# enrichment_results

indicator: 96.9.124.205
indicator_type: ipv4
source: dshield
country: CA
reverse_dns: 96.9.124.0/23
hosting_provider: 2ICSYSTEMSINC
queried_at: 2026-03-10T08:28:09.007594
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "ipadmin@smartt.com", "as": 30295, "asname": "2ICSYSTEMSINC", "ascountry": "CA", "assource": "", "network": "96.9.124.0/23", "threatfeeds": {}}


indicator: 96.9.77.180
indicator_type: ipv4
source: dshield
country: KH
reverse_dns: 96.9.77.0/24
hosting_provider: SINET-KH SINET, Cambodias specialist Internet and Telecom Service Provider.
queried_at: 2026-03-10T08:28:11.669495
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "sysadm@sinet.com.kh", "as": 131207, "asname": "SINET-KH SINET, Cambodias specialist Internet and Telecom Service Provider.", "ascountry": "KH", "assource": "", "network": "96.9.77.0/24", "threatfeeds": {}}


indicator: 97.107.139.108
indicator_type: ipv4
source: dshield
country: SG
reverse_dns: 97.107.128.0/20
hosting_provider: AKAMAI-LINODE-AP Akamai Connected Cloud
queried_at: 2026-03-10T08:28:13.032714
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "tasaro@linode.com", "as": 63949, "asname": "AKAMAI-LINODE-AP Akamai Connected Cloud", "ascountry": "SG", "assource": "", "network": "97.107.128.0/20", "threatfeeds": {"alltor": {"lastseen": "2026-03-02", "firstseen": "2025-02-04"}}}


indicator: 97.115.105.107
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 97.115.0.0/17
hosting_provider: CENTURYLINK-US-LEGACY-QWEST
queried_at: 2026-03-10T08:28:14.362154
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@centurylinkservices.net", "as": 209, "asname": "CENTURYLINK-US-LEGACY-QWEST", "ascountry": "US", "assource": "", "network": "97.115.0.0/17", "threatfeeds": {}}


indicator: 97.119.228.45
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 97.119.128.0/17
hosting_provider: CENTURYLINK-US-LEGACY-QWEST
queried_at: 2026-03-10T08:28:15.657433
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@centurylinkservices.net", "as": 209, "asname": "CENTURYLINK-US-LEGACY-QWEST", "ascountry": "US", "assource": "", "network": "97.119.128.0/17", "threatfeeds": {}}


indicator: 97.120.177.38
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 97.120.0.0/16
hosting_provider: CENTURYLINK-US-LEGACY-QWEST
queried_at: 2026-03-10T08:28:17.023521
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@centurylinkservices.net", "as": 209, "asname": "CENTURYLINK-US-LEGACY-QWEST", "ascountry": "US", "assource": "", "network": "97.120.0.0/16", "threatfeeds": {}}


indicator: 97.122.204.252
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 97.122.128.0/17
hosting_provider: CENTURYLINK-US-LEGACY-QWEST
queried_at: 2026-03-10T08:28:18.335431
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@centurylinkservices.net", "as": 209, "asname": "CENTURYLINK-US-LEGACY-QWEST", "ascountry": "US", "assource": "", "network": "97.122.128.0/17", "threatfeeds": {}}


indicator: 97.64.18.185
indicator_type: ipv4
source: dshield
country: CA
reverse_dns: 97.64.16.0/22
hosting_provider: IT7NET
queried_at: 2026-03-10T08:28:19.692557
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@sioru.com", "as": 25820, "asname": "IT7NET", "ascountry": "CA", "assource": "", "network": "97.64.16.0/22", "threatfeeds": {"threatview": {"lastseen": "2024-06-11", "firstseen": "2024-06-09"}}}


indicator: 98.128.172.133
indicator_type: ipv4
source: dshield
country: SE
reverse_dns: 98.128.0.0/16
hosting_provider: BAHNHOF
queried_at: 2026-03-10T08:28:21.127902
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@bahnhof.net", "as": 8473, "asname": "BAHNHOF", "ascountry": "SE", "assource": "", "network": "98.128.0.0/16", "threatfeeds": {}}


indicator: 98.222.26.73
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 98.192.0.0/10
hosting_provider: COMCAST-7922
queried_at: 2026-03-10T08:28:25.103972
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@comcast.net", "as": 7922, "asname": "COMCAST-7922", "ascountry": "US", "assource": "", "network": "98.192.0.0/10", "threatfeeds": {}}


indicator: 99.79.78.199
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 99.79.0.0/16
hosting_provider: AMAZON-02
queried_at: 2026-03-10T08:28:28.163023
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "99.79.0.0/16", "threatfeeds": {}}


indicator: 45.43.91.10
indicator_type: ipv4
source: dshield
country: NL
reverse_dns: 45.43.88.0/22
hosting_provider: NFORCE
queried_at: 2026-03-10T08:28:29.508208
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@nforce.com", "as": 43350, "asname": "NFORCE", "ascountry": "NL", "assource": "", "network": "45.43.88.0/22", "threatfeeds": {}}


indicator: 194.87.245.239
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 194.87.245.0/24
hosting_provider: DEDIOUTLET-NETWORKS
queried_at: 2026-03-10T08:28:30.848028
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": null, "as": 399045, "asname": "DEDIOUTLET-NETWORKS", "ascountry": "US", "assource": "", "network": "194.87.245.0/24", "threatfeeds": {}}


indicator: 91.99.25.54
indicator_type: ipv4
source: dshield
country: XX
hosting_provider: not routed
queried_at: 2026-03-10T08:28:32.744470
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": null, "as": 0, "asname": "not routed", "ascountry": "XX", "assource": "", "network": "", "threatfeeds": {"rosti": {"lastseen": "2025-12-15", "firstseen": "2025-12-15"}}}


indicator: 91.208.162.19
indicator_type: ipv4
source: dshield
country: MD
reverse_dns: 91.208.162.0/24
hosting_provider: ALEXHOST
queried_at: 2026-03-10T08:28:36.991860
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@alexhost.com", "as": 200019, "asname": "ALEXHOST", "ascountry": "MD", "assource": "", "network": "91.208.162.0/24", "threatfeeds": {}}


indicator: 176.123.1.85
indicator_type: ipv4
source: dshield
country: MD
reverse_dns: 176.123.1.0/24
hosting_provider: ALEXHOST
queried_at: 2026-03-10T08:28:38.311710
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@alexhost.com", "as": 200019, "asname": "ALEXHOST", "ascountry": "MD", "assource": "", "network": "176.123.1.0/24", "threatfeeds": {}}


indicator: 176.123.0.81
indicator_type: ipv4
source: dshield
country: MD
reverse_dns: 176.123.0.0/24
hosting_provider: ALEXHOST
queried_at: 2026-03-10T08:28:39.614044
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@alexhost.com", "as": 200019, "asname": "ALEXHOST", "ascountry": "MD", "assource": "", "network": "176.123.0.0/24", "threatfeeds": {}}


indicator: 91.208.184.68
indicator_type: ipv4
source: dshield
country: MD
reverse_dns: 91.208.184.0/24
hosting_provider: ALEXHOST
queried_at: 2026-03-10T08:28:42.224475
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@alexhost.com", "as": 200019, "asname": "ALEXHOST", "ascountry": "MD", "assource": "", "network": "91.208.184.0/24", "threatfeeds": {"blocklistde22": {"lastseen": "2020-12-16", "firstseen": "2020-12-06"}}}


indicator: 91.208.197.96
indicator_type: ipv4
source: dshield
country: MD
reverse_dns: 91.208.197.0/24
hosting_provider: ALEXHOST
queried_at: 2026-03-10T08:28:47.443209
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@alexhost.com", "as": 200019, "asname": "ALEXHOST", "ascountry": "MD", "assource": "", "network": "91.208.197.0/24", "threatfeeds": {"blocklistdebots": {"lastseen": "2021-11-09", "firstseen": "2021-10-26"}}}


indicator: 176.123.2.115
indicator_type: ipv4
source: dshield
country: MD
reverse_dns: 176.123.2.0/24
hosting_provider: ALEXHOST
queried_at: 2026-03-10T08:28:48.761928
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@alexhost.com", "as": 200019, "asname": "ALEXHOST", "ascountry": "MD", "assource": "", "network": "176.123.2.0/24", "threatfeeds": {}}


indicator: 95.211.174.111
indicator_type: ipv4
source: dshield
country: NL
reverse_dns: 95.211.0.0/16
hosting_provider: LEASEWEB-NL-AMS-01 Netherlands
queried_at: 2026-03-10T08:28:56.844131
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@nl.leaseweb.com", "as": 60781, "asname": "LEASEWEB-NL-AMS-01 Netherlands", "ascountry": "NL", "assource": "", "network": "95.211.0.0/16", "threatfeeds": {}}


indicator: 173.46.80.206
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 173.46.80.0/23
hosting_provider: IPXO
queried_at: 2026-03-10T08:28:58.164207
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "admin@rockorb.com", "as": 834, "asname": "IPXO", "ascountry": "US", "assource": "", "network": "173.46.80.0/23", "threatfeeds": {"rosti": {"lastseen": "2024-07-24", "firstseen": "2024-07-24"}}}


indicator: 95.179.162.106
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-10T08:30:50.374281
raw_data:
  {"hostnames_checked": ["95.179.162.106.vultrusercontent.com"], "hostnames_count": 1, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 95.179.243.180
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-10T08:30:50.388806
raw_data:
  {"hostnames_checked": ["www.ericsprojects.de", "95.179.243.180", "kuegy.com", "ericsprojects.de", "dev.doerfert-immobilien.de", "netflix-4desktop.4nmn.com"], "hostnames_count": 6, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 95.181.164.107
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-10T08:30:50.403637
raw_data:
  {"hostnames_checked": ["esoestarjeta.com", "alnakheeltraders.com", "alisonbickett.com", "www.6mk8.esoestarjeta.com", "www.alnakheeltraders.com", "ceo.cloud-vds", "bornasamaneh.com", "6mk8.esoestarjeta.com", "www.esoestarjeta.com", "www.alisonbickett.com"], "hostnames_count": 10, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 95.214.55.246
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-10T08:30:50.418655
raw_data:
  {"hostnames_checked": ["bncisdor.nriasoruvd.info", "continued.zonogicism.nl"], "hostnames_count": 2, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 95.215.206.151
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-10T08:30:50.433324
raw_data:
  {"hostnames_checked": ["dito007.com", "domik2000.com", "95-215-206-151.netherlands-2.vps.ac", "www.domik2000.com", "domik2000.com.ua"], "hostnames_count": 5, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 95.216.118.42
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-10T08:30:50.447824
raw_data:
  {"hostnames_checked": ["static.42.118.216.95.clients.your-server.de"], "hostnames_count": 1, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 95.216.147.179
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-10T08:30:50.463105
raw_data:
  {"hostnames_checked": ["irenegellein.com", "static.179.147.216.95.clients.your-server.de", "www.deadmallradio.com", "www.irenegellein.com", "uppy.sh", "deadmallradio.com", "gmsolucionescusco.com", "mc.la-isabella.xyz"], "hostnames_count": 8, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 95.216.159.94
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-10T08:30:50.477577
raw_data:
  {"hostnames_checked": ["sw.vgaps.zone"], "hostnames_count": 1, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 95.216.179.65
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-10T08:30:50.492272
raw_data:
  {"hostnames_checked": ["ns10.private-nameservers.com", "www.isaaffik.org", "ns4.wpwhmhost.com", "ns4.gnu-host.com", "static.65.179.216.95.clients.your-server.de", "ns4.warehost.net", "isaaffik.org", "ns4.9trogen.com", "ns4.enchantedhost.com", "ns4.seawaves.co.za", "ns4.softserv.uk"], "hostnames_count": 11, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 95.216.180.148
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-10T08:30:50.506628
raw_data:
  {"hostnames_checked": ["quiz.fsir.ro", "serenalenjerie.ro", "static.148.180.216.95.clients.your-server.de", "shipforrent.com"], "hostnames_count": 4, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 95.216.59.92
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-10T08:30:50.535690
raw_data:
  {"hostnames_checked": ["pandorasong.com", "static.92.59.216.95.clients.your-server.de"], "hostnames_count": 2, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 95.217.161.103
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-10T08:30:50.549733
raw_data:
  {"hostnames_checked": ["www.bibliotekskampen.se", "bibliotekskampen.se", "omskmir.ru"], "hostnames_count": 3, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 95.217.206.215
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-10T08:30:50.563735
raw_data:
  {"hostnames_checked": ["static.215.206.217.95.clients.your-server.de", "eustorage.onthewifi.com", "eustorage.gotdns.ch"], "hostnames_count": 3, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 95.217.206.235
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-10T08:30:50.578022
raw_data:
  {"hostnames_checked": ["pbx.luebke.io", "overseerr.luebke.io", "signal.luebke.io", "plex.gerstream.xyz", "analytics.so-high.de", "analytics.luebke.io", "nextcloud.luebke.io", "gerstream.xyz", "sonarr-1080p-en.luebke.io", "bitwarden.luebke.io", "stats.luebke.io", "static.235.206.217.95.clients.your-server.de", "element.luebke.io", "dimension.luebke.io", "api.try.pypirate.dev", "keycloak.luebke.io", "overseerr.gerstream.xyz", "ppmc.luebke.io", "matrix.luebke.io", "element.so-high.de", "sabnzbd.lue


indicator: 95.217.218.240
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-10T08:30:50.592822
raw_data:
  {"hostnames_checked": ["peer-prep.com", "www.gallinews.com", "editorbackend.peer-prep.com", "metaui.peer-prep.com", "meta.peer-prep.com", "editorui.peer-prep.com", "static.240.218.217.95.clients.your-server.de"], "hostnames_count": 7, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 95.217.27.252
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-10T08:30:50.607253
raw_data:
  {"hostnames_checked": ["d.mx.goldenloafuae.com", "mx.tieqimeng.com", "static.252.27.217.95.clients.your-server.de", "www.tieqimeng.com", "ls.t.goldenloafuae.com", "up.t.goldenloafuae.com", "tieqimeng.com", "log.t.goldenloafuae.com", "e.mx.goldenloafuae.com"], "hostnames_count": 9, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 95.217.31.199
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-10T08:30:50.621411
raw_data:
  {"hostnames_checked": ["mqtts.mgrd.dev", "poolsthegame.com", "vmproxy.mgrd.dev", "l.download-boy.site", "vmsync.mgrd.dev", "www.tensori.fi", "www.poolsthegame.com", "static.199.31.217.95.clients.your-server.de", "tensori.fi"], "hostnames_count": 9, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 95.217.60.176
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-10T08:30:50.635696
raw_data:
  {"hostnames_checked": ["static.176.60.217.95.clients.your-server.de", "gages.io", "gate.gages.io", "kowl.gages.io"], "hostnames_count": 4, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 213.209.150.236
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:41:44.364110
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "ports": [9080], "cves": [], "os": "Remote operating system : Linux Kernel 2.6", "services": ["9080:Service Detection"], "critical_count": 0, "high_count": 0, "medium_count": 0, "low_count": 0, "critical": [], "high": []}


indicator: 185.208.158.227
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:41:44.364110
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49670, 53163], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "services": ["5985:Service Detection"], "critical_count": 0, "high_count": 1, "medium_count": 6, "low_count": 1, "critical": [], "high": [{"plugin": "42873", "name": "SSL Medium Strength Cipher Suites Supported (SWEET32)", "port": "3389", "cve": "CVE-2016-2183"}


indicator: 195.211.191.164
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:41:44.364110
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "ports": [21, 22, 53, 80, 110, 143, 443, 465, 587, 993, 995, 2222, 3306], "cves": ["CVE-1999-0524"], "os": "Remote operating system : Linux Kernel 2.6", "services": ["21:Service Detection", "22:Service Detection", "110:Service Detection", "143:Service Detection", "443:Service Detection", "443:Service Detection", "465:Service Detection", "465:Service Detection", "587:Service Detection", "993:Service Detection", "993:Service Detection", "995:Service D


indicator: 195.211.191.155
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:41:44.364110
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "ports": [22, 80, 443, 8880], "cves": ["CVE-1999-0524"], "os": "Remote operating system : Linux Kernel 5.x", "services": ["22:Service Detection", "80:Service Detection", "443:Service Detection", "443:Service Detection"], "critical_count": 0, "high_count": 0, "medium_count": 3, "low_count": 1, "critical": [], "high": []}


indicator: 185.208.158.7
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:41:44.364110
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "ports": [22, 9090], "cves": ["CVE-1999-0524", "CVE-2025-32728", "CVE-2025-61984", "CVE-2025-61985"], "os": "Remote operating system : Linux Kernel 2.6", "services": ["22:Service Detection", "9090:Service Detection", "9090:Service Detection"], "critical_count": 0, "high_count": 0, "medium_count": 1, "low_count": 4, "critical": [], "high": []}


indicator: 185.208.158.228
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:41:44.364110
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "ports": [22, 80, 443, 3000], "cves": ["CVE-1999-0524"], "os": "Remote operating system : Linux Kernel 2.6", "services": ["22:Service Detection", "80:Service Detection", "443:Service Detection", "443:Service Detection", "3000:Service Detection"], "critical_count": 0, "high_count": 0, "medium_count": 0, "low_count": 1, "critical": [], "high": []}


indicator: 80.76.49.130
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:41:44.364110
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "ports": [135, 139, 445, 3389, 5985, 7070, 49664, 49665, 49666, 49667, 49671, 49679, 61957], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "services": ["5985:Service Detection", "7070:Service Detection"], "critical_count": 0, "high_count": 1, "medium_count": 9, "low_count": 1, "critical": [], "high": [{"plugin": "42873", "name": "SSL Medium Strength Cipher Suites Supported (SWEET32)", "port": "3389"


indicator: 194.85.251.91
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:41:44.364110
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "ports": [22], "cves": [], "os": "Remote operating system : Linux Kernel 2.6", "services": [], "critical_count": 0, "high_count": 0, "medium_count": 0, "low_count": 0, "critical": [], "high": []}


indicator: 86.54.42.224
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:41:44.364110
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "ports": [22, 80], "cves": ["CVE-1999-0524"], "os": "Remote operating system : Linux Kernel 2.6", "services": ["22:Service Detection", "80:Service Detection"], "critical_count": 0, "high_count": 0, "medium_count": 0, "low_count": 1, "critical": [], "high": []}


indicator: 194.85.251.95
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:41:44.364110
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "ports": [22], "cves": ["CVE-1999-0524"], "os": "Remote operating system : Linux Kernel 2.6", "services": ["22:Service Detection"], "critical_count": 0, "high_count": 0, "medium_count": 0, "low_count": 1, "critical": [], "high": []}


indicator: 194.85.251.88
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:41:44.364110
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "ports": [443, 1701, 2000], "cves": ["CVE-1999-0524", "CVE-2007-1858"], "os": "Remote operating system : Linux Kernel 2.6", "services": ["443:Service Detection"], "critical_count": 0, "high_count": 0, "medium_count": 3, "low_count": 1, "critical": [], "high": []}


indicator: 185.208.158.91
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:41:44.364110
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "ports": [22], "cves": ["CVE-1999-0524", "CVE-2023-48795"], "os": "Remote operating system : Linux Kernel 2.6", "services": ["22:Service Detection"], "critical_count": 0, "high_count": 0, "medium_count": 1, "low_count": 1, "critical": [], "high": []}


indicator: 195.211.191.120
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:41:44.364110
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "ports": [22, 123, 5201, 8080], "cves": ["CVE-1999-0524"], "os": "Remote operating system : Linux Kernel 2.6", "services": ["22:Service Detection", "8080:Service Detection"], "critical_count": 0, "high_count": 0, "medium_count": 1, "low_count": 1, "critical": [], "high": []}


indicator: 194.85.251.83
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:41:44.364110
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "ports": [22, 433, 2096, 5432], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Linux Kernel 6.x on Ubuntu", "services": ["22:Service Detection", "433:Service Detection", "433:Service Detection", "2096:Service Detection"], "critical_count": 0, "high_count": 1, "medium_count": 2, "low_count": 1, "critical": [], "high": [{"plugin": "42873", "name": "SSL Medium Strength Cipher Suites Supported (SWEET32)", "port": "433", "cv


indicator: 80.76.49.119
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:41:44.364110
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "ports": [135, 139, 445, 3389, 5985, 7070, 49664, 49665, 49666, 49667, 49668, 49669, 49670, 49671], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "services": ["5985:Service Detection"], "critical_count": 0, "high_count": 1, "medium_count": 6, "low_count": 1, "critical": [], "high": [{"plugin": "42873", "name": "SSL Medium Strength Cipher Suites Supported (SWEET32)", "port": "3389", "cve": "CVE-2016-


indicator: 194.59.31.92
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:41:44.364110
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "ports": [22, 80, 443, 3306, 8443], "cves": [], "os": "Remote operating system : Linux Kernel 2.6", "services": ["22:Service Detection", "443:Service Detection", "8443:Service Detection", "8443:Service Detection"], "critical_count": 0, "high_count": 0, "medium_count": 3, "low_count": 0, "critical": [], "high": []}


indicator: 86.54.42.154
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:41:44.364110
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "ports": [80, 443], "cves": ["CVE-1999-0524"], "os": "Remote operating system : Linux Kernel 2.6", "services": ["80:Service Detection", "443:Service Detection", "443:Service Detection"], "critical_count": 0, "high_count": 0, "medium_count": 0, "low_count": 1, "critical": [], "high": []}


indicator: 20.229.219.78
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:41:44.364110
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "ports": [], "cves": [], "os": "", "services": [], "critical_count": 0, "high_count": 0, "medium_count": 0, "low_count": 0, "critical": [], "high": []}


indicator: 194.59.31.127
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:41:44.364110
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "ports": [135, 139, 445, 3389, 49664, 49665, 49666, 49667, 49668, 49670, 49672], "cves": ["CVE-1999-0524"], "os": "Remote operating system : Windows", "services": [], "critical_count": 0, "high_count": 0, "medium_count": 0, "low_count": 1, "critical": [], "high": []}


indicator: 176.65.144.22
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:41:44.364110
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "ports": [22, 80, 8080], "cves": ["CVE-1999-0524"], "os": "Remote operating system : Linux Kernel 2.6", "services": ["22:Service Detection", "80:Service Detection", "8080:Service Detection"], "critical_count": 0, "high_count": 0, "medium_count": 0, "low_count": 1, "critical": [], "high": []}


indicator: 194.59.31.106
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:41:44.364110
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49671], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "services": ["5985:Service Detection"], "critical_count": 0, "high_count": 1, "medium_count": 6, "low_count": 1, "critical": [], "high": [{"plugin": "42873", "name": "SSL Medium Strength Cipher Suites Supported (SWEET32)", "port": "3389", "cve": "CVE-2016-2183"}]}


indicator: 195.211.191.157
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:41:44.364110
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "ports": [22, 80, 443], "cves": ["CVE-1999-0524"], "os": "Remote operating system : Linux Kernel 2.6", "services": ["22:Service Detection", "443:Service Detection", "443:Service Detection"], "critical_count": 0, "high_count": 0, "medium_count": 2, "low_count": 1, "critical": [], "high": []}


indicator: 194.85.251.96
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:41:44.364110
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "ports": [22, 443], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Linux Kernel 2.6", "services": ["22:Service Detection", "443:Service Detection", "443:Service Detection"], "critical_count": 0, "high_count": 1, "medium_count": 2, "low_count": 1, "critical": [], "high": [{"plugin": "42873", "name": "SSL Medium Strength Cipher Suites Supported (SWEET32)", "port": "443", "cve": "CVE-2016-2183"}]}


indicator: 176.65.144.32
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:41:44.364110
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "ports": [22, 9000], "cves": ["CVE-1999-0524"], "os": "Remote operating system : Linux Kernel 2.6", "services": ["9000:Service Detection"], "critical_count": 0, "high_count": 0, "medium_count": 0, "low_count": 1, "critical": [], "high": []}


indicator: 195.211.191.150
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:41:44.364110
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "ports": [22, 123, 8080], "cves": ["CVE-1999-0524"], "os": "Remote operating system : Linux Kernel 2.6", "services": ["22:Service Detection", "8080:Service Detection"], "critical_count": 0, "high_count": 0, "medium_count": 1, "low_count": 1, "critical": [], "high": []}


indicator: 80.76.49.15
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:41:44.364110
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "ports": [111, 3128], "cves": ["CVE-1999-0524", "CVE-1999-0632"], "os": "Remote operating system : Linux Kernel 2.6", "services": ["3128:Service Detection"], "critical_count": 0, "high_count": 0, "medium_count": 0, "low_count": 1, "critical": [], "high": []}


indicator: 194.85.251.81
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:41:44.364110
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "ports": [111, 1881, 5666, 5988, 5991, 5997, 6000, 6002, 6003, 6004, 6005, 6060, 6064, 6070, 6072, 6080, 6146, 6343, 6346, 6382, 6443, 6455, 6456, 6500, 6501, 6502, 6503, 6505, 6506, 6507, 6508, 6510, 6514, 6767], "cves": ["CVE-1999-0524", "CVE-1999-0632"], "os": "Remote operating system : Linux Kernel 2.6", "services": ["1881:Service Detection", "5666:Service Detection", "5988:Service Detection", "5991:Service Detection", "6000:Service Detection", 


indicator: 176.65.144.116
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:41:44.364110
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "ports": [22, 80, 443], "cves": ["CVE-1999-0524", "CVE-2025-32728", "CVE-2025-61984", "CVE-2025-61985"], "os": "Remote operating system : Linux Kernel 2.6", "services": ["22:Service Detection", "80:Service Detection", "443:Service Detection", "443:Service Detection"], "critical_count": 0, "high_count": 0, "medium_count": 2, "low_count": 4, "critical": [], "high": []}


indicator: 194.85.251.92
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:41:44.364110
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "ports": [22, 80, 443], "cves": [], "os": "", "services": ["22:Service Detection", "80:Service Detection", "443:Service Detection"], "critical_count": 0, "high_count": 0, "medium_count": 0, "low_count": 0, "critical": [], "high": []}


indicator: 194.85.251.42
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:41:44.364110
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "ports": [22, 80, 443, 5678], "cves": ["CVE-1999-0524"], "os": "Remote operating system : Linux Kernel 2.6", "services": ["22:Service Detection", "80:Service Detection", "443:Service Detection", "443:Service Detection", "5678:Service Detection"], "critical_count": 0, "high_count": 0, "medium_count": 0, "low_count": 1, "critical": [], "high": []}


indicator: 86.54.42.145
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:41:44.364110
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "ports": [22, 3389], "cves": ["CVE-2016-2183", "CVE-2023-48795"], "os": "Remote operating system : Microsoft Windows Media Player", "services": ["22:Service Detection"], "critical_count": 0, "high_count": 1, "medium_count": 6, "low_count": 0, "critical": [], "high": [{"plugin": "42873", "name": "SSL Medium Strength Cipher Suites Supported (SWEET32)", "port": "3389", "cve": "CVE-2016-2183"}]}


indicator: 194.59.31.211
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:41:44.364110
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49670], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "services": ["5985:Service Detection"], "critical_count": 0, "high_count": 1, "medium_count": 6, "low_count": 1, "critical": [], "high": [{"plugin": "42873", "name": "SSL Medium Strength Cipher Suites Supported (SWEET32)", "port": "3389", "cve": "CVE-2016-2183"}]}


indicator: 194.85.251.86
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:41:44.364110
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "ports": [22], "cves": ["CVE-1999-0524"], "os": "Remote operating system : Linux Kernel 5.x on Ubuntu", "services": ["22:Service Detection"], "critical_count": 0, "high_count": 0, "medium_count": 0, "low_count": 1, "critical": [], "high": []}


indicator: 194.85.251.82
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:41:44.364110
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "ports": [111, 1881, 5666, 5988, 5991, 5997, 6000, 6002, 6003, 6004, 6005, 6060, 6064, 6070, 6072, 6080, 6146, 6343, 6346, 6382, 6443, 6455, 6456, 6500, 6501, 6502, 6503, 6505, 6506, 6507, 6508, 6510, 6514, 6767], "cves": ["CVE-1999-0524", "CVE-1999-0632"], "os": "Remote operating system : Linux Kernel 2.6", "services": ["1881:Service Detection", "5666:Service Detection", "5988:Service Detection", "5997:Service Detection", "6000:Service Detection", 


indicator: 194.59.31.60
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:41:44.364110
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "ports": [22, 3389, 8443], "cves": ["CVE-1999-0524", "CVE-2005-1794"], "os": "Remote operating system : Linux Kernel 2.6", "services": ["22:Service Detection", "8443:Service Detection"], "critical_count": 0, "high_count": 0, "medium_count": 1, "low_count": 1, "critical": [], "high": []}


indicator: 194.85.251.84
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:41:44.364110
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "ports": [22, 443], "cves": ["CVE-1999-0524"], "os": "Remote operating system : Linux Kernel 2.x on CentOS Linux release", "services": [], "critical_count": 0, "high_count": 0, "medium_count": 0, "low_count": 1, "critical": [], "high": []}


indicator: 176.65.144.28
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:41:44.364110
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "ports": [22, 80, 443, 3001, 8080], "cves": ["CVE-1999-0524"], "os": "Remote operating system : Linux Kernel 2.6", "services": ["80:Service Detection", "443:Service Detection", "443:Service Detection", "3001:Service Detection", "8080:Service Detection"], "critical_count": 0, "high_count": 0, "medium_count": 3, "low_count": 1, "critical": [], "high": []}


indicator: 185.208.158.237
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:41:44.364110
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "ports": [443], "cves": [], "os": "", "services": ["443:Service Detection"], "critical_count": 0, "high_count": 0, "medium_count": 0, "low_count": 0, "critical": [], "high": []}


indicator: 91.108.240.60
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:41:44.364110
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "ports": [22, 80, 443, 3306, 8000, 8001, 8002, 8004, 8008, 8009, 8080, 8081, 8082, 8083, 8088, 8089], "cves": ["CVE-2012-1823", "CVE-2022-31629", "CVE-2023-3823", "CVE-2023-3824", "CVE-2024-11233", "CVE-2024-11234", "CVE-2024-11236", "CVE-2024-1874", "CVE-2024-2756", "CVE-2024-3096", "CVE-2024-4577", "CVE-2024-5458", "CVE-2024-5585", "CVE-2024-8925", "CVE-2024-8926", "CVE-2024-8927", "CVE-2024-8929", "CVE-2024-8932", "CVE-2024-9026", "CVE-2025-1217"


indicator: 176.65.144.26
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:41:44.364110
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "ports": [21, 22, 53, 80, 110, 123, 143, 443, 465, 587, 993, 995, 1500, 1501], "cves": ["CVE-1999-0524", "CVE-1999-0532"], "os": "Remote operating system : Linux Kernel 2.6", "services": ["21:Service Detection", "22:Service Detection", "80:Service Detection", "110:Service Detection", "143:Service Detection", "443:Service Detection", "443:Service Detection", "465:Service Detection", "465:Service Detection", "587:Service Detection", "993:Service Detec


indicator: 128.90.106.143
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:41:44.364110
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "ports": [], "cves": ["CVE-1999-0524"], "os": "", "services": [], "critical_count": 0, "high_count": 0, "medium_count": 0, "low_count": 1, "critical": [], "high": []}


indicator: 194.85.251.89
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:41:44.364110
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "ports": [22, 1080], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Linux Kernel 2.6", "services": ["22:Service Detection", "1080:Service Detection", "1080:Service Detection"], "critical_count": 0, "high_count": 1, "medium_count": 2, "low_count": 1, "critical": [], "high": [{"plugin": "42873", "name": "SSL Medium Strength Cipher Suites Supported (SWEET32)", "port": "1080", "cve": "CVE-2016-2183"}]}


indicator: 80.76.49.27
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:41:44.364110
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "ports": [135, 139, 445, 1024, 1026, 3389, 5985, 47891, 49664, 49665, 49666, 49667, 49668, 49669], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "services": ["5985:Service Detection"], "critical_count": 0, "high_count": 1, "medium_count": 6, "low_count": 1, "critical": [], "high": [{"plugin": "42873", "name": "SSL Medium Strength Cipher Suites Supported (SWEET32)", "port": "3389", "cve": "CVE-2016-2


indicator: 80.76.49.131
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:41:44.364110
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "ports": [80, 135, 139, 443, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49673, 49674, 49675, 51063], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows 10", "services": ["80:Service Detection", "5985:Service Detection"], "critical_count": 0, "high_count": 1, "medium_count": 6, "low_count": 1, "critical": [], "high": [{"plugin": "42873", "name": "SSL Medium Strength Cipher Suites Supported (SWEET32)", "po


indicator: 86.54.42.215
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:41:44.364110
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "ports": [22, 80, 443], "cves": [], "os": "Remote operating system : Linux Kernel 4.x on Ubuntu", "services": ["22:Service Detection", "80:Service Detection", "443:Service Detection", "443:Service Detection"], "critical_count": 0, "high_count": 0, "medium_count": 0, "low_count": 0, "critical": [], "high": []}


indicator: 185.208.158.121
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:41:44.364110
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "ports": [21, 22, 53, 80, 110, 143, 465, 587, 993, 995, 1500, 1501, 4000, 4001, 4200], "cves": ["CVE-1999-0524"], "os": "Remote operating system : Linux Kernel 2.6", "services": ["21:Service Detection", "110:Service Detection", "465:Service Detection", "465:Service Detection", "587:Service Detection", "993:Service Detection", "993:Service Detection", "995:Service Detection", "995:Service Detection", "1500:Service Detection", "1500:Service Detection"


indicator: 194.85.251.93
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:41:44.364110
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "ports": [22, 443, 5422], "cves": [], "os": "Remote operating system : Linux Kernel 2.6", "services": ["443:Service Detection", "443:Service Detection", "5422:Service Detection"], "critical_count": 0, "high_count": 0, "medium_count": 2, "low_count": 0, "critical": [], "high": []}


indicator: 194.85.251.87
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:41:44.364110
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "ports": [443], "cves": [], "os": "Remote operating system : Linux Kernel 2.6", "services": ["443:Service Detection", "443:Service Detection"], "critical_count": 0, "high_count": 0, "medium_count": 0, "low_count": 0, "critical": [], "high": []}


