05-27T18:08:44.862394
raw_data:
  {"ports": [443], "vulns": ["CVE-2023-44487", "CVE-2025-23419"], "hostnames": ["jobdaheim.online"], "tags": ["eol-product"], "cpes": ["cpe:/o:canonical:ubuntu_linux", "cpe:/o:linux:linux_kernel", "cpe:/a:f5:nginx:1.24.0"]}


indicator: 85.120.81.180
indicator_type: ipv4
source: shodan
city: self-signed,starttls
reverse_dns: playbestgames.ca
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/a:f5:nginx
queried_at: 2026-05-27T18:08:46.660551
raw_data:
  {"ports": [21, 22, 25, 53, 80, 110, 465, 587, 993, 995], "vulns": [], "hostnames": ["playbestgames.ca"], "tags": ["self-signed", "starttls"], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/a:f5:nginx"]}


indicator: 85.120.81.184
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: jpseo-01-12,kokuchain-ai.org
queried_at: 2026-05-27T18:08:48.435456
raw_data:
  {"ports": [22, 80, 443], "vulns": ["CVE-2025-23419", "CVE-2023-44487"], "hostnames": ["jpseo-01-12", "kokuchain-ai.org"], "tags": ["eol-product"], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx:1.24.0"]}

hosting_provider:
[cell repeats an earlier one in this file: 107 characters]


indicator: 85.120.81.193
indicator_type: ipv4
source: shodan
queried_at: 2026-05-27T18:08:50.216108
raw_data:
  {"ports": [22, 80], "vulns": [], "hostnames": [], "tags": [], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:9.2p1", "cpe:/a:apache:http_server", "cpe:/o:debian:debian_linux"]}

hosting_provider:
  cpe:/o:linux:linux_kernel,cpe:/a:openbsd:openssh:9.2p1,cpe:/a:apache:http_server,cpe:/o:debian:debian_linux


indicator: 85.120.81.233
indicator_type: ipv4
source: shodan
reverse_dns: fran5.symbolhost.com
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T18:08:55.664036
raw_data:
  {"ports": [22, 80], "vulns": [], "hostnames": ["fran5.symbolhost.com"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 85.120.81.246
indicator_type: ipv4
source: shodan
reverse_dns: myvds.vsd
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T18:08:57.434663
raw_data:
  {"ports": [22, 443], "vulns": [], "hostnames": ["myvds.vsd"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 85.120.81.253
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: myawesomesender.lol
queried_at: 2026-05-27T18:08:59.193441
raw_data:
  {"ports": [80], "vulns": ["CVE-2025-23419", "CVE-2023-44487"], "hostnames": ["myawesomesender.lol"], "tags": ["eol-product"], "cpes": ["cpe:/a:f5:nginx:1.24.0", "cpe:/o:linux:linux_kernel", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:nodejs:nodejs", "cpe:/a:n8n:n8n"]}

hosting_provider:
  cpe:/a:f5:nginx:1.24.0,cpe:/o:linux:linux_kernel,cpe:/o:canonical:ubuntu_linux,cpe:/a:nodejs:nodejs,cpe:/a:n8n:n8n


indicator: 85.120.81.91
indicator_type: ipv4
source: shodan
reverse_dns: pe9.shop,gpt.sina-website-info.ir
queried_at: 2026-05-27T18:09:04.605481
raw_data:
  {"ports": [443], "vulns": [], "hostnames": ["pe9.shop", "gpt.sina-website-info.ir"], "tags": [], "cpes": []}


indicator: 85.121.149.144
indicator_type: ipv4
source: shodan
city: starttls
queried_at: 2026-05-27T18:09:08.165585
raw_data:
  {"ports": [21, 80, 2082, 2083, 2086, 2087], "vulns": [], "hostnames": ["cpanel.glorious-scarlet-penguin.85-121-149-144.cpanel.site", "cpcontacts.glorious-scarlet-penguin.85-121-149-144.cpanel.site", "falcon.u-dns.net", "cpcalendars.glorious-scarlet-penguin.85-121-149-144.cpanel.site", "autodiscover.glorious-scarlet-penguin.85-121-149-144.cpanel.site", "mail.glorious-scarlet-penguin.85-121-149-144.cpanel.site", "webdisk.glorious-scarlet-penguin.85-121-149-144.cpanel.site", "glorious-scarlet-pengu

reverse_dns:
  cpanel.glorious-scarlet-penguin.85-121-149-144.cpanel.site,cpcontacts.glorious-scarlet-penguin.85-121-149-144.cpanel.site,falcon.u-dns.net,cpcalendars.glorious-scarlet-penguin.85-121-149-144.cpanel.site,autodiscover.glorious-scarlet-penguin.85-121-149-144.cpanel.site,mail.glorious-scarlet-penguin.85-121-149-144.cpanel.site,webdisk.glorious-scarlet-penguin.85-121-149-144.cpanel.site,glorious-scarlet-penguin.85-121-149-144.cpanel.site,webmail.glorious-scarlet-penguin.85-121-149-144.cpanel.site,www

hosting_provider:
  cpe:/a:openresty:openresty:1.29.2.3,cpe:/a:pureftpd:pure-ftpd,cpe:/a:f5:nginx,cpe:/a:openresty:openresty:1.27.1.1


indicator: 85.121.149.147
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/a:microsoft:internet_information_services:10.0,cpe:/o:microsoft:windows
queried_at: 2026-05-27T18:09:09.973654
raw_data:
  {"ports": [80], "vulns": [], "hostnames": [], "tags": [], "cpes": ["cpe:/a:microsoft:internet_information_services:10.0", "cpe:/o:microsoft:windows"]}