indicator: 80.76.49.64
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49670, 49686], "cves": ["CVE-1999-0524", "CVE-2005-1794", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.68
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_185.208.158.227", "windows_mgmt_apt_subnet"], "ports": [135, 139, 443, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 50995], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 2}


indicator: 80.76.49.70
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49671], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.71
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 443, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49670, 49671], "cves": ["CVE-1999-0524", "CVE-2016-2183", "CVE-2025-3935"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 3}


indicator: 80.76.49.74
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_194.59.31.127", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49672, 49674], "cves": ["CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.75
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_194.59.31.106", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49671, 49682, 50229], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.79
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [80, 135, 139, 443, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49671, 55740], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows 10", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.81
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_194.59.31.127", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49672, 53978], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.82
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49671, 49674], "cves": ["CVE-1999-0524", "CVE-2005-1794", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.83
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 54839], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.85
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_194.59.31.211", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49688, 49834], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.89
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [80, 135, 139, 443, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49670], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows 10", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.90
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [80, 135, 139, 443, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49671, 65524], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows 10", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.91
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49670, 49671], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.94
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49673], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.95
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49670, 49685], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 86.54.42.18
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_185.208.158.227", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 1337, 3389, 5985, 49664, 49665, 49666, 49668, 49669, 49670, 49682], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 86.54.42.21
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49670, 58470], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 86.54.42.25
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49671, 49696], "cves": ["CVE-1999-0524", "CVE-2013-2566", "CVE-2015-2808", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows Server 2016 Standard 14393", "critical_count": 0, "high_count": 1}


indicator: 86.54.42.38
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [80, 135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49670], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 86.54.42.40
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [80, 135, 139, 443, 445, 3389, 5985, 6767, 49664, 49665, 49666, 49667, 49668, 49669, 49670, 49671], "cves": ["CVE-1999-0524", "CVE-2003-1567", "CVE-2004-2320", "CVE-2004-2761", "CVE-2005-4900", "CVE-2010-0386", "CVE-2016-2183", "CVE-2022-31629", "CVE-2023-38709", "CVE-2023-5363", "CVE-2023-5678", "CVE-2023-6129", "CVE-2023-6237", "CVE-2024-0727


indicator: 86.54.42.46
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49670, 49671], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 86.54.42.53
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_194.59.31.127", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49670, 49672, 49673], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 86.54.42.54
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49670, 49681], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 86.54.42.56
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49670, 53876], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 86.54.42.57
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_194.59.31.211", "windows_mgmt_apt_subnet"], "ports": [22, 135, 139, 443, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49672], "cves": ["CVE-1999-0524", "CVE-2016-2183", "CVE-2023-48795", "CVE-2025-3935"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 3}


indicator: 86.54.42.60
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 8880, 49664, 49665, 49666, 49667, 49668, 49669, 49670, 49674], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 86.54.42.67
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49672], "cves": ["CVE-1999-0524", "CVE-2013-2566", "CVE-2015-2808", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows Server 2016 Standard 14393", "critical_count": 0, "high_count": 1}


indicator: 86.54.42.68
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_185.208.158.227", "windows_mgmt_apt_subnet"], "ports": [80, 135, 139, 445, 3000, 3389, 5985, 8000, 49664, 49665, 49666, 49667, 49668, 49669, 49670, 49678], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 86.54.42.72
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49669, 49670, 49671, 49676], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 86.54.42.79
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49671], "cves": ["CVE-1999-0524", "CVE-2013-2566", "CVE-2015-2808", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows Server 2016 Standard 14393", "critical_count": 0, "high_count": 1}


indicator: 86.54.42.93
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49671, 49672], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 86.54.42.95
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49670, 63653], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 86.54.42.96
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 443, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49670], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 2}


indicator: 86.54.42.103
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49670, 49677], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 86.54.42.121
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_185.208.158.227", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49674, 49675], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 86.54.42.129
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49671, 49674], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 86.54.42.146
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [22, 80, 135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49671], "cves": ["CVE-1999-0524", "CVE-2013-2566", "CVE-2015-2808", "CVE-2016-2183", "CVE-2023-48795"], "os": "Remote operating system : Microsoft Windows Server 2016 Standard 14393", "critical_count": 0, "high_count": 1}


indicator: 86.54.42.179
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 8000, 49664, 49665, 49666, 49667, 49668, 49669, 49670, 49671], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 86.54.42.181
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [80, 135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49670, 49671], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows 10", "critical_count": 0, "high_count": 1}


indicator: 86.54.42.197
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49670, 49676], "cves": ["CVE-1999-0524", "CVE-2013-2566", "CVE-2015-2808", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows Server 2016 Standard 14393", "critical_count": 0, "high_count": 1}


indicator: 86.54.42.199
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49670, 53344], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 86.54.42.201
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_194.59.31.127", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5081, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49672], "cves": ["CVE-1999-0524", "CVE-2013-2566", "CVE-2015-2808", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows Server 2016 Standard 14393", "critical_count": 0, "high_count": 1}


indicator: 86.54.42.213
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5406, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49670], "cves": ["CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 86.54.42.227
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49670, 49673], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 86.54.42.231
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49680], "cves": ["CVE-1999-0524", "CVE-2013-2566", "CVE-2015-2808", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows Server 2016 Standard 14393", "critical_count": 0, "high_count": 1}


indicator: 86.54.42.232
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5406, 49664, 49665, 49666, 49667, 49668, 49669, 49670], "cves": ["CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows 11", "critical_count": 0, "high_count": 1}


indicator: 86.54.42.245
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49670], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 86.54.42.251
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49675], "cves": ["CVE-1999-0524", "CVE-2013-2566", "CVE-2015-2808", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows Server 2016 Standard 14393", "critical_count": 0, "high_count": 1}


indicator: 91.103.252.85
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 50, "candidate_reasons": ["c2_port_cluster"], "ports": [22, 111, 1500, 5900, 5901, 5902, 5903, 5968, 5969, 5977, 5978, 5979, 5985, 5986, 5987, 5988, 5989, 5990, 5991, 5997, 5998, 5999, 6000, 6001, 6002, 6003, 6004, 6005, 6006, 6007, 6008, 6009, 6010, 6050, 6051, 6060, 6064, 6066, 6067, 6068, 6069, 6072, 6073], "cves": ["CVE-1999-0524", "CVE-1999-0632", "CVE-2008-5161", "CVE-2013-2566", "CVE-2015-2808", "CVE-2023-48795"], "os": "Re


indicator: 91.103.252.86
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 50, "candidate_reasons": ["c2_port_cluster"], "ports": [22, 111, 1500, 5900, 5901, 5902, 5903, 5968, 5969, 5977, 5978, 5979, 5985, 5986, 5987, 5988, 5989, 5990, 5991, 5997, 5998, 5999, 6000, 6001, 6002, 6003, 6004, 6005, 6006, 6007, 6008, 6009, 6010, 6050, 6051, 6065, 6066, 6067, 6068, 6070], "cves": ["CVE-1999-0524", "CVE-1999-0632", "CVE-2008-5161", "CVE-2013-2566", "CVE-2015-2808", "CVE-2023-48795"], "os": "Remote operating sys


indicator: 176.65.146.21
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 50, "candidate_reasons": ["c2_port_cluster"], "ports": [22, 1001, 1002, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 3001, 3002, 3003, 3004, 4001, 4002, 4003, 4004, 4005, 4006, 4007, 4008, 5001, 5002, 5003, 5004, 5005, 5006, 5007, 6001, 6002, 6003, 6004, 6005, 7001, 7011, 7012, 7013, 7014, 7021, 8001, 8002, 8003, 8201, 8302, 8401, 9000, 9001, 9002, 9006, 9009], "cves": ["CVE-1999-0524"], "os": "Remote operatin


indicator: 176.65.146.33
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 50, "candidate_reasons": ["c2_port_cluster"], "ports": [22, 80, 1001, 1002, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 3001, 3002, 3003, 3004, 4001, 4002, 4003, 4004, 4005, 4006, 4007, 4008, 4444, 5001, 5002, 5003, 5004, 5005, 5006, 5007, 6001, 6002, 6003, 6004, 6005, 7001, 7011, 7012, 7013, 7014, 7021, 7777, 8001, 8002, 8003, 8080, 8081, 8201, 8302, 8401, 9000, 9001, 9002, 9006, 9009, 9999], "cves": ["CVE-1


indicator: 176.65.146.43
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 50, "candidate_reasons": ["c2_port_cluster"], "ports": [22, 1001, 1002, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 3001, 3002, 3003, 3004, 4001, 4002, 4003, 4004, 4005, 4006, 4007, 4008, 5001, 5002, 5003, 5004, 5005, 5006, 5007, 6001, 6002, 6003, 6004, 6005, 7001, 7011, 7012, 7013, 7014, 7021, 8001, 8002, 8003, 8201, 8302, 8401, 9000, 9001, 9002, 9006, 9009], "cves": [], "os": "Remote operating system : Linu


indicator: 176.65.146.52
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 50, "candidate_reasons": ["c2_port_cluster"], "ports": [22, 1001, 1002, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 3001, 3002, 3003, 3004, 4001, 4002, 4003, 4005, 4006, 4007, 4008, 5001, 5002, 5003, 5004, 5005, 5006, 5007, 6001, 6002, 6003, 6004, 6005, 7001, 7011, 7012, 7013, 7014, 7021, 8001, 8002, 8003, 8201, 8302, 8401, 9000, 9001, 9002, 9006, 9009], "cves": ["CVE-1999-0524"], "os": "Remote operating syst


indicator: 176.65.146.58
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 50, "candidate_reasons": ["c2_port_cluster"], "ports": [22, 1001, 1002, 1451, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 3001, 3002, 3003, 3004, 4001, 4002, 4003, 4004, 4005, 4006, 4007, 4008, 5001, 5002, 5003, 5004, 5005, 5006, 5007, 6001, 6002, 6003, 6004, 6005, 7001, 7007, 7011, 7012, 7013, 7014, 7021, 8001, 8002, 8003, 8007, 8009, 8201, 8302, 8401, 9000, 9001, 9002, 9006, 9009], "cves": ["CVE-1999-0524"]


indicator: 176.65.146.99
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 50, "candidate_reasons": ["c2_port_cluster"], "ports": [5, 11, 15, 22, 27, 29, 33, 41, 43, 44, 45, 46, 47, 49, 51, 53, 54, 55, 57, 59, 61, 70, 71, 74, 76, 81, 95, 110, 1001, 1002, 1008, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2451, 2452, 2453, 2660, 2661, 2662, 2663, 2664, 2665, 2670, 2671, 2672, 2673, 2674, 2675, 2910, 2911, 2942, 3001, 3002, 3003, 3004, 3230, 3328, 3329, 3382, 3383, 3402, 3403, 3405, 34


indicator: 176.65.146.101
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 50, "candidate_reasons": ["c2_port_cluster"], "ports": [22, 1001, 1002, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 3001, 3002, 3003, 3004, 4001, 4002, 4003, 4005, 4006, 4008, 5001, 5002, 5003, 5004, 5005, 5006, 5007, 6001, 6002, 6003, 6004, 6005, 7001, 7011, 7012, 7013, 7014, 7021, 8001, 8002, 8003, 8201, 8302, 8401, 9000, 9001, 9002, 9006, 9009], "cves": ["CVE-1999-0524"], "os": "Remote operating system : L


indicator: 176.65.146.110
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 50, "candidate_reasons": ["c2_port_cluster"], "ports": [22, 1001, 1002, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 3001, 3002, 3003, 3004, 4001, 4002, 4003, 4004, 4005, 4006, 4007, 4008, 5001, 5002, 5003, 5004, 5005, 5006, 5007, 6001, 6002, 6003, 6004, 6005, 7001, 7011, 7012, 7013, 7014, 7021, 8000, 8001, 8002, 8003, 8080, 8201, 8302, 8401, 9000, 9001, 9002, 9006, 9009], "cves": ["CVE-1999-0524"], "os": "Rem


indicator: 176.65.146.116
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 50, "candidate_reasons": ["c2_port_cluster"], "ports": [22, 80, 1001, 1002, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 3001, 3002, 3003, 3004, 4001, 4002, 4003, 4004, 4005, 4006, 4007, 4008, 5001, 5002, 5003, 5004, 5005, 5006, 5007, 6001, 6002, 6003, 6004, 6005, 7001, 7011, 7012, 7013, 7014, 7021, 8001, 8002, 8003, 8201, 8302, 8401, 9000, 9001, 9002, 9006, 9009], "cves": ["CVE-1999-0524"], "os": "Remote oper


indicator: 176.65.146.123
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 50, "candidate_reasons": ["c2_port_cluster"], "ports": [22, 1001, 1002, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 3001, 3002, 3003, 3004, 4001, 4002, 4003, 4004, 4005, 4006, 4007, 4008, 5001, 5002, 5003, 5004, 5005, 5006, 5007, 6001, 6002, 6003, 6004, 6005, 7001, 7011, 7012, 7013, 7014, 7021, 8001, 8002, 8003, 8080, 8201, 8302, 8401, 8880, 9000, 9001, 9002, 9006, 9009, 21000], "cves": ["CVE-1999-0524"], "os


indicator: 176.65.146.132
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 50, "candidate_reasons": ["c2_port_cluster"], "ports": [22, 1001, 1002, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 3001, 3002, 3003, 3004, 4001, 4003, 4004, 4005, 4006, 4007, 4008, 5001, 5002, 5003, 5004, 5005, 5006, 5007, 6001, 6002, 6003, 6004, 6005, 7001, 7011, 7012, 7013, 7014, 7021, 8001, 8002, 8003, 8201, 8302, 8401, 8888, 9000, 9001, 9002, 9006, 9009, 10000], "cves": [], "os": "Remote operating system


indicator: 176.65.146.139
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 50, "candidate_reasons": ["c2_port_cluster"], "ports": [22, 1001, 1002, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 3001, 3002, 3003, 3004, 4001, 4002, 4003, 4004, 4005, 4006, 4007, 4008, 5001, 5002, 5003, 5004, 5005, 5006, 5007, 6001, 6002, 6003, 6004, 6005, 7001, 7011, 7012, 7013, 7014, 7021, 8000, 8001, 8002, 8003, 8201, 8302, 8401, 8888, 9000, 9001, 9002, 9006, 9009, 9443, 17007, 20000], "cves": ["CVE-199


indicator: 176.65.146.144
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 50, "candidate_reasons": ["c2_port_cluster"], "ports": [22, 1001, 1002, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 3001, 3002, 3003, 4001, 4002, 4003, 4004, 4005, 4006, 4007, 4008, 5001, 5002, 5004, 5005, 5006, 5007, 6001, 6002, 6003, 6004, 6005, 7001, 7011, 7012, 7013, 7014, 7021, 8001, 8002, 8003, 8201, 8302, 8401, 9000, 9001, 9002], "cves": ["CVE-1999-0524"], "os": "Remote operating system : Linux Kernel 


indicator: 176.65.146.146
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 50, "candidate_reasons": ["c2_port_cluster"], "ports": [22, 80, 81, 443, 1001, 1002, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 3001, 3002, 3003, 3004, 4001, 4002, 4003, 4004, 4005, 4006, 4007, 4008, 5001, 5002, 5003, 5004, 5005, 5006, 5007, 6001, 6002, 6003, 6004, 6005, 7001, 7011, 7012, 7013, 7014, 7021, 8001, 8002, 8003, 8201, 8302, 8401, 9000, 9001, 9002, 9006, 9009, 22222], "cves": ["CVE-1999-0524"], "o


indicator: 176.65.146.151
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 50, "candidate_reasons": ["c2_port_cluster"], "ports": [1001, 1002, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2233, 2398, 3001, 3002, 3003, 3004, 3398, 3511, 4001, 4002, 4004, 4005, 4006, 4007, 4008, 4011, 5000, 5001, 5002, 5003, 5004, 5005, 5006, 5007, 5011, 6001, 6002, 6003, 6004, 6005, 7001, 7011, 7012, 7013, 7014, 7021, 8001, 8002, 8003, 8201, 8302, 8401, 9000, 9001, 9002, 9006, 9009], "cves": ["CVE-199


indicator: 176.65.146.162
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 50, "candidate_reasons": ["c2_port_cluster"], "ports": [22, 1001, 1002, 1294, 1388, 1486, 1713, 1827, 1922, 1966, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2285, 3001, 3002, 3003, 3004, 3330, 3337, 3567, 3659, 3717, 3861, 4001, 4002, 4003, 4004, 4005, 4006, 4007, 4008, 4145, 4445, 5001, 5002, 5003, 5004, 5005, 5006, 5007, 5236, 5727, 6001, 6002, 6003, 6004, 6005, 6699, 7001, 7011, 7012, 7013, 7014, 7021, 73


indicator: 176.65.146.175
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 50, "candidate_reasons": ["c2_port_cluster"], "ports": [22, 1001, 1002, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 3001, 3002, 3003, 3004, 4001, 4002, 4003, 4004, 4005, 4006, 4007, 4008, 5001, 5002, 5003, 5004, 5005, 5006, 5007, 6001, 6002, 6003, 6004, 6005, 7001, 7011, 7012, 7013, 7014, 7021, 8000, 8001, 8002, 8003, 8201, 8302, 8401, 9000, 9001, 9002, 9006, 9009, 10008, 22000], "cves": ["CVE-1999-0524"], "o


indicator: 176.65.146.177
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 50, "candidate_reasons": ["c2_port_cluster"], "ports": [22, 1001, 1002, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 3001, 3002, 3003, 3004, 4001, 4002, 4003, 4004, 4005, 4006, 4007, 4008, 5001, 5002, 5004, 5005, 5006, 5007, 6001, 6002, 6003, 6004, 6005, 7001, 7011, 7012, 7013, 7014, 7021, 8001, 8002, 8003, 8201, 8302, 8401, 8887, 9000, 9001, 9002, 9006, 9009], "cves": ["CVE-1999-0524"], "os": "Remote operatin


indicator: 176.65.146.181
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 50, "candidate_reasons": ["c2_port_cluster"], "ports": [22, 1001, 1002, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 3001, 3002, 3003, 3004, 4001, 4002, 4003, 4004, 4005, 4006, 4007, 4008, 5001, 5002, 5003, 5004, 5005, 5006, 5007, 6001, 6002, 6003, 6004, 6005, 7001, 7011, 7012, 7013, 7014, 7021, 8001, 8002, 8003, 8201, 8302, 8401, 9000, 9002, 9006, 9009], "cves": ["CVE-1999-0524"], "os": "Remote operating syst


indicator: 176.65.146.193
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 50, "candidate_reasons": ["c2_port_cluster"], "ports": [22, 1001, 1002, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 3001, 3002, 3003, 3004, 4000, 4001, 4002, 4003, 4004, 4005, 4006, 4007, 4008, 5001, 5002, 5003, 5004, 5005, 5006, 5007, 6001, 6002, 6003, 6004, 6005, 7001, 7011, 7012, 7013, 7014, 7021, 8001, 8002, 8003, 8201, 8302, 8401, 9000, 9001, 9002, 9006, 9009], "cves": ["CVE-1999-0524"], "os": "Remote op


indicator: 176.65.146.200
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 50, "candidate_reasons": ["c2_port_cluster"], "ports": [22, 1001, 1002, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 3001, 3002, 3003, 3004, 4001, 4002, 4003, 4004, 4005, 4006, 4007, 4008, 5001, 5002, 5003, 5004, 5005, 5006, 5007, 6001, 6002, 6003, 6004, 6005, 7001, 7011, 7012, 7013, 7014, 7021, 8001, 8002, 8003, 8201, 8302, 8401, 9000, 9001, 9002, 9006, 9009, 16384], "cves": ["CVE-1999-0524"], "os": "Remote o


indicator: 176.65.146.215
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 50, "candidate_reasons": ["c2_port_cluster"], "ports": [22, 1001, 1002, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2010, 2011, 3001, 3002, 3003, 3004, 4001, 4002, 4003, 4004, 4005, 4006, 4007, 4008, 5001, 5002, 5003, 5004, 5005, 5006, 5007, 6001, 6002, 6003, 6004, 6005, 7001, 7011, 7012, 7013, 7014, 7021, 8001, 8002, 8003, 8201, 8302, 8401, 9000, 9001, 9002, 9006, 9009], "cves": ["CVE-1999-0524"], "os": "Remote operating syst


indicator: 185.208.158.26
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [22, 135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49670, 49674], "cves": ["CVE-1999-0524", "CVE-2016-2183", "CVE-2023-48795"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 185.208.158.101
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49670, 49671, 49672], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 185.208.158.107
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_185.208.158.227", "windows_mgmt_apt_subnet"], "ports": [135, 445, 3389, 49664, 49665, 49666, 49667, 49668, 49669, 49670, 49676], "cves": ["CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows Server 2019", "critical_count": 0, "high_count": 1}


indicator: 185.208.158.132
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49683], "cves": ["CVE-1999-0524", "CVE-2013-2566", "CVE-2015-2808", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows Server 2016 Standard 14393", "critical_count": 0, "high_count": 1}


indicator: 185.208.158.134
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49670], "cves": ["CVE-1999-0524", "CVE-2013-2566", "CVE-2015-2808", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows Server 2016 Standard 14393", "critical_count": 0, "high_count": 1}


indicator: 185.208.158.136
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49670, 50937], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 185.208.158.150
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [80, 135, 139, 443, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49670, 49671], "cves": ["CVE-1999-0524", "CVE-2001-0731", "CVE-2003-1567", "CVE-2004-2320", "CVE-2004-2761", "CVE-2005-4900", "CVE-2010-0386", "CVE-2016-2183", "CVE-2023-38709", "CVE-2023-5363", "CVE-2023-5678", "CVE-2023-6129", "CVE-2023-6237", "CVE-2024-0727", "CVE-2024-2


indicator: 185.208.158.159
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49670, 49674], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 185.208.158.160
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [80, 135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49670], "cves": ["CVE-2013-2566", "CVE-2015-2808", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows Server 2016 Standard 14393", "critical_count": 0, "high_count": 1}


indicator: 185.208.158.163
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_194.59.31.211", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 1601, 3389, 5500, 5985, 8888, 8889, 49664, 49665, 49666, 49667, 49668, 49669, 49670, 54989], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 185.208.158.224
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 444, 445, 3389, 5985, 7070, 49664, 49665, 49666, 49667, 49668, 49669, 49670, 49673], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 185.208.158.240
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 443, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49670, 54529], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 2}


indicator: 185.208.158.245
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 137, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49669, 49670, 49671, 49679], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 185.208.158.246
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 137, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49670, 49683], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 185.208.158.250
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [22, 80, 135, 139, 445, 3389, 5985, 7777, 9999, 49664, 49665, 49666, 49667, 49668, 49669, 49670, 49671], "cves": ["CVE-1999-0524", "CVE-2016-2183", "CVE-2023-48795"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 194.59.31.2
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_194.59.31.211", "windows_mgmt_apt_subnet"], "ports": [135, 137, 139, 443, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49670, 57012], "cves": ["CVE-1999-0524", "CVE-2016-2183", "CVE-2025-3935"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 3}


indicator: 194.59.31.9
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 445, 3389, 49664, 49665, 49666, 49667, 49668, 49670, 49671], "cves": ["CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows Server 2019", "critical_count": 0, "high_count": 1}


indicator: 194.59.31.11
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 137, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49670], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 194.59.31.12
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [80, 135, 139, 443, 445, 3306, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49670], "cves": ["CVE-1999-0524", "CVE-2003-1567", "CVE-2004-2320", "CVE-2004-2761", "CVE-2005-4900", "CVE-2010-0386", "CVE-2016-2183", "CVE-2022-31629", "CVE-2023-38709", "CVE-2023-5363", "CVE-2023-5678", "CVE-2023-6129", "CVE-2023-6237", "CVE-2024-0727", "CVE


indicator: 194.59.31.13
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [22, 135, 137, 139, 445, 2222, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49670, 49671], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 194.59.31.16
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3001, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49670, 49674], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 194.59.31.23
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49670, 52213], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 194.59.31.27
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_194.59.31.127", "windows_mgmt_apt_subnet"], "ports": [135, 137, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49672, 52298], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 194.59.31.41
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_194.59.31.127", "windows_mgmt_apt_subnet"], "ports": [135, 139, 443, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49672], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 194.59.31.45
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 443, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49670, 49697], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 2}


indicator: 194.59.31.51
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_194.59.31.211", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49685, 59296], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 194.59.31.54
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_194.59.31.127", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49672, 49774], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 194.59.31.61
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_194.59.31.127", "windows_mgmt_apt_subnet"], "ports": [135, 139, 443, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49672, 49912], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 2}


indicator: 194.59.31.63
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_194.59.31.127", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49672, 49776], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 194.59.31.66
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49670, 64425], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 194.59.31.70
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 52873], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 194.59.31.71
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 59239], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 194.59.31.73
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 50431], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 194.59.31.75
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 65352], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 194.59.31.76
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3001, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49671, 55008], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 194.59.31.84
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_194.59.31.211", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 57711, 57810], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 194.59.31.85
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49670, 49676], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 194.59.31.88
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_194.59.31.127", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 7070, 49664, 49665, 49666, 49667, 49668, 49672, 49757], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 194.59.31.97
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [80, 135, 139, 443, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49670], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows 10", "critical_count": 0, "high_count": 2}


indicator: 194.59.31.98
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_194.59.31.211", "windows_mgmt_apt_subnet"], "ports": [135, 139, 443, 445, 3389, 5000, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 60737], "cves": ["CVE-1999-0524", "CVE-2003-1567", "CVE-2004-2320", "CVE-2004-2761", "CVE-2005-4900", "CVE-2010-0386", "CVE-2016-2183", "CVE-2022-31629", "CVE-2023-38709", "CVE-2023-5363", "CVE-2023-5678", "CVE-2023-6129", "CVE-2023-6237", "CVE-2024-0727", "CVE-20


indicator: 194.59.31.101
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_194.59.31.211", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49668, 49669, 49688, 49778], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 194.59.31.105
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_185.208.158.227", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5000, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 63075], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 194.59.31.116
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49684], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 194.59.31.120
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 49664, 49665, 49666, 49667, 49668, 49670, 49671, 49672], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows Server 2019", "critical_count": 0, "high_count": 1}


indicator: 194.59.31.125
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_194.59.31.211", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49685, 49701], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 194.59.31.133
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_194.59.31.127", "windows_mgmt_apt_subnet"], "ports": [135, 137, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49670, 49675], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 194.59.31.144
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 7070, 49664, 49665, 49666, 49667, 49668, 49669, 49673], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 194.59.31.147
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 443, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49671], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 2}


indicator: 194.59.31.148
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49697], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 194.59.31.150
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_185.208.158.227", "windows_mgmt_apt_subnet"], "ports": [135, 137, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49669, 49670, 49679], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 194.59.31.162
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49670, 57481], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 194.59.31.171
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_194.59.31.127", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49672, 50482], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 194.59.31.173
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_194.59.31.211", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49683, 50900], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 194.59.31.174
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_194.59.31.211", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49669, 49691, 49781], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 194.59.31.179
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [80, 135, 139, 443, 445, 1001, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49670], "cves": ["CVE-1999-0524", "CVE-2003-1567", "CVE-2004-2320", "CVE-2004-2761", "CVE-2005-4900", "CVE-2010-0386", "CVE-2016-2183", "CVE-2022-31629", "CVE-2023-38709", "CVE-2023-5363", "CVE-2023-5678", "CVE-2023-6129", "CVE-2023-6237", "CVE-2024-0727", "CVE


indicator: 194.59.31.181
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_185.208.158.227", "windows_mgmt_apt_subnet"], "ports": [135, 139, 443, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 59988], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 2}


indicator: 194.59.31.184
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 2694, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49670, 49671], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 194.59.31.186
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49670], "cves": ["CVE-1999-0524"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 0}


indicator: 194.59.31.193
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_194.59.31.211", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49668, 49669, 49688, 49747], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 194.59.31.195
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.131", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49673, 49674, 49675], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 194.59.31.196
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_194.59.31.211", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49682, 53107], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 194.59.31.197
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 137, 139, 445, 3389, 5985, 10101, 49664, 49665, 49666, 49667, 49668, 49670, 49671, 60008], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 194.59.31.217
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_194.59.31.127", "windows_mgmt_apt_subnet"], "ports": [135, 137, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49671, 49672], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 194.59.31.219
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_194.59.31.127", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49672, 54454], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 194.59.31.223
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.131", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49672, 49673, 49674, 49675], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 194.59.31.234
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_194.59.31.211", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49674, 49675], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 194.59.31.235
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_194.59.31.211", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49678, 60959], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 194.59.31.239
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49670, 62525], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 194.59.31.244
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 7070, 49664, 49665, 49666, 49667, 49668, 49669, 49670], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 194.59.31.251
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.131", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 7070, 49664, 49665, 49666, 49667, 49673, 49674, 49675], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 194.59.31.252
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_194.59.31.127", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49672, 49772], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 194.59.31.253
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_194.59.31.211", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49669, 49689, 49774], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 194.85.249.24
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 90, "candidate_reasons": ["c2_port_cluster", "clone_of_194.85.251.81"], "ports": [111, 1881, 5666, 5988, 5991, 5997, 6000, 6002, 6003, 6004, 6005, 6060, 6064, 6070, 6072, 6080, 6146, 6343, 6346, 6382, 6443, 6455, 6456, 6500, 6501, 6502, 6503, 6505, 6506, 6507, 6508, 6510, 6514, 6767], "cves": ["CVE-1999-0524", "CVE-1999-0632"], "os": "Remote operating system : Linux Kernel 2.6", "critical_count": 0, "high_count": 0}


indicator: 194.85.249.175
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 90, "candidate_reasons": ["c2_port_cluster", "clone_of_194.85.251.81"], "ports": [111, 1881, 5666, 5988, 5991, 5997, 6000, 6002, 6003, 6004, 6005, 6060, 6064, 6070, 6072, 6080, 6146, 6343, 6346, 6382, 6443, 6455, 6456, 6500, 6501, 6502, 6503, 6505, 6506, 6507, 6508, 6510, 6514, 6767], "cves": ["CVE-1999-0524", "CVE-1999-0632"], "os": "Remote operating system : Linux Kernel 2.x on Red Hat Enterprise Linux Server", "critical_count":


indicator: 194.85.249.250
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 90, "candidate_reasons": ["c2_port_cluster", "clone_of_194.85.251.81"], "ports": [111, 1881, 5666, 5988, 5991, 5997, 6000, 6002, 6003, 6004, 6005, 6060, 6064, 6070, 6072, 6080, 6146, 6343, 6346, 6382, 6443, 6455, 6456, 6500, 6501, 6502, 6503, 6505, 6506, 6507, 6508, 6510, 6514, 6767], "cves": ["CVE-1999-0524", "CVE-1999-0632"], "os": "Remote operating system : Cisco SIP Device", "critical_count": 0, "high_count": 0}


indicator: 194.85.251.7
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 50, "candidate_reasons": ["c2_port_cluster"], "ports": [111, 1881, 5666, 5902, 5978, 5987, 5988, 5990, 5999, 6001, 6002, 6003, 6006, 6008, 6009, 6010, 6051, 6066, 6069, 6073, 6080, 6100, 6103, 6104, 6108, 6109, 6110, 6112, 6129, 6142, 6143, 6144, 6147, 6148, 6149, 6767], "cves": ["CVE-1999-0524", "CVE-1999-0632"], "os": "Remote operating system : Linux Kernel 2.6", "critical_count": 0, "high_count": 0}


indicator: 194.85.251.8
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 50, "candidate_reasons": ["c2_port_cluster"], "ports": [111, 1881, 5666, 5969, 5977, 5986, 5989, 5990, 5997, 6000, 6003, 6005, 6007, 6008, 6051, 6060, 6067, 6069, 6071, 6073, 6080, 6085, 6100, 6101, 6103, 6104, 6105, 6123, 6129, 6143, 6144, 6147, 6148, 6149, 6150, 6175, 6200, 6767], "cves": ["CVE-1999-0524", "CVE-1999-0632"], "os": "Remote operating system : Linux Kernel 2.6", "critical_count": 0, "high_count": 0}


indicator: 194.85.251.9
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 50, "candidate_reasons": ["c2_port_cluster"], "ports": [111, 1881, 5666, 5903, 5969, 5985, 5990, 5991, 5997, 5999, 6002, 6003, 6006, 6008, 6009, 6010, 6060, 6068, 6069, 6070, 6071, 6072, 6102, 6103, 6106, 6107, 6111, 6112, 6123, 6141, 6142, 6143, 6150, 6177, 6200, 6767], "cves": ["CVE-1999-0524", "CVE-1999-0632"], "os": "Remote operating system : Linux Kernel 2.6", "critical_count": 0, "high_count": 0}


indicator: 194.85.251.10
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 50, "candidate_reasons": ["c2_port_cluster"], "ports": [111, 1881, 5666, 5902, 5903, 5969, 5978, 5991, 6060, 6069, 6070, 6073, 6102, 6103, 6123, 6141, 6142, 6144, 6146, 6149, 6150, 6175, 6767], "cves": ["CVE-1999-0524", "CVE-1999-0632"], "os": "Remote operating system : Linux Kernel 2.6", "critical_count": 0, "high_count": 0}


indicator: 80.76.49.2
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49671, 55461], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.11
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 63774], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.12
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 6379, 7070, 49664, 49665, 49666, 49667, 49668, 49669, 49671, 62460], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 1, "high_count": 1}


indicator: 80.76.49.13
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49670, 49677], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.14
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_185.208.158.227", "windows_mgmt_apt_subnet"], "ports": [135, 137, 139, 445, 3389, 5985, 49281, 49664, 49665, 49666, 49667, 49668, 49669], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.18
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [80, 135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49671], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows 10", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.20
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_194.59.31.211", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 6666, 49664, 49665, 49666, 49667, 49668, 49669, 49674, 49681], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.22
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 10101, 49664, 49665, 49666, 49667, 49668, 49669, 49671, 49672, 60008], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.26
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49670, 49761], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.33
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_185.208.158.227", "windows_mgmt_apt_subnet"], "ports": [135, 137, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 50753], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.34
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 50611], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.50
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49670, 49678], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.52
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 57160], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.53
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 8888, 49664, 49665, 49666, 49667, 49668, 49669, 49670], "cves": ["CVE-1999-0524", "CVE-2015-4000", "CVE-2016-2183", "CVE-2024-57726", "CVE-2024-57727", "CVE-2024-57728", "CVE-2025-36727", "CVE-2025-36728"], "os": "Remote operating system : Microsoft Windows", "critical_count": 3, "high_count": 2}


indicator: 80.76.49.54
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 7070, 49664, 49665, 49666, 49667, 49668, 49669, 56512], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.59
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_194.59.31.127", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 6881, 49664, 49665, 49666, 49667, 49668, 49670, 49672], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.61
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_194.59.31.211", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49669, 49686, 49773], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.62
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_194.59.31.211", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49426, 49536, 49664, 49665, 49666, 49667, 49668], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.63
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 1900, 3389, 5985, 49664, 49665, 49667, 49668, 49670, 49671], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.107
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 53408], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.108
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49670, 49829], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.111
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49670, 62470], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.112
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_194.59.31.211", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 10101, 49664, 49665, 49666, 49667, 49668, 49669, 59642, 60008], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.115
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.116
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_185.208.158.227", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49673, 52110], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.120
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_194.59.31.106", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49671, 49674, 50414], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.123
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_194.59.31.211", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 10101, 49664, 49665, 49666, 49667, 49668, 49670, 60008, 64082], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.124
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 63208], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.125
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49669, 49670, 49673], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.129
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [80, 135, 139, 443, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49671, 64198], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.133
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [80, 135, 139, 443, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49671, 58149], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows 10", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.136
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.131", "windows_mgmt_apt_subnet"], "ports": [80, 135, 139, 443, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49673, 49674, 49675, 49676], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.137
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_194.59.31.127", "windows_mgmt_apt_subnet"], "ports": [135, 139, 443, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49670, 62626], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 2}


indicator: 80.76.49.146
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49671, 49675], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.147
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_194.59.31.211", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49669, 49687, 49802], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.150
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [80, 135, 139, 443, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49670], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.152
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 443, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49670], "cves": ["CVE-1999-0524", "CVE-2016-2183", "CVE-2025-3935"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 3}


indicator: 80.76.49.157
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 54514], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.160
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_194.59.31.211", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49669, 49689, 49764], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.162
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [80, 135, 139, 443, 445, 3306, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49671], "cves": ["CVE-1999-0524", "CVE-2003-1567", "CVE-2004-2320", "CVE-2010-0386", "CVE-2016-2183", "CVE-2023-38709", "CVE-2023-5363", "CVE-2023-5678", "CVE-2023-6129", "CVE-2023-6237", "CVE-2024-0727", "CVE-2024-24795", "CVE-2024-2511", "CVE-2024-27316", "CV


indicator: 80.76.49.163
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.131", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49264, 49664, 49665, 49666, 49667, 49673, 49674, 49675], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.165
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_194.59.31.127", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49669, 49670, 49672, 55301], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.175
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_194.59.31.211", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 10101, 49664, 49665, 49666, 49667, 49668, 49670, 49687, 60008], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.182
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 445, 3389, 49664, 49665, 49666, 49667, 49668, 49669, 49670, 49671], "cves": ["CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows Server 2019", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.188
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_185.208.158.227", "windows_mgmt_apt_subnet"], "ports": [135, 139, 443, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 63266], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 2}


indicator: 80.76.49.194
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49670, 49684], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.199
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_194.59.31.211", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49669, 49675, 50142], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.200
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_194.59.31.211", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 10101, 49664, 49665, 49666, 49667, 49668, 49669, 52323, 60008], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.205
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49669, 49670, 49671], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.209
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_194.59.31.127", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49672, 59253], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.210
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_194.59.31.127", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49672, 55532], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.212
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_194.59.31.211", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 59506, 63376], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.214
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [80, 135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49671, 49672], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.215
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_194.59.31.211", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49669, 49688, 50833], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.216
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_194.59.31.211", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49669, 49684, 50417], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.220
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_194.59.31.211", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 10101, 49664, 49665, 49666, 49667, 49668, 49670, 49690, 60008], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.224
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 443, 445, 1417, 3389, 5985, 7007, 49664, 49665, 49666, 49667, 49669, 49670, 49671], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 2}


indicator: 80.76.49.229
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49670, 61933], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.238
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_194.59.31.211", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49669, 49690, 49778], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.240
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [80, 135, 139, 445, 3389, 5985, 8880, 49664, 49665, 49666, 49667, 49668, 49669, 49671], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.245
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_194.59.31.127", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5081, 5985, 49664, 49665, 49666, 49667, 49668, 49670, 52937], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.250
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 51223], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.251
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_185.208.158.227", "windows_mgmt_apt_subnet"], "ports": [80, 135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 49695], "cves": ["CVE-1999-0524", "CVE-2016-2183", "CVE-2025-3935"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 2}


indicator: 80.76.49.252
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 55057], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 80.76.49.253
indicator_type: ipv4
source: vuln_scan
queried_at: 2026-03-11T08:42:17.666227
raw_data:
  {"scan": "Advanced Vulnerability Scan_vgq5cf", "candidate_score": 65, "candidate_reasons": ["clone_of_80.76.49.119", "windows_mgmt_apt_subnet"], "ports": [135, 139, 445, 3389, 5985, 49664, 49665, 49666, 49667, 49668, 49669, 65284], "cves": ["CVE-1999-0524", "CVE-2016-2183"], "os": "Remote operating system : Microsoft Windows", "critical_count": 0, "high_count": 1}


indicator: 194.85.251.7
indicator_type: ipv4
source: shodan
queried_at: 2026-03-11T08:50:37.694177
raw_data:
  {"ports": [111, 5903, 5911, 5920, 5984, 5985, 5988, 5990, 5992, 6001, 6002, 6003, 6008, 6009, 6010, 6080], "vulns": [], "hostnames": [], "tags": [], "cpes": []}


indicator: 194.85.251.8
indicator_type: ipv4
source: shodan
queried_at: 2026-03-11T08:50:39.356536
raw_data:
  {"ports": [111, 5906, 5911, 5913, 5918, 5938, 5986, 5993, 5996, 6000, 6005, 6007, 6008, 6060, 6080, 6081], "vulns": [], "hostnames": [], "tags": [], "cpes": []}


indicator: 194.85.251.9
indicator_type: ipv4
source: shodan
queried_at: 2026-03-11T08:50:41.023562
raw_data:
  {"ports": [111, 5903, 5904, 5909, 5914, 5917, 5919, 5985, 5990, 5991, 5993, 6000, 6002, 6003, 6006, 6008, 6070, 6081, 6134], "vulns": [], "hostnames": [], "tags": [], "cpes": []}


indicator: 194.85.251.10
indicator_type: ipv4
source: shodan
queried_at: 2026-03-11T08:50:42.697125
raw_data:
  {"ports": [111, 5903, 5913, 5938, 5984, 5990, 5991, 6020, 6060, 6161], "vulns": [], "hostnames": [], "tags": [], "cpes": []}


indicator: 194.85.251.11
indicator_type: ipv4
source: shodan
queried_at: 2026-03-11T08:50:44.344506
raw_data:
  {"ports": [111, 5992, 5996, 6000, 6002, 6005, 6020, 6080, 6081, 6443, 6505], "vulns": [], "hostnames": [], "tags": [], "cpes": []}


indicator: 194.85.251.69
indicator_type: ipv4
source: shodan
queried_at: 2026-03-11T08:50:46.042784
raw_data:
  {"ports": [22, 80], "vulns": [], "hostnames": [], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:golang:go", "cpe:/a:caddyserver:caddy"]}

hosting_provider:
  cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux,cpe:/a:golang:go,cpe:/a:caddyserver:caddy


indicator: 194.85.251.236
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-03-11T08:50:47.687415
raw_data:
  {"ports": [22, 6000, 6002], "vulns": [], "hostnames": [], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 194.85.251.251
indicator_type: ipv4
source: shodan
reverse_dns: www.github.com,github.com
queried_at: 2026-03-11T08:50:49.295401
raw_data:
  {"ports": [443, 6080, 6488], "vulns": [], "hostnames": ["www.github.com", "github.com"], "tags": [], "cpes": []}


indicator: 80.76.49.64
indicator_type: ipv4
source: shodan
city: self-signed
queried_at: 2026-03-11T08:50:50.959602
raw_data:
  {"ports": [135, 137, 3389, 5357, 5985], "vulns": [], "hostnames": [], "tags": ["self-signed"], "cpes": []}


indicator: 80.76.49.68
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: msssgeprwv.de
queried_at: 2026-03-11T08:50:52.626673
raw_data:
  {"ports": [135, 443, 3389], "vulns": [], "hostnames": ["msssgeprwv.de"], "tags": ["self-signed"], "cpes": []}


indicator: 80.76.49.74
indicator_type: ipv4
source: shodan
city: self-signed
queried_at: 2026-03-11T08:50:57.626940
raw_data:
  {"ports": [445, 3389, 5985], "vulns": ["CVE-2020-0796"], "hostnames": [], "tags": ["self-signed"], "cpes": []}


indicator: 80.76.49.75
indicator_type: ipv4
source: shodan
queried_at: 2026-03-11T08:50:59.406743
raw_data:
  {"ports": [139, 445, 3389, 5985], "vulns": ["CVE-2020-0796"], "hostnames": [], "tags": [], "cpes": []}


indicator: 80.76.49.79
indicator_type: ipv4
source: shodan
city: self-signed
hosting_provider: cpe:/a:microsoft:internet_information_services:10.0,cpe:/o:microsoft:windows
queried_at: 2026-03-11T08:51:01.195485
raw_data:
  {"ports": [80, 3389, 5357, 5985], "vulns": [], "hostnames": [], "tags": ["self-signed"], "cpes": ["cpe:/a:microsoft:internet_information_services:10.0", "cpe:/o:microsoft:windows"]}


indicator: 80.76.49.81
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: commercial-sso-citizens.sbs
hosting_provider: cpe:/o:linux:linux_kernel,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx:1.18.0
queried_at: 2026-03-11T08:51:02.831764
raw_data:
  {"ports": [135, 443, 5985], "vulns": ["CVE-2021-23017", "CVE-2023-44487", "CVE-2021-3618", "CVE-2025-23419"], "hostnames": ["commercial-sso-citizens.sbs"], "tags": ["eol-product"], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx:1.18.0"]}


indicator: 80.76.49.82
indicator_type: ipv4
source: shodan
queried_at: 2026-03-11T08:51:04.483871
raw_data:
  {"ports": [135, 445, 5985, 47001], "vulns": ["CVE-2020-0796"], "hostnames": [], "tags": [], "cpes": []}


indicator: 80.76.49.83
indicator_type: ipv4
source: shodan
city: self-signed
queried_at: 2026-03-11T08:51:06.145624
raw_data:
  {"ports": [135, 3389, 5357, 5985], "vulns": [], "hostnames": [], "tags": ["self-signed"], "cpes": []}


indicator: 80.76.49.85
indicator_type: ipv4
source: shodan
city: self-signed
queried_at: 2026-03-11T08:51:07.937498
raw_data:
  {"ports": [139, 445, 3389, 5985], "vulns": [], "hostnames": [], "tags": ["self-signed"], "cpes": []}


indicator: 80.76.49.89
indicator_type: ipv4
source: shodan
city: self-signed
hosting_provider: cpe:/a:microsoft:internet_information_services:10.0,cpe:/o:microsoft:windows
queried_at: 2026-03-11T08:51:09.599356
raw_data:
  {"ports": [80, 3389, 8041], "vulns": [], "hostnames": [], "tags": ["self-signed"], "cpes": ["cpe:/a:microsoft:internet_information_services:10.0", "cpe:/o:microsoft:windows"]}


indicator: 80.76.49.90
indicator_type: ipv4
source: shodan
city: self-signed
hosting_provider: cpe:/o:microsoft:windows,cpe:/a:microsoft:internet_information_services:10.0
queried_at: 2026-03-11T08:51:11.256986
raw_data:
  {"ports": [80, 445, 3389, 8041], "vulns": ["CVE-2020-0796"], "hostnames": [], "tags": ["self-signed"], "cpes": ["cpe:/o:microsoft:windows", "cpe:/a:microsoft:internet_information_services:10.0"]}


indicator: 80.76.49.95
indicator_type: ipv4
source: shodan
city: self-signed
queried_at: 2026-03-11T08:51:16.239182
raw_data:
  {"ports": [445, 3389, 5357, 5985, 8040], "vulns": ["CVE-2020-0796"], "hostnames": [], "tags": ["self-signed"], "cpes": []}


indicator: 86.54.42.18
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/a:openbsd:openssh:for_Windows_9.2
queried_at: 2026-03-11T08:51:19.526207
raw_data:
  {"ports": [22, 135, 445, 5985], "vulns": [], "hostnames": [], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:for_Windows_9.2"]}


indicator: 86.54.42.21
indicator_type: ipv4
source: shodan
city: self-signed,starttls
queried_at: 2026-03-11T08:51:21.156260
raw_data:
  {"ports": [22, 53, 80, 139, 143, 8880], "vulns": ["CVE-2024-38474", "CVE-2022-37436", "CVE-2013-4365", "CVE-2024-38475", "CVE-2023-31122", "CVE-2025-59775", "CVE-2023-25690", "CVE-2022-31813", "CVE-2011-2688", "CVE-2025-55753", "CVE-2022-29404", "CVE-2022-23943", "CVE-2013-0942", "CVE-2007-4723", "CVE-2024-24795", "CVE-2022-30556", "CVE-2024-27316", "CVE-2013-0941", "CVE-2012-3526", "CVE-2022-28615", "CVE-2025-58098", "CVE-2023-38709", "CVE-2022-26377", "CVE-2024-38476", "CVE-2023-45802", "CVE-2

hosting_provider:
  cpe:/a:apache:http_server:2.4.52,cpe:/o:debian:debian_linux,cpe:/o:canonical:ubuntu_linux,cpe:/o:linux:linux_kernel,cpe:/a:openbsd:openssh:8.4p1


indicator: 86.54.42.25
indicator_type: ipv4
source: shodan
reverse_dns: VPS-FOhgGFNs
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-03-11T08:51:22.806331
raw_data:
  {"ports": [22, 135, 445], "vulns": [], "hostnames": ["VPS-FOhgGFNs"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 86.54.42.38
indicator_type: ipv4
source: shodan
reverse_dns: bislon
hosting_provider: cpe:/a:openbsd:openssh:8.2p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-03-11T08:51:24.438022
raw_data:
  {"ports": [22, 5357, 8000], "vulns": [], "hostnames": ["bislon"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.2p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 86.54.42.40
indicator_type: ipv4
source: shodan
city: self-signed
hosting_provider: cpe:/a:apache:http_server:2.4.58,cpe:/a:php:php:8.2.12,cpe:/a:openssl:openssl:3.1.3
queried_at: 2026-03-11T08:51:26.104409
raw_data:
  {"ports": [80, 135, 445, 3389, 5985], "vulns": ["CVE-2013-2765", "CVE-2024-36387", "CVE-2025-1217", "CVE-2025-65082", "CVE-2025-49812", "CVE-2025-6491", "CVE-2013-0942", "CVE-2009-3766", "CVE-2013-4365", "CVE-2024-43394", "CVE-2024-38477", "CVE-2024-43204", "CVE-2024-8929", "CVE-2024-2408", "CVE-2024-6119", "CVE-2020-0796", "CVE-2024-8925", "CVE-2025-23048", "CVE-2024-24795", "CVE-2013-0941", "CVE-2024-4577", "CVE-2009-0796", "CVE-2019-0190", "CVE-2023-38709", "CVE-2024-3096", "CVE-2024-5458", "


indicator: 86.54.42.53
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: RDP-NmCfzSsf
queried_at: 2026-03-11T08:51:29.393978
raw_data:
  {"ports": [135, 3389], "vulns": [], "hostnames": ["RDP-NmCfzSsf"], "tags": ["self-signed"], "cpes": []}


indicator: 86.54.42.54
indicator_type: ipv4
source: shodan
city: self-signed
hosting_provider: cpe:/a:openbsd:openssh:8.7
queried_at: 2026-03-11T08:51:31.041703
raw_data:
  {"ports": [22, 135, 445, 3389, 5357, 5985], "vulns": ["CVE-2021-36368", "CVE-2025-26465", "CVE-2024-6387", "CVE-2025-32728", "CVE-2021-41617", "CVE-2023-38408", "CVE-2023-51767", "CVE-2008-3844", "CVE-2023-51385", "CVE-2016-20012", "CVE-2007-2768", "CVE-2023-48795"], "hostnames": [], "tags": ["self-signed"], "cpes": ["cpe:/a:openbsd:openssh:8.7"]}


indicator: 86.54.42.56
indicator_type: ipv4
source: shodan
reverse_dns: botmax
queried_at: 2026-03-11T08:51:32.692909
raw_data:
  {"ports": [445, 5357, 5985, 30003, 30004, 30023], "vulns": ["CVE-2020-0796"], "hostnames": ["botmax"], "tags": [], "cpes": []}


indicator: 86.54.42.57
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: Lovelysmile,remote.trisquareresourcesit.com
hosting_provider: cpe:/a:openbsd:openssh:for_Windows_9.2,cpe:/a:connectwise:screenconnect:23.3.21
queried_at: 2026-03-11T08:51:34.331733
raw_data:
  {"ports": [22, 135, 443, 445, 3389, 5985], "vulns": ["CVE-2020-0796"], "hostnames": ["Lovelysmile", "remote.trisquareresourcesit.com"], "tags": ["self-signed"], "cpes": ["cpe:/a:openbsd:openssh:for_Windows_9.2", "cpe:/a:connectwise:screenconnect:23.3.21"]}


indicator: 86.54.42.68
indicator_type: ipv4
source: shodan
reverse_dns: icloudn
queried_at: 2026-03-11T08:51:39.313232
raw_data:
  {"ports": [22, 5985, 8000], "vulns": [], "hostnames": ["icloudn"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/a:encode:uvicorn", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:python:python"]}

hosting_provider:
  cpe:/a:openbsd:openssh:8.9p1,cpe:/a:encode:uvicorn,cpe:/o:canonical:ubuntu_linux,cpe:/a:python:python


indicator: 86.54.42.69
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: WinMacchine2026
queried_at: 2026-03-11T08:51:40.975632
raw_data:
  {"ports": [3389, 5357, 5985], "vulns": [], "hostnames": ["WinMacchine2026"], "tags": ["self-signed"], "cpes": []}


indicator: 86.54.42.72
indicator_type: ipv4
source: shodan
reverse_dns: redtracecorporation.com
hosting_provider: cpe:/a:openbsd:openssh:for_Windows_9.5
queried_at: 2026-03-11T08:51:42.644813
raw_data:
  {"ports": [22, 135, 443, 445, 5357, 5985], "vulns": [], "hostnames": ["redtracecorporation.com"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:for_Windows_9.5"]}


indicator: 194.85.251.7
indicator_type: ipv4
source: otx
country: DE
queried_at: 2026-03-11T08:51:47.002360
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "ASNone ", "indicator": "194.85.251.7", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 194.85.251.8
indicator_type: ipv4
source: otx
country: DE
reverse_dns: conn.masjesu.zip
hosting_provider: compromise ipv4,macho,hajime,ps1,Formbook,connectwise,ClearFake,botnetdomain,sshdkit,gafgyt
queried_at: 2026-03-11T08:51:48.635438
raw_data:
  {"pulse_count": 6, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "ASNone ", "indicator": "194.85.251.8", "tags": ["compromise ipv4", "macho", "hajime", "ps1", "Formbook", "connectwise", "ClearFake", "botnetdomain", "sshdkit", "gafgyt", "sha256", "sh", "mirai botnet", "iocs", "elf", "dropped-by-LummaStealer", "Metasploit", "AmosStealer", "64-bit", "toggle", "bitbucket", "gs005", "arm", "txt", "Mozi", "gs003", "dropped-by-ACRStealer", "zip", "jpg-base64-loader",


indicator: 194.85.251.9
indicator_type: ipv4
source: otx
country: DE
hosting_provider: compromise ipv4,tcp/23,SSH,sha256,mirai botnet,iocs,honeypot,toggle,blacklist,port 23
queried_at: 2026-03-11T08:51:50.405303
raw_data:
  {"pulse_count": 6, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "ASNone ", "indicator": "194.85.251.9", "tags": ["compromise ipv4", "tcp/23", "SSH", "sha256", "mirai botnet", "iocs", "honeypot", "toggle", "blacklist", "port 23", "tcp", "botnet", "sha1", "scanner", "Malicious IP", "scan", "attack", "linux", "ipv4 port", "mirai", "login", "combinations", "telnet", "Telnet"], "pulses": ["Ka's Honeypot visitors", "IP Addresses Logged by the Rosethorn PotNet", "[G


indicator: 194.85.251.10
indicator_type: ipv4
source: otx
country: DE
reverse_dns: monzeta.info
queried_at: 2026-03-11T08:51:52.096951
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "ASNone ", "indicator": "194.85.251.10", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["monzeta.info"]}


indicator: 194.85.251.11
indicator_type: ipv4
source: otx
country: DE
queried_at: 2026-03-11T08:51:54.164481
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "ASNone ", "indicator": "194.85.251.11", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 194.85.251.69
indicator_type: ipv4
source: otx
country: DE
reverse_dns: niderlavp.site
queried_at: 2026-03-11T08:51:55.975771
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "ASNone ", "indicator": "194.85.251.69", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["niderlavp.site"]}


indicator: 194.85.251.236
indicator_type: ipv4
source: otx
country: DE
queried_at: 2026-03-11T08:51:57.480613
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "ASNone ", "indicator": "194.85.251.236", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 194.85.251.251
indicator_type: ipv4
source: otx
country: DE
queried_at: 2026-03-11T08:51:59.067425
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "ASNone ", "indicator": "194.85.251.251", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 80.76.49.64
indicator_type: ipv4
source: otx
country: US
reverse_dns: xotrz.info,carsediles.cam,www.bjyangguanghs.com,bjyangguanghs.com
queried_at: 2026-03-11T08:52:00.560278
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.64", "tags": [], "pulses": [], "malware_count": 1, "passive_dns_count": 4, "malware_samples": ["7effd231253f4b022688d0f896d9690fb2c2d8355361d2c745f6b993de421122"], "passive_dns": ["xotrz.info", "carsediles.cam", "www.bjyangguanghs.com", "bjyangguanghs.com"]}


indicator: 80.76.49.68
indicator_type: ipv4
source: otx
country: US
reverse_dns: jumio-okta.com,guanleminggoldpen.com,www.guanleminggoldpen.com
queried_at: 2026-03-11T08:52:02.477065
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.68", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["jumio-okta.com", "guanleminggoldpen.com", "www.guanleminggoldpen.com"]}


indicator: 80.76.49.70
indicator_type: ipv4
source: otx
country: US
reverse_dns: healtheserviceoflife.ink,exaqreme.cam,www.kinghaiyang.com,kinghaiyang.com
queried_at: 2026-03-11T08:52:04.639119
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.70", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 4, "malware_samples": [], "passive_dns": ["healtheserviceoflife.ink", "exaqreme.cam", "www.kinghaiyang.com", "kinghaiyang.com"]}


indicator: 80.76.49.71
indicator_type: ipv4
source: otx
country: US
reverse_dns: tratonfas.cam
queried_at: 2026-03-11T08:52:17.282073
raw_data:
  {"pulse_count": 7, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.71", "tags": ["webscanner", "webscanner, bruteforce, web app attack", "abuseipdb", "probing", "scanning", "badrequest", "webscan", "bruteforce"], "pulses": ["Webscanners 2018-02-09  thru current day", "Webscanners with Bad Requests - HTTP Status 400 - 1/20/2018 thru current day", "Ghosty", "Ghosty", "Ghosty", "Compiled Blocklist of AbuseIPDB: Mos

hosting_provider:
  webscanner,webscanner, bruteforce, web app attack,abuseipdb,probing,scanning,badrequest,webscan,bruteforce


indicator: 80.76.49.74
indicator_type: ipv4
source: otx
country: US
queried_at: 2026-03-11T08:52:18.750887
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.74", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 6, "malware_samples": [], "passive_dns": ["bizz-id7292.com", "bizz-id1920.com", "wonderful-chaum.80-76-49-74.plesk.page", "omesbiteic.cam", "www.dxgyds.com", "dxgyds.com"]}

reverse_dns:
  bizz-id7292.com,bizz-id1920.com,wonderful-chaum.80-76-49-74.plesk.page,omesbiteic.cam,www.dxgyds.com,dxgyds.com


indicator: 80.76.49.75
indicator_type: ipv4
source: otx
country: US
reverse_dns: mepauseion.cam,gzsifadz.com,www.gzsifadz.com
queried_at: 2026-03-11T08:52:20.771982
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.75", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["mepauseion.cam", "gzsifadz.com", "www.gzsifadz.com"]}


indicator: 80.76.49.79
indicator_type: ipv4
source: otx
country: US
reverse_dns: adpoescate.beauty,www.jinnuofood.com
queried_at: 2026-03-11T08:52:22.311288
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.79", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["adpoescate.beauty", "www.jinnuofood.com"]}


indicator: 80.76.49.81
indicator_type: ipv4
source: otx
country: US
reverse_dns: commercial-sso-citizens.sbs,empadize.cam,www.huadongsc.com,huadongsc.com
hosting_provider: ssh,brute force,SSH,honeypot,cowrie,bruteforce
queried_at: 2026-03-11T08:52:25.236966
raw_data:
  {"pulse_count": 6, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.81", "tags": ["ssh", "brute force", "SSH", "honeypot", "cowrie", "bruteforce"], "pulses": ["Fakelabs Honeynet Project", "Automated Threat Intelligence - Brute-force hosts for 2024-05-09", "SSH honeypot logs for 2024-05-10", "ETIC Cybersecurity  2024-04-29  Port Scan", "Cybersec - Clone", "Cybersec - Clone"], "malware_count": 1, "passive_dns_count


indicator: 80.76.49.82
indicator_type: ipv4
source: otx
country: US
reverse_dns: sokiensere.beauty,www.zzzhenghao.com,zzzhenghao.com
queried_at: 2026-03-11T08:52:26.838927
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.82", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["sokiensere.beauty", "www.zzzhenghao.com", "zzzhenghao.com"]}


indicator: 80.76.49.83
indicator_type: ipv4
source: otx
country: US
reverse_dns: verticores.cam,www.yijing55.com,yijing55.com
queried_at: 2026-03-11T08:52:28.497954
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.83", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["verticores.cam", "www.yijing55.com", "yijing55.com"]}


indicator: 80.76.49.85
indicator_type: ipv4
source: otx
country: US
reverse_dns: tesform.cam
queried_at: 2026-03-11T08:52:30.395211
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.85", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["tesform.cam"]}


indicator: 80.76.49.89
indicator_type: ipv4
source: otx
country: US
reverse_dns: rtx2006.com,www.rtx2006.com
hosting_provider: abuseipdb
queried_at: 2026-03-11T08:52:32.197671
raw_data:
  {"pulse_count": 37, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.89", "tags": ["abuseipdb"], "pulses": ["Compiled Blocklist of AbuseIPDB: Most reported IP addresses - by skocherhan", "Aggregated Blocklist for AbuseIPDB: A list of the most reported IP addresses.", "ETIC Cybersecurity  2024-07-22  Port Scan", "ETIC Cybersecurity  2024-07-21  Port Scan", "ETIC Cybersecurity  2024-07-20  Port Scan", "ETIC Cyberse


indicator: 80.76.49.90
indicator_type: ipv4
source: otx
country: US
reverse_dns: gfsa31gdsgf.aarend.ru,karuibea.cam,longraydehy.com,www.longraydehy.com
queried_at: 2026-03-11T08:52:33.692788
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.90", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 4, "malware_samples": [], "passive_dns": ["gfsa31gdsgf.aarend.ru", "karuibea.cam", "longraydehy.com", "www.longraydehy.com"]}


indicator: 80.76.49.91
indicator_type: ipv4
source: otx
country: US
reverse_dns: subjent25.zapto.org,frontend.upohelp.top,cosnesyi.cam,www.mauritiustb.com,mauritiustb.com
queried_at: 2026-03-11T08:52:35.592158
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.91", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 5, "malware_samples": [], "passive_dns": ["subjent25.zapto.org", "frontend.upohelp.top", "cosnesyi.cam", "www.mauritiustb.com", "mauritiustb.com"]}


indicator: 80.76.49.94
indicator_type: ipv4
source: otx
country: US
reverse_dns: anericaiopcor.app,tiremesectorxy.cloud,porsimeimagility.cloud,www.hualirubber.com
queried_at: 2026-03-11T08:52:37.131840
raw_data:
  {"pulse_count": 16, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.94", "tags": [], "pulses": ["ETIC Cybersecurity  2024-05-22  Port Scan", "ETIC Cybersecurity  2024-05-21  Port Scan", "ETIC Cybersecurity  2024-05-20  Port Scan", "ETIC Cybersecurity  2024-05-19  Port Scan", "ETIC Cybersecurity  2024-05-18  Port Scan", "ETIC Cybersecurity  2024-05-17  Port Scan", "ETIC Cybersecurity  2024-05-16  Port Scan", "ETI


indicator: 80.76.49.95
indicator_type: ipv4
source: otx
country: US
reverse_dns: plaid-okta.com,pestesterminix.cam,saltfishtec.com,www.saltfishtec.com
queried_at: 2026-03-11T08:52:39.466825
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.95", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 4, "malware_samples": [], "passive_dns": ["plaid-okta.com", "pestesterminix.cam", "saltfishtec.com", "www.saltfishtec.com"]}


indicator: 80.76.49.99
indicator_type: ipv4
source: otx
country: US
reverse_dns: vivinienite.cam,www.hongfatours.com,hongfatours.com
queried_at: 2026-03-11T08:52:41.122875
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.99", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["vivinienite.cam", "www.hongfatours.com", "hongfatours.com"]}


indicator: 86.54.42.18
indicator_type: ipv4
source: otx
country: GB
reverse_dns: discologia-fittizio.space,geodream.net
queried_at: 2026-03-11T08:52:42.631660
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": null, "asn": "AS206509 kcom group limited", "indicator": "86.54.42.18", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["discologia-fittizio.space", "geodream.net"]}


indicator: 86.54.42.21
indicator_type: ipv4
source: otx
country: GB
queried_at: 2026-03-11T08:52:44.555557
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": null, "asn": "AS206509 kcom group limited", "indicator": "86.54.42.21", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 7, "malware_samples": [], "passive_dns": ["tr-redistrb.pro", "tr-redistrbs.pro", "tr-reacheminement.pro", "trjredistrbs.pro", "trj-distrbs.net", "dstrbs-trj.com", "distrb-logis.com"]}

reverse_dns:
  tr-redistrb.pro,tr-redistrbs.pro,tr-reacheminement.pro,trjredistrbs.pro,trj-distrbs.net,dstrbs-trj.com,distrb-logis.com


indicator: 86.54.42.25
indicator_type: ipv4
source: otx
country: GB
reverse_dns: vpn.rocket00.com
hosting_provider: sftp,info,sentrypeer,malicious,sip,ssh,Brute-Force,cisco,Bruteforce,notice
queried_at: 2026-03-11T08:52:47.595170
raw_data:
  {"pulse_count": 7, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": null, "asn": "AS206509 kcom group limited", "indicator": "86.54.42.25", "tags": ["sftp", "info", "sentrypeer", "malicious", "sip", "ssh", "Brute-Force", "cisco", "Bruteforce", "notice", "SSH", "OpenCTI", "Honeypot", "2026-02", "cowrie", "Automated"], "pulses": ["SSH Brute-Force Honeypot Live", "LCIA HoneyNet Data - February 2026 - Cowrie", "Honeypot Data - February


indicator: 86.54.42.38
indicator_type: ipv4
source: otx
country: GB
hosting_provider: ,Remcos,CobaltStrike,Qakbot,Mythic,Hak5_Cloud_C2,Brute_Ratel_C4,Sliver,Interactsh,ransomware
queried_at: 2026-03-11T08:52:49.447960
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": null, "asn": "AS206509 kcom group limited", "indicator": "86.54.42.38", "tags": ["", "Remcos", "CobaltStrike", "Qakbot", "Mythic", "Hak5_Cloud_C2", "Brute_Ratel_C4", "Sliver", "Interactsh", "ransomware", "malware", "Deimos", "C2", "NetSupportRAT", "AsyncRAT", "Dcrat", "Havoc", "Bianlian"], "pulses": ["ThreatFix", "Twitter Feed - drb_ra - 08-09-2025"], "malware_coun

reverse_dns:
  mail.sifretr.cc,www.mail.sifretr.cc,emv1.sifretr.cc,www.emv1.sifretr.cc,*.sifretr.cc,sifretr.cc,coinbase-341602.com,binance.my-accounts.asia,vietnambinance.asia


indicator: 86.54.42.40
indicator_type: ipv4
source: otx
country: GB
hosting_provider: c2-infrastructure,unknown-malware,vidar,osint-volley,cobalt-strike,automated,threatfox,meterpreter
queried_at: 2026-03-11T08:52:51.229448
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": null, "asn": "AS206509 kcom group limited", "indicator": "86.54.42.40", "tags": ["c2-infrastructure", "unknown-malware", "vidar", "osint-volley", "cobalt-strike", "automated", "threatfox", "meterpreter"], "pulses": ["OSINT Volley 2026-01-27 - Meterpreter/Unknown malware/Vidar", "OSINT Volley 2026-01-27 - Meterpreter/Unknown malware/Vidar", "OSINT Volley 2026-01-27