indicator: 85.121.149.152
indicator_type: ipv4
source: shodan
reverse_dns: mirror-dms-alxhst-1.prod.dats.host
queried_at: 2026-05-27T18:09:11.741173
raw_data:
  {"ports": [80, 443], "vulns": [], "hostnames": ["mirror-dms-alxhst-1.prod.dats.host"], "tags": [], "cpes": []}


indicator: 85.121.149.196
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: benim.uzakpc1.com
queried_at: 2026-05-27T18:09:17.036560
raw_data:
  {"ports": [3389], "vulns": [], "hostnames": ["benim.uzakpc1.com"], "tags": ["self-signed"], "cpes": []}


indicator: 85.121.149.205
indicator_type: ipv4
source: shodan
city: self-signed,starttls
hosting_provider: cpe:/a:f5:nginx:1.28.2,cpe:/a:exim:exim:4.99.1
queried_at: 2026-05-27T18:09:18.809350
raw_data:
  {"ports": [110, 443, 587, 993], "vulns": ["CVE-2026-40686", "CVE-2026-40684", "CVE-2026-40687", "CVE-2026-40685"], "hostnames": [], "tags": ["self-signed", "starttls"], "cpes": ["cpe:/a:f5:nginx:1.28.2", "cpe:/a:exim:exim:4.99.1"]}


indicator: 85.121.149.248
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: server.trcuzdanpuan.com,trcuzdanpuan.com
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux,cpe:/a:apache:http_server
queried_at: 2026-05-27T18:09:22.351709
raw_data:
  {"ports": [22, 443], "vulns": [], "hostnames": ["server.trcuzdanpuan.com", "trcuzdanpuan.com"], "tags": ["self-signed"], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:apache:http_server"]}


indicator: 85.121.149.29
indicator_type: ipv4
source: shodan
city: eol-product
hosting_provider: cpe:/a:f5:nginx,cpe:/a:php:php:7.4.33
queried_at: 2026-05-27T18:09:24.239663
raw_data:
  {"ports": [25, 80, 443], "vulns": ["CVE-2007-3205", "CVE-2024-25117", "CVE-2024-3566", "CVE-2024-5458", "CVE-2013-2220", "CVE-2022-4900"], "hostnames": ["server.valeria.com", "mta-sts.oregonbuildernetwork.com", "oregonbuildernetwork.com", "www.oregonbuildernetwork.com"], "tags": ["eol-product"], "cpes": ["cpe:/a:f5:nginx", "cpe:/a:php:php:7.4.33"]}

reverse_dns:
  server.valeria.com,mta-sts.oregonbuildernetwork.com,oregonbuildernetwork.com,www.oregonbuildernetwork.com


indicator: 85.121.149.78
indicator_type: ipv4
source: shodan
city: self-signed,starttls
hosting_provider: cpe:/a:f5:nginx
queried_at: 2026-05-27T18:09:33.121353
raw_data:
  {"ports": [25, 53, 80, 110, 443, 465, 587, 993, 995, 8083], "vulns": [], "hostnames": [], "tags": ["self-signed", "starttls"], "cpes": ["cpe:/a:f5:nginx"]}


indicator: 85.121.149.8
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: btc.blockbook.st
queried_at: 2026-05-27T18:09:34.933373
raw_data:
  {"ports": [22, 443], "vulns": ["CVE-2023-44487", "CVE-2021-23017", "CVE-2021-3618", "CVE-2025-23419"], "hostnames": ["btc.blockbook.st"], "tags": ["eol-product"], "cpes": ["cpe:/a:openbsd:openssh:8.4p1", "cpe:/a:f5:nginx:1.18.0", "cpe:/o:linux:linux_kernel", "cpe:/o:debian:debian_linux"]}

hosting_provider:
  cpe:/a:openbsd:openssh:8.4p1,cpe:/a:f5:nginx:1.18.0,cpe:/o:linux:linux_kernel,cpe:/o:debian:debian_linux


indicator: 85.121.4.175
indicator_type: ipv4
source: shodan
reverse_dns: test-vps.de
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T18:09:49.121373
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["test-vps.de"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 85.121.4.234
indicator_type: ipv4
source: shodan
city: starttls
reverse_dns: mx234.2nightlove.info,mx122.hothearts.info
hosting_provider: cpe:/a:postfix:postfix
queried_at: 2026-05-27T18:09:59.720927
raw_data:
  {"ports": [25], "vulns": [], "hostnames": ["mx234.2nightlove.info", "mx122.hothearts.info"], "tags": ["starttls"], "cpes": ["cpe:/a:postfix:postfix"]}


indicator: 85.121.4.240
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: xup.in
hosting_provider: cpe:/a:f5:nginx
queried_at: 2026-05-27T18:10:01.538238
raw_data:
  {"ports": [443], "vulns": [], "hostnames": ["xup.in"], "tags": ["self-signed"], "cpes": ["cpe:/a:f5:nginx"]}


indicator: 85.121.4.33
indicator_type: ipv4
source: shodan
reverse_dns: aiden.su
hosting_provider: cpe:/o:debian:debian_linux,cpe:/a:apache:http_server:2.4.67
queried_at: 2026-05-27T18:10:07.248746
raw_data:
  {"ports": [80, 443, 10050], "vulns": [], "hostnames": ["aiden.su"], "tags": [], "cpes": ["cpe:/o:debian:debian_linux", "cpe:/a:apache:http_server:2.4.67"]}


indicator: 85.121.4.4
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: fullzinfo.info,aidf.online
queried_at: 2026-05-27T18:10:09.091706
raw_data:
  {"ports": [80, 443], "vulns": ["CVE-2022-31629", "CVE-2007-3205", "CVE-2024-25117", "CVE-2019-9637", "CVE-2017-8923", "CVE-2018-19396", "CVE-2019-9641", "CVE-2013-2220", "CVE-2020-11579", "CVE-2015-9253", "CVE-2019-9638", "CVE-2017-7963", "CVE-2024-3566", "CVE-2017-7272", "CVE-2018-19395", "CVE-2019-9639", "CVE-2022-31628", "CVE-2022-4900"], "hostnames": ["fullzinfo.info", "aidf.online"], "tags": ["eol-product"], "cpes": ["cpe:/a:getbootstrap:bootstrap", "cpe:/a:jquery:jquery_ui:1.10.2", "cpe:/a