indicator: 86.54.42.46
indicator_type: ipv4
source: otx
country: GB
queried_at: 2026-03-11T08:52:52.874810
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": null, "asn": "AS206509 kcom group limited", "indicator": "86.54.42.46", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 86.54.42.53
indicator_type: ipv4
source: otx
country: GB
reverse_dns: kraken.umcuniversal.com,coinbase-328611.com
queried_at: 2026-03-11T08:52:54.437033
raw_data:
  {"pulse_count": 10, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": null, "asn": "AS206509 kcom group limited", "indicator": "86.54.42.53", "tags": ["iclickfix", "01.10.2025", "win", "honeypot", "c2-infrastructure", "windows", "HoneyNet Connect", "blacklist", "DugganUSA", "RDP", "quasar-rat", "automated", "2025", "tcp", "botnet", "threatfox", "admin", "Malicious IP", "scan", "auto-generated", "clearfake", "osint-volley", "mirai"],

hosting_provider:
  iclickfix,01.10.2025,win,honeypot,c2-infrastructure,windows,HoneyNet Connect,blacklist,DugganUSA,RDP


indicator: 86.54.42.54
indicator_type: ipv4
source: otx
country: GB
queried_at: 2026-03-11T08:52:56.018698
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": null, "asn": "AS206509 kcom group limited", "indicator": "86.54.42.54", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 86.54.42.56
indicator_type: ipv4
source: otx
country: GB
queried_at: 2026-03-11T08:53:00.862290
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": null, "asn": "AS206509 kcom group limited", "indicator": "86.54.42.56", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 86.54.42.57
indicator_type: ipv4
source: otx
country: GB
queried_at: 2026-03-11T08:53:02.444165
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": null, "asn": "AS206509 kcom group limited", "indicator": "86.54.42.57", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 86.54.42.60
indicator_type: ipv4
source: otx
country: GB
reverse_dns: blyatblyatblyatblyatblyat.icu,rastreamentos-correios.com,adsforads.net
queried_at: 2026-03-11T08:53:03.951940
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": null, "asn": "AS206509 kcom group limited", "indicator": "86.54.42.60", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["blyatblyatblyatblyatblyat.icu", "rastreamentos-correios.com", "adsforads.net"]}


indicator: 86.54.42.67
indicator_type: ipv4
source: otx
country: GB
queried_at: 2026-03-11T08:53:05.557209
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": null, "asn": "AS206509 kcom group limited", "indicator": "86.54.42.67", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 86.54.42.68
indicator_type: ipv4
source: otx
country: GB
reverse_dns: loggi-rastreios.com,rastreios-correios.com
hosting_provider: sftp,info,sentrypeer,malicious,sip,ssh,Brute-Force,cisco,Bruteforce,notice
queried_at: 2026-03-11T08:53:07.905796
raw_data:
  {"pulse_count": 9, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": null, "asn": "AS206509 kcom group limited", "indicator": "86.54.42.68", "tags": ["sftp", "info", "sentrypeer", "malicious", "sip", "ssh", "Brute-Force", "cisco", "Bruteforce", "notice", "SSH", "OpenCTI", "Honeypot", "2026-02", "cowrie", "Automated"], "pulses": ["SSH Brute-Force Honeypot Live", "LCIA HoneyNet Data - February 2026 - Cowrie", "Honeypot Data - February


indicator: 86.54.42.69
indicator_type: ipv4
source: otx
country: GB
hosting_provider: ,formbook,vidar,stealc,amadey,rhadamanthys,ransomware,malware,dugganusa,redline
queried_at: 2026-03-11T08:53:09.973180
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": null, "asn": "AS206509 kcom group limited", "indicator": "86.54.42.69", "tags": ["", "formbook", "vidar", "stealc", "amadey", "rhadamanthys", "ransomware", "malware", "dugganusa", "redline", "lummac2", "infostealer"], "pulses": ["ThreatFix", "Infostealer Hunt - Batch 1 | Dec 3, 2025"], "malware_count": 0, "passive_dns_count": 10, "malware_samples": [], "passive_dns

reverse_dns:
  orderpaymentspage.shop,vinted-markt.com,fr-document.sbs,markt-2003.pro,irna991oxx.shop,markt-qp.shop,processingstore.shop,inr991xzp-ooa.cyou,de-markt2001.com,intd-n3w99x.sbs


indicator: 86.54.42.72
indicator_type: ipv4
source: otx
country: GB
reverse_dns: dublincastle-heritage.com,jollymccalister.lol
queried_at: 2026-03-11T08:53:11.775451
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": null, "asn": "AS206509 kcom group limited", "indicator": "86.54.42.72", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["dublincastle-heritage.com", "jollymccalister.lol"]}


indicator: 86.54.42.79
indicator_type: ipv4
source: otx
country: GB
queried_at: 2026-03-11T08:53:13.354147
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": null, "asn": "AS206509 kcom group limited", "indicator": "86.54.42.79", "tags": [], "pulses": ["ThreatFix_IP_262"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 194.85.251.7
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: Snowd Security OU
queried_at: 2026-03-11T08:53:14.080870
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "Snowd Security OU", "domain": "snowd.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-11-03T18:23:33+00:00", "categories": []}


indicator: 194.85.251.8
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: Snowd Security OU
queried_at: 2026-03-11T08:53:15.745456
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "Snowd Security OU", "domain": "snowd.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-02-11T09:32:18+00:00", "categories": []}


indicator: 194.85.251.9
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: Snowd Security OU
queried_at: 2026-03-11T08:53:17.382508
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "Snowd Security OU", "domain": "snowd.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-03-08T23:46:29+00:00", "categories": []}


indicator: 194.85.251.11
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: Snowd Security OU
queried_at: 2026-03-11T08:53:20.729129
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "Snowd Security OU", "domain": "snowd.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-11-16T23:45:26+00:00", "categories": []}


indicator: 80.76.49.64
indicator_type: ipv4
source: abuseipdb
country: US
city: 2
hosting_provider: Virtuo Networks France SAS
queried_at: 2026-03-11T08:53:27.374575
raw_data:
  {"abuse_confidence": 12, "total_reports": 2, "is_public": true, "is_tor": false, "country": "US", "isp": "Virtuo Networks France SAS", "domain": "virtuo.host", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-03-02T00:31:13+00:00", "categories": [18, 14]}


indicator: 80.76.49.68
indicator_type: ipv4
source: abuseipdb
country: US
city: 0
hosting_provider: Virtuo Networks France SAS
queried_at: 2026-03-11T08:53:29.012273
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "US", "isp": "Virtuo Networks France SAS", "domain": "virtuo.host", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-11-03T07:16:39+00:00", "categories": []}


indicator: 80.76.49.70
indicator_type: ipv4
source: abuseipdb
country: US
city: 0
hosting_provider: Virtuo Networks France SAS
queried_at: 2026-03-11T08:53:30.653005
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "US", "isp": "Virtuo Networks France SAS", "domain": "virtuo.host", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-12-10T11:34:40+00:00", "categories": []}


indicator: 80.76.49.71
indicator_type: ipv4
source: abuseipdb
country: US
city: 0
hosting_provider: Virtuo Networks France SAS
queried_at: 2026-03-11T08:53:32.302736
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "US", "isp": "Virtuo Networks France SAS", "domain": "virtuo.host", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-07-10T13:05:57+00:00", "categories": []}


indicator: 80.76.49.81
indicator_type: ipv4
source: abuseipdb
country: US
city: 1
hosting_provider: Virtuo Networks France SAS
queried_at: 2026-03-11T08:53:38.921880
raw_data:
  {"abuse_confidence": 0, "total_reports": 1, "is_public": true, "is_tor": false, "country": "US", "isp": "Virtuo Networks France SAS", "domain": "virtuo.host", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-02-18T11:44:22+00:00", "categories": [18, 11]}


indicator: 80.76.49.82
indicator_type: ipv4
source: abuseipdb
country: US
city: 0
hosting_provider: Virtuo Networks France SAS
queried_at: 2026-03-11T08:53:40.556124
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "US", "isp": "Virtuo Networks France SAS", "domain": "virtuo.host", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-11-09T01:51:07+00:00", "categories": []}


indicator: 80.76.49.83
indicator_type: ipv4
source: abuseipdb
country: US
city: 25
hosting_provider: Virtuo Networks France SAS
queried_at: 2026-03-11T08:53:42.209940
raw_data:
  {"abuse_confidence": 0, "total_reports": 25, "is_public": true, "is_tor": false, "country": "US", "isp": "Virtuo Networks France SAS", "domain": "virtuo.host", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-01-08T07:18:13+00:00", "categories": [15, 16, 18, 19, 21]}


indicator: 80.76.49.85
indicator_type: ipv4
source: abuseipdb
country: US
city: 0
hosting_provider: Virtuo Networks France SAS
queried_at: 2026-03-11T08:53:43.859596
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "US", "isp": "Virtuo Networks France SAS", "domain": "virtuo.host", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-03-13T15:54:49+00:00", "categories": []}


indicator: 80.76.49.89
indicator_type: ipv4
source: abuseipdb
country: US
city: 0
hosting_provider: Virtuo Networks France SAS
queried_at: 2026-03-11T08:53:45.494592
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "US", "isp": "Virtuo Networks France SAS", "domain": "virtuo.host", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-10-31T15:11:48+00:00", "categories": []}


indicator: 194.85.251.7
indicator_type: ipv4
source: virustotal
country: NL
hosting_provider: Hostkey B.v.
queried_at: 2026-03-11T08:53:47.460526
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "NL", "as_owner": "Hostkey B.v.", "asn": 57043, "network": "194.85.251.0/24", "last_analysis_date": 1738842218}


indicator: 194.85.251.8
indicator_type: ipv4
source: virustotal
country: NL
hosting_provider: Hostkey B.v.
queried_at: 2026-03-11T08:54:07.888565
raw_data:
  {"malicious": 9, "suspicious": 0, "harmless": 52, "undetected": 33, "reputation": 0, "country": "NL", "as_owner": "Hostkey B.v.", "asn": 57043, "network": "194.85.251.0/24", "last_analysis_date": 1770977077}


indicator: 194.85.251.9
indicator_type: ipv4
source: virustotal
country: NL
hosting_provider: Hostkey B.v.
queried_at: 2026-03-11T08:54:28.158808
raw_data:
  {"malicious": 4, "suspicious": 0, "harmless": 56, "undetected": 34, "reputation": -1, "country": "NL", "as_owner": "Hostkey B.v.", "asn": 57043, "network": "194.85.251.0/24", "last_analysis_date": 1765763900}


indicator: 194.85.251.11
indicator_type: ipv4
source: virustotal
country: NL
hosting_provider: Hostkey B.v.
queried_at: 2026-03-11T08:55:08.616431
raw_data:
  {"malicious": 2, "suspicious": 0, "harmless": 59, "undetected": 33, "reputation": 0, "country": "NL", "as_owner": "Hostkey B.v.", "asn": 57043, "network": "194.85.251.0/24", "last_analysis_date": 1763272927}


indicator: 194.85.251.69
indicator_type: ipv4
source: virustotal
country: NL
hosting_provider: Hostkey B.v.
queried_at: 2026-03-11T08:55:28.862989
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "NL", "as_owner": "Hostkey B.v.", "asn": 57043, "network": "194.85.251.0/24", "last_analysis_date": 1770749857}


indicator: 80.76.49.64
indicator_type: ipv4
source: virustotal
country: US
hosting_provider: 12651980 CANADA INC.
queried_at: 2026-03-11T08:56:29.612511
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "US", "as_owner": "12651980 CANADA INC.", "asn": 399486, "network": "80.76.49.0/24", "last_analysis_date": 1757009758}


indicator: 80.76.49.68
indicator_type: ipv4
source: virustotal
country: US
hosting_provider: 12651980 CANADA INC.
queried_at: 2026-03-11T08:56:49.808155
raw_data:
  {"malicious": 0, "suspicious": 1, "harmless": 59, "undetected": 34, "reputation": 0, "country": "US", "as_owner": "12651980 CANADA INC.", "asn": 399486, "network": "80.76.49.0/24", "last_analysis_date": 1770926983}


indicator: 194.85.251.7
indicator_type: ipv4
source: censys
country: NL
city: Lelystad
hosting_provider: HOSTKEY-AS
queried_at: 2026-03-11T08:57:10.386560
raw_data:
  {"ports": [0, 111, 111, 1881, 2212, 6767], "services": ["/VNC", "111/PORTMAP", "111/PORTMAP", "1881/HTTP", "2212/SSH", "6767/HTTP"], "os": "", "os_version": "", "asn": 57043, "as_name": "HOSTKEY-AS", "country": "NL", "city": "Lelystad", "last_updated": "", "labels": [{"value": "BULLETPROOF"}]}


indicator: 194.85.251.11
indicator_type: ipv4
source: censys
country: NL
city: Lelystad
hosting_provider: HOSTKEY-AS
queried_at: 2026-03-11T08:57:24.077981
raw_data:
  {"ports": [0, 111, 111, 1881, 2212, 6343, 6767], "services": ["/VNC", "111/PORTMAP", "111/PORTMAP", "1881/HTTP", "2212/SSH", "6343/UNKNOWN", "6767/HTTP"], "os": "", "os_version": "", "asn": 57043, "as_name": "HOSTKEY-AS", "country": "NL", "city": "Lelystad", "last_updated": "", "labels": [{"value": "BULLETPROOF"}]}


indicator: 194.85.251.69
indicator_type: ipv4
source: censys
country: NL
city: Lelystad
hosting_provider: HOSTKEY-AS
queried_at: 2026-03-11T08:57:27.394314
raw_data:
  {"ports": [111, 111, 6000, 6003, 6004, 6005, 6045, 6070, 6084, 6146, 6153, 6209, 6308, 6341, 6362, 6443, 6510, 6513], "services": ["111/PORTMAP", "111/PORTMAP", "6000/VNC", "6003/VNC", "6004/VNC", "6005/VNC", "6045/VNC", "6070/VNC", "6084/VNC", "6146/VNC", "6153/VNC", "6209/VNC", "6308/VNC", "6341/VNC", "6362/VNC", "6443/VNC", "6510/VNC", "6513/VNC"], "os": "", "os_version": "", "asn": 57043, "as_name": "HOSTKEY-AS", "country": "NL", "city": "Lelystad", "last_updated": "", "labels": [{"value": "


indicator: 194.85.251.236
indicator_type: ipv4
source: censys
country: NL
city: Lelystad
hosting_provider: HOSTKEY-AS
queried_at: 2026-03-11T08:57:30.680418
raw_data:
  {"ports": [111, 111, 6000, 6002, 6003, 6004, 6005, 6045, 6084, 6146, 6153, 6182, 6209, 6308, 6341, 6362, 6443, 6510, 6513], "services": ["111/PORTMAP", "111/PORTMAP", "6000/VNC", "6002/VNC", "6003/VNC", "6004/VNC", "6005/VNC", "6045/VNC", "6084/VNC", "6146/VNC", "6153/VNC", "6182/VNC", "6209/VNC", "6308/VNC", "6341/VNC", "6362/VNC", "6443/VNC", "6510/VNC", "6513/VNC"], "os": "", "os_version": "", "asn": 57043, "as_name": "HOSTKEY-AS", "country": "NL", "city": "Lelystad", "last_updated": "", "lab


indicator: 194.85.251.251
indicator_type: ipv4
source: censys
country: NL
city: Lelystad
hosting_provider: HOSTKEY-AS
queried_at: 2026-03-11T08:57:34.124463
raw_data:
  {"ports": [111, 111, 5988, 6000, 6002, 6003, 6004, 6005, 6013, 6025, 6045, 6061, 6075, 6084, 6146, 6153, 6185, 6209, 6210, 6281, 6285, 6296, 6308, 6341, 6345, 6351, 6362, 6423, 6443, 6510, 6513], "services": ["111/PORTMAP", "111/PORTMAP", "5988/VNC", "6000/VNC", "6002/VNC", "6003/VNC", "6004/VNC", "6005/VNC", "6013/VNC", "6025/VNC", "6045/VNC", "6061/VNC", "6075/VNC", "6084/VNC", "6146/VNC", "6153/VNC", "6185/VNC", "6209/VNC", "6210/VNC", "6281/VNC", "6285/VNC", "6296/VNC", "6308/VNC", "6341/VNC


indicator: 80.76.49.64
indicator_type: ipv4
source: censys
country: US
city: Edison
reverse_dns: windows
hosting_provider: VIRTUO - 12651980 CANADA INC.
queried_at: 2026-03-11T08:57:37.424305
raw_data:
  {"ports": [135, 137, 139, 445, 3389, 5357, 5985, 47001], "services": ["135/DCERPC", "137/NETBIOS", "139/NETBIOS", "445/SMB", "3389/RDP", "5357/HTTP", "5985/WINRM", "47001/HTTP"], "os": "windows", "os_version": "", "asn": 399486, "as_name": "VIRTUO - 12651980 CANADA INC.", "country": "US", "city": "Edison", "last_updated": "", "labels": []}


indicator: 80.76.49.68
indicator_type: ipv4
source: censys
country: US
city: Edison
reverse_dns: windows
hosting_provider: VIRTUO - 12651980 CANADA INC.
queried_at: 2026-03-11T08:57:41.252290
raw_data:
  {"ports": [135, 139, 443, 445, 3389, 5985, 47001], "services": ["135/DCERPC", "139/NETBIOS", "443/HTTP", "445/SMB", "3389/RDP", "5985/WINRM", "47001/HTTP"], "os": "windows", "os_version": "", "asn": 399486, "as_name": "VIRTUO - 12651980 CANADA INC.", "country": "US", "city": "Edison", "last_updated": "", "labels": []}


indicator: 194.85.251.8
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 194.85.251.0/24
hosting_provider: DTAG Internet service provider operations
queried_at: 2026-03-11T08:57:42.821959
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "auftrag@nic.telekom.de", "as": 3320, "asname": "DTAG Internet service provider operations", "ascountry": "DE", "assource": "", "network": "194.85.251.0/24", "threatfeeds": {"rosti": {"lastseen": "2025-06-05", "firstseen": "2025-06-05"}, "threatview": {"lastseen": "2025-02-12", "firstseen": "2025-02-09"}}}


indicator: 194.85.251.9
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 194.85.251.0/24
hosting_provider: DTAG Internet service provider operations
queried_at: 2026-03-11T08:57:44.141431
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "auftrag@nic.telekom.de", "as": 3320, "asname": "DTAG Internet service provider operations", "ascountry": "DE", "assource": "", "network": "194.85.251.0/24", "threatfeeds": {"ciarmy": {"lastseen": "2025-02-10", "firstseen": "2025-01-31"}}}


indicator: 80.76.49.81
indicator_type: ipv4
source: dshield
country: XX
hosting_provider: not routed
queried_at: 2026-03-11T08:58:04.460684
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": null, "as": 0, "asname": "not routed", "ascountry": "XX", "assource": "", "network": "", "threatfeeds": {"blocklistde22": {"lastseen": "2024-06-15", "firstseen": "2024-05-01"}}}


indicator: 80.76.49.89
indicator_type: ipv4
source: dshield
country: XX
hosting_provider: not routed
queried_at: 2026-03-11T08:58:11.211295
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": null, "as": 0, "asname": "not routed", "ascountry": "XX", "assource": "", "network": "", "threatfeeds": {"blocklistde22": {"lastseen": "2025-07-12", "firstseen": "2024-05-22"}}}


indicator: 80.76.49.91
indicator_type: ipv4
source: dshield
country: XX
hosting_provider: not routed
queried_at: 2026-03-11T08:58:14.560381
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": null, "as": 0, "asname": "not routed", "ascountry": "XX", "assource": "", "network": "", "threatfeeds": {"blocklistde443": {"lastseen": "2024-07-21", "firstseen": "2024-07-17"}, "blocklistde80": {"lastseen": "2024-07-21", "firstseen": "2024-07-17"}, "blocklistdeapache": {"lastseen": "2024-07-21", "firstseen": "2024-07-17"}}}


indicator: 80.76.49.94
indicator_type: ipv4
source: dshield
country: XX
hosting_provider: not routed
queried_at: 2026-03-11T08:58:16.265221
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": null, "as": 0, "asname": "not routed", "ascountry": "XX", "assource": "", "network": "", "threatfeeds": {"ciarmy": {"lastseen": "2025-05-20", "firstseen": "2024-05-08"}}}


indicator: 176.65.146.21
indicator_type: ipv4
source: dshield
country: NL
reverse_dns: 176.65.146.0/24
hosting_provider: SKYLINK
queried_at: 2026-03-11T08:59:17.979293
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "marcel.vm@gmx.de", "as": 44592, "asname": "SKYLINK", "ascountry": "NL", "assource": "", "network": "176.65.146.0/24", "threatfeeds": {}}


indicator: 194.85.251.7
indicator_type: ipv4
source: firehol
queried_at: 2026-03-11T09:02:55.066006
raw_data:
  {"listed": false, "matched_networks": [], "match_count": 0, "lists_checked": 4, "total_networks": 197613}


indicator: 86.54.42.18
indicator_type: ipv4
source: firehol
reverse_dns: 86.54.42.0/24
queried_at: 2026-03-11T09:02:56.997747
raw_data:
  {"listed": true, "matched_networks": ["86.54.42.0/24"], "match_count": 1, "lists_checked": 4, "total_networks": 197613}


indicator: 86.54.42.197
indicator_type: ipv4
source: firehol
reverse_dns: 86.54.42.0/24,86.54.42.197/32
queried_at: 2026-03-11T09:02:59.696186
raw_data:
  {"listed": true, "matched_networks": ["86.54.42.0/24", "86.54.42.197/32"], "match_count": 2, "lists_checked": 4, "total_networks": 197613}


indicator: 185.208.158.26
indicator_type: ipv4
source: firehol
reverse_dns: 185.208.156.0/22
queried_at: 2026-03-11T09:03:04.695365
raw_data:
  {"listed": true, "matched_networks": ["185.208.156.0/22"], "match_count": 1, "lists_checked": 4, "total_networks": 197613}


indicator: 185.208.158.110
indicator_type: ipv4
source: firehol
reverse_dns: 185.208.156.0/22,185.208.158.110/32
queried_at: 2026-03-11T09:03:04.921232
raw_data:
  {"listed": true, "matched_networks": ["185.208.156.0/22", "185.208.158.110/32"], "match_count": 2, "lists_checked": 4, "total_networks": 197613}


indicator: 194.85.251.8
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-11T09:03:23.711817
raw_data:
  {"hostnames_checked": ["conn.masjesu.zip"], "hostnames_count": 1, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 194.85.251.10
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-11T09:03:23.740202
raw_data:
  {"hostnames_checked": ["monzeta.info"], "hostnames_count": 1, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 194.85.251.69
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-11T09:03:23.768233
raw_data:
  {"hostnames_checked": ["niderlavp.site"], "hostnames_count": 1, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 194.85.251.251
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-11T09:03:23.796925
raw_data:
  {"hostnames_checked": ["www.github.com", "github.com"], "hostnames_count": 2, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 80.76.49.64
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-11T09:03:23.810923
raw_data:
  {"hostnames_checked": ["carsediles.cam", "www.bjyangguanghs.com", "xotrz.info", "bjyangguanghs.com"], "hostnames_count": 4, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 80.76.49.68
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-11T09:03:23.824995
raw_data:
  {"hostnames_checked": ["msssgeprwv.de", "guanleminggoldpen.com", "www.guanleminggoldpen.com", "jumio-okta.com"], "hostnames_count": 4, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 80.76.49.70
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-11T09:03:23.838839
raw_data:
  {"hostnames_checked": ["healtheserviceoflife.ink", "kinghaiyang.com", "www.kinghaiyang.com", "exaqreme.cam"], "hostnames_count": 4, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 80.76.49.71
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-11T09:03:23.852924
raw_data:
  {"hostnames_checked": ["tratonfas.cam"], "hostnames_count": 1, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 80.76.49.74
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-11T09:03:23.867837
raw_data:
  {"hostnames_checked": ["dxgyds.com", "bizz-id7292.com", "omesbiteic.cam", "www.dxgyds.com", "wonderful-chaum.80-76-49-74.plesk.page", "bizz-id1920.com"], "hostnames_count": 6, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 80.76.49.75
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-11T09:03:23.882205
raw_data:
  {"hostnames_checked": ["mepauseion.cam", "gzsifadz.com", "www.gzsifadz.com"], "hostnames_count": 3, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 80.76.49.79
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-11T09:03:23.896657
raw_data:
  {"hostnames_checked": ["adpoescate.beauty", "www.jinnuofood.com"], "hostnames_count": 2, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 80.76.49.81
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-11T09:03:23.912087
raw_data:
  {"hostnames_checked": ["huadongsc.com", "www.huadongsc.com", "commercial-sso-citizens.sbs", "empadize.cam"], "hostnames_count": 4, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 80.76.49.82
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-11T09:03:23.926131
raw_data:
  {"hostnames_checked": ["www.zzzhenghao.com", "sokiensere.beauty", "zzzhenghao.com"], "hostnames_count": 3, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 80.76.49.83
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-11T09:03:23.941630
raw_data:
  {"hostnames_checked": ["yijing55.com", "www.yijing55.com", "verticores.cam"], "hostnames_count": 3, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 80.76.49.85
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-11T09:03:23.956548
raw_data:
  {"hostnames_checked": ["tesform.cam"], "hostnames_count": 1, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 80.76.49.89
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-11T09:03:23.970824
raw_data:
  {"hostnames_checked": ["rtx2006.com", "www.rtx2006.com"], "hostnames_count": 2, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 80.76.49.90
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-11T09:03:23.985006
raw_data:
  {"hostnames_checked": ["karuibea.cam", "www.longraydehy.com", "gfsa31gdsgf.aarend.ru", "longraydehy.com"], "hostnames_count": 4, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 80.76.49.91
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-11T09:03:23.999432
raw_data:
  {"hostnames_checked": ["subjent25.zapto.org", "frontend.upohelp.top", "mauritiustb.com", "cosnesyi.cam", "www.mauritiustb.com"], "hostnames_count": 5, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 80.76.49.94
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-11T09:03:24.013786
raw_data:
  {"hostnames_checked": ["www.hualirubber.com", "porsimeimagility.cloud", "anericaiopcor.app", "tiremesectorxy.cloud"], "hostnames_count": 4, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 80.76.49.95
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-11T09:03:24.027787
raw_data:
  {"hostnames_checked": ["www.saltfishtec.com", "saltfishtec.com", "plaid-okta.com", "pestesterminix.cam"], "hostnames_count": 4, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 80.76.49.99
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-11T09:03:24.154325
raw_data:
  {"hostnames_checked": ["www.hongfatours.com", "vivinienite.cam", "hongfatours.com"], "hostnames_count": 3, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 86.54.42.18
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-11T09:03:24.168320
raw_data:
  {"hostnames_checked": ["geodream.net", "discologia-fittizio.space"], "hostnames_count": 2, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 86.54.42.21
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-11T09:03:24.182431
raw_data:
  {"hostnames_checked": ["tr-redistrb.pro", "dstrbs-trj.com", "tr-reacheminement.pro", "tr-redistrbs.pro", "trj-distrbs.net", "trjredistrbs.pro", "distrb-logis.com"], "hostnames_count": 7, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 86.54.42.25
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-11T09:03:24.196489
raw_data:
  {"hostnames_checked": ["vpn.rocket00.com", "vps-fohggfns"], "hostnames_count": 2, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 86.54.42.38
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-11T09:03:24.210545
raw_data:
  {"hostnames_checked": ["*.sifretr.cc", "binance.my-accounts.asia", "mail.sifretr.cc", "bislon", "www.emv1.sifretr.cc", "www.mail.sifretr.cc", "vietnambinance.asia", "emv1.sifretr.cc", "sifretr.cc", "coinbase-341602.com"], "hostnames_count": 10, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 86.54.42.53
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-11T09:03:24.253022
raw_data:
  {"hostnames_checked": ["kraken.umcuniversal.com", "coinbase-328611.com", "rdp-nmcfzssf"], "hostnames_count": 3, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 86.54.42.56
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-11T09:03:24.280795
raw_data:
  {"hostnames_checked": ["botmax"], "hostnames_count": 1, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 86.54.42.57
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-11T09:03:24.294596
raw_data:
  {"hostnames_checked": ["remote.trisquareresourcesit.com", "lovelysmile"], "hostnames_count": 2, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 86.54.42.60
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-11T09:03:24.308716
raw_data:
  {"hostnames_checked": ["rastreamentos-correios.com", "adsforads.net", "blyatblyatblyatblyatblyat.icu"], "hostnames_count": 3, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 86.54.42.68
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-11T09:03:24.336637
raw_data:
  {"hostnames_checked": ["loggi-rastreios.com", "rastreios-correios.com", "icloudn"], "hostnames_count": 3, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 86.54.42.69
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-11T09:03:24.354388
raw_data:
  {"hostnames_checked": ["orderpaymentspage.shop", "inr991xzp-ooa.cyou", "fr-document.sbs", "markt-qp.shop", "de-markt2001.com", "winmacchine2026", "processingstore.shop", "markt-2003.pro", "vinted-markt.com", "irna991oxx.shop", "intd-n3w99x.sbs"], "hostnames_count": 11, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 86.54.42.72
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-11T09:03:24.368304
raw_data:
  {"hostnames_checked": ["redtracecorporation.com", "jollymccalister.lol", "dublincastle-heritage.com"], "hostnames_count": 3, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 86.54.42.79
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-11T09:03:24.382761
raw_data:
  {"hostnames_checked": ["rdp-upapwxhg"], "hostnames_count": 1, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 91.92.40.51
indicator_type: ipv4
source: shodan
city: self-signed
queried_at: 2026-03-11T10:18:49.218681
raw_data:
  {"ports": [22, 80, 443], "vulns": [], "hostnames": [], "tags": ["self-signed"], "cpes": ["cpe:/a:openbsd:openssh:8.2p1", "cpe:/a:f5:nginx", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:openresty:openresty"]}

hosting_provider:
  cpe:/a:openbsd:openssh:8.2p1,cpe:/a:f5:nginx,cpe:/o:canonical:ubuntu_linux,cpe:/a:openresty:openresty


indicator: 91.92.40.63
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/a:f5:nginx,cpe:/a:openresty:openresty
queried_at: 2026-03-11T10:18:50.910826
raw_data:
  {"ports": [80], "vulns": [], "hostnames": [], "tags": [], "cpes": ["cpe:/a:f5:nginx", "cpe:/a:openresty:openresty"]}


indicator: 91.92.40.61
indicator_type: ipv4
source: shodan
city: self-signed
hosting_provider: cpe:/a:f5:nginx,cpe:/a:openresty:openresty
queried_at: 2026-03-11T10:18:52.594708
raw_data:
  {"ports": [80, 443], "vulns": [], "hostnames": [], "tags": ["self-signed"], "cpes": ["cpe:/a:f5:nginx", "cpe:/a:openresty:openresty"]}


indicator: 91.92.40.60
indicator_type: ipv4
source: shodan
city: self-signed
queried_at: 2026-03-11T10:18:54.257188
raw_data:
  {"ports": [22, 80, 443, 7771], "vulns": [], "hostnames": [], "tags": ["self-signed"], "cpes": ["cpe:/a:f5:nginx", "cpe:/a:openbsd:openssh:8.2p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:openresty:openresty"]}

hosting_provider:
  cpe:/a:f5:nginx,cpe:/a:openbsd:openssh:8.2p1,cpe:/o:canonical:ubuntu_linux,cpe:/a:openresty:openresty


indicator: 91.92.40.64
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/a:openbsd:openssh:8.2p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-03-11T10:18:55.949064
raw_data:
  {"ports": [22, 80], "vulns": [], "hostnames": [], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.2p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 91.92.40.62
indicator_type: ipv4
source: shodan
city: eol-product
queried_at: 2026-03-11T10:18:57.638773
raw_data:
  {"ports": [22, 80], "vulns": ["CVE-2021-23017", "CVE-2023-44487", "CVE-2021-3618", "CVE-2025-23419"], "hostnames": [], "tags": ["eol-product"], "cpes": ["cpe:/a:openbsd:openssh:8.2p1", "cpe:/o:linux:linux_kernel", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx:1.18.0"]}

hosting_provider:
  cpe:/a:openbsd:openssh:8.2p1,cpe:/o:linux:linux_kernel,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx:1.18.0


indicator: 86.54.42.62
indicator_type: ipv4
source: shodan
city: self-signed
queried_at: 2026-03-11T10:19:01.017866
raw_data:
  {"ports": [80, 443, 445, 5985], "vulns": ["CVE-2013-2765", "CVE-2024-36387", "CVE-2012-4001", "CVE-2024-38473", "CVE-2024-38475", "CVE-2019-0190", "CVE-2023-5363", "CVE-2023-38709", "CVE-2007-4723", "CVE-2025-55753", "CVE-2025-65082", "CVE-2024-5458", "CVE-2025-66200", "CVE-2025-49812", "CVE-2009-3765", "CVE-2013-0942", "CVE-2024-47252", "CVE-2024-38472", "CVE-2009-3766", "CVE-2024-27316", "CVE-2025-58098", "CVE-2024-3566", "CVE-2025-59775", "CVE-2013-4365", "CVE-2024-43394", "CVE-2009-2299", "C

hosting_provider:
  cpe:/a:apache:http_server:2.4.58,cpe:/a:jquery:jquery:1.10.2,cpe:/a:php:php:8.0.30,cpe:/a:openssl:openssl:3.1.3


indicator: 86.54.42.212
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: botfull
queried_at: 2026-03-11T10:19:04.416509
raw_data:
  {"ports": [135, 445, 3389], "vulns": ["CVE-2020-0796"], "hostnames": ["botfull"], "tags": ["self-signed"], "cpes": []}


indicator: 185.208.158.187
indicator_type: ipv4
source: shodan
city: self-signed
queried_at: 2026-03-11T10:19:09.516527
raw_data:
  {"ports": [135, 139, 445, 3389, 5985], "vulns": ["CVE-2020-0796"], "hostnames": [], "tags": ["self-signed"], "cpes": []}


indicator: 194.59.31.28
indicator_type: ipv4
source: shodan
city: self-signed
queried_at: 2026-03-11T10:19:11.226800
raw_data:
  {"ports": [445, 2222, 3389, 5985], "vulns": ["CVE-2020-0796"], "hostnames": [], "tags": ["self-signed"], "cpes": []}


indicator: 194.59.31.128
indicator_type: ipv4
source: shodan
city: self-signed
queried_at: 2026-03-11T10:19:12.912436
raw_data:
  {"ports": [22, 80, 445, 3389, 5985], "vulns": ["CVE-2024-38474", "CVE-2013-4365", "CVE-2024-38475", "CVE-2025-59775", "CVE-2011-2688", "CVE-2025-55753", "CVE-2013-0942", "CVE-2009-3766", "CVE-2007-4723", "CVE-2019-0190", "CVE-2024-24795", "CVE-2024-36387", "CVE-2024-27316", "CVE-2013-0941", "CVE-2012-3526", "CVE-2023-5363", "CVE-2025-58098", "CVE-2023-38709", "CVE-2024-38476", "CVE-2024-42516", "CVE-2025-49630", "CVE-2024-6119", "CVE-2025-66200", "CVE-2024-40898", "CVE-2023-6129", "CVE-2009-3767

hosting_provider:
  cpe:/a:apache:http_server:2.4.58,cpe:/a:openssl:openssl:3.1.3,cpe:/a:openbsd:openssh:for_Windows_8.1


indicator: 194.59.31.149
indicator_type: ipv4
source: shodan
city: self-signed,database
queried_at: 2026-03-11T10:19:14.610548
raw_data:
  {"ports": [21, 80, 443, 445, 3306, 3389, 5357, 5985], "vulns": ["CVE-2024-38474", "CVE-2013-4365", "CVE-2024-38475", "CVE-2025-59775", "CVE-2011-2688", "CVE-2025-55753", "CVE-2013-0942", "CVE-2009-3766", "CVE-2007-4723", "CVE-2019-0190", "CVE-2024-24795", "CVE-2013-2220", "CVE-2024-36387", "CVE-2024-27316", "CVE-2013-0941", "CVE-2012-3526", "CVE-2023-5363", "CVE-2025-58098", "CVE-2023-38709", "CVE-2024-38476", "CVE-2024-42516", "CVE-2025-49630", "CVE-2024-6119", "CVE-2025-66200", "CVE-2024-40898

hosting_provider:
  cpe:/a:apache:http_server:2.4.58,cpe:/a:mariadb:mariadb,cpe:/a:openssl:openssl:3.1.3,cpe:/a:php:php:8.0.30


indicator: 194.59.31.156
indicator_type: ipv4
source: shodan
city: self-signed
hosting_provider: cpe:/a:openbsd:openssh:for_Windows_8.1
queried_at: 2026-03-11T10:19:16.280421
raw_data:
  {"ports": [22, 3389, 5357, 5985], "vulns": [], "hostnames": [], "tags": ["self-signed"], "cpes": ["cpe:/a:openbsd:openssh:for_Windows_8.1"]}


indicator: 194.59.31.166
indicator_type: ipv4
source: shodan
city: self-signed
hosting_provider: cpe:/a:python:python:3.12.6,cpe:/a:palletsprojects:flask:3.0.2
queried_at: 2026-03-11T10:19:17.938834
raw_data:
  {"ports": [135, 137, 445, 3389, 5000, 5985, 8080, 8181, 8623, 8789, 9955, 47001], "vulns": ["CVE-2009-3720", "CVE-2009-2940", "CVE-2025-13836", "CVE-2021-32052", "CVE-2024-9287", "CVE-2020-0796", "CVE-2025-12084", "CVE-2020-29396", "CVE-2025-13837", "CVE-2025-12781"], "hostnames": [], "tags": ["self-signed"], "cpes": ["cpe:/a:python:python:3.12.6", "cpe:/a:palletsprojects:flask:3.0.2"]}


indicator: 194.59.31.241
indicator_type: ipv4
source: shodan
city: self-signed
queried_at: 2026-03-11T10:19:19.635550
raw_data:
  {"ports": [80, 135, 443, 445, 3389, 5357, 5985], "vulns": ["CVE-2020-0796"], "hostnames": [], "tags": ["self-signed"], "cpes": []}


indicator: 194.85.251.6
indicator_type: ipv4
source: shodan
queried_at: 2026-03-11T10:19:21.309180
raw_data:
  {"ports": [111, 5902, 5905, 5910, 5914, 5918, 5984, 5985, 5993, 5994, 5996, 7071, 7086, 7105], "vulns": [], "hostnames": [], "tags": [], "cpes": []}


indicator: 80.76.49.121
indicator_type: ipv4
source: shodan
city: self-signed
queried_at: 2026-03-11T10:19:22.998799
raw_data:
  {"ports": [135, 139, 3389, 5985, 47001], "vulns": [], "hostnames": [], "tags": ["self-signed"], "cpes": []}


indicator: 80.76.49.127
indicator_type: ipv4
source: shodan
city: self-signed,eol-product,database
queried_at: 2026-03-11T10:19:24.675568
raw_data:
  {"ports": [80, 135, 137, 139, 443, 445, 3306, 3389, 5000, 5357, 5985, 47001], "vulns": ["CVE-2013-2765", "CVE-2024-36387", "CVE-2012-4001", "CVE-2024-38473", "CVE-2024-38475", "CVE-2019-0190", "CVE-2023-5363", "CVE-2023-38709", "CVE-2007-4723", "CVE-2025-55753", "CVE-2025-65082", "CVE-2024-5458", "CVE-2025-66200", "CVE-2025-49812", "CVE-2009-3765", "CVE-2013-0942", "CVE-2024-47252", "CVE-2024-38472", "CVE-2009-3766", "CVE-2024-27316", "CVE-2025-58098", "CVE-2024-3566", "CVE-2025-59775", "CVE-201

hosting_provider:
  cpe:/a:expressjs:express,cpe:/a:php:php:8.0.30,cpe:/a:nodejs:node.js,cpe:/a:mariadb:mariadb:10.4.32-MariaDB,cpe:/a:apache:http_server:2.4.58,cpe:/a:openssl:openssl:3.1.3


indicator: 195.211.191.153
indicator_type: ipv4
source: shodan
city: self-signed
hosting_provider: cpe:/a:f5:nginx,cpe:/a:openbsd:openssh:8.2p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-03-11T10:19:28.023989
raw_data:
  {"ports": [22, 80, 443], "vulns": [], "hostnames": [], "tags": ["self-signed"], "cpes": ["cpe:/a:f5:nginx", "cpe:/a:openbsd:openssh:8.2p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 195.211.191.12
indicator_type: ipv4
source: shodan
city: self-signed,eol-product
hosting_provider: cpe:/a:f5:nginx,cpe:/a:openbsd:openssh:7.6p1,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx:1.7.7
queried_at: 2026-03-11T10:19:29.697417
raw_data:
  {"ports": [22, 80, 443, 8080, 8443, 31210], "vulns": ["CVE-2019-20372", "CVE-2016-0746", "CVE-2017-7529", "CVE-2016-0747", "CVE-2017-20005", "CVE-2021-3618", "CVE-2021-23017", "CVE-2016-1247", "CVE-2016-0742", "CVE-2016-4450", "CVE-2018-16845"], "hostnames": [], "tags": ["self-signed", "eol-product"], "cpes": ["cpe:/a:f5:nginx", "cpe:/a:openbsd:openssh:7.6p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx:1.7.7"]}


indicator: 195.211.191.130
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/a:openbsd:openssh:8.2p1,cpe:/a:f5:nginx,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-03-11T10:19:31.384235
raw_data:
  {"ports": [22, 80], "vulns": [], "hostnames": [], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.2p1", "cpe:/a:f5:nginx", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 195.211.191.35
indicator_type: ipv4
source: shodan
city: self-signed
queried_at: 2026-03-11T10:19:33.056784
raw_data:
  {"ports": [22, 80, 443], "vulns": [], "hostnames": [], "tags": ["self-signed"], "cpes": ["cpe:/a:f5:nginx", "cpe:/a:openbsd:openssh:8.2p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:openresty:openresty"]}

hosting_provider:
  cpe:/a:f5:nginx,cpe:/a:openbsd:openssh:8.2p1,cpe:/o:canonical:ubuntu_linux,cpe:/a:openresty:openresty


indicator: 195.211.191.154
indicator_type: ipv4
source: shodan
city: self-signed,eol-product
hosting_provider: cpe:/a:f5:nginx,cpe:/a:openbsd:openssh:8.2p1,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx:1.21.0
queried_at: 2026-03-11T10:19:34.751762
raw_data:
  {"ports": [22, 80, 443, 31210], "vulns": ["CVE-2025-23419", "CVE-2023-44487"], "hostnames": [], "tags": ["self-signed", "eol-product"], "cpes": ["cpe:/a:f5:nginx", "cpe:/a:openbsd:openssh:8.2p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx:1.21.0"]}


indicator: 195.211.191.173
indicator_type: ipv4
source: shodan
city: self-signed
hosting_provider: cpe:/a:f5:nginx,cpe:/a:openresty:openresty
queried_at: 2026-03-11T10:19:36.541689
raw_data:
  {"ports": [80, 443, 8880], "vulns": [], "hostnames": [], "tags": ["self-signed"], "cpes": ["cpe:/a:f5:nginx", "cpe:/a:openresty:openresty"]}


indicator: 195.211.191.203
indicator_type: ipv4
source: shodan
city: self-signed
hosting_provider: cpe:/a:openbsd:openssh:8.2p1,cpe:/a:f5:nginx,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-03-11T10:19:38.238496
raw_data:
  {"ports": [22, 80, 443, 8080], "vulns": [], "hostnames": [], "tags": ["self-signed"], "cpes": ["cpe:/a:openbsd:openssh:8.2p1", "cpe:/a:f5:nginx", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 195.211.191.247
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx,cpe:/a:openbsd:openssh:7.6p1
queried_at: 2026-03-11T10:19:39.927269
raw_data:
  {"ports": [22, 8080], "vulns": [], "hostnames": [], "tags": [], "cpes": ["cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx", "cpe:/a:openbsd:openssh:7.6p1"]}


indicator: 195.211.191.112
indicator_type: ipv4
source: shodan
city: self-signed
queried_at: 2026-03-11T10:19:41.765399
raw_data:
  {"ports": [22, 2082, 3389, 7771, 8080, 8086, 8443], "vulns": [], "hostnames": [], "tags": ["self-signed"], "cpes": ["cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx", "cpe:/a:microsoft:asp.net", "cpe:/a:openresty:openresty", "cpe:/a:openbsd:openssh:8.2p1"]}

hosting_provider:
  cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx,cpe:/a:microsoft:asp.net,cpe:/a:openresty:openresty,cpe:/a:openbsd:openssh:8.2p1


indicator: 195.211.191.141
indicator_type: ipv4
source: shodan
city: self-signed
queried_at: 2026-03-11T10:19:43.437413
raw_data:
  {"ports": [80, 443, 2000, 2002, 8000, 9000], "vulns": [], "hostnames": [], "tags": ["self-signed"], "cpes": ["cpe:/a:f5:nginx", "cpe:/a:portainer:portainer:2.27.9", "cpe:/a:angularjs:angular.js", "cpe:/a:microsoft:asp.net"]}

hosting_provider:
  cpe:/a:f5:nginx,cpe:/a:portainer:portainer:2.27.9,cpe:/a:angularjs:angular.js,cpe:/a:microsoft:asp.net


indicator: 195.211.191.11
indicator_type: ipv4
source: shodan
city: self-signed
hosting_provider: cpe:/a:f5:nginx,cpe:/a:openbsd:openssh:7.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-03-11T10:19:45.146853
raw_data:
  {"ports": [22, 80, 443, 8080, 8443], "vulns": [], "hostnames": [], "tags": ["self-signed"], "cpes": ["cpe:/a:f5:nginx", "cpe:/a:openbsd:openssh:7.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 195.211.191.40
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/a:openbsd:openssh:8.2p1,cpe:/a:f5:nginx,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-03-11T10:19:46.969402
raw_data:
  {"ports": [22, 8080], "vulns": [], "hostnames": [], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.2p1", "cpe:/a:f5:nginx", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 195.211.191.84
indicator_type: ipv4
source: shodan
city: proxy,self-signed
hosting_provider: cpe:/a:f5:nginx,cpe:/a:squid-cache:squid:4.10
queried_at: 2026-03-11T10:19:48.642586
raw_data:
  {"ports": [443, 3128, 8081], "vulns": ["CVE-2023-49285", "CVE-2020-15811", "CVE-2021-31807", "CVE-2020-24606", "CVE-2021-31808", "CVE-2020-11945", "CVE-2025-54574", "CVE-2023-50269", "CVE-2020-15049", "CVE-2024-25617", "CVE-2020-15810", "CVE-2025-59362", "CVE-2023-5824", "CVE-2023-46846", "CVE-2021-28116", "CVE-2025-62168", "CVE-2024-45802", "CVE-2019-12519", "CVE-2022-41317", "CVE-2021-28652", "CVE-2023-46724", "CVE-2020-14058", "CVE-2024-25111", "CVE-2022-41318", "CVE-2023-49288", "CVE-2021-28


indicator: 195.211.191.174
indicator_type: ipv4
source: shodan
city: self-signed,database
hosting_provider: cpe:/a:openresty:openresty,cpe:/a:mariadb:mariadb:10.6.22-MariaDB-ubu2004,cpe:/a:f5:nginx
queried_at: 2026-03-11T10:19:50.259877
raw_data:
  {"ports": [80, 443, 7999, 8880], "vulns": [], "hostnames": [], "tags": ["self-signed", "database"], "cpes": ["cpe:/a:openresty:openresty", "cpe:/a:mariadb:mariadb:10.6.22-MariaDB-ubu2004", "cpe:/a:f5:nginx"]}


indicator: 37.221.66.120
indicator_type: ipv4
source: shodan
city: self-signed,database
queried_at: 2026-03-11T10:19:51.927056
raw_data:
  {"ports": [22, 80, 443, 3306, 6379], "vulns": [], "hostnames": [], "tags": ["self-signed", "database"], "cpes": ["cpe:/o:canonical:ubuntu_linux", "cpe:/a:openbsd:openssh:8.2p1", "cpe:/a:f5:nginx", "cpe:/a:mariadb:mariadb", "cpe:/a:redislabs:redis"]}

hosting_provider:
  cpe:/o:canonical:ubuntu_linux,cpe:/a:openbsd:openssh:8.2p1,cpe:/a:f5:nginx,cpe:/a:mariadb:mariadb,cpe:/a:redislabs:redis


indicator: 37.221.66.3
indicator_type: ipv4
source: shodan
reverse_dns: mail.gl.illicitpassionmail.com
hosting_provider: cpe:/a:f5:nginx,cpe:/a:openbsd:openssh:8.2p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-03-11T10:19:53.617590
raw_data:
  {"ports": [22, 80], "vulns": [], "hostnames": ["mail.gl.illicitpassionmail.com"], "tags": [], "cpes": ["cpe:/a:f5:nginx", "cpe:/a:openbsd:openssh:8.2p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 195.211.191.64
indicator_type: ipv4
source: shodan
city: eol-product
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/a:ntp:ntp:3,cpe:/a:f5:nginx:1.26.2,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-03-11T10:19:55.294351
raw_data:
  {"ports": [22, 123, 5201, 8080], "vulns": ["CVE-2025-23419"], "hostnames": [], "tags": ["eol-product"], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/a:ntp:ntp:3", "cpe:/a:f5:nginx:1.26.2", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 195.211.191.59
indicator_type: ipv4
source: shodan
city: self-signed,eol-product
queried_at: 2026-03-11T10:19:56.988931
raw_data:
  {"ports": [22, 80, 8443], "vulns": ["CVE-2021-23017", "CVE-2023-44487", "CVE-2021-3618", "CVE-2025-23419"], "hostnames": [], "tags": ["self-signed", "eol-product"], "cpes": ["cpe:/o:canonical:ubuntu_linux", "cpe:/a:openbsd:openssh:8.2p1", "cpe:/a:f5:nginx", "cpe:/o:linux:linux_kernel", "cpe:/a:f5:nginx:1.18.0", "cpe:/a:openresty:openresty"]}

hosting_provider:
  cpe:/o:canonical:ubuntu_linux,cpe:/a:openbsd:openssh:8.2p1,cpe:/a:f5:nginx,cpe:/o:linux:linux_kernel,cpe:/a:f5:nginx:1.18.0,cpe:/a:openresty:openresty


indicator: 91.92.40.51
indicator_type: ipv4
source: otx
country: BG
city: Sofia
hosting_provider: sentrypeer,fatt,dionaea,tpot,p0f,sensor-tagged,mailoney,tanner,cowrie,honeypot
queried_at: 2026-03-11T10:20:01.687379
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Bulgaria", "country_code": "BG", "city": "Sofia", "asn": "AS25211 euro crypt eood", "indicator": "91.92.40.51", "tags": ["sentrypeer", "fatt", "dionaea", "tpot", "p0f", "sensor-tagged", "mailoney", "tanner", "cowrie", "honeypot", "suricata", "honeytrap"], "pulses": ["Honeypot Data \u2013 T-Pot - Sydney, Australia - February 2026"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.92.40.63
indicator_type: ipv4
source: otx
country: BG
city: Sofia
hosting_provider: ssh,brute force
queried_at: 2026-03-11T10:20:07.676187
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Bulgaria", "country_code": "BG", "city": "Sofia", "asn": "AS25211 euro crypt eood", "indicator": "91.92.40.63", "tags": ["ssh", "brute force"], "pulses": ["Automated Threat Intelligence - Brute-force hosts for 2025-05-02"], "malware_count": 1, "passive_dns_count": 0, "malware_samples": ["ba3a95f470a6cc645b368523b426bf314c31b7d1f7d1d8894bbab7022b277a54"], "passive_dns": []}


indicator: 91.92.40.61
indicator_type: ipv4
source: otx
country: BG
city: Sofia
reverse_dns: www.mpk-b24-webhooks.online,mpk-b24-webhooks.online
queried_at: 2026-03-11T10:20:09.178231
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Bulgaria", "country_code": "BG", "city": "Sofia", "asn": "AS25211 euro crypt eood", "indicator": "91.92.40.61", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["www.mpk-b24-webhooks.online", "mpk-b24-webhooks.online"]}


indicator: 91.92.40.60
indicator_type: ipv4
source: otx
country: BG
city: Sofia
queried_at: 2026-03-11T10:20:10.790704
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Bulgaria", "country_code": "BG", "city": "Sofia", "asn": "AS25211 euro crypt eood", "indicator": "91.92.40.60", "tags": [], "pulses": [], "malware_count": 1, "passive_dns_count": 0, "malware_samples": ["e8e80af036ef79951fc17ee011894e93cbf22fa2b124b55f9fab9376b444e6a1"], "passive_dns": []}


indicator: 91.92.40.64
indicator_type: ipv4
source: otx
country: BG
city: Sofia
queried_at: 2026-03-11T10:20:12.412613
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Bulgaria", "country_code": "BG", "city": "Sofia", "asn": "AS25211 euro crypt eood", "indicator": "91.92.40.64", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.92.40.62
indicator_type: ipv4
source: otx
country: BG
city: Sofia
queried_at: 2026-03-11T10:20:13.934042
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Bulgaria", "country_code": "BG", "city": "Sofia", "asn": "AS25211 euro crypt eood", "indicator": "91.92.40.62", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 80.76.49.84
indicator_type: ipv4
source: otx
country: US
reverse_dns: ukaviraian.beauty,gloritree.com,www.gloritree.com
hosting_provider: brute force,cowrie,honeypot,ssh
queried_at: 2026-03-11T10:20:15.506362
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.84", "tags": ["brute force", "cowrie", "honeypot", "ssh"], "pulses": ["Fakelabs Honeynet Project", "Automated Threat Intelligence - Brute-force hosts for 2024-05-09"], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["ukaviraian.beauty", "gloritree.com", "www.gloritree.com"]}


indicator: 86.54.42.62
indicator_type: ipv4
source: otx
country: GB
reverse_dns: sexwatch.xyz,confessional.xyz,activitylog.xyz
queried_at: 2026-03-11T10:20:17.809092
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": null, "asn": "AS206509 kcom group limited", "indicator": "86.54.42.62", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["sexwatch.xyz", "confessional.xyz", "activitylog.xyz"]}


indicator: 86.54.42.135
indicator_type: ipv4
source: otx
country: GB
reverse_dns: neo.authentication-members.cc,amtralk.com,stampli-app.com
queried_at: 2026-03-11T10:20:19.783483
raw_data:
  {"pulse_count": 12, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": null, "asn": "AS206509 kcom group limited", "indicator": "86.54.42.135", "tags": ["dugganusa", "pattern-49", "pattern-32", "infostealer", "rhadamanthys", "threatfox", "DugganUSA", "vidar", "unknown-stealer", "ssl-enrichment", "unknown-malware", "cobalt", "remcos", "commodity-rat", "pattern-38", "mitre-attack", "LummaStealer, RedLine,...", "c2-infrastructure", "dei

hosting_provider:
  dugganusa,pattern-49,pattern-32,infostealer,rhadamanthys,threatfox,DugganUSA,vidar,unknown-stealer,ssl-enrichment


indicator: 86.54.42.212
indicator_type: ipv4
source: otx
country: GB
queried_at: 2026-03-11T10:20:21.420073
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": null, "asn": "AS206509 kcom group limited", "indicator": "86.54.42.212", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 185.208.158.52
indicator_type: ipv4
source: otx
country: US
city: Houston
queried_at: 2026-03-11T10:20:22.927318
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Houston", "asn": "ASNone ", "indicator": "185.208.158.52", "tags": [], "pulses": [], "malware_count": 1, "passive_dns_count": 11, "malware_samples": ["710491b557d615a53831a326be1db8afa646c2b426c65f49a5cc982e53c1ad85"], "passive_dns": ["925477-coinbase.com", "15423217-coinbase.com", "15423216-coinbase.com", "www.15423216-coinbase.com", "www.15423213-coinbase.com", "15423213-coinbase.com", "15

reverse_dns:
  925477-coinbase.com,15423217-coinbase.com,15423216-coinbase.com,www.15423216-coinbase.com,www.15423213-coinbase.com,15423213-coinbase.com,15423212-coinbase.com,15423210-coinbase.com,15423209-coinbase.com,15423206-coinbase.com


indicator: 185.208.158.153
indicator_type: ipv4
source: otx
country: US
city: Houston
hosting_provider: coinminer,fatt,dropped-by-amadey,kongtuke,file name,QuasarRAT,njRAT,f397a7,SVCStealer,2026-02
queried_at: 2026-03-11T10:20:28.209830
raw_data:
  {"pulse_count": 8, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Houston", "asn": "ASNone ", "indicator": "185.208.158.153", "tags": ["coinminer", "fatt", "dropped-by-amadey", "kongtuke", "file name", "QuasarRAT", "njRAT", "f397a7", "SVCStealer", "2026-02", "usa x86", "mirai", "Amadey", "Malgent", "fake-git", "AsyncRAT", "mailoney", "github", "cred64.dll", "fbf543", "Automated", "Bruteforce", "dropped-by-Stealc", "dionaea", "p0f", "suricata", "DEU", "tann

reverse_dns:
  dokermainkel.info,casmejaxcet.info,iperjwebak.com,jerfitem.com,www.hoperbasket.team,hoperbasket.team


indicator: 185.208.158.187
indicator_type: ipv4
source: otx
country: US
city: Houston
queried_at: 2026-03-11T10:20:31.356368
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Houston", "asn": "ASNone ", "indicator": "185.208.158.187", "tags": [], "pulses": ["Threatfox Recent Additions", "Threatview.io OSINT Threat Feed"], "malware_count": 0, "passive_dns_count": 7, "malware_samples": [], "passive_dns": ["www.micar-bybit.com", "micar-bybit.com", "salik.cfd", "229887-coinbase.com", "techsitekkk.org", "zbvsbsbshsuuawvw.pro", "for4less.com"]}

reverse_dns:
  www.micar-bybit.com,micar-bybit.com,salik.cfd,229887-coinbase.com,techsitekkk.org,zbvsbsbshsuuawvw.pro,for4less.com


indicator: 194.59.31.28
indicator_type: ipv4
source: otx
country: BG
reverse_dns: steadypressure.duckdns.org,supportpp.top,acn-italy.com
hosting_provider: ,webscanner, bruteforce, web app attack,webscan,scanning,malware,ransomware,probing
queried_at: 2026-03-11T10:20:43.943623
raw_data:
  {"pulse_count": 5, "reputation": 0, "country": "Bulgaria", "country_code": "BG", "city": null, "asn": "AS174 cogent communications", "indicator": "194.59.31.28", "tags": ["", "webscanner, bruteforce, web app attack", "webscan", "scanning", "malware", "ransomware", "probing"], "pulses": ["Webscanners 2018-02-09  thru current day", "Ghosty", "Ghosty", "Ghosty", "ThreatFix"], "malware_count": 1, "passive_dns_count": 3, "malware_samples": ["5d61b8c049921460c6599a656b445873a02f2c86bc6897da703c86bba27


indicator: 194.59.31.128
indicator_type: ipv4
source: otx
country: BG
hosting_provider: ,malware,ransomware
queried_at: 2026-03-11T10:20:46.083720
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Bulgaria", "country_code": "BG", "city": null, "asn": "AS174 cogent communications", "indicator": "194.59.31.128", "tags": ["", "malware", "ransomware"], "pulses": ["ThreatFix"], "malware_count": 0, "passive_dns_count": 6, "malware_samples": [], "passive_dns": ["it.3.194-59-31-128.cprapid.com", "194-59-31-128.cprapid.com", "it.1.194-59-31-128.cprapid.com", "www.it.1.194-59-31-128.cprapid.com", "accedi.poste.194-59-31-128.cprapid.com", "www.accedi.p

reverse_dns:
  it.3.194-59-31-128.cprapid.com,194-59-31-128.cprapid.com,it.1.194-59-31-128.cprapid.com,www.it.1.194-59-31-128.cprapid.com,accedi.poste.194-59-31-128.cprapid.com,www.accedi.poste.194-59-31-128.cprapid.com


indicator: 194.59.31.149
indicator_type: ipv4
source: otx
country: BG
queried_at: 2026-03-11T10:20:48.218246
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Bulgaria", "country_code": "BG", "city": null, "asn": "AS174 cogent communications", "indicator": "194.59.31.149", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 194.59.31.156
indicator_type: ipv4
source: otx
country: BG
queried_at: 2026-03-11T10:20:50.260739
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Bulgaria", "country_code": "BG", "city": null, "asn": "AS174 cogent communications", "indicator": "194.59.31.156", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 7, "malware_samples": [], "passive_dns": ["dian-gov.com", "expediliv.com", "expedif.com", "rapidoliv.com", "fludash.com", "anzplus-access.com", "myato-report.live"]}

reverse_dns:
  dian-gov.com,expediliv.com,expedif.com,rapidoliv.com,fludash.com,anzplus-access.com,myato-report.live


indicator: 194.59.31.166
indicator_type: ipv4
source: otx
country: BG
reverse_dns: bc1qgkveas002wzlry28nf94weud.com,work34rtmentionsidekilos.com
queried_at: 2026-03-11T10:20:51.785131
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Bulgaria", "country_code": "BG", "city": null, "asn": "AS174 cogent communications", "indicator": "194.59.31.166", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["bc1qgkveas002wzlry28nf94weud.com", "work34rtmentionsidekilos.com"]}


indicator: 194.59.31.241
indicator_type: ipv4
source: otx
country: BG
queried_at: 2026-03-11T10:20:53.271436
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Bulgaria", "country_code": "BG", "city": null, "asn": "AS174 cogent communications", "indicator": "194.59.31.241", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 194.85.251.6
indicator_type: ipv4
source: otx
country: DE
queried_at: 2026-03-11T10:20:55.013506
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "ASNone ", "indicator": "194.85.251.6", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 80.76.49.121
indicator_type: ipv4
source: otx
country: US
reverse_dns: help-quickbooks.us,commerce-citizens.us,dranchen.cam,1bjob.com,www.1bjob.com
queried_at: 2026-03-11T10:20:56.593721
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.121", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 5, "malware_samples": [], "passive_dns": ["help-quickbooks.us", "commerce-citizens.us", "dranchen.cam", "1bjob.com", "www.1bjob.com"]}


indicator: 80.76.49.127
indicator_type: ipv4
source: otx
country: US
reverse_dns: funesan.cam,5udeco.com,www.5udeco.com
queried_at: 2026-03-11T10:20:58.249018
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.127", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["funesan.cam", "5udeco.com", "www.5udeco.com"]}


indicator: 80.76.49.181
indicator_type: ipv4
source: otx
country: US
reverse_dns: www.pyaudit.com,pyaudit.com
queried_at: 2026-03-11T10:20:59.786832
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "80.76.49.181", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["www.pyaudit.com", "pyaudit.com"]}


indicator: 195.211.191.153
indicator_type: ipv4
source: otx
country: UA
queried_at: 2026-03-11T10:21:01.318934
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Ukraine", "country_code": "UA", "city": null, "asn": "AS7029 windstream communications llc", "indicator": "195.211.191.153", "tags": [], "pulses": ["Malicious IP Addresses"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 195.211.191.12
indicator_type: ipv4
source: otx
country: UA
queried_at: 2026-03-11T10:21:02.965163
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Ukraine", "country_code": "UA", "city": null, "asn": "AS7029 windstream communications llc", "indicator": "195.211.191.12", "tags": [], "pulses": [], "malware_count": 1, "passive_dns_count": 0, "malware_samples": ["b9ea133d30a4546795768992181058c49a14e00ae1093bd61f4e35ac3fdcb53b"], "passive_dns": []}


indicator: 195.211.191.130
indicator_type: ipv4
source: otx
country: UA
hosting_provider: scanning,webscan,probing,webscanner, bruteforce, web app attack
queried_at: 2026-03-11T10:21:15.670275
raw_data:
  {"pulse_count": 4, "reputation": 0, "country": "Ukraine", "country_code": "UA", "city": null, "asn": "AS7029 windstream communications llc", "indicator": "195.211.191.130", "tags": ["scanning", "webscan", "probing", "webscanner, bruteforce, web app attack"], "pulses": ["Webscanners 2018-02-09  thru current day", "Ghosty", "Ghosty", "Ghosty"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 195.211.191.35
indicator_type: ipv4
source: otx
country: UA
queried_at: 2026-03-11T10:21:17.516212
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Ukraine", "country_code": "UA", "city": null, "asn": "AS7029 windstream communications llc", "indicator": "195.211.191.35", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 6, "malware_samples": [], "passive_dns": ["inpiried.store", "popularbuyers.store", "discoveredinfluence.space", "verificainstitute.site", "incoherentmag.site", "acewashere.duckdns.org"]}

reverse_dns:
  inpiried.store,popularbuyers.store,discoveredinfluence.space,verificainstitute.site,incoherentmag.site,acewashere.duckdns.org


indicator: 195.211.191.154
indicator_type: ipv4
source: otx
country: UA
queried_at: 2026-03-11T10:21:19.050072
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Ukraine", "country_code": "UA", "city": null, "asn": "AS7029 windstream communications llc", "indicator": "195.211.191.154", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 195.211.191.173
indicator_type: ipv4
source: otx
country: UA
reverse_dns: quadriag.com,functinue.com,grainvollp.com,pylictrond.com
queried_at: 2026-03-11T10:21:20.615684
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Ukraine", "country_code": "UA", "city": null, "asn": "AS7029 windstream communications llc", "indicator": "195.211.191.173", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 4, "malware_samples": [], "passive_dns": ["quadriag.com", "functinue.com", "grainvollp.com", "pylictrond.com"]}


indicator: 195.211.191.203
indicator_type: ipv4
source: otx
country: UA
queried_at: 2026-03-11T10:21:22.127697
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Ukraine", "country_code": "UA", "city": null, "asn": "AS7029 windstream communications llc", "indicator": "195.211.191.203", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 195.211.191.247
indicator_type: ipv4
source: otx
country: UA
hosting_provider: LummaStealer,RAT,Xworm
queried_at: 2026-03-11T10:21:23.685737
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Ukraine", "country_code": "UA", "city": null, "asn": "AS7029 windstream communications llc", "indicator": "195.211.191.247", "tags": ["LummaStealer", "RAT", "Xworm"], "pulses": ["Twitter Feed - K_N1kolenko - 05-05-2025"], "malware_count": 1, "passive_dns_count": 0, "malware_samples": ["473e05e9c3ec867d0f5e6e32f874ea5e834d21e441a0300fed3fdeadae2d846b"], "passive_dns": []}


indicator: 195.211.191.112
indicator_type: ipv4
source: otx
country: UA
queried_at: 2026-03-11T10:21:25.362965
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Ukraine", "country_code": "UA", "city": null, "asn": "AS7029 windstream communications llc", "indicator": "195.211.191.112", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 195.211.191.141
indicator_type: ipv4
source: otx
country: UA
queried_at: 2026-03-11T10:21:26.902137
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Ukraine", "country_code": "UA", "city": null, "asn": "AS7029 windstream communications llc", "indicator": "195.211.191.141", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 195.211.191.11
indicator_type: ipv4
source: otx
country: UA
queried_at: 2026-03-11T10:21:28.433243
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Ukraine", "country_code": "UA", "city": null, "asn": "AS7029 windstream communications llc", "indicator": "195.211.191.11", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 195.211.191.40
indicator_type: ipv4
source: otx
country: UA
queried_at: 2026-03-11T10:21:29.989334
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Ukraine", "country_code": "UA", "city": null, "asn": "AS7029 windstream communications llc", "indicator": "195.211.191.40", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 195.211.191.84
indicator_type: ipv4
source: otx
country: UA
queried_at: 2026-03-11T10:21:31.485978
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Ukraine", "country_code": "UA", "city": null, "asn": "AS7029 windstream communications llc", "indicator": "195.211.191.84", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 195.211.191.174
indicator_type: ipv4
source: otx
country: UA
reverse_dns: sekaira.duckdns.org,acehere.duckdns.org,acewashere.duckdns.org
queried_at: 2026-03-11T10:21:33.024753
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Ukraine", "country_code": "UA", "city": null, "asn": "AS7029 windstream communications llc", "indicator": "195.211.191.174", "tags": [], "pulses": ["Threatfox Recent Additions", "Malicious IP Addresses"], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["sekaira.duckdns.org", "acehere.duckdns.org", "acewashere.duckdns.org"]}