hosting_provider:
  cpe:/a:getbootstrap:bootstrap,cpe:/a:jquery:jquery_ui:1.10.2,cpe:/a:php:php:5.6.40,cpe:/a:f5:nginx,cpe:/a:jquery:jquery


indicator: 85.121.4.90
indicator_type: ipv4
source: shodan
city: database
reverse_dns: mosseba.com,finisseur.net
hosting_provider: cpe:/a:oracle:mysql:8.0.45-0ubuntu0.24.04.1,cpe:/a:f5:nginx
queried_at: 2026-05-27T18:10:12.854973
raw_data:
  {"ports": [443, 3306], "vulns": [], "hostnames": ["mosseba.com", "finisseur.net"], "tags": ["database"], "cpes": ["cpe:/a:oracle:mysql:8.0.45-0ubuntu0.24.04.1", "cpe:/a:f5:nginx"]}


indicator: 85.121.5.105
indicator_type: ipv4
source: shodan
city: starttls,self-signed
hosting_provider: cpe:/a:exim:exim:4.95,cpe:/a:f5:nginx
queried_at: 2026-05-27T18:10:14.749412
raw_data:
  {"ports": [21, 143, 465, 587, 993, 995, 7777], "vulns": ["CVE-2022-3620", "CVE-2026-40685", "CVE-2024-39929", "CVE-2023-42114", "CVE-2026-40684", "CVE-2023-42115", "CVE-2025-67896", "CVE-2026-40687", "CVE-2023-42117", "CVE-2022-3559", "CVE-2026-40686", "CVE-2023-42116", "CVE-2022-37451", "CVE-2023-42119", "CVE-2023-51766"], "hostnames": [], "tags": ["starttls", "self-signed"], "cpes": ["cpe:/a:exim:exim:4.95", "cpe:/a:f5:nginx"]}


indicator: 85.121.5.110
indicator_type: ipv4
source: shodan
city: self-signed,eol-product
queried_at: 2026-05-27T18:10:17.048187
raw_data:
  {"ports": [21, 80, 10000], "vulns": ["CVE-2020-35452", "CVE-2016-4975", "CVE-2021-39275", "CVE-2016-8743", "CVE-2024-38472", "CVE-2022-30556", "CVE-2019-11358", "CVE-2018-1303", "CVE-2022-4900", "CVE-2022-23943", "CVE-2016-2161", "CVE-2009-2299", "CVE-2013-5704", "CVE-2018-1283", "CVE-2012-4360", "CVE-2009-0796", "CVE-2015-0228", "CVE-2024-3566", "CVE-2015-9251", "CVE-2020-1934", "CVE-2017-7679", "CVE-2016-5387", "CVE-2020-11022", "CVE-2021-32785", "CVE-2013-4365", "CVE-2016-8612", "CVE-2007-472

hosting_provider:
  cpe:/a:webmin:webmin,cpe:/a:perl:perl,cpe:/a:jquery:jquery:1.11.0,cpe:/a:apache:http_server:2.4.6,cpe:/a:php:php:5.6.40,cpe:/o:centos:centos


indicator: 85.121.5.120
indicator_type: ipv4
source: shodan
city: self-signed,starttls
reverse_dns: crazychickenroad.online
hosting_provider: cpe:/a:f5:nginx
queried_at: 2026-05-27T18:10:18.897705
raw_data:
  {"ports": [21, 25, 53, 80, 443, 465, 587, 993, 995], "vulns": [], "hostnames": ["crazychickenroad.online"], "tags": ["self-signed", "starttls"], "cpes": ["cpe:/a:f5:nginx"]}


indicator: 85.121.5.155
indicator_type: ipv4
source: shodan
reverse_dns: cassian.mo
hosting_provider: cpe:/a:apache:http_server:2.4.67,cpe:/o:debian:debian_linux
queried_at: 2026-05-27T18:10:22.627727
raw_data:
  {"ports": [80, 443, 10050], "vulns": [], "hostnames": ["cassian.mo"], "tags": [], "cpes": ["cpe:/a:apache:http_server:2.4.67", "cpe:/o:debian:debian_linux"]}


indicator: 85.121.5.176
indicator_type: ipv4
source: shodan
reverse_dns: filifoto.com
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T18:10:24.568170
raw_data:
  {"ports": [22, 9876], "vulns": [], "hostnames": ["filifoto.com"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 85.121.5.183
indicator_type: ipv4
source: shodan
city: starttls,self-signed
reverse_dns: server2.anmail1.com
hosting_provider: cpe:/a:pureftpd:pure-ftpd,cpe:/a:litespeedtech:litespeed_web_server,cpe:/a:postfix:postfix
queried_at: 2026-05-27T18:10:26.579022
raw_data:
  {"ports": [21, 25, 110, 443, 587, 995, 8090], "vulns": [], "hostnames": ["server2.anmail1.com"], "tags": ["starttls", "self-signed"], "cpes": ["cpe:/a:pureftpd:pure-ftpd", "cpe:/a:litespeedtech:litespeed_web_server", "cpe:/a:postfix:postfix"]}


indicator: 85.121.5.188
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: analytics.monitor-picker.com,monitor-picker.com,www.monitor-picker.com
hosting_provider: cpe:/o:linux:linux_kernel,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx:1.24.0
queried_at: 2026-05-27T18:10:28.429454
raw_data:
  {"ports": [80, 443, 3001], "vulns": ["CVE-2025-23419", "CVE-2023-44487"], "hostnames": ["analytics.monitor-picker.com", "monitor-picker.com", "www.monitor-picker.com"], "tags": ["eol-product"], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx:1.24.0"]}


indicator: 85.121.5.206
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/o:canonical:ubuntu_linux,cpe:/a:openbsd:openssh:7.6p1
queried_at: 2026-05-27T18:10:30.401668
raw_data:
  {"ports": [22, 453, 465, 3002, 16403], "vulns": [], "hostnames": [], "tags": [], "cpes": ["cpe:/o:canonical:ubuntu_linux", "cpe:/a:openbsd:openssh:7.6p1"]}


indicator: 85.121.5.214
indicator_type: ipv4
source: shodan
reverse_dns: haproxy01.symbolhost.com
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T18:10:32.200846
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["haproxy01.symbolhost.com"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 85.121.5.249
indicator_type: ipv4
source: shodan
city: self-signed,starttls
reverse_dns: spielerparadies
hosting_provider: cpe:/a:f5:nginx
queried_at: 2026-05-27T18:10:35.953836
raw_data:
  {"ports": [21, 25, 80, 110, 465, 8083], "vulns": [], "hostnames": ["spielerparadies"], "tags": ["self-signed", "starttls"], "cpes": ["cpe:/a:f5:nginx"]}


indicator: 85.121.5.33
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: shen-1.com
hosting_provider: cpe:/a:f5:nginx:1.28.0
queried_at: 2026-05-27T18:10:37.768684
raw_data:
  {"ports": [80, 995], "vulns": [], "hostnames": ["shen-1.com"], "tags": ["self-signed"], "cpes": ["cpe:/a:f5:nginx:1.28.0"]}


indicator: 85.121.5.40
indicator_type: ipv4
source: shodan
city: starttls,self-signed
reverse_dns: vps-ig21.com,proidiopros.pro,www.proidiopros.pro
hosting_provider: cpe:/a:exim:exim:4.95,cpe:/a:f5:nginx
queried_at: 2026-05-27T18:10:39.649510
raw_data:
  {"ports": [21, 25, 53, 80, 110, 143, 443, 587, 993, 995], "vulns": ["CVE-2022-3620", "CVE-2026-40685", "CVE-2024-39929", "CVE-2023-42114", "CVE-2026-40684", "CVE-2023-42115", "CVE-2025-67896", "CVE-2026-40687", "CVE-2023-42117", "CVE-2022-3559", "CVE-2026-40686", "CVE-2023-42116", "CVE-2022-37451", "CVE-2023-42119", "CVE-2023-51766"], "hostnames": ["vps-ig21.com", "proidiopros.pro", "www.proidiopros.pro"], "tags": ["starttls", "self-signed"], "cpes": ["cpe:/a:exim:exim:4.95", "cpe:/a:f5:nginx"]}


indicator: 85.121.5.93
indicator_type: ipv4
source: shodan
reverse_dns: pablopepnov.com
hosting_provider: cpe:/a:cloudflare:cloudflare
queried_at: 2026-05-27T18:10:41.455228
raw_data:
  {"ports": [443], "vulns": [], "hostnames": ["pablopepnov.com"], "tags": [], "cpes": ["cpe:/a:cloudflare:cloudflare"]}


indicator: 91.186.212.134
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: max.ru
hosting_provider: cpe:/a:google:web_server
queried_at: 2026-05-27T18:10:47.050687
raw_data:
  {"ports": [443, 444, 8080], "vulns": [], "hostnames": ["max.ru"], "tags": ["self-signed"], "cpes": ["cpe:/a:google:web_server"]}


indicator: 91.186.212.137
indicator_type: ipv4
source: shodan
reverse_dns: intel.com
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T18:10:48.858919
raw_data:
  {"ports": [22, 443], "vulns": [], "hostnames": ["intel.com"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.186.212.189
indicator_type: ipv4
source: shodan
queried_at: 2026-05-27T18:11:05.571449
raw_data:
  {"ports": [22, 80], "vulns": [], "hostnames": [], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/a:golang:go", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:caddyserver:caddy"]}

hosting_provider:
  cpe:/a:openbsd:openssh:9.6p1,cpe:/a:golang:go,cpe:/o:canonical:ubuntu_linux,cpe:/a:caddyserver:caddy


indicator: 91.186.212.206
indicator_type: ipv4
source: shodan
city: vpn,self-signed
reverse_dns: mattermost.rnegafon.ru
hosting_provider: cpe:/a:golang:go,cpe:/a:facebook:react,cpe:/a:jenkins:mattermost
queried_at: 2026-05-27T18:11:09.180704
raw_data:
  {"ports": [80, 443, 444, 992, 1080, 1194, 9443], "vulns": [], "hostnames": ["mattermost.rnegafon.ru"], "tags": ["vpn", "self-signed"], "cpes": ["cpe:/a:golang:go", "cpe:/a:facebook:react", "cpe:/a:jenkins:mattermost"]}


indicator: 91.186.212.220
indicator_type: ipv4
source: shodan
city: self-signed
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/a:google:web_server,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T18:11:14.661388
raw_data:
  {"ports": [22, 443], "vulns": [], "hostnames": [], "tags": ["self-signed"], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/a:google:web_server", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.186.212.223
indicator_type: ipv4
source: shodan
city: self-signed
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T18:11:16.459122
raw_data:
  {"ports": [22, 80, 443, 8888], "vulns": [], "hostnames": [], "tags": ["self-signed"], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.186.212.233
indicator_type: ipv4
source: shodan
reverse_dns: habr.com
hosting_provider: cpe:/o:linux:linux_kernel,cpe:/a:openbsd:openssh:9.2p1,cpe:/o:debian:debian_linux
queried_at: 2026-05-27T18:11:18.255242
raw_data:
  {"ports": [22, 443, 9090], "vulns": [], "hostnames": ["habr.com"], "tags": [], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:9.2p1", "cpe:/o:debian:debian_linux"]}