indicator: 37.221.66.120
indicator_type: ipv4
source: otx
country: RU
reverse_dns: maiami.shop
queried_at: 2026-03-11T10:21:34.786727
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS200019 alexhost srl", "indicator": "37.221.66.120", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["maiami.shop"]}


indicator: 37.221.66.3
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-03-11T10:21:36.463151
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS200019 alexhost srl", "indicator": "37.221.66.3", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 195.211.191.64
indicator_type: ipv4
source: otx
country: UA
queried_at: 2026-03-11T10:21:40.596215
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Ukraine", "country_code": "UA", "city": null, "asn": "AS7029 windstream communications llc", "indicator": "195.211.191.64", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 195.211.191.59
indicator_type: ipv4
source: otx
country: UA
queried_at: 2026-03-11T10:21:42.092427
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Ukraine", "country_code": "UA", "city": null, "asn": "AS7029 windstream communications llc", "indicator": "195.211.191.59", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 91.92.40.51
indicator_type: ipv4
source: abuseipdb
country: BG
city: 1
hosting_provider: Bullet Group LTD
queried_at: 2026-03-11T10:21:42.944135
raw_data:
  {"abuse_confidence": 0, "total_reports": 1, "is_public": true, "is_tor": false, "country": "BG", "isp": "Bullet Group LTD", "domain": "bullethost.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-02-09T20:55:50+00:00", "categories": [14]}


indicator: 91.92.40.63
indicator_type: ipv4
source: abuseipdb
country: BG
city: 0
hosting_provider: Bullet Group LTD
queried_at: 2026-03-11T10:21:44.649164
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "BG", "isp": "Bullet Group LTD", "domain": "bullethost.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-05-14T07:14:43+00:00", "categories": []}


indicator: 91.92.40.61
indicator_type: ipv4
source: abuseipdb
country: BG
city: 0
hosting_provider: Bullet Group LTD
queried_at: 2026-03-11T10:21:46.347027
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "BG", "isp": "Bullet Group LTD", "domain": "bullethost.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 80.76.49.84
indicator_type: ipv4
source: abuseipdb
country: US
city: 0
hosting_provider: Virtuo Networks France SAS
queried_at: 2026-03-11T10:21:53.066572
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "US", "isp": "Virtuo Networks France SAS", "domain": "virtuo.host", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-07-01T10:33:52+00:00", "categories": []}


indicator: 86.54.42.62
indicator_type: ipv4
source: abuseipdb
country: CH
city: 0
hosting_provider: Global-Data System IT Corporation
queried_at: 2026-03-11T10:21:54.859779
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "CH", "isp": "Global-Data System IT Corporation", "domain": "globaldata-cloud.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-09-30T00:47:15+00:00", "categories": []}


indicator: 185.208.158.153
indicator_type: ipv4
source: abuseipdb
country: CH
city: 159
hosting_provider: Global-Data System IT Corporation
queried_at: 2026-03-11T10:22:01.984217
raw_data:
  {"abuse_confidence": 72, "total_reports": 159, "is_public": true, "is_tor": false, "country": "CH", "isp": "Global-Data System IT Corporation", "domain": "globaldata-cloud.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-02-01T12:13:00+00:00", "categories": [7, 11, 14, 15, 17, 18, 20, 21, 22]}


indicator: 185.208.158.187
indicator_type: ipv4
source: abuseipdb
country: CH
city: 0
hosting_provider: Global-Data System IT Corporation
queried_at: 2026-03-11T10:22:03.790608
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "CH", "isp": "Global-Data System IT Corporation", "domain": "globaldata-cloud.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-12-05T03:09:39+00:00", "categories": []}


indicator: 194.59.31.28
indicator_type: ipv4
source: abuseipdb
country: FR
city: 1
hosting_provider: Virtuo Networks France SAS
queried_at: 2026-03-11T10:22:05.443994
raw_data:
  {"abuse_confidence": 0, "total_reports": 1, "is_public": true, "is_tor": false, "country": "FR", "isp": "Virtuo Networks France SAS", "domain": "virtuo.host", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-01-08T15:54:12+00:00", "categories": [15]}


indicator: 194.59.31.149
indicator_type: ipv4
source: abuseipdb
country: FR
city: 0
hosting_provider: Virtuo Networks France SAS
queried_at: 2026-03-11T10:22:08.918346
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "FR", "isp": "Virtuo Networks France SAS", "domain": "virtuo.host", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-11-03T21:56:11+00:00", "categories": []}


indicator: 194.59.31.156
indicator_type: ipv4
source: abuseipdb
country: FR
city: 0
hosting_provider: Virtuo Networks France SAS
queried_at: 2026-03-11T10:22:10.607847
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "FR", "isp": "Virtuo Networks France SAS", "domain": "virtuo.host", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-10-15T03:00:09+00:00", "categories": []}


indicator: 91.92.40.51
indicator_type: ipv4
source: virustotal
country: SE
hosting_provider: Bullet Group LTD
queried_at: 2026-03-11T10:22:17.690487
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "SE", "as_owner": "Bullet Group LTD", "asn": 215762, "network": "91.92.40.0/24", "last_analysis_date": 1770667458}


indicator: 91.92.40.63
indicator_type: ipv4
source: virustotal
country: SE
hosting_provider: Bullet Group LTD
queried_at: 2026-03-11T10:22:38.032698
raw_data:
  {"malicious": 2, "suspicious": 0, "harmless": 57, "undetected": 35, "reputation": -1, "country": "SE", "as_owner": "Bullet Group LTD", "asn": 215762, "network": "91.92.40.0/24", "last_analysis_date": 1746186667}


indicator: 91.92.40.61
indicator_type: ipv4
source: virustotal
country: SE
hosting_provider: Bullet Group LTD
queried_at: 2026-03-11T10:22:58.485227
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "SE", "as_owner": "Bullet Group LTD", "asn": 215762, "network": "91.92.40.0/24", "last_analysis_date": 1757944601}


indicator: 91.92.40.60
indicator_type: ipv4
source: virustotal
country: SE
hosting_provider: Bullet Group LTD
queried_at: 2026-03-11T10:23:18.804265
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "SE", "as_owner": "Bullet Group LTD", "asn": 215762, "network": "91.92.40.0/24", "last_analysis_date": 1742807013}


indicator: 91.92.40.64
indicator_type: ipv4
source: virustotal
country: SE
hosting_provider: Bullet Group LTD
queried_at: 2026-03-11T10:23:39.208809
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "SE", "as_owner": "Bullet Group LTD", "asn": 215762, "network": "91.92.40.0/24", "last_analysis_date": 1768968135}


indicator: 91.92.40.62
indicator_type: ipv4
source: virustotal
country: SE
hosting_provider: Bullet Group LTD
queried_at: 2026-03-11T10:23:59.783383
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "SE", "as_owner": "Bullet Group LTD", "asn": 215762, "network": "91.92.40.0/24", "last_analysis_date": ""}


indicator: 80.76.49.84
indicator_type: ipv4
source: virustotal
country: US
hosting_provider: 12651980 CANADA INC.
queried_at: 2026-03-11T10:24:20.041844
raw_data:
  {"malicious": 2, "suspicious": 1, "harmless": 56, "undetected": 35, "reputation": -1, "country": "US", "as_owner": "12651980 CANADA INC.", "asn": 399486, "network": "80.76.49.0/24", "last_analysis_date": 1765497320}


indicator: 86.54.42.62
indicator_type: ipv4
source: virustotal
country: SC
hosting_provider: Global-Data System IT Corporation
queried_at: 2026-03-11T10:24:40.567114
raw_data:
  {"malicious": 4, "suspicious": 0, "harmless": 57, "undetected": 33, "reputation": 0, "country": "SC", "as_owner": "Global-Data System IT Corporation", "asn": 42624, "network": "86.54.42.0/24", "last_analysis_date": 1766105716}


indicator: 86.54.42.135
indicator_type: ipv4
source: virustotal
country: SC
hosting_provider: Global-Data System IT Corporation
queried_at: 2026-03-11T10:25:00.841191
raw_data:
  {"malicious": 10, "suspicious": 3, "harmless": 52, "undetected": 29, "reputation": -12, "country": "SC", "as_owner": "Global-Data System IT Corporation", "asn": 42624, "network": "86.54.42.0/24", "last_analysis_date": 1771845737}


indicator: 86.54.42.212
indicator_type: ipv4
source: virustotal
country: SC
hosting_provider: Global-Data System IT Corporation
queried_at: 2026-03-11T10:25:21.365288
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "SC", "as_owner": "Global-Data System IT Corporation", "asn": 42624, "network": "86.54.42.0/24", "last_analysis_date": 1743683766}


indicator: 91.92.40.51
indicator_type: ipv4
source: dshield
country: BG
reverse_dns: 91.92.40.0/24
hosting_provider: EUROCRYPT-AS
queried_at: 2026-03-11T10:25:41.951909
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "support@evro.net", "as": 25211, "asname": "EUROCRYPT-AS", "ascountry": "BG", "assource": "", "network": "91.92.40.0/24", "threatfeeds": {}}


indicator: 80.76.49.84
indicator_type: ipv4
source: dshield
country: XX
hosting_provider: not routed
queried_at: 2026-03-11T10:25:50.526227
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": null, "as": 0, "asname": "not routed", "ascountry": "XX", "assource": "", "network": "", "threatfeeds": {"blocklistde22": {"lastseen": "2024-06-15", "firstseen": "2024-04-29"}}}


indicator: 194.59.31.149
indicator_type: ipv4
source: dshield
country: MO
reverse_dns: 194.59.31.0/24
hosting_provider: NETSOLUTIONS
queried_at: 2026-03-11T10:26:06.244115
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "rabih.haddad@saatchi.com.lb", "as": 47674, "asname": "NETSOLUTIONS", "ascountry": "MO", "assource": "", "network": "194.59.31.0/24", "threatfeeds": {"blocklistde25": {"lastseen": "2025-01-09", "firstseen": "2023-07-27"}, "threatview": {"lastseen": "2025-01-09", "firstseen": "2024-05-24"}}}


indicator: 195.211.191.203
indicator_type: ipv4
source: dshield
country: TR
reverse_dns: 195.211.191.0/24
hosting_provider: BURSABIL
queried_at: 2026-03-11T10:26:26.649042
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@bursabil.com.tr", "as": 60721, "asname": "BURSABIL", "ascountry": "TR", "assource": "", "network": "195.211.191.0/24", "threatfeeds": {"blocklistde22": {"lastseen": "2025-04-24", "firstseen": "2025-02-01"}}}


indicator: 195.211.191.40
indicator_type: ipv4
source: dshield
country: TR
reverse_dns: 195.211.191.0/24
hosting_provider: BURSABIL
queried_at: 2026-03-11T10:26:33.483015
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@bursabil.com.tr", "as": 60721, "asname": "BURSABIL", "ascountry": "TR", "assource": "", "network": "195.211.191.0/24", "threatfeeds": {"ciarmy": {"lastseen": "2025-01-24", "firstseen": "2025-01-23"}}}


indicator: 195.211.191.59
indicator_type: ipv4
source: dshield
country: TR
reverse_dns: 195.211.191.0/24
hosting_provider: BURSABIL
queried_at: 2026-03-11T10:26:41.583009
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@bursabil.com.tr", "as": 60721, "asname": "BURSABIL", "ascountry": "TR", "assource": "", "network": "195.211.191.0/24", "threatfeeds": {"blocklistde110": {"lastseen": "2025-05-04", "firstseen": "2025-04-01"}, "blocklistde143": {"lastseen": "2025-05-04", "firstseen": "2025-04-01"}, "blocklistde25": {"lastseen": "2025-05-04", "firstseen": "2025-04-01"}, "blocklistde993": {"lastsee


indicator: 195.211.191.198
indicator_type: ipv4
source: dshield
country: TR
reverse_dns: 195.211.191.0/24
hosting_provider: BURSABIL
queried_at: 2026-03-11T10:26:51.032270
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@bursabil.com.tr", "as": 60721, "asname": "BURSABIL", "ascountry": "TR", "assource": "", "network": "195.211.191.0/24", "threatfeeds": {"blocklistdeasterisk": {"lastseen": "2025-03-26", "firstseen": "2025-03-24"}}}


indicator: 195.211.191.63
indicator_type: ipv4
source: dshield
country: TR
reverse_dns: 195.211.191.0/24
hosting_provider: BURSABIL
queried_at: 2026-03-11T10:26:57.877984
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@bursabil.com.tr", "as": 60721, "asname": "BURSABIL", "ascountry": "TR", "assource": "", "network": "195.211.191.0/24", "threatfeeds": {"blocklistde110": {"lastseen": "2025-04-09", "firstseen": "2025-03-06"}, "blocklistde143": {"lastseen": "2025-04-09", "firstseen": "2025-03-06"}, "blocklistde25": {"lastseen": "2025-04-09", "firstseen": "2025-03-06"}, "blocklistde993": {"lastsee


indicator: 195.211.191.73
indicator_type: ipv4
source: dshield
country: TR
reverse_dns: 195.211.191.0/24
hosting_provider: BURSABIL
queried_at: 2026-03-11T10:27:00.740788
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@bursabil.com.tr", "as": 60721, "asname": "BURSABIL", "ascountry": "TR", "assource": "", "network": "195.211.191.0/24", "threatfeeds": {"blocklistde22": {"lastseen": "2025-03-24", "firstseen": "2017-01-08"}}}


indicator: 185.220.101.144
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:27:05.964668
raw_data:
  {"count": 126, "attacks": 32, "maxdate": "2026-03-09", "mindate": "2024-12-21", "updated": "2026-03-10 03:40:20", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-05", "firstseen": "2025-02-04"}, "blocklistde110": {"lastseen": "2026-03-05", "firstseen": "2020-09-16"}, "blocklistde143": {"lastseen": "2026-03-05", "firstseen": "2020-09-1


indicator: 185.220.101.137
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:27:07.300527
raw_data:
  {"count": 114, "attacks": 26, "maxdate": "2026-03-10", "mindate": "2023-01-26", "updated": "2026-03-11 01:34:35", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-02", "firstseen": "2025-02-04"}, "blocklistde110": {"lastseen": "2026-03-02", "firstseen": "2020-12-30"}, "blocklistde143": {"lastseen": "2026-03-02", "firstseen": "2020-12-3


indicator: 185.220.101.145
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:27:08.661497
raw_data:
  {"count": 141, "attacks": 31, "maxdate": "2026-03-11", "mindate": "2023-01-12", "updated": "2026-03-11 11:22:59", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-03", "firstseen": "2025-02-04"}, "blocklistde22": {"lastseen": "2026-03-03", "firstseen": "2020-03-17"}, "blocklistde443": {"lastseen": "2026-03-03", "firstseen": "2020-07-05


indicator: 185.220.101.189
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:27:10.004709
raw_data:
  {"count": 12, "attacks": 4, "maxdate": "2026-03-07", "mindate": "2026-02-06", "updated": "2026-03-08 02:03:18", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-06", "firstseen": "2025-02-04"}, "blocklistde22": {"lastseen": "2026-03-06", "firstseen": "2021-12-11"}, "blocklistde443": {"lastseen": "2026-03-06", "firstseen": "2021-12-23"}


indicator: 185.220.101.136
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:27:11.445253
raw_data:
  {"count": 116, "attacks": 25, "maxdate": "2026-03-10", "mindate": "2023-01-13", "updated": "2026-03-11 09:15:42", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-06", "firstseen": "2025-02-04"}, "blocklistde110": {"lastseen": "2026-03-06", "firstseen": "2021-04-15"}, "blocklistde143": {"lastseen": "2026-03-06", "firstseen": "2021-04-1


indicator: 185.220.101.148
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:27:12.793888
raw_data:
  {"count": 36, "attacks": 7, "maxdate": "2026-03-10", "mindate": "2026-01-31", "updated": "2026-03-11 04:55:20", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-02", "firstseen": "2025-02-04"}, "blocklistde110": {"lastseen": "2026-03-02", "firstseen": "2020-07-18"}, "blocklistde143": {"lastseen": "2026-03-02", "firstseen": "2020-07-18"


indicator: 185.220.101.149
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:27:14.141049
raw_data:
  {"count": 29, "attacks": 11, "maxdate": "2026-03-05", "mindate": "2026-01-25", "updated": "2026-03-05 22:08:55", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-05", "firstseen": "2025-02-04"}, "blocklistde22": {"lastseen": "2026-03-05", "firstseen": "2021-12-02"}, "blocklistde443": {"lastseen": "2026-03-05", "firstseen": "2020-11-12"


indicator: 185.220.101.172
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:27:15.512183
raw_data:
  {"count": 114, "attacks": 26, "maxdate": "2026-03-11", "mindate": "2024-09-18", "updated": "2026-03-11 13:30:25", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-05", "firstseen": "2025-02-04"}, "blocklistde22": {"lastseen": "2026-03-05", "firstseen": "2020-04-13"}, "blocklistde443": {"lastseen": "2026-03-05", "firstseen": "2021-12-11


indicator: 185.220.101.141
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:27:16.854551
raw_data:
  {"count": 38, "attacks": 9, "maxdate": "2026-03-11", "mindate": "2026-01-22", "updated": "2026-03-11 06:49:51", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-06", "firstseen": "2025-02-04"}, "blocklistde110": {"lastseen": "2026-03-06", "firstseen": "2021-12-02"}, "blocklistde143": {"lastseen": "2026-03-06", "firstseen": "2021-12-02"


indicator: 185.220.101.179
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:27:18.204670
raw_data:
  {"count": 132, "attacks": 26, "maxdate": "2026-03-06", "mindate": "2023-01-14", "updated": "2026-03-07 03:44:43", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-06", "firstseen": "2025-02-04"}, "blocklistde110": {"lastseen": "2026-03-06", "firstseen": "2021-12-31"}, "blocklistde143": {"lastseen": "2026-03-06", "firstseen": "2021-12-3


indicator: 185.220.101.153
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:27:19.580806
raw_data:
  {"count": 130, "attacks": 26, "maxdate": "2026-03-02", "mindate": "2023-04-01", "updated": "2026-03-03 08:12:17", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-02", "firstseen": "2025-02-04"}, "blocklistde110": {"lastseen": "2026-03-02", "firstseen": "2021-12-15"}, "blocklistde143": {"lastseen": "2026-03-02", "firstseen": "2021-12-1


indicator: 185.220.101.155
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:27:21.048876
raw_data:
  {"count": 49, "attacks": 3, "maxdate": "2026-03-07", "mindate": "2024-10-07", "updated": "2026-03-07 19:00:47", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-02-21", "firstseen": "2025-02-04"}, "blocklistde22": {"lastseen": "2026-02-21", "firstseen": "2020-04-01"}, "blocklistde443": {"lastseen": "2026-02-21", "firstseen": "2020-06-02"}


indicator: 185.220.101.135
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:27:22.490628
raw_data:
  {"count": 155, "attacks": 29, "maxdate": "2026-03-10", "mindate": "2024-09-19", "updated": "2026-03-11 00:59:02", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-04", "firstseen": "2025-02-04"}, "blocklistde22": {"lastseen": "2026-03-04", "firstseen": "2020-03-18"}, "blocklistde25": {"lastseen": "2026-03-04", "firstseen": "2020-05-24"


indicator: 185.220.101.162
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:27:23.849786
raw_data:
  {"count": 116, "attacks": 38, "maxdate": "2026-03-10", "mindate": "2023-01-15", "updated": "2026-03-11 09:44:02", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-05", "firstseen": "2025-02-04"}, "blocklistde22": {"lastseen": "2026-03-05", "firstseen": "2020-04-04"}, "blocklistde25": {"lastseen": "2026-03-05", "firstseen": "2024-09-23"


indicator: 185.220.101.170
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:27:25.202992
raw_data:
  {"count": 116, "attacks": 24, "maxdate": "2026-03-09", "mindate": "2023-01-15", "updated": "2026-03-10 09:09:53", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-02-27", "firstseen": "2025-02-04"}, "blocklistde110": {"lastseen": "2026-02-27", "firstseen": "2021-12-23"}, "blocklistde143": {"lastseen": "2026-02-27", "firstseen": "2021-12-2


indicator: 185.220.101.130
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:27:26.528260
raw_data:
  {"count": 122, "attacks": 31, "maxdate": "2026-03-09", "mindate": "2023-01-13", "updated": "2026-03-09 16:37:43", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-06", "firstseen": "2025-02-04"}, "blocklistde110": {"lastseen": "2026-03-06", "firstseen": "2021-04-15"}, "blocklistde143": {"lastseen": "2026-03-06", "firstseen": "2021-04-1


indicator: 185.220.101.174
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:27:27.862454
raw_data:
  {"count": 99, "attacks": 25, "maxdate": "2026-03-11", "mindate": "2023-01-16", "updated": "2026-03-11 13:34:44", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-06", "firstseen": "2025-02-04"}, "blocklistde110": {"lastseen": "2026-03-06", "firstseen": "2021-12-28"}, "blocklistde143": {"lastseen": "2026-03-06", "firstseen": "2021-12-28


indicator: 185.220.101.178
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:27:29.203762
raw_data:
  {"count": 35, "attacks": 7, "maxdate": "2026-03-09", "mindate": "2026-01-26", "updated": "2026-03-10 03:39:05", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-04", "firstseen": "2025-02-04"}, "blocklistde110": {"lastseen": "2026-03-04", "firstseen": "2022-01-05"}, "blocklistde143": {"lastseen": "2026-03-04", "firstseen": "2022-01-05"


indicator: 185.220.101.182
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:27:30.539327
raw_data:
  {"count": 126, "attacks": 31, "maxdate": "2026-03-10", "mindate": "2023-01-16", "updated": "2026-03-11 09:27:51", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-05", "firstseen": "2025-02-04"}, "blocklistde22": {"lastseen": "2026-03-05", "firstseen": "2021-12-02"}, "blocklistde25": {"lastseen": "2026-03-05", "firstseen": "2024-07-10"


indicator: 185.220.101.190
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:27:31.867182
raw_data:
  {"count": 25, "attacks": 9, "maxdate": "2026-03-11", "mindate": "2026-01-28", "updated": "2026-03-11 12:00:12", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-05", "firstseen": "2025-02-04"}, "blocklistde22": {"lastseen": "2026-03-05", "firstseen": "2021-12-11"}, "blocklistde443": {"lastseen": "2026-03-05", "firstseen": "2021-12-22"}


indicator: 185.220.101.176
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:27:33.235805
raw_data:
  {"count": 131, "attacks": 36, "maxdate": "2026-03-08", "mindate": "2025-04-01", "updated": "2026-03-08 12:17:33", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-06", "firstseen": "2025-02-04"}, "blocklistde22": {"lastseen": "2026-03-06", "firstseen": "2020-04-13"}, "blocklistde443": {"lastseen": "2026-03-06", "firstseen": "2021-12-22


indicator: 185.220.101.166
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:27:34.644237
raw_data:
  {"count": 144, "attacks": 28, "maxdate": "2026-03-11", "mindate": "2024-12-29", "updated": "2026-03-11 04:31:32", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-02", "firstseen": "2025-02-04"}, "blocklistde22": {"lastseen": "2026-03-02", "firstseen": "2020-04-13"}, "blocklistde443": {"lastseen": "2026-03-02", "firstseen": "2020-05-15


indicator: 185.220.101.157
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:27:35.984011
raw_data:
  {"count": 125, "attacks": 30, "maxdate": "2026-03-09", "mindate": "2023-01-13", "updated": "2026-03-10 04:10:31", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-02", "firstseen": "2025-02-04"}, "blocklistde22": {"lastseen": "2026-03-02", "firstseen": "2020-04-01"}, "blocklistde443": {"lastseen": "2026-03-02", "firstseen": "2020-07-15


indicator: 185.220.101.173
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:27:37.413544
raw_data:
  {"count": 72, "attacks": 10, "maxdate": "2026-03-06", "mindate": "2026-01-23", "updated": "2026-03-06 22:13:40", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-06", "firstseen": "2025-02-04"}, "blocklistde22": {"lastseen": "2026-03-06", "firstseen": "2020-04-13"}, "blocklistde443": {"lastseen": "2026-03-06", "firstseen": "2021-12-02"


indicator: 185.220.101.154
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:27:38.743803
raw_data:
  {"count": 103, "attacks": 25, "maxdate": "2026-03-10", "mindate": "2023-01-15", "updated": "2026-03-10 21:02:56", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-06", "firstseen": "2025-02-04"}, "blocklistde110": {"lastseen": "2026-03-06", "firstseen": "2021-12-11"}, "blocklistde143": {"lastseen": "2026-03-06", "firstseen": "2021-12-1


indicator: 185.220.101.175
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:27:40.091218
raw_data:
  {"count": 106, "attacks": 26, "maxdate": "2026-03-09", "mindate": "2023-01-27", "updated": "2026-03-10 03:56:34", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-04", "firstseen": "2025-02-04"}, "blocklistde22": {"lastseen": "2026-03-04", "firstseen": "2020-04-13"}, "blocklistde25": {"lastseen": "2026-03-04", "firstseen": "2024-05-25"


indicator: 185.220.101.165
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:27:41.353599
raw_data:
  {"count": 125, "attacks": 29, "maxdate": "2026-03-09", "mindate": "2024-12-31", "updated": "2026-03-10 09:26:49", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-04", "firstseen": "2025-02-04"}, "blocklistde22": {"lastseen": "2026-03-04", "firstseen": "2020-04-03"}, "blocklistde443": {"lastseen": "2026-03-04", "firstseen": "2020-06-25


indicator: 185.220.101.191
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:27:42.692107
raw_data:
  {"count": 37, "attacks": 8, "maxdate": "2026-03-11", "mindate": "2026-01-29", "updated": "2026-03-11 13:35:10", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-06", "firstseen": "2025-02-04"}, "blocklistde110": {"lastseen": "2026-03-06", "firstseen": "2021-12-30"}, "blocklistde143": {"lastseen": "2026-03-06", "firstseen": "2021-12-30"


indicator: 185.220.101.129
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:27:44.028673
raw_data:
  {"count": 139, "attacks": 31, "maxdate": "2026-03-09", "mindate": "2024-09-25", "updated": "2026-03-10 03:53:05", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-05", "firstseen": "2025-02-04"}, "blocklistde110": {"lastseen": "2026-03-05", "firstseen": "2020-09-14"}, "blocklistde143": {"lastseen": "2026-03-05", "firstseen": "2020-09-1


indicator: 185.220.101.146
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:27:45.448596
raw_data:
  {"count": 25, "attacks": 9, "maxdate": "2026-03-08", "mindate": "2026-02-05", "updated": "2026-03-08 06:50:49", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-05", "firstseen": "2025-02-04"}, "blocklistde110": {"lastseen": "2026-03-05", "firstseen": "2020-12-30"}, "blocklistde143": {"lastseen": "2026-03-05", "firstseen": "2020-12-30"


indicator: 185.220.101.163
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:27:46.788300
raw_data:
  {"count": 28, "attacks": 11, "maxdate": "2026-03-10", "mindate": "2026-02-01", "updated": "2026-03-10 23:27:21", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-01", "firstseen": "2025-02-04"}, "blocklistde110": {"lastseen": "2026-03-01", "firstseen": "2024-03-14"}, "blocklistde143": {"lastseen": "2026-03-01", "firstseen": "2024-03-14


indicator: 185.220.101.138
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:27:48.134412
raw_data:
  {"count": 89, "attacks": 29, "maxdate": "2026-03-10", "mindate": "2023-02-15", "updated": "2026-03-11 09:17:29", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-05", "firstseen": "2025-02-04"}, "blocklistde110": {"lastseen": "2026-03-05", "firstseen": "2020-07-08"}, "blocklistde143": {"lastseen": "2026-03-05", "firstseen": "2020-07-08


indicator: 185.220.101.171
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:27:49.490307
raw_data:
  {"count": 40, "attacks": 15, "maxdate": "2026-03-10", "mindate": "2026-01-27", "updated": "2026-03-10 15:42:08", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-04", "firstseen": "2025-02-04"}, "blocklistde22": {"lastseen": "2026-03-04", "firstseen": "2020-04-10"}, "blocklistde443": {"lastseen": "2026-03-04", "firstseen": "2021-12-22"


indicator: 185.220.101.184
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:27:50.846002
raw_data:
  {"count": 25, "attacks": 10, "maxdate": "2026-03-09", "mindate": "2026-01-25", "updated": "2026-03-09 22:21:03", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-04", "firstseen": "2025-02-04"}, "blocklistde22": {"lastseen": "2026-03-04", "firstseen": "2021-12-02"}, "blocklistde443": {"lastseen": "2026-03-04", "firstseen": "2021-12-28"


indicator: 185.220.101.131
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:27:52.179230
raw_data:
  {"count": 154, "attacks": 30, "maxdate": "2026-03-08", "mindate": "2024-09-14", "updated": "2026-03-09 03:29:13", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-06", "firstseen": "2025-02-04"}, "blocklistde110": {"lastseen": "2026-03-06", "firstseen": "2021-12-02"}, "blocklistde143": {"lastseen": "2026-03-06", "firstseen": "2021-12-0


indicator: 185.220.101.128
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:27:53.513244
raw_data:
  {"count": 25, "attacks": 10, "maxdate": "2026-03-11", "mindate": "2026-01-27", "updated": "2026-03-11 11:28:06", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-06", "firstseen": "2025-02-04"}, "blocklistde22": {"lastseen": "2026-03-06", "firstseen": "2023-11-21"}, "emergincompromised": {"lastseen": "2026-03-06", "firstseen": "2024-03


indicator: 185.220.101.140
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:27:54.839419
raw_data:
  {"count": 126, "attacks": 28, "maxdate": "2026-03-11", "mindate": "2024-09-28", "updated": "2026-03-11 13:36:17", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-03", "firstseen": "2025-02-04"}, "blocklistde110": {"lastseen": "2026-03-03", "firstseen": "2021-12-30"}, "blocklistde143": {"lastseen": "2026-03-03", "firstseen": "2021-12-3


indicator: 185.220.101.183
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:27:56.181218
raw_data:
  {"count": 128, "attacks": 35, "maxdate": "2026-03-10", "mindate": "2023-01-13", "updated": "2026-03-10 23:33:08", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-06", "firstseen": "2025-02-04"}, "blocklistde110": {"lastseen": "2026-03-06", "firstseen": "2023-07-18"}, "blocklistde143": {"lastseen": "2026-03-06", "firstseen": "2023-07-1


indicator: 185.220.101.186
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:27:57.509907
raw_data:
  {"count": 93, "attacks": 29, "maxdate": "2026-03-10", "mindate": "2023-01-28", "updated": "2026-03-10 19:46:05", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-03", "firstseen": "2025-02-04"}, "blocklistde110": {"lastseen": "2026-03-03", "firstseen": "2021-12-19"}, "blocklistde143": {"lastseen": "2026-03-03", "firstseen": "2021-12-19


indicator: 185.220.101.180
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:27:58.871877
raw_data:
  {"count": 22, "attacks": 6, "maxdate": "2026-03-09", "mindate": "2026-01-24", "updated": "2026-03-10 00:39:47", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"blocklistde110": {"lastseen": "2026-03-04", "firstseen": "2022-01-06"}, "blocklistde143": {"lastseen": "2026-03-04", "firstseen": "2022-01-06"}, "blocklistde22": {"lastseen": "2026-03-04", "firstseen": "2023


indicator: 185.220.101.161
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:28:00.207681
raw_data:
  {"count": 38, "attacks": 9, "maxdate": "2026-03-06", "mindate": "2026-01-23", "updated": "2026-03-06 17:36:18", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-06", "firstseen": "2025-02-04"}, "blocklistde22": {"lastseen": "2026-03-06", "firstseen": "2020-04-13"}, "blocklistde25": {"lastseen": "2026-03-06", "firstseen": "2024-07-10"},


indicator: 185.220.101.156
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:28:01.561903
raw_data:
  {"count": 168, "attacks": 37, "maxdate": "2026-03-11", "mindate": "2023-03-22", "updated": "2026-03-11 13:32:35", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-05", "firstseen": "2025-02-04"}, "blocklistde22": {"lastseen": "2026-03-05", "firstseen": "2020-04-03"}, "blocklistde25": {"lastseen": "2026-03-05", "firstseen": "2024-06-01"


indicator: 185.220.101.169
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:28:02.897791
raw_data:
  {"count": 161, "attacks": 27, "maxdate": "2026-03-09", "mindate": "2023-01-16", "updated": "2026-03-10 03:54:32", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-05", "firstseen": "2025-02-04"}, "blocklistde110": {"lastseen": "2026-03-05", "firstseen": "2024-03-19"}, "blocklistde143": {"lastseen": "2026-03-05", "firstseen": "2024-03-1


indicator: 185.220.101.160
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:28:04.239316
raw_data:
  {"count": 113, "attacks": 27, "maxdate": "2026-03-09", "mindate": "2024-10-09", "updated": "2026-03-10 04:42:55", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-05", "firstseen": "2025-02-04"}, "blocklistde110": {"lastseen": "2026-03-05", "firstseen": "2021-12-02"}, "blocklistde143": {"lastseen": "2026-03-05", "firstseen": "2021-12-0


indicator: 185.220.101.181
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:28:05.592631
raw_data:
  {"count": 64, "attacks": 9, "maxdate": "2026-03-09", "mindate": "2026-01-27", "updated": "2026-03-10 00:32:50", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"blocklistde110": {"lastseen": "2026-03-05", "firstseen": "2024-03-14"}, "blocklistde143": {"lastseen": "2026-03-05", "firstseen": "2024-03-14"}, "blocklistde22": {"lastseen": "2026-03-05", "firstseen": "2021


indicator: 185.220.101.187
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:28:07.076313
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-01-26", "firstseen": "2025-02-04"}, "blocklistde22": {"lastseen": "2026-01-26", "firstseen": "2021-12-02"}, "blocklistde25": {"lastseen": "2026-01-26", "firstseen": "2024-04-13"}, "blocklistde443": {"lastseen": "2


indicator: 185.220.101.133
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:28:08.439169
raw_data:
  {"count": 110, "attacks": 29, "maxdate": "2026-03-10", "mindate": "2024-09-19", "updated": "2026-03-11 08:44:05", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-06", "firstseen": "2025-02-04"}, "blocklistde110": {"lastseen": "2026-03-06", "firstseen": "2020-12-04"}, "blocklistde143": {"lastseen": "2026-03-06", "firstseen": "2020-12-0