indicator: 91.186.212.235
indicator_type: ipv4
source: shodan
city: self-signed
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/a:google:web_server,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T18:11:20.069110
raw_data:
  {"ports": [443, 2222], "vulns": [], "hostnames": [], "tags": ["self-signed"], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/a:google:web_server", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.186.212.24
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/o:debian:debian_linux,cpe:/a:openbsd:openssh:9.2p1,cpe:/o:linux:linux_kernel
queried_at: 2026-05-27T18:11:23.704540
raw_data:
  {"ports": [2222], "vulns": [], "hostnames": [], "tags": [], "cpes": ["cpe:/o:debian:debian_linux", "cpe:/a:openbsd:openssh:9.2p1", "cpe:/o:linux:linux_kernel"]}


indicator: 91.186.212.247
indicator_type: ipv4
source: shodan
reverse_dns: max.ru
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T18:11:25.488008
raw_data:
  {"ports": [22, 443, 8080], "vulns": [], "hostnames": ["max.ru"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.186.212.250
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: gateopener.ru
queried_at: 2026-05-27T18:11:27.266434
raw_data:
  {"ports": [443, 1883, 8000], "vulns": ["CVE-2023-44487", "CVE-2024-10525", "CVE-2024-8376", "CVE-2024-3935", "CVE-2025-23419"], "hostnames": ["gateopener.ru"], "tags": ["eol-product"], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/a:eclipse:mosquitto:2.0.18", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx:1.24.0"]}

hosting_provider:
  cpe:/o:linux:linux_kernel,cpe:/a:eclipse:mosquitto:2.0.18,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx:1.24.0


indicator: 91.186.212.49
indicator_type: ipv4
source: shodan
reverse_dns: www.github.com,github.com
hosting_provider: cpe:/o:debian:debian_linux,cpe:/a:openbsd:openssh:9.2p1,cpe:/o:linux:linux_kernel
queried_at: 2026-05-27T18:11:37.917687
raw_data:
  {"ports": [22, 443], "vulns": [], "hostnames": ["www.github.com", "github.com"], "tags": [], "cpes": ["cpe:/o:debian:debian_linux", "cpe:/a:openbsd:openssh:9.2p1", "cpe:/o:linux:linux_kernel"]}


indicator: 91.186.212.60
indicator_type: ipv4
source: shodan
queried_at: 2026-05-27T18:11:43.216287
raw_data:
  {"ports": [22, 443], "vulns": [], "hostnames": [], "tags": [], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:9.2p1", "cpe:/a:cloudflare:cloudflare", "cpe:/o:debian:debian_linux"]}

hosting_provider:
  cpe:/o:linux:linux_kernel,cpe:/a:openbsd:openssh:9.2p1,cpe:/a:cloudflare:cloudflare,cpe:/o:debian:debian_linux


indicator: 91.186.212.78
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: no-sni.vercel-infra.com
hosting_provider: cpe:/o:debian:debian_linux,cpe:/a:openbsd:openssh:9.2p1,cpe:/o:linux:linux_kernel,cpe:/a:f5:nginx
queried_at: 2026-05-27T18:11:52.067594
raw_data:
  {"ports": [22, 81, 443, 4443], "vulns": [], "hostnames": ["no-sni.vercel-infra.com"], "tags": ["self-signed"], "cpes": ["cpe:/o:debian:debian_linux", "cpe:/a:openbsd:openssh:9.2p1", "cpe:/o:linux:linux_kernel", "cpe:/a:f5:nginx"]}


indicator: 91.186.216.0
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: bank2.nabzekala.com
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T18:12:09.750969
raw_data:
  {"ports": [22, 53, 2083, 8443], "vulns": [], "hostnames": ["bank2.nabzekala.com"], "tags": ["self-signed"], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.186.216.100
indicator_type: ipv4
source: shodan
city: self-signed,database
reverse_dns: internalrat.ptr.network
hosting_provider: cpe:/a:oracle:mysql,cpe:/a:python:python:3.10
queried_at: 2026-05-27T18:12:11.541421
raw_data:
  {"ports": [3306, 3389, 5985, 7001, 8443, 8452, 33060], "vulns": ["CVE-2025-12084", "CVE-2021-32052", "CVE-2020-29396", "CVE-2025-13836", "CVE-2025-13837", "CVE-2026-4519", "CVE-2023-36632", "CVE-2009-3720", "CVE-2025-12781", "CVE-2009-2940"], "hostnames": ["internalrat.ptr.network"], "tags": ["self-signed", "database"], "cpes": ["cpe:/a:oracle:mysql", "cpe:/a:python:python:3.10"]}


indicator: 91.186.216.101
indicator_type: ipv4
source: shodan
reverse_dns: reserved-by-avm.ptr.network
hosting_provider: cpe:/o:debian:debian_linux,cpe:/a:openbsd:openssh:9.2p1,cpe:/o:linux:linux_kernel
queried_at: 2026-05-27T18:12:13.316200
raw_data:
  {"ports": [22, 8080], "vulns": [], "hostnames": ["reserved-by-avm.ptr.network"], "tags": [], "cpes": ["cpe:/o:debian:debian_linux", "cpe:/a:openbsd:openssh:9.2p1", "cpe:/o:linux:linux_kernel"]}


indicator: 91.186.216.104
indicator_type: ipv4
source: shodan
reverse_dns: accessible-bubble.ptr.network,dinogochi.ddns.net
hosting_provider: cpe:/a:redislabs:redis,cpe:/a:f5:nginx:1.29.8
queried_at: 2026-05-27T18:12:15.090981
raw_data:
  {"ports": [80, 443, 6379], "vulns": [], "hostnames": ["accessible-bubble.ptr.network", "dinogochi.ddns.net"], "tags": [], "cpes": ["cpe:/a:redislabs:redis", "cpe:/a:f5:nginx:1.29.8"]}


indicator: 91.186.216.105
indicator_type: ipv4
source: shodan
reverse_dns: reserved-by-avm.ptr.network
queried_at: 2026-05-27T18:12:16.874037
raw_data:
  {"ports": [1337], "vulns": [], "hostnames": ["reserved-by-avm.ptr.network"], "tags": [], "cpes": []}


indicator: 91.186.216.118
indicator_type: ipv4
source: shodan
reverse_dns: wanderingscience.ptr.network,reserved-by-avm.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T18:12:20.430975
raw_data:
  {"ports": [22, 8080], "vulns": [], "hostnames": ["wanderingscience.ptr.network", "reserved-by-avm.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.186.216.119
indicator_type: ipv4
source: shodan
reverse_dns: heartyicicle.ptr.network,max.ru
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T18:12:22.258382
raw_data:
  {"ports": [22, 444], "vulns": [], "hostnames": ["heartyicicle.ptr.network", "max.ru"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.186.216.122
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: reserved-by-avm.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T18:12:25.821842
raw_data:
  {"ports": [22, 8089], "vulns": [], "hostnames": ["reserved-by-avm.ptr.network"], "tags": ["self-signed"], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.186.216.125
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: reserved-by-avm.ptr.network
queried_at: 2026-05-27T18:12:27.637594
raw_data:
  {"ports": [22, 80], "vulns": ["CVE-2023-44487", "CVE-2021-23017", "CVE-2021-3618", "CVE-2025-23419"], "hostnames": ["reserved-by-avm.ptr.network"], "tags": ["eol-product"], "cpes": ["cpe:/a:f5:nginx:1.18.0", "cpe:/o:canonical:ubuntu_linux", "cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:8.9p1"]}

hosting_provider:
  cpe:/a:f5:nginx:1.18.0,cpe:/o:canonical:ubuntu_linux,cpe:/o:linux:linux_kernel,cpe:/a:openbsd:openssh:8.9p1


indicator: 91.186.216.130
indicator_type: ipv4
source: shodan
queried_at: 2026-05-27T18:12:31.242020
raw_data:
  {"ports": [443], "vulns": [], "hostnames": ["wwwqa.microsoft.com", "staticview.microsoft.com", "www.microsoft.com", "microsoft.com", "privacy.microsoft.com", "reserved-by-avm.ptr.network", "i.s-microsoft.com", "c.s-microsoft.com"], "tags": [], "cpes": []}

reverse_dns:
  wwwqa.microsoft.com,staticview.microsoft.com,www.microsoft.com,microsoft.com,privacy.microsoft.com,reserved-by-avm.ptr.network,i.s-microsoft.com,c.s-microsoft.com


indicator: 91.186.216.134
indicator_type: ipv4
source: shodan
reverse_dns: reserved-by-avm.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T18:12:33.038496
raw_data:
  {"ports": [22, 8090], "vulns": [], "hostnames": ["reserved-by-avm.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.186.216.140
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: reserved-by-avm.ptr.network
hosting_provider: cpe:/a:cloudflare:cloudflare,cpe:/a:google:web_server
queried_at: 2026-05-27T18:12:34.829662
raw_data:
  {"ports": [4433, 5000, 8080, 8083], "vulns": [], "hostnames": ["reserved-by-avm.ptr.network"], "tags": ["self-signed"], "cpes": ["cpe:/a:cloudflare:cloudflare", "cpe:/a:google:web_server"]}


indicator: 91.186.216.165
indicator_type: ipv4
source: shodan
reverse_dns: mindless-example.ptr.network,spawnex.com
hosting_provider: cpe:/a:f5:nginx
queried_at: 2026-05-27T18:12:36.595532
raw_data:
  {"ports": [443], "vulns": [], "hostnames": ["mindless-example.ptr.network", "spawnex.com"], "tags": [], "cpes": ["cpe:/a:f5:nginx"]}


indicator: 91.186.216.17
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: reserved-by-avm.ptr.network,hard-donkey.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/a:google:web_server,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T18:12:38.439069
raw_data:
  {"ports": [22, 4443], "vulns": [], "hostnames": ["reserved-by-avm.ptr.network", "hard-donkey.ptr.network"], "tags": ["self-signed"], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/a:google:web_server", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.186.216.199
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: bashful-power.ptr.network
queried_at: 2026-05-27T18:12:43.808122
raw_data:
  {"ports": [443, 5357, 5985], "vulns": [], "hostnames": ["bashful-power.ptr.network"], "tags": ["self-signed"], "cpes": ["cpe:/a:microsoft:internet_information_services:10.0", "cpe:/o:microsoft:windows", "cpe:/a:microsoft:asp.net", "cpe:/a:microsoft:internet_information_services"]}

hosting_provider:
  cpe:/a:microsoft:internet_information_services:10.0,cpe:/o:microsoft:windows,cpe:/a:microsoft:asp.net,cpe:/a:microsoft:internet_information_services