indicator: 176.65.146.125
indicator_type: ipv4
source: shodan
city: self-signed,database
queried_at: 2026-03-11T10:29:03.383841
raw_data:
  {"ports": [22, 80, 2052, 3306, 6379, 7474, 8443], "vulns": ["CVE-2021-40438", "CVE-2013-2765", "CVE-2020-13938", "CVE-2020-9490", "CVE-2025-65082", "CVE-2020-35452", "CVE-2025-49812", "CVE-2013-0942", "CVE-2021-36160", "CVE-2013-4365", "CVE-2024-43394", "CVE-2024-38477", "CVE-2024-43204", "CVE-2020-11984", "CVE-2025-23048", "CVE-2024-24795", "CVE-2013-0941", "CVE-2022-29404", "CVE-2006-20001", "CVE-2009-0796", "CVE-2021-34798", "CVE-2022-30556", "CVE-2023-38709", "CVE-2022-37436", "CVE-2022-2637

hosting_provider:
  cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx,cpe:/a:redislabs:redis,cpe:/a:apache:http_server:2.4.41,cpe:/a:mariadb:mariadb,cpe:/a:openbsd:openssh:8.2p1


indicator: 195.211.191.188
indicator_type: ipv4
source: shodan
city: self-signed
hosting_provider: cpe:/a:f5:nginx
queried_at: 2026-03-11T10:29:05.111858
raw_data:
  {"ports": [80, 443], "vulns": [], "hostnames": [], "tags": ["self-signed"], "cpes": ["cpe:/a:f5:nginx"]}


indicator: 37.221.66.86
indicator_type: ipv4
source: shodan
city: self-signed
hosting_provider: cpe:/a:openbsd:openssh:8.2p1,cpe:/a:f5:nginx,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-03-11T10:29:10.158216
raw_data:
  {"ports": [22, 80, 443], "vulns": [], "hostnames": [], "tags": ["self-signed"], "cpes": ["cpe:/a:openbsd:openssh:8.2p1", "cpe:/a:f5:nginx", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 195.211.191.198
indicator_type: ipv4
source: shodan
city: self-signed
queried_at: 2026-03-11T10:29:13.508627
raw_data:
  {"ports": [22, 80, 443, 7771], "vulns": [], "hostnames": [], "tags": ["self-signed"], "cpes": ["cpe:/a:openbsd:openssh:8.2p1", "cpe:/a:openresty:openresty", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx"]}

hosting_provider:
  cpe:/a:openbsd:openssh:8.2p1,cpe:/a:openresty:openresty,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx


indicator: 176.65.146.34
indicator_type: ipv4
source: shodan
city: self-signed,database
hosting_provider: cpe:/a:redislabs:redis,cpe:/a:f5:nginx,cpe:/a:mariadb:mariadb
queried_at: 2026-03-11T10:29:15.205341
raw_data:
  {"ports": [80, 443, 3306, 6379], "vulns": [], "hostnames": [], "tags": ["self-signed", "database"], "cpes": ["cpe:/a:redislabs:redis", "cpe:/a:f5:nginx", "cpe:/a:mariadb:mariadb"]}


indicator: 195.211.191.206
indicator_type: ipv4
source: shodan
city: self-signed,database
queried_at: 2026-03-11T10:29:16.894576
raw_data:
  {"ports": [22, 80, 443, 2086, 7999, 8880], "vulns": [], "hostnames": [], "tags": ["self-signed", "database"], "cpes": ["cpe:/o:canonical:ubuntu_linux", "cpe:/a:openbsd:openssh:8.2p1", "cpe:/a:f5:nginx", "cpe:/a:mariadb:mariadb:10.6.22-MariaDB-ubu2004", "cpe:/a:openresty:openresty"]}

hosting_provider:
  cpe:/o:canonical:ubuntu_linux,cpe:/a:openbsd:openssh:8.2p1,cpe:/a:f5:nginx,cpe:/a:mariadb:mariadb:10.6.22-MariaDB-ubu2004,cpe:/a:openresty:openresty


indicator: 195.211.191.146
indicator_type: ipv4
source: shodan
city: self-signed
queried_at: 2026-03-11T10:29:18.717256
raw_data:
  {"ports": [22, 80, 137, 443, 445, 5000, 7878, 8085, 8181, 9000, 9443, 32400], "vulns": [], "hostnames": [], "tags": ["self-signed"], "cpes": ["cpe:/a:angularjs:angular.js", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx", "cpe:/a:plex:media_server:1.43.0.10467", "cpe:/a:microsoft:asp.net", "cpe:/a:openbsd:openssh:8.2p1"]}

hosting_provider:
  cpe:/a:angularjs:angular.js,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx,cpe:/a:plex:media_server:1.43.0.10467,cpe:/a:microsoft:asp.net,cpe:/a:openbsd:openssh:8.2p1


indicator: 195.211.191.248
indicator_type: ipv4
source: shodan
city: self-signed
hosting_provider: cpe:/a:f5:nginx
queried_at: 2026-03-11T10:29:20.419139
raw_data:
  {"ports": [80, 8443], "vulns": [], "hostnames": [], "tags": ["self-signed"], "cpes": ["cpe:/a:f5:nginx"]}


indicator: 195.211.191.63
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/a:f5:nginx,cpe:/a:openbsd:openssh:8.2p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-03-11T10:29:22.095263
raw_data:
  {"ports": [22, 8080], "vulns": [], "hostnames": [], "tags": [], "cpes": ["cpe:/a:f5:nginx", "cpe:/a:openbsd:openssh:8.2p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 195.211.191.163
indicator_type: ipv4
source: shodan
city: self-signed
queried_at: 2026-03-11T10:29:23.782519
raw_data:
  {"ports": [22, 6661, 8080, 8443], "vulns": [], "hostnames": [], "tags": ["self-signed"], "cpes": ["cpe:/a:f5:nginx", "cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:openresty:openresty"]}

hosting_provider:
  cpe:/a:f5:nginx,cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux,cpe:/a:openresty:openresty


indicator: 195.211.191.73
indicator_type: ipv4
source: shodan
city: eol-product
hosting_provider: cpe:/a:f5:nginx:1.26.2
queried_at: 2026-03-11T10:29:25.485104
raw_data:
  {"ports": [5201, 8080, 31210], "vulns": ["CVE-2025-23419"], "hostnames": [], "tags": ["eol-product"], "cpes": ["cpe:/a:f5:nginx:1.26.2"]}


indicator: 195.211.191.139
indicator_type: ipv4
source: shodan
city: self-signed,eol-product
queried_at: 2026-03-11T10:29:27.164459
raw_data:
  {"ports": [80, 443, 2000, 6789, 8000, 9000, 31210], "vulns": ["CVE-2023-44487", "CVE-2025-23419"], "hostnames": [], "tags": ["self-signed", "eol-product"], "cpes": ["cpe:/a:portainer:portainer:2.27.9", "cpe:/a:angularjs:angular.js", "cpe:/a:f5:nginx", "cpe:/a:f5:nginx:1.21.0"]}

hosting_provider:
  cpe:/a:portainer:portainer:2.27.9,cpe:/a:angularjs:angular.js,cpe:/a:f5:nginx,cpe:/a:f5:nginx:1.21.0


indicator: 176.65.144.29
indicator_type: ipv4
source: shodan
city: starttls,self-signed
hosting_provider: cpe:/a:f5:nginx,cpe:/a:openbsd:openssh:9.6p1
queried_at: 2026-03-11T10:29:28.855456
raw_data:
  {"ports": [22, 25, 53, 80, 143, 443, 465, 587, 993, 995], "vulns": [], "hostnames": [], "tags": ["starttls", "self-signed"], "cpes": ["cpe:/a:f5:nginx", "cpe:/a:openbsd:openssh:9.6p1"]}


indicator: 176.65.146.125
indicator_type: ipv4
source: otx
country: DE
reverse_dns: local4k.xyz,local-sat4.xyz
queried_at: 2026-03-11T10:30:14.601781
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "ASNone ", "indicator": "176.65.146.125", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["local4k.xyz", "local-sat4.xyz"]}


indicator: 195.211.191.188
indicator_type: ipv4
source: otx
country: UA
queried_at: 2026-03-11T10:30:16.120188
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Ukraine", "country_code": "UA", "city": null, "asn": "AS7029 windstream communications llc", "indicator": "195.211.191.188", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 195.211.191.249
indicator_type: ipv4
source: otx
country: UA
queried_at: 2026-03-11T10:30:18.309362
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Ukraine", "country_code": "UA", "city": null, "asn": "AS7029 windstream communications llc", "indicator": "195.211.191.249", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 195.211.191.31
indicator_type: ipv4
source: otx
country: UA
hosting_provider: dionaea,ssh,sip,mailoney,Redishoneypot,sentrypeer,sftp,email,cowrie,malicious
queried_at: 2026-03-11T10:30:20.596375
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Ukraine", "country_code": "UA", "city": null, "asn": "AS7029 windstream communications llc", "indicator": "195.211.191.31", "tags": ["dionaea", "ssh", "sip", "mailoney", "Redishoneypot", "sentrypeer", "sftp", "email", "cowrie", "malicious", "tanner"], "pulses": ["LCIA HoneyNet Data - May 2025 - Mailoney"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 37.221.66.86
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-03-11T10:30:22.146486
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS200019 alexhost srl", "indicator": "37.221.66.86", "tags": [], "pulses": [], "malware_count": 1, "passive_dns_count": 0, "malware_samples": ["b679249c0ac0891c5f182ffcfeca565189d7b5a8c5be82e105e1ac2d440a8715"], "passive_dns": []}


indicator: 37.221.66.74
indicator_type: ipv4
source: otx
country: RU
reverse_dns: chineseatwork.com
queried_at: 2026-03-11T10:30:24.471319
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS200019 alexhost srl", "indicator": "37.221.66.74", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["chineseatwork.com"]}


indicator: 195.211.191.198
indicator_type: ipv4
source: otx
country: UA
reverse_dns: safewgg.braguetaabierta.uk,ifryerebekahgo.org
hosting_provider: DMARC
queried_at: 2026-03-11T10:30:26.049910
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Ukraine", "country_code": "UA", "city": null, "asn": "AS7029 windstream communications llc", "indicator": "195.211.191.198", "tags": ["DMARC"], "pulses": ["DMARC Failure IPs"], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["safewgg.braguetaabierta.uk", "ifryerebekahgo.org"]}


indicator: 176.65.146.34
indicator_type: ipv4
source: otx
country: DE
queried_at: 2026-03-11T10:30:27.920681
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "ASNone ", "indicator": "176.65.146.34", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 195.211.191.206
indicator_type: ipv4
source: otx
country: UA
queried_at: 2026-03-11T10:30:30.624606
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Ukraine", "country_code": "UA", "city": null, "asn": "AS7029 windstream communications llc", "indicator": "195.211.191.206", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 195.211.191.146
indicator_type: ipv4
source: otx
country: UA
queried_at: 2026-03-11T10:30:32.378905
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Ukraine", "country_code": "UA", "city": null, "asn": "AS7029 windstream communications llc", "indicator": "195.211.191.146", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 195.211.191.248
indicator_type: ipv4
source: otx
country: UA
reverse_dns: mail.sheddream.world
queried_at: 2026-03-11T10:30:34.033210
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Ukraine", "country_code": "UA", "city": null, "asn": "AS7029 windstream communications llc", "indicator": "195.211.191.248", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["mail.sheddream.world"]}


indicator: 195.211.191.63
indicator_type: ipv4
source: otx
country: UA
queried_at: 2026-03-11T10:30:36.011494
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Ukraine", "country_code": "UA", "city": null, "asn": "AS7029 windstream communications llc", "indicator": "195.211.191.63", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 195.211.191.163
indicator_type: ipv4
source: otx
country: UA
queried_at: 2026-03-11T10:30:37.860588
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Ukraine", "country_code": "UA", "city": null, "asn": "AS7029 windstream communications llc", "indicator": "195.211.191.163", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 195.211.191.73
indicator_type: ipv4
source: otx
country: UA
queried_at: 2026-03-11T10:30:39.358217
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Ukraine", "country_code": "UA", "city": null, "asn": "AS7029 windstream communications llc", "indicator": "195.211.191.73", "tags": [], "pulses": ["Malicious IP Addresses"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 195.211.191.139
indicator_type: ipv4
source: otx
country: UA
reverse_dns: updateinforev.com,lensiitu.com,spersties.com
queried_at: 2026-03-11T10:30:41.089898
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Ukraine", "country_code": "UA", "city": null, "asn": "AS7029 windstream communications llc", "indicator": "195.211.191.139", "tags": [], "pulses": [], "malware_count": 1, "passive_dns_count": 3, "malware_samples": ["27c10e63e2fc2b7babaf1cc80ef0629b026331cde5bd463358d8ad4ef830a4aa"], "passive_dns": ["updateinforev.com", "lensiitu.com", "spersties.com"]}


indicator: 176.65.144.29
indicator_type: ipv4
source: otx
country: DE
queried_at: 2026-03-11T10:30:42.727588
raw_data:
  {"pulse_count": 0, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "ASNone ", "indicator": "176.65.144.29", "tags": [], "pulses": [], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 185.220.101.144
indicator_type: ipv4
source: otx
country: DE
reverse_dns: seed.nu.crypto-daio.co.uk
hosting_provider: LAMP,ssh,Honeypot,sip,sftp,Automated,cisco,tanner,sensor-tagged,telnet
queried_at: 2026-03-11T10:30:45.260993
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.144", "tags": ["LAMP", "ssh", "Honeypot", "sip", "sftp", "Automated", "cisco", "tanner", "sensor-tagged", "telnet", "SSH", "heralding", "OpenCTI", "p0f", "cowrie", "honeytrap", "fatt", "2026-02", "Bruteforce", "tpot", "dionaea", "suricata", "mailoney", "sentrypeer", "anonymization_network", "Brute-Force", "email", "elasticpot", "honeyp


indicator: 185.220.101.137
indicator_type: ipv4
source: otx
country: DE
reverse_dns: maillet-vdsm.direct.quickconnect.to,seed.nu.crypto-daio.co.uk
hosting_provider: LAMP,ssh,Honeypot,sftp,Automated,cisco,tanner,sensor-tagged,SSH,heralding
queried_at: 2026-03-11T10:30:47.986583
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.137", "tags": ["LAMP", "ssh", "Honeypot", "sftp", "Automated", "cisco", "tanner", "sensor-tagged", "SSH", "heralding", "p0f", "OpenCTI", "cowrie", "honeytrap", "fatt", "2026-02", "Bruteforce", "tpot", "dionaea", "suricata", "mailoney", "sentrypeer", "anonymization_network", "Brute-Force", "honeypot", "malicious"], "pulses": ["Honeypot 


indicator: 185.220.101.145
indicator_type: ipv4
source: otx
country: DE
reverse_dns: seed.nu.crypto-daio.co.uk
hosting_provider: LAMP,ssh,Honeypot,sip,sftp,Automated,probing,cisco,tanner,sensor-tagged
queried_at: 2026-03-11T10:31:01.793299
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.145", "tags": ["LAMP", "ssh", "Honeypot", "sip", "sftp", "Automated", "probing", "cisco", "tanner", "sensor-tagged", "SSH", "heralding", "Adbhoney", "p0f", "OpenCTI", "cowrie", "honeytrap", "fatt", "2026-02", "tpot", "Bruteforce", "dionaea", "suricata", "monthly", "ciscoasa", "mailoney", "sentrypeer", "scanning", "webscan", "anonymizat


indicator: 185.220.101.189
indicator_type: ipv4
source: otx
country: DE
hosting_provider: LAMP,ssh,Honeypot,sip,sftp,probing,cisco,tanner,sensor-tagged,SSH
queried_at: 2026-03-11T10:31:15.942332
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.189", "tags": ["LAMP", "ssh", "Honeypot", "sip", "sftp", "probing", "cisco", "tanner", "sensor-tagged", "SSH", "p0f", "cowrie", "honeytrap", "fatt", "tpot", "Bruteforce", "dionaea", "Telnet", "suricata", "mailoney", "attack", "sentrypeer", "scanning", "webscan", "anonymization_network", "webscanner, bruteforce, web app attack", "Brute-


indicator: 185.220.101.136
indicator_type: ipv4
source: otx
country: DE
reverse_dns: seed.nu.crypto-daio.co.uk
hosting_provider: LAMP,ssh,stix-2.1,Honeypot,pattern-38,DugganUSA,dugganusa,sftp,Automated,stealc
queried_at: 2026-03-11T10:31:30.579042
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.136", "tags": ["LAMP", "ssh", "stix-2.1", "Honeypot", "pattern-38", "DugganUSA", "dugganusa", "sftp", "Automated", "stealc", "probing", "tanner", "sensor-tagged", "auto-updated", "threat-intelligence", "SSH", "isp-reputation", "p0f", "OpenCTI", "cowrie", "honeytrap", "fatt", "2026-02", "Bruteforce", "tpot", "dionaea", "auto-generated",


indicator: 185.220.101.148
indicator_type: ipv4
source: otx
country: DE
reverse_dns: 143.mydyn.in
hosting_provider: LAMP,ssh,Honeypot,sip,sftp,Automated,ipphoney,probing,cisco,conpot
queried_at: 2026-03-11T10:31:45.102718
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.148", "tags": ["LAMP", "ssh", "Honeypot", "sip", "sftp", "Automated", "ipphoney", "probing", "cisco", "conpot", "tanner", "sensor-tagged", "SSH", "heralding", "p0f", "OpenCTI", "cowrie", "honeytrap", "fatt", "2026-02", "Bruteforce", "tpot", "dionaea", "Telnet", "suricata", "mailoney", "attack", "sentrypeer", "scanning", "webscan", "ano


indicator: 185.220.101.149
indicator_type: ipv4
source: otx
country: DE
hosting_provider: LAMP,ssh,Honeypot,sip,sftp,Automated,webscanner,probing,cisco,tanner
queried_at: 2026-03-11T10:31:47.653060
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.149", "tags": ["LAMP", "ssh", "Honeypot", "sip", "sftp", "Automated", "webscanner", "probing", "cisco", "tanner", "sensor-tagged", "badrequest", "SSH", "heralding", "Adbhoney", "OpenCTI", "p0f", "cowrie", "honeytrap", "fatt", "2026-02", "Bruteforce", "tpot", "dionaea", "bruteforce", "suricata", "mailoney", "sentrypeer", "webscan", "ano


indicator: 185.220.101.172
indicator_type: ipv4
source: otx
country: DE
hosting_provider: LAMP,ssh,stix-2.1,Honeypot,sip,pattern-38,dugganusa,sftp,Automated,stealc
queried_at: 2026-03-11T10:32:01.307670
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.172", "tags": ["LAMP", "ssh", "stix-2.1", "Honeypot", "sip", "pattern-38", "dugganusa", "sftp", "Automated", "stealc", "probing", "cisco", "tanner", "sensor-tagged", "auto-updated", "threat-intelligence", "SSH", "heralding", "Adbhoney", "isp-reputation", "p0f", "OpenCTI", "cowrie", "honeytrap", "fatt", "2026-02", "Bruteforce", "tpot", 


indicator: 185.220.101.141
indicator_type: ipv4
source: otx
country: DE
hosting_provider: LAMP,ssh,Honeypot,sip,sftp,cisco,conpot,tanner,sensor-tagged,SSH
queried_at: 2026-03-11T10:32:03.711622
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.141", "tags": ["LAMP", "ssh", "Honeypot", "sip", "sftp", "cisco", "conpot", "tanner", "sensor-tagged", "SSH", "heralding", "Adbhoney", "p0f", "cowrie", "honeytrap", "fatt", "Bruteforce", "tpot", "dionaea", "bruteforce", "suricata", "mailoney", "sentrypeer", "anonymization_network", "Brute-Force", "elasticpot", "email", "honeypot", "mal

reverse_dns:
  laylaylom15975300.freeddns.org,e-jagiello.synology.me,seed.nu.crypto-daio.co.uk,seed.bc.crypto-daio.co.uk


indicator: 185.220.101.179
indicator_type: ipv4
source: otx
country: DE
hosting_provider: LAMP,ssh,Honeypot,sip,sftp,Automated,webscanner,probing,cisco,tanner
queried_at: 2026-03-11T10:32:17.379527
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.179", "tags": ["LAMP", "ssh", "Honeypot", "sip", "sftp", "Automated", "webscanner", "probing", "cisco", "tanner", "sensor-tagged", "badrequest", "SSH", "p0f", "OpenCTI", "cowrie", "honeytrap", "fatt", "2026-02", "Bruteforce", "tpot", "dionaea", "bruteforce", "suricata", "mailoney", "sentrypeer", "scanning", "webscan", "anonymization_ne


indicator: 185.220.101.153
indicator_type: ipv4
source: otx
country: DE
hosting_provider: LAMP,ssh,Honeypot,sip,sftp,Automated,cisco,conpot,tanner,sensor-tagged
queried_at: 2026-03-11T10:32:19.624301
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.153", "tags": ["LAMP", "ssh", "Honeypot", "sip", "sftp", "Automated", "cisco", "conpot", "tanner", "sensor-tagged", "SSH", "heralding", "Adbhoney", "p0f", "OpenCTI", "cowrie", "honeytrap", "fatt", "2026-02", "Bruteforce", "tpot", "dionaea", "suricata", "mailoney", "sentrypeer", "anonymization_network", "Brute-Force", "email", "honeypot


indicator: 185.220.101.155
indicator_type: ipv4
source: otx
country: DE
hosting_provider: scanning,anonymization_network,webscan,probing,webscanner, bruteforce, web app attack
queried_at: 2026-03-11T10:32:32.845048
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.155", "tags": ["scanning", "anonymization_network", "webscan", "probing", "webscanner, bruteforce, web app attack"], "pulses": ["Webscanners 2018-02-09  thru current day", "Anonymization_Network | Mar 11, 2026 | Part 1/5", "Anonymization_Network | Mar 10, 2026 | Part 1/5", "Anonymization_Network | Mar 9, 2026 | Part 1/5", "Anonymizatio


indicator: 185.220.101.135
indicator_type: ipv4
source: otx
country: DE
reverse_dns: seed.nu.crypto-daio.co.uk
hosting_provider: LAMP,ssh,Honeypot,sip,sftp,Automated,probing,cisco,tanner,sensor-tagged
queried_at: 2026-03-11T10:32:46.535525
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.135", "tags": ["LAMP", "ssh", "Honeypot", "sip", "sftp", "Automated", "probing", "cisco", "tanner", "sensor-tagged", "Redishoneypot", "SSH", "heralding", "p0f", "OpenCTI", "cowrie", "honeytrap", "fatt", "2026-02", "Bruteforce", "tpot", "dionaea", "suricata", "mailoney", "sentrypeer", "scanning", "webscan", "anonymization_network", "web


indicator: 185.220.101.162
indicator_type: ipv4
source: otx
country: DE
reverse_dns: xiangjiao.eu.org
hosting_provider: LAMP,ssh,stix-2.1,Honeypot,sip,pattern-38,dugganusa,sftp,Automated,stealc
queried_at: 2026-03-11T10:33:00.765227
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.162", "tags": ["LAMP", "ssh", "stix-2.1", "Honeypot", "sip", "pattern-38", "dugganusa", "sftp", "Automated", "stealc", "probing", "cisco", "tanner", "sensor-tagged", "auto-updated", "threat-intelligence", "SSH", "heralding", "isp-reputation", "p0f", "OpenCTI", "cowrie", "honeytrap", "fatt", "2026-02", "Bruteforce", "tpot", "dionaea", "


indicator: 185.220.101.170
indicator_type: ipv4
source: otx
country: DE
reverse_dns: servicepoint.duckdns.org
hosting_provider: LAMP,ssh,Honeypot,sip,sftp,Automated,ipphoney,probing,cisco,conpot
queried_at: 2026-03-11T10:33:14.707287
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.170", "tags": ["LAMP", "ssh", "Honeypot", "sip", "sftp", "Automated", "ipphoney", "probing", "cisco", "conpot", "tanner", "sensor-tagged", "SSH", "heralding", "p0f", "OpenCTI", "cowrie", "honeytrap", "fatt", "2026-02", "Bruteforce", "tpot", "dionaea", "Telnet", "suricata", "mailoney", "attack", "sentrypeer", "scanning", "webscan", "ano


indicator: 185.220.101.130
indicator_type: ipv4
source: otx
country: DE
reverse_dns: vsk.myds.me,mmfff.ddns.net,maillet-ddsm.synology.me
hosting_provider: LAMP,ssh,Honeypot,sip,Automated,sftp,cisco,conpot,tanner,sensor-tagged
queried_at: 2026-03-11T10:33:18.253059
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.130", "tags": ["LAMP", "ssh", "Honeypot", "sip", "Automated", "sftp", "cisco", "conpot", "tanner", "sensor-tagged", "telnet", "Redishoneypot", "SSH", "heralding", "OpenCTI", "p0f", "cowrie", "honeytrap", "fatt", "2026-02", "tpot", "Bruteforce", "dionaea", "suricata", "mailoney", "sentrypeer", "anonymization_network", "Brute-Force", "em


indicator: 185.220.101.174
indicator_type: ipv4
source: otx
country: DE
hosting_provider: LAMP,ssh,Honeypot,sip,sftp,Automated,webscanner,probing,cisco,tanner
queried_at: 2026-03-11T10:33:20.653450
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.174", "tags": ["LAMP", "ssh", "Honeypot", "sip", "sftp", "Automated", "webscanner", "probing", "cisco", "tanner", "sensor-tagged", "badrequest", "Redishoneypot", "SSH", "heralding", "p0f", "OpenCTI", "cowrie", "honeytrap", "fatt", "2026-02", "Bruteforce", "tpot", "dionaea", "bruteforce", "suricata", "monthly", "ciscoasa", "mailoney", "


indicator: 185.220.101.178
indicator_type: ipv4
source: otx
country: DE
hosting_provider: LAMP,ssh,Honeypot,sip,sftp,Automated,webscanner,probing,cisco,tanner
queried_at: 2026-03-11T10:33:34.031338
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.178", "tags": ["LAMP", "ssh", "Honeypot", "sip", "sftp", "Automated", "webscanner", "probing", "cisco", "tanner", "sensor-tagged", "badrequest", "SSH", "heralding", "Adbhoney", "p0f", "OpenCTI", "cowrie", "honeytrap", "fatt", "2026-02", "Bruteforce", "tpot", "dionaea", "bruteforce", "suricata", "monthly", "ciscoasa", "mailoney", "sentr


indicator: 185.220.101.182
indicator_type: ipv4
source: otx
country: DE
reverse_dns: laylaylom15975300.freeddns.org,seed.multidoge.org
hosting_provider: LAMP,ssh,Honeypot,sip,sftp,Automated,probing,cisco,tanner,sensor-tagged
queried_at: 2026-03-11T10:33:47.046919
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.182", "tags": ["LAMP", "ssh", "Honeypot", "sip", "sftp", "Automated", "probing", "cisco", "tanner", "sensor-tagged", "SSH", "heralding", "Adbhoney", "p0f", "OpenCTI", "cowrie", "honeytrap", "fatt", "2026-02", "Bruteforce", "tpot", "dionaea", "suricata", "mailoney", "sentrypeer", "scanning", "webscan", "anonymization_network", "webscann


indicator: 185.220.101.190
indicator_type: ipv4
source: otx
country: DE
hosting_provider: LAMP,ssh,Honeypot,sip,sftp,probing,cisco,tanner,sensor-tagged,SSH
queried_at: 2026-03-11T10:34:00.244531
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.190", "tags": ["LAMP", "ssh", "Honeypot", "sip", "sftp", "probing", "cisco", "tanner", "sensor-tagged", "SSH", "heralding", "Adbhoney", "p0f", "cowrie", "honeytrap", "fatt", "Bruteforce", "tpot", "dionaea", "suricata", "mailoney", "sentrypeer", "scanning", "webscan", "anonymization_network", "Brute-Force", "webscanner, bruteforce, web 


indicator: 185.220.101.176
indicator_type: ipv4
source: otx
country: DE
reverse_dns: device-f03c3d87-f5cb-46b1-830d-f336190402ec.remotewd.com
hosting_provider: LAMP,ssh,Honeypot,sip,sftp,Automated,cisco,tanner,sensor-tagged,telnet
queried_at: 2026-03-11T10:34:02.725774
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.176", "tags": ["LAMP", "ssh", "Honeypot", "sip", "sftp", "Automated", "cisco", "tanner", "sensor-tagged", "telnet", "SSH", "heralding", "Adbhoney", "p0f", "OpenCTI", "cowrie", "honeytrap", "fatt", "2026-02", "Bruteforce", "tpot", "dionaea", "suricata", "monthly", "ciscoasa", "mailoney", "sentrypeer", "anonymization_network", "Brute-For


indicator: 185.220.101.166
indicator_type: ipv4
source: otx
country: DE
hosting_provider: LAMP,ssh,Honeypot,sip,sftp,Automated,probing,cisco,tanner,sensor-tagged
queried_at: 2026-03-11T10:34:18.195524
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.166", "tags": ["LAMP", "ssh", "Honeypot", "sip", "sftp", "Automated", "probing", "cisco", "tanner", "sensor-tagged", "SSH", "heralding", "p0f", "OpenCTI", "cowrie", "honeytrap", "fatt", "2026-02", "Bruteforce", "tpot", "dionaea", "suricata", "mailoney", "sentrypeer", "scanning", "webscan", "anonymization_network", "Brute-Force", "websc


indicator: 185.220.101.157
indicator_type: ipv4
source: otx
country: DE
reverse_dns: hsrulu3.uk.to
hosting_provider: LAMP,ssh,Honeypot,sip,Automated,sftp,probing,cisco,conpot,tanner
queried_at: 2026-03-11T10:34:31.960705
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.157", "tags": ["LAMP", "ssh", "Honeypot", "sip", "Automated", "sftp", "probing", "cisco", "conpot", "tanner", "sensor-tagged", "telnet", "Redishoneypot", "SSH", "heralding", "Adbhoney", "p0f", "OpenCTI", "cowrie", "honeytrap", "fatt", "2026-02", "Bruteforce", "tpot", "dionaea", "suricata", "mailoney", "sentrypeer", "scanning", "webscan


indicator: 185.220.101.173
indicator_type: ipv4
source: otx
country: DE
reverse_dns: btp.myqnapcloud.com
hosting_provider: LAMP,ssh,Honeypot,sip,sftp,Automated,cisco,tanner,sensor-tagged,SSH
queried_at: 2026-03-11T10:34:34.476401
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.173", "tags": ["LAMP", "ssh", "Honeypot", "sip", "sftp", "Automated", "cisco", "tanner", "sensor-tagged", "SSH", "heralding", "Adbhoney", "p0f", "OpenCTI", "cowrie", "honeytrap", "fatt", "2026-02", "Bruteforce", "tpot", "dionaea", "Telnet", "suricata", "mailoney", "attack", "sentrypeer", "anonymization_network", "Brute-Force", "login",


indicator: 185.220.101.154
indicator_type: ipv4
source: otx
country: DE
reverse_dns: servicepoint.duckdns.org
hosting_provider: LAMP,ssh,Honeypot,sip,sftp,Automated,probing,cisco,tanner,sensor-tagged
queried_at: 2026-03-11T10:34:47.944840
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.154", "tags": ["LAMP", "ssh", "Honeypot", "sip", "sftp", "Automated", "probing", "cisco", "tanner", "sensor-tagged", "telnet", "SSH", "heralding", "Adbhoney", "p0f", "OpenCTI", "cowrie", "honeytrap", "fatt", "2026-02", "Bruteforce", "tpot", "dionaea", "suricata", "mailoney", "sentrypeer", "scanning", "webscan", "anonymization_network",


indicator: 195.211.191.31
indicator_type: ipv4
source: abuseipdb
country: NL
city: 2
hosting_provider: Pitline Ltd
queried_at: 2026-03-11T10:34:53.904719
raw_data:
  {"abuse_confidence": 3, "total_reports": 2, "is_public": true, "is_tor": false, "country": "NL", "isp": "Pitline Ltd", "domain": "pitline.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-03-02T16:09:40+00:00", "categories": [18]}


indicator: 37.221.66.86
indicator_type: ipv4
source: abuseipdb
country: MD
city: 0
hosting_provider: ALEXHOST SRL
queried_at: 2026-03-11T10:34:55.880352
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "MD", "isp": "ALEXHOST SRL", "domain": "alexhost.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 195.211.191.198
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: Pitline Ltd
queried_at: 2026-03-11T10:34:59.556712
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "Pitline Ltd", "domain": "pitline.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-04-29T14:34:54+00:00", "categories": []}


indicator: 195.211.191.206
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: Pitline Ltd
queried_at: 2026-03-11T10:35:03.050916
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "Pitline Ltd", "domain": "pitline.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-04-24T21:59:00+00:00", "categories": []}


indicator: 195.211.191.146
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: Pitline Ltd
queried_at: 2026-03-11T10:35:04.811867
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "Pitline Ltd", "domain": "pitline.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-04-12T07:41:29+00:00", "categories": []}


indicator: 195.211.191.248
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: Pitline Ltd
queried_at: 2026-03-11T10:35:06.529869
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "Pitline Ltd", "domain": "pitline.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-08-26T11:19:09+00:00", "categories": []}


indicator: 195.211.191.63
indicator_type: ipv4
source: abuseipdb
country: NL
city: 2
hosting_provider: Pitline Ltd
queried_at: 2026-03-11T10:35:08.287273
raw_data:
  {"abuse_confidence": 3, "total_reports": 2, "is_public": true, "is_tor": false, "country": "NL", "isp": "Pitline Ltd", "domain": "pitline.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-03-02T16:09:41+00:00", "categories": [18]}


indicator: 195.211.191.73
indicator_type: ipv4
source: abuseipdb
country: NL
city: 0
hosting_provider: Pitline Ltd
queried_at: 2026-03-11T10:35:11.748986
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "NL", "isp": "Pitline Ltd", "domain": "pitline.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-04-07T15:00:07+00:00", "categories": []}