indicator: 91.186.216.204
indicator_type: ipv4
source: shodan
city: proxy,eol-product
reverse_dns: reserved-by-avm.ptr.network
hosting_provider: cpe:/a:squid-cache:squid:5.7,cpe:/a:f5:nginx:1.22.1
queried_at: 2026-05-27T18:12:47.386738
raw_data:
  {"ports": [80, 8080, 31337], "vulns": ["CVE-2024-45802", "CVE-2026-32748", "CVE-2023-49288", "CVE-2024-25617", "CVE-2023-50269", "CVE-2026-33515", "CVE-2025-23419", "CVE-2024-25111", "CVE-2023-46848", "CVE-2023-49285", "CVE-2024-37894", "CVE-2024-23638", "CVE-2023-46728", "CVE-2023-44487", "CVE-2026-33526", "CVE-2023-46847", "CVE-2025-54574", "CVE-2023-5824", "CVE-2023-46724", "CVE-2025-59362", "CVE-2025-62168", "CVE-2023-49286", "CVE-2023-46846"], "hostnames": ["reserved-by-avm.ptr.network"], "


indicator: 91.186.216.205
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/a:f5:nginx
queried_at: 2026-05-27T18:12:49.267368
raw_data:
  {"ports": [443, 445], "vulns": [], "hostnames": ["animeworld.space", "obscura.animeworld.space", "reserved-by-avm.ptr.network", "files.animeworld.space", "api.animeworld.space", "wiki.animeworld.space", "wikimirror.animeworld.space", "u.animeworld.space"], "tags": [], "cpes": ["cpe:/a:f5:nginx"]}

reverse_dns:
  animeworld.space,obscura.animeworld.space,reserved-by-avm.ptr.network,files.animeworld.space,api.animeworld.space,wiki.animeworld.space,wikimirror.animeworld.space,u.animeworld.space


indicator: 91.186.216.209
indicator_type: ipv4
source: shodan
reverse_dns: euthymia-worldwide.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T18:12:51.038860
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["euthymia-worldwide.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.186.216.216
indicator_type: ipv4
source: shodan
city: eol-product
queried_at: 2026-05-27T18:12:56.870157
raw_data:
  {"ports": [22, 443, 2083, 9443], "vulns": ["CVE-2025-23419", "CVE-2023-44487"], "hostnames": ["swtwo.bozuyorumaskorucumuyillarsonraseninleasigimhayranimherbirzerren.website", "swtwo.gunel.fun", "reserved-by-avm.ptr.network"], "tags": ["eol-product"], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx:1.24.0"]}

reverse_dns:
  swtwo.bozuyorumaskorucumuyillarsonraseninleasigimhayranimherbirzerren.website,swtwo.gunel.fun,reserved-by-avm.ptr.network

hosting_provider:
[cell repeats an earlier one in this file: 107 characters]


indicator: 91.186.216.217
indicator_type: ipv4
source: shodan
reverse_dns: reserved-by-avm.ptr.network
hosting_provider: cpe:/a:f5:nginx
queried_at: 2026-05-27T18:12:58.633629
raw_data:
  {"ports": [80], "vulns": [], "hostnames": ["reserved-by-avm.ptr.network"], "tags": [], "cpes": ["cpe:/a:f5:nginx"]}


indicator: 91.186.216.229
indicator_type: ipv4
source: shodan
city: self-signed,starttls
reverse_dns: reserved-by-avm.ptr.network,vivacious-prose.aeza.network
queried_at: 2026-05-27T18:13:05.696407
raw_data:
  {"ports": [21, 22, 80, 110, 443, 465, 993, 995, 7777], "vulns": ["CVE-2025-67896", "CVE-2026-40686", "CVE-2026-40684", "CVE-2025-30232", "CVE-2024-39929", "CVE-2023-51766", "CVE-2026-40687", "CVE-2026-40685"], "hostnames": ["reserved-by-avm.ptr.network", "vivacious-prose.aeza.network"], "tags": ["self-signed", "starttls"], "cpes": ["cpe:/a:f5:nginx:1.28.0", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx", "cpe:/a:openbsd:openssh:9.6p1", "cpe:/a:exim:exim:4.97"]}

hosting_provider:
  cpe:/a:f5:nginx:1.28.0,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx,cpe:/a:openbsd:openssh:9.6p1,cpe:/a:exim:exim:4.97


indicator: 91.186.216.230
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: nauseatingrake.ptr.network
queried_at: 2026-05-27T18:13:07.491079
raw_data:
  {"ports": [80, 444, 587, 5222, 8000, 8888], "vulns": ["CVE-2023-44487", "CVE-2021-23017", "CVE-2021-3618", "CVE-2025-23419"], "hostnames": ["nauseatingrake.ptr.network"], "tags": ["eol-product"], "cpes": ["cpe:/a:python:python", "cpe:/a:f5:nginx:1.18.0", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:encode:uvicorn", "cpe:/o:linux:linux_kernel"]}

hosting_provider:
  cpe:/a:python:python,cpe:/a:f5:nginx:1.18.0,cpe:/o:canonical:ubuntu_linux,cpe:/a:encode:uvicorn,cpe:/o:linux:linux_kernel


indicator: 91.186.216.232
indicator_type: ipv4
source: shodan
reverse_dns: reserved-by-avm.ptr.network
hosting_provider: cpe:/a:openresty:openresty,cpe:/a:getbootstrap:bootstrap:3.4.1,cpe:/a:f5:nginx
queried_at: 2026-05-27T18:13:09.271301
raw_data:
  {"ports": [80, 443, 8080], "vulns": [], "hostnames": ["reserved-by-avm.ptr.network"], "tags": [], "cpes": ["cpe:/a:openresty:openresty", "cpe:/a:getbootstrap:bootstrap:3.4.1", "cpe:/a:f5:nginx"]}


indicator: 91.186.216.234
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: nimbledoctor.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/a:google:web_server,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T18:13:11.032389
raw_data:
  {"ports": [22, 443], "vulns": [], "hostnames": ["nimbledoctor.ptr.network"], "tags": ["self-signed"], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/a:google:web_server", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.186.216.240
indicator_type: ipv4
source: shodan
reverse_dns: vimeo.com,reserved-by-avm.ptr.network
hosting_provider: cpe:/a:cloudflare:cloudflare,cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T18:13:12.786648
raw_data:
  {"ports": [22, 443], "vulns": [], "hostnames": ["vimeo.com", "reserved-by-avm.ptr.network"], "tags": [], "cpes": ["cpe:/a:cloudflare:cloudflare", "cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.186.216.249
indicator_type: ipv4
source: shodan
reverse_dns: ethereal-plough.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T18:13:14.562830
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["ethereal-plough.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.186.216.28
indicator_type: ipv4
source: shodan
reverse_dns: reserved-by-avm.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T18:13:18.111798
raw_data:
  {"ports": [22, 53, 443, 2000, 2083, 8443], "vulns": [], "hostnames": ["reserved-by-avm.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.186.216.30
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: reserved-by-avm.ptr.network
hosting_provider: cpe:/a:f5:nginx:1.26.3
queried_at: 2026-05-27T18:13:19.869167
raw_data:
  {"ports": [80], "vulns": [], "hostnames": ["reserved-by-avm.ptr.network"], "tags": ["eol-product"], "cpes": ["cpe:/a:f5:nginx:1.26.3"]}


indicator: 91.186.216.40
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: tontofreedom.com,gutsysquare.ptr.network
queried_at: 2026-05-27T18:13:21.642492
raw_data:
  {"ports": [80, 8080, 10000], "vulns": ["CVE-2025-23419", "CVE-2023-44487"], "hostnames": ["tontofreedom.com", "gutsysquare.ptr.network"], "tags": ["eol-product"], "cpes": ["cpe:/a:expressjs:express", "cpe:/a:nodejs:node.js", "cpe:/a:f5:nginx:1.24.0", "cpe:/o:canonical:ubuntu_linux", "cpe:/o:linux:linux_kernel"]}

hosting_provider:
  cpe:/a:expressjs:express,cpe:/a:nodejs:node.js,cpe:/a:f5:nginx:1.24.0,cpe:/o:canonical:ubuntu_linux,cpe:/o:linux:linux_kernel


indicator: 91.186.216.41
indicator_type: ipv4
source: shodan
reverse_dns: habitual-tail.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T18:13:23.417652
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["habitual-tail.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.186.216.46
indicator_type: ipv4
source: shodan
reverse_dns: skinny-wilderness.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T18:13:26.990673
raw_data:
  {"ports": [22, 443], "vulns": [], "hostnames": ["skinny-wilderness.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.186.216.59
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: reserved-by-avm.ptr.network
hosting_provider: cpe:/o:linux:linux_kernel,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx:1.18.0
queried_at: 2026-05-27T18:13:32.272529
raw_data:
  {"ports": [80, 444], "vulns": ["CVE-2025-23419", "CVE-2021-3618", "CVE-2021-23017", "CVE-2023-44487"], "hostnames": ["reserved-by-avm.ptr.network"], "tags": ["eol-product"], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx:1.18.0"]}


indicator: 91.186.216.65
indicator_type: ipv4
source: shodan
city: eol-product,starttls,self-signed
reverse_dns: reserved-by-avm.ptr.network,fantastic-sheet.aeza.network
hosting_provider: cpe:/a:f5:nginx:1.26.3,cpe:/a:exim:exim:4.97
queried_at: 2026-05-27T18:13:33.893959
raw_data:
  {"ports": [53, 80, 143, 465, 995], "vulns": ["CVE-2026-40686", "CVE-2023-51766", "CVE-2026-40685", "CVE-2026-40687", "CVE-2026-40684", "CVE-2025-30232", "CVE-2024-39929", "CVE-2025-67896"], "hostnames": ["reserved-by-avm.ptr.network", "fantastic-sheet.aeza.network"], "tags": ["eol-product", "starttls", "self-signed"], "cpes": ["cpe:/a:f5:nginx:1.26.3", "cpe:/a:exim:exim:4.97"]}


indicator: 91.186.216.8
indicator_type: ipv4
source: shodan
reverse_dns: bawdyflag.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T18:13:35.661600
raw_data:
  {"ports": [22, 4001], "vulns": [], "hostnames": ["bawdyflag.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.186.216.84
indicator_type: ipv4
source: shodan
reverse_dns: voiceless-property.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-05-27T18:13:37.410180
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["voiceless-property.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.186.216.91
indicator_type: ipv4
source: shodan
reverse_dns: reserved-by-avm.ptr.network
hosting_provider: cpe:/a:openresty:openresty,cpe:/a:getbootstrap:bootstrap:3.4.1,cpe:/a:f5:nginx
queried_at: 2026-05-27T18:13:39.161779
raw_data:
  {"ports": [80, 81], "vulns": [], "hostnames": ["reserved-by-avm.ptr.network"], "tags": [], "cpes": ["cpe:/a:openresty:openresty", "cpe:/a:getbootstrap:bootstrap:3.4.1", "cpe:/a:f5:nginx"]}


indicator: 91.186.218.0
indicator_type: ipv4
source: shodan
reverse_dns: www.cloudflare.com
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux,cpe:/a:cloudflare:cloudflare
queried_at: 2026-05-27T18:13:40.912642
raw_data:
  {"ports": [22, 443], "vulns": [], "hostnames": ["www.cloudflare.com"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:cloudflare:cloudflare"]}


indicator: 91.186.218.109
indicator_type: ipv4
source: shodan
reverse_dns: pihole.ladushkin.com,reserved-by-avm.ptr.network
queried_at: 2026-05-27T18:13:44.529227
raw_data:
  {"ports": [22, 53, 443], "vulns": [], "hostnames": ["pihole.ladushkin.com", "reserved-by-avm.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:jquery:jquery", "cpe:/a:getbootstrap:bootstrap"]}

hosting_provider:
  cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux,cpe:/a:jquery:jquery,cpe:/a:getbootstrap:bootstrap