indicator: 185.220.101.144
indicator_type: ipv4
source: abuseipdb
country: DE
city: 136
hosting_provider: CIA TRIAD SECURITY LLC
queried_at: 2026-03-11T10:35:17.045347
raw_data:
  {"abuse_confidence": 98, "total_reports": 136, "is_public": true, "is_tor": true, "country": "DE", "isp": "CIA TRIAD SECURITY LLC", "domain": "relayon.org", "usage_type": "Fixed Line ISP", "last_reported": "2026-03-10T11:45:10+00:00", "categories": [3, 4, 7, 9, 10, 11, 13, 14, 15, 17, 18, 19, 20, 21, 22]}


indicator: 185.220.101.137
indicator_type: ipv4
source: abuseipdb
country: DE
city: 156
hosting_provider: CIA TRIAD SECURITY LLC
queried_at: 2026-03-11T10:35:18.764578
raw_data:
  {"abuse_confidence": 100, "total_reports": 156, "is_public": true, "is_tor": true, "country": "DE", "isp": "CIA TRIAD SECURITY LLC", "domain": "relayon.org", "usage_type": "Fixed Line ISP", "last_reported": "2026-03-11T12:17:08+00:00", "categories": [4, 5, 7, 9, 10, 11, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23]}


indicator: 185.220.101.145
indicator_type: ipv4
source: abuseipdb
country: DE
city: 147
hosting_provider: CIA TRIAD SECURITY LLC
queried_at: 2026-03-11T10:35:20.540010
raw_data:
  {"abuse_confidence": 100, "total_reports": 147, "is_public": true, "is_tor": true, "country": "DE", "isp": "CIA TRIAD SECURITY LLC", "domain": "relayon.org", "usage_type": "Fixed Line ISP", "last_reported": "2026-03-11T08:25:39+00:00", "categories": [3, 4, 5, 7, 9, 10, 11, 13, 14, 15, 17, 18, 19, 20, 21, 22]}


indicator: 185.220.101.189
indicator_type: ipv4
source: abuseipdb
country: DE
city: 58
hosting_provider: CIA TRIAD SECURITY LLC
queried_at: 2026-03-11T10:35:22.248227
raw_data:
  {"abuse_confidence": 100, "total_reports": 58, "is_public": true, "is_tor": true, "country": "DE", "isp": "CIA TRIAD SECURITY LLC", "domain": "relayon.org", "usage_type": "Fixed Line ISP", "last_reported": "2026-03-10T15:00:26+00:00", "categories": [4, 10, 14, 15, 16, 18, 19, 20, 21, 22]}


indicator: 176.65.146.125
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: SkyLink Data Center BV
queried_at: 2026-03-11T10:35:24.609455
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "DE", "as_owner": "SkyLink Data Center BV", "asn": 44592, "network": "176.65.146.0/23", "last_analysis_date": 1747638609}


indicator: 195.211.191.188
indicator_type: ipv4
source: virustotal
country: UA
hosting_provider: Hbing Limited
queried_at: 2026-03-11T10:35:45.307072
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 58, "undetected": 36, "reputation": 0, "country": "UA", "as_owner": "Hbing Limited", "asn": 208949, "network": "195.211.191.0/24", "last_analysis_date": 1762786236}


indicator: 195.211.191.249
indicator_type: ipv4
source: virustotal
country: UA
hosting_provider: Hbing Limited
queried_at: 2026-03-11T10:36:05.804597
raw_data:
  {"malicious": 1, "suspicious": 0, "harmless": 59, "undetected": 34, "reputation": 0, "country": "UA", "as_owner": "Hbing Limited", "asn": 208949, "network": "195.211.191.0/24", "last_analysis_date": 1747050379}


indicator: 195.211.191.31
indicator_type: ipv4
source: virustotal
country: UA
hosting_provider: Hbing Limited
queried_at: 2026-03-11T10:36:26.279993
raw_data:
  {"malicious": 1, "suspicious": 1, "harmless": 59, "undetected": 33, "reputation": -1, "country": "UA", "as_owner": "Hbing Limited", "asn": 208949, "network": "195.211.191.0/24", "last_analysis_date": 1766609797}


indicator: 37.221.66.86
indicator_type: ipv4
source: virustotal
country: MD
hosting_provider: Ava Host Srl
queried_at: 2026-03-11T10:36:46.564797
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "MD", "as_owner": "Ava Host Srl", "asn": 48753, "network": "37.221.66.0/24", "last_analysis_date": ""}


indicator: 37.221.66.74
indicator_type: ipv4
source: virustotal
country: MD
hosting_provider: Ava Host Srl
queried_at: 2026-03-11T10:37:06.955406
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "MD", "as_owner": "Ava Host Srl", "asn": 48753, "network": "37.221.66.0/24", "last_analysis_date": 1767965489}


indicator: 195.211.191.198
indicator_type: ipv4
source: virustotal
country: UA
hosting_provider: Hbing Limited
queried_at: 2026-03-11T10:37:27.505252
raw_data:
  {"malicious": 0, "suspicious": 1, "harmless": 57, "undetected": 36, "reputation": 0, "country": "UA", "as_owner": "Hbing Limited", "asn": 208949, "network": "195.211.191.0/24", "last_analysis_date": 1772925352}


indicator: 176.65.146.34
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: SkyLink Data Center BV
queried_at: 2026-03-11T10:37:48.040120
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "DE", "as_owner": "SkyLink Data Center BV", "asn": 44592, "network": "176.65.146.0/23", "last_analysis_date": 1687220890}


indicator: 195.211.191.206
indicator_type: ipv4
source: virustotal
country: UA
hosting_provider: Hbing Limited
queried_at: 2026-03-11T10:38:08.409477
raw_data:
  {"malicious": 0, "suspicious": 1, "harmless": 57, "undetected": 36, "reputation": 0, "country": "UA", "as_owner": "Hbing Limited", "asn": 208949, "network": "195.211.191.0/24", "last_analysis_date": 1772431050}


indicator: 195.211.191.146
indicator_type: ipv4
source: virustotal
country: UA
hosting_provider: Hbing Limited
queried_at: 2026-03-11T10:38:29.769052
raw_data:
  {"malicious": 3, "suspicious": 0, "harmless": 59, "undetected": 32, "reputation": 0, "country": "UA", "as_owner": "Hbing Limited", "asn": 208949, "network": "195.211.191.0/24", "last_analysis_date": 1747050380}


indicator: 185.220.101.139
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:38:50.350381
raw_data:
  {"count": 100, "attacks": 36, "maxdate": "2026-03-07", "mindate": "2025-05-16", "updated": "2026-03-08 10:35:04", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-06", "firstseen": "2025-02-04"}, "blocklistde22": {"lastseen": "2026-03-06", "firstseen": "2020-03-17"}, "emergincompromised": {"lastseen": "2026-03-06", "firstseen": "2020-0


indicator: 185.220.101.134
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:38:51.687383
raw_data:
  {"count": 34, "attacks": 9, "maxdate": "2026-03-10", "mindate": "2026-02-06", "updated": "2026-03-11 09:40:50", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-06", "firstseen": "2025-02-04"}, "blocklistde110": {"lastseen": "2026-03-06", "firstseen": "2020-12-31"}, "blocklistde143": {"lastseen": "2026-03-06", "firstseen": "2020-12-31"


indicator: 185.220.101.167
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:38:53.035491
raw_data:
  {"count": 23, "attacks": 8, "maxdate": "2026-03-11", "mindate": "2026-01-30", "updated": "2026-03-11 11:23:06", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-05", "firstseen": "2025-02-04"}, "blocklistde110": {"lastseen": "2026-03-05", "firstseen": "2021-12-21"}, "blocklistde143": {"lastseen": "2026-03-05", "firstseen": "2021-12-21"


indicator: 185.220.101.151
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:38:54.412826
raw_data:
  {"count": 24, "attacks": 7, "maxdate": "2026-03-03", "mindate": "2026-01-21", "updated": "2026-03-03 07:58:18", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-03", "firstseen": "2025-02-04"}, "blocklistde110": {"lastseen": "2026-03-03", "firstseen": "2025-04-03"}, "blocklistde143": {"lastseen": "2026-03-03", "firstseen": "2025-04-03"


indicator: 185.220.101.185
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:38:55.758923
raw_data:
  {"count": 314, "attacks": 35, "maxdate": "2026-03-10", "mindate": "2024-12-31", "updated": "2026-03-10 21:26:02", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-06", "firstseen": "2025-02-04"}, "blocklistde22": {"lastseen": "2026-03-06", "firstseen": "2021-12-02"}, "blocklistde443": {"lastseen": "2026-03-06", "firstseen": "2021-12-22


indicator: 185.220.101.164
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:38:57.118739
raw_data:
  {"count": 120, "attacks": 23, "maxdate": "2026-03-11", "mindate": "2023-01-14", "updated": "2026-03-11 11:14:55", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-05", "firstseen": "2025-02-04"}, "blocklistde22": {"lastseen": "2026-03-05", "firstseen": "2020-04-12"}, "blocklistde443": {"lastseen": "2026-03-05", "firstseen": "2021-12-22


indicator: 185.220.101.158
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:38:58.480943
raw_data:
  {"count": 1, "attacks": 1, "maxdate": "2026-01-28", "mindate": "2026-01-28", "updated": "2026-01-28 21:24:28", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-01-28", "firstseen": "2025-02-04"}, "blocklistde110": {"lastseen": "2026-01-28", "firstseen": "2021-12-11"}, "blocklistde143": {"lastseen": "2026-01-28", "firstseen": "2021-12-11"}


indicator: 185.220.101.147
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:38:59.822861
raw_data:
  {"count": 133, "attacks": 28, "maxdate": "2026-03-11", "mindate": "2023-04-08", "updated": "2026-03-11 11:33:17", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-06", "firstseen": "2025-02-04"}, "blocklistde22": {"lastseen": "2026-03-06", "firstseen": "2022-02-21"}, "blocklistde443": {"lastseen": "2026-03-06", "firstseen": "2020-07-16


indicator: 185.220.101.142
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:39:01.166511
raw_data:
  {"count": 21, "attacks": 8, "maxdate": "2026-03-07", "mindate": "2026-01-25", "updated": "2026-03-07 19:01:33", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-06", "firstseen": "2025-02-04"}, "blocklistde22": {"lastseen": "2026-03-06", "firstseen": "2020-03-17"}, "emergincompromised": {"lastseen": "2026-03-06", "firstseen": "2024-03-


indicator: 185.220.101.188
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T10:39:02.519640
raw_data:
  {"count": 106, "attacks": 27, "maxdate": "2026-03-08", "mindate": "2023-01-14", "updated": "2026-03-08 15:58:04", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-05", "firstseen": "2025-02-04"}, "blocklistde22": {"lastseen": "2026-03-05", "firstseen": "2021-12-02"}, "blocklistde443": {"lastseen": "2026-03-05", "firstseen": "2021-12-17


indicator: 185.220.101.175
indicator_type: ipv4
source: otx
country: DE
hosting_provider: sentrypeer,Honeypot,tpot,cowrie,dionaea,2026-02,probing,sftp,scanning,OpenCTI
queried_at: 2026-03-11T10:40:32.473361
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.175", "tags": ["sentrypeer", "Honeypot", "tpot", "cowrie", "dionaea", "2026-02", "probing", "sftp", "scanning", "OpenCTI", "heralding", "webscan", "email", "ssh", "LAMP", "p0f", "fatt", "SSH", "Automated", "malicious", "Bruteforce", "Redishoneypot", "honeypot", "Brute-Force", "sensor-tagged", "sip", "mailoney", "honeytrap", "anonymizat


indicator: 185.220.101.165
indicator_type: ipv4
source: otx
country: DE
hosting_provider: sentrypeer,Honeypot,cowrie,tpot,dionaea,2026-02,probing,sftp,scanning,Adbhoney
queried_at: 2026-03-11T10:40:45.810870
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.165", "tags": ["sentrypeer", "Honeypot", "cowrie", "tpot", "dionaea", "2026-02", "probing", "sftp", "scanning", "Adbhoney", "OpenCTI", "heralding", "webscan", "email", "ssh", "LAMP", "p0f", "fatt", "SSH", "Automated", "malicious", "Bruteforce", "honeypot", "Brute-Force", "sip", "sensor-tagged", "mailoney", "honeytrap", "anonymization_n


indicator: 185.220.101.191
indicator_type: ipv4
source: otx
country: DE
hosting_provider: sentrypeer,Honeypot,tpot,cowrie,dionaea,2026-02,probing,scanning,OpenCTI,monthly
queried_at: 2026-03-11T10:40:59.734748
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.191", "tags": ["sentrypeer", "Honeypot", "tpot", "cowrie", "dionaea", "2026-02", "probing", "scanning", "OpenCTI", "monthly", "dugganusa", "webscan", "ciscoasa", "telnet", "ssh", "p0f", "fatt", "SSH", "Automated", "Bruteforce", "honeypot", "Brute-Force", "sensor-tagged", "mailoney", "honeytrap", "anonymization_network", "threat-intel",


indicator: 185.220.101.129
indicator_type: ipv4
source: otx
country: DE
hosting_provider: webscanner,sentrypeer,Honeypot,cowrie,tpot,dionaea,2026-02,probing,sftp,scanning
queried_at: 2026-03-11T10:41:14.279397
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.129", "tags": ["webscanner", "sentrypeer", "Honeypot", "cowrie", "tpot", "dionaea", "2026-02", "probing", "sftp", "scanning", "OpenCTI", "heralding", "bruteforce", "webscan", "email", "ssh", "LAMP", "p0f", "fatt", "SSH", "Automated", "malicious", "Bruteforce", "badrequest", "honeypot", "Brute-Force", "sip", "sensor-tagged", "mailoney",


indicator: 185.220.101.146
indicator_type: ipv4
source: otx
country: DE
reverse_dns: rst.mine.bz
hosting_provider: sentrypeer,Honeypot,cowrie,tpot,dionaea,probing,sftp,scanning,heralding,monthly
queried_at: 2026-03-11T10:41:31.518922
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.146", "tags": ["sentrypeer", "Honeypot", "cowrie", "tpot", "dionaea", "probing", "sftp", "scanning", "heralding", "monthly", "webscan", "email", "ciscoasa", "telnet", "ssh", "LAMP", "p0f", "fatt", "SSH", "malicious", "Bruteforce", "honeypot", "Brute-Force", "sip", "sensor-tagged", "mailoney", "honeytrap", "anonymization_network", "elas


indicator: 185.220.101.163
indicator_type: ipv4
source: otx
country: DE
hosting_provider: webscanner,sentrypeer,Honeypot,cowrie,tpot,dionaea,probing,sftp,scanning,Adbhoney
queried_at: 2026-03-11T10:41:45.437882
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.163", "tags": ["webscanner", "sentrypeer", "Honeypot", "cowrie", "tpot", "dionaea", "probing", "sftp", "scanning", "Adbhoney", "heralding", "bruteforce", "webscan", "email", "ssh", "LAMP", "p0f", "fatt", "SSH", "malicious", "Bruteforce", "badrequest", "honeypot", "Brute-Force", "sip", "sensor-tagged", "mailoney", "honeytrap", "anonymiz


indicator: 185.220.101.171
indicator_type: ipv4
source: otx
country: DE
hosting_provider: webscanner,sentrypeer,Honeypot,cowrie,tpot,dionaea,2026-02,probing,sftp,scanning
queried_at: 2026-03-11T10:42:15.898876
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.171", "tags": ["webscanner", "sentrypeer", "Honeypot", "cowrie", "tpot", "dionaea", "2026-02", "probing", "sftp", "scanning", "OpenCTI", "heralding", "monthly", "bruteforce", "webscan", "email", "ciscoasa", "MISP", "ssh", "LAMP", "p0f", "fatt", "SSH", "SSH Bruteforce", "Automated", "malicious", "Bruteforce", "badrequest", "honeypot", "


indicator: 185.220.101.184
indicator_type: ipv4
source: otx
country: DE
hosting_provider: webscanner,sentrypeer,Honeypot,tpot,cowrie,dionaea,probing,sftp,scanning,heralding
queried_at: 2026-03-11T10:42:29.971265
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.184", "tags": ["webscanner", "sentrypeer", "Honeypot", "tpot", "cowrie", "dionaea", "probing", "sftp", "scanning", "heralding", "bruteforce", "webscan", "email", "ssh", "LAMP", "p0f", "fatt", "SSH", "malicious", "Bruteforce", "badrequest", "ipphoney", "honeypot", "Brute-Force", "sensor-tagged", "sip", "mailoney", "honeytrap", "anonymiz


indicator: 185.220.101.131
indicator_type: ipv4
source: otx
country: DE
hosting_provider: sentrypeer,Honeypot,cowrie,dionaea,2026-02,Telnet,sftp,Adbhoney,OpenCTI,github
queried_at: 2026-03-11T10:42:32.560348
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.131", "tags": ["sentrypeer", "Honeypot", "cowrie", "dionaea", "2026-02", "Telnet", "sftp", "Adbhoney", "OpenCTI", "github", "heralding", "infostealer", "scanner", "dugganusa", "rhadamanthys", "email", "stix-2.1", "attack", "threat-intelligence", "ssh", "isp-reputation", "LAMP", "supply-chain", "SSH", "stealc", "Automated", "malicious",


indicator: 185.220.101.128
indicator_type: ipv4
source: otx
country: DE
hosting_provider: sentrypeer,tpot,cowrie,dionaea,sftp,heralding,bruteforce,email,ssh,LAMP
queried_at: 2026-03-11T10:42:34.369662
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.128", "tags": ["sentrypeer", "tpot", "cowrie", "dionaea", "sftp", "heralding", "bruteforce", "email", "ssh", "LAMP", "p0f", "fatt", "malicious", "honeypot", "sensor-tagged", "sip", "mailoney", "honeytrap", "anonymization_network", "elasticpot", "cisco", "suricata", "tanner"], "pulses": ["LCIA HoneyNet Data - March 2026 - H0neytr4p", "H


indicator: 185.220.101.140
indicator_type: ipv4
source: otx
country: DE
hosting_provider: sentrypeer,Honeypot,cowrie,tpot,dionaea,2026-02,sftp,Adbhoney,OpenCTI,heralding
queried_at: 2026-03-11T10:42:36.525931
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.140", "tags": ["sentrypeer", "Honeypot", "cowrie", "tpot", "dionaea", "2026-02", "sftp", "Adbhoney", "OpenCTI", "heralding", "email", "ssh", "LAMP", "p0f", "fatt", "SSH", "Automated", "malicious", "Bruteforce", "honeypot", "Brute-Force", "sip", "sensor-tagged", "mailoney", "honeytrap", "anonymization_network", "elasticpot", "cisco", "s


indicator: 185.220.101.183
indicator_type: ipv4
source: otx
country: DE
hosting_provider: sentrypeer,Honeypot,cowrie,tpot,dionaea,2026-02,probing,sftp,scanning,OpenCTI
queried_at: 2026-03-11T10:42:51.846597
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.183", "tags": ["sentrypeer", "Honeypot", "cowrie", "tpot", "dionaea", "2026-02", "probing", "sftp", "scanning", "OpenCTI", "heralding", "webscan", "email", "ssh", "LAMP", "p0f", "fatt", "SSH", "Automated", "malicious", "Bruteforce", "ipphoney", "honeypot", "Brute-Force", "sip", "sensor-tagged", "mailoney", "honeytrap", "anonymization_n


indicator: 185.220.101.180
indicator_type: ipv4
source: otx
country: DE
reverse_dns: seed.multidoge.org
hosting_provider: sentrypeer,Honeypot,cowrie,tpot,dionaea,2026-02,probing,sftp,scanning,OpenCTI
queried_at: 2026-03-11T10:43:14.877054
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.180", "tags": ["sentrypeer", "Honeypot", "cowrie", "tpot", "dionaea", "2026-02", "probing", "sftp", "scanning", "OpenCTI", "heralding", "webscan", "email", "telnet", "ssh", "LAMP", "p0f", "fatt", "SSH", "Automated", "malicious", "Bruteforce", "honeypot", "Brute-Force", "sip", "sensor-tagged", "mailoney", "honeytrap", "anonymization_net


indicator: 185.220.101.161
indicator_type: ipv4
source: otx
country: DE
hosting_provider: sentrypeer,Honeypot,cowrie,tpot,dionaea,2026-02,probing,sftp,scanning,Adbhoney
queried_at: 2026-03-11T10:43:28.722536
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.161", "tags": ["sentrypeer", "Honeypot", "cowrie", "tpot", "dionaea", "2026-02", "probing", "sftp", "scanning", "Adbhoney", "OpenCTI", "heralding", "monthly", "webscan", "email", "ciscoasa", "ssh", "LAMP", "p0f", "fatt", "SSH", "Automated", "malicious", "Bruteforce", "honeypot", "Brute-Force", "sip", "sensor-tagged", "mailoney", "honey


indicator: 185.220.101.156
indicator_type: ipv4
source: otx
country: DE
hosting_provider: sentrypeer,Honeypot,cowrie,tpot,dionaea,2026-02,sftp,OpenCTI,heralding,monthly
queried_at: 2026-03-11T10:43:34.978081
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.156", "tags": ["sentrypeer", "Honeypot", "cowrie", "tpot", "dionaea", "2026-02", "sftp", "OpenCTI", "heralding", "monthly", "email", "ciscoasa", "ssh", "LAMP", "p0f", "fatt", "SSH", "Automated", "malicious", "Bruteforce", "Redishoneypot", "honeypot", "Brute-Force", "sip", "sensor-tagged", "mailoney", "honeytrap", "anonymization_network


indicator: 185.220.101.169
indicator_type: ipv4
source: otx
country: DE
hosting_provider: webscanner,sentrypeer,Honeypot,cowrie,tpot,dionaea,2026-02,probing,sftp,scanning
queried_at: 2026-03-11T10:43:49.120841
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.169", "tags": ["webscanner", "sentrypeer", "Honeypot", "cowrie", "tpot", "dionaea", "2026-02", "probing", "sftp", "scanning", "OpenCTI", "heralding", "bruteforce", "webscan", "email", "ssh", "LAMP", "p0f", "fatt", "SSH", "Automated", "malicious", "Bruteforce", "badrequest", "honeypot", "Brute-Force", "sip", "sensor-tagged", "mailoney",


indicator: 185.220.101.160
indicator_type: ipv4
source: otx
country: DE
hosting_provider: webscanner,sentrypeer,Honeypot,cowrie,tpot,dionaea,2026-02,probing,sftp,OpenCTI
queried_at: 2026-03-11T10:43:51.752645
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.160", "tags": ["webscanner", "sentrypeer", "Honeypot", "cowrie", "tpot", "dionaea", "2026-02", "probing", "sftp", "OpenCTI", "heralding", "bruteforce", "webscan", "email", "ssh", "LAMP", "p0f", "fatt", "SSH", "Automated", "malicious", "Bruteforce", "badrequest", "Redishoneypot", "honeypot", "Brute-Force", "sip", "sensor-tagged", "mailo


indicator: 185.220.101.181
indicator_type: ipv4
source: otx
country: DE
hosting_provider: honeypot,sensor-tagged,sentrypeer,tpot,cowrie,honeytrap,dionaea,mailoney,sftp,ssh
queried_at: 2026-03-11T10:43:53.598615
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.181", "tags": ["honeypot", "sensor-tagged", "sentrypeer", "tpot", "cowrie", "honeytrap", "dionaea", "mailoney", "sftp", "ssh", "suricata", "LAMP", "p0f", "fatt", "anonymization_network", "tanner", "malicious"], "pulses": ["PurpleSynapz", "Honeypot Data \u2013 T-Pot - Sydney, Australia - February 2026", "LCIA HoneyNet Data - March 2026 


indicator: 185.220.101.187
indicator_type: ipv4
source: otx
country: DE
hosting_provider: sentrypeer,Honeypot,cowrie,tpot,dionaea,probing,Telnet,scanning,sftp,Adbhoney
queried_at: 2026-03-11T10:44:07.022701
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.187", "tags": ["sentrypeer", "Honeypot", "cowrie", "tpot", "dionaea", "probing", "Telnet", "scanning", "sftp", "Adbhoney", "heralding", "scanner", "webscan", "email", "attack", "ssh", "LAMP", "p0f", "fatt", "SSH", "malicious", "Bruteforce", "Redishoneypot", "honeypot", "Brute-Force", "sip", "sensor-tagged", "mailoney", "honeytrap", "el


indicator: 185.220.101.133
indicator_type: ipv4
source: otx
country: DE
reverse_dns: seed.nu.crypto-daio.co.uk
hosting_provider: webscanner,sentrypeer,Honeypot,cowrie,tpot,dionaea,2026-02,probing,sftp,OpenCTI
queried_at: 2026-03-11T10:44:09.437994
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.133", "tags": ["webscanner", "sentrypeer", "Honeypot", "cowrie", "tpot", "dionaea", "2026-02", "probing", "sftp", "OpenCTI", "heralding", "bruteforce", "webscan", "email", "ssh", "LAMP", "p0f", "fatt", "SSH", "Automated", "malicious", "Bruteforce", "badrequest", "honeypot", "Brute-Force", "sip", "sensor-tagged", "mailoney", "honeytrap"


indicator: 185.220.101.139
indicator_type: ipv4
source: otx
country: DE
reverse_dns: afheaog88.eu.org,seed.multidoge.org,seed.nu.crypto-daio.co.uk
hosting_provider: sentrypeer,Honeypot,cowrie,tpot,dionaea,2026-02,probing,sftp,scanning,Adbhoney
queried_at: 2026-03-11T10:44:24.368021
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.139", "tags": ["sentrypeer", "Honeypot", "cowrie", "tpot", "dionaea", "2026-02", "probing", "sftp", "scanning", "Adbhoney", "OpenCTI", "heralding", "webscan", "email", "ssh", "LAMP", "p0f", "fatt", "SSH", "Automated", "malicious", "Bruteforce", "honeypot", "Brute-Force", "sip", "sensor-tagged", "mailoney", "honeytrap", "anonymization_n


indicator: 185.220.101.134
indicator_type: ipv4
source: otx
country: DE
hosting_provider: sentrypeer,Honeypot,cowrie,tpot,dionaea,probing,sftp,scanning,heralding,dugganusa
queried_at: 2026-03-11T10:44:40.665375
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.134", "tags": ["sentrypeer", "Honeypot", "cowrie", "tpot", "dionaea", "probing", "sftp", "scanning", "heralding", "dugganusa", "webscan", "email", "ssh", "LAMP", "p0f", "fatt", "SSH", "malicious", "Bruteforce", "honeypot", "Brute-Force", "sip", "sensor-tagged", "mailoney", "honeytrap", "anonymization_network", "elasticpot", "cisco", "t


indicator: 185.220.101.167
indicator_type: ipv4
source: otx
country: DE
reverse_dns: lubalinas.direct.quickconnect.to,serveur-nas1.synology.me
hosting_provider: sentrypeer,Honeypot,cowrie,tpot,dionaea,probing,sftp,scanning,heralding,webscan
queried_at: 2026-03-11T10:44:54.148265
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.167", "tags": ["sentrypeer", "Honeypot", "cowrie", "tpot", "dionaea", "probing", "sftp", "scanning", "heralding", "webscan", "email", "ssh", "LAMP", "p0f", "fatt", "SSH", "malicious", "Bruteforce", "honeypot", "Brute-Force", "sip", "sensor-tagged", "mailoney", "honeytrap", "anonymization_network", "elasticpot", "cisco", "suricata", "we


indicator: 185.220.101.151
indicator_type: ipv4
source: otx
country: DE
hosting_provider: sentrypeer,Honeypot,cowrie,tpot,dionaea,2026-02,probing,sftp,scanning,OpenCTI
queried_at: 2026-03-11T10:45:07.651473
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.151", "tags": ["sentrypeer", "Honeypot", "cowrie", "tpot", "dionaea", "2026-02", "probing", "sftp", "scanning", "OpenCTI", "heralding", "monthly", "webscan", "email", "ciscoasa", "ssh", "LAMP", "p0f", "fatt", "SSH", "Automated", "malicious", "Bruteforce", "ipphoney", "honeypot", "Brute-Force", "sip", "sensor-tagged", "mailoney", "honey


indicator: 185.220.101.185
indicator_type: ipv4
source: otx
country: DE
reverse_dns: huojianqianming.com
hosting_provider: sentrypeer,Honeypot,tpot,cowrie,dionaea,2026-02,probing,sftp,scanning,OpenCTI
queried_at: 2026-03-11T10:45:21.993490
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.185", "tags": ["sentrypeer", "Honeypot", "tpot", "cowrie", "dionaea", "2026-02", "probing", "sftp", "scanning", "OpenCTI", "heralding", "webscan", "email", "ssh", "LAMP", "p0f", "fatt", "SSH", "Automated", "malicious", "Bruteforce", "Redishoneypot", "honeypot", "Brute-Force", "sensor-tagged", "sip", "mailoney", "honeytrap", "anonymizat


indicator: 185.220.101.164
indicator_type: ipv4
source: otx
country: DE
reverse_dns: cdn.dianshiji.cf,www.dianshiji.cf
hosting_provider: sentrypeer,Honeypot,cowrie,tpot,dionaea,2026-02,probing,sftp,scanning,Telnet
queried_at: 2026-03-11T10:45:35.918597
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.164", "tags": ["sentrypeer", "Honeypot", "cowrie", "tpot", "dionaea", "2026-02", "probing", "sftp", "scanning", "Telnet", "OpenCTI", "heralding", "monthly", "scanner", "webscan", "email", "ciscoasa", "attack", "ssh", "LAMP", "p0f", "fatt", "SSH", "Automated", "malicious", "Bruteforce", "honeypot", "Brute-Force", "sip", "sensor-tagged",


indicator: 185.220.101.158
indicator_type: ipv4
source: otx
country: DE
reverse_dns: knutsilen21.direct.quickconnect.to
hosting_provider: sentrypeer,Honeypot,cowrie,dionaea,probing,sftp,scanning,Adbhoney,heralding,webscan
queried_at: 2026-03-11T10:45:49.278962
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.158", "tags": ["sentrypeer", "Honeypot", "cowrie", "dionaea", "probing", "sftp", "scanning", "Adbhoney", "heralding", "webscan", "ssh", "LAMP", "SSH", "malicious", "Bruteforce", "tor", "honeypot", "Brute-Force", "sip", "honeytrap", "cisco", "tor exit node", "webscanner, bruteforce, web app attack", "tanner"], "pulses": ["Webscanners 20


indicator: 185.220.101.147
indicator_type: ipv4
source: otx
country: DE
hosting_provider: sentrypeer,Honeypot,cowrie,tpot,dionaea,2026-02,probing,sftp,scanning,OpenCTI
queried_at: 2026-03-11T10:46:02.619109
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.147", "tags": ["sentrypeer", "Honeypot", "cowrie", "tpot", "dionaea", "2026-02", "probing", "sftp", "scanning", "OpenCTI", "heralding", "webscan", "email", "ssh", "LAMP", "p0f", "fatt", "SSH", "Automated", "malicious", "Bruteforce", "Redishoneypot", "honeypot", "Brute-Force", "sensor-tagged", "sip", "mailoney", "honeytrap", "anonymizat


indicator: 185.220.101.142
indicator_type: ipv4
source: otx
country: DE
reverse_dns: db8f.duckdns.org
hosting_provider: Bruteforce,cisco,Brute-Force,Honeypot,cowrie,honeytrap,dionaea,2026-02,sftp,ssh
queried_at: 2026-03-11T10:46:05.104465
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.142", "tags": ["Bruteforce", "cisco", "Brute-Force", "Honeypot", "cowrie", "honeytrap", "dionaea", "2026-02", "sftp", "ssh", "LAMP", "OpenCTI", "anonymization_network", "SSH", "Automated", "malicious"], "pulses": ["SSH Brute-Force Honeypot Live", "LCIA HoneyNet Data - March 2026 - Cowrie", "Honeypot Data - March 2026 - Cowrie", "LCIA H


indicator: 185.220.101.188
indicator_type: ipv4
source: otx
country: DE
reverse_dns: www.overshot.loseyourip.com
hosting_provider: sentrypeer,Honeypot,cowrie,tpot,dionaea,2026-02,probing,sftp,scanning,OpenCTI
queried_at: 2026-03-11T10:46:18.708973
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.188", "tags": ["sentrypeer", "Honeypot", "cowrie", "tpot", "dionaea", "2026-02", "probing", "sftp", "scanning", "OpenCTI", "heralding", "webscan", "email", "telnet", "ssh", "LAMP", "p0f", "fatt", "SSH", "Automated", "malicious", "Bruteforce", "honeypot", "Brute-Force", "sip", "sensor-tagged", "mailoney", "honeytrap", "anonymization_net


indicator: 185.220.101.132
indicator_type: ipv4
source: otx
country: DE
reverse_dns: vsk.myds.me,polaeltd.3cx.com.tr
hosting_provider: sentrypeer,Honeypot,cowrie,tpot,dionaea,2026-02,sftp,OpenCTI,heralding,email
queried_at: 2026-03-11T10:46:21.267052
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.132", "tags": ["sentrypeer", "Honeypot", "cowrie", "tpot", "dionaea", "2026-02", "sftp", "OpenCTI", "heralding", "email", "telnet", "ssh", "LAMP", "p0f", "fatt", "SSH", "Automated", "malicious", "Bruteforce", "Redishoneypot", "honeypot", "Brute-Force", "sip", "sensor-tagged", "mailoney", "honeytrap", "2026-01", "anonymization_network",


indicator: 185.220.101.159
indicator_type: ipv4
source: otx
country: DE
hosting_provider: sentrypeer,Honeypot,cowrie,tpot,dionaea,probing,sftp,scanning,heralding,webscan
queried_at: 2026-03-11T10:46:35.144269
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.159", "tags": ["sentrypeer", "Honeypot", "cowrie", "tpot", "dionaea", "probing", "sftp", "scanning", "heralding", "webscan", "email", "ssh", "LAMP", "p0f", "fatt", "SSH", "malicious", "Bruteforce", "honeypot", "Brute-Force", "sip", "sensor-tagged", "mailoney", "honeytrap", "anonymization_network", "elasticpot", "cisco", "suricata", "we


indicator: 185.220.101.150
indicator_type: ipv4
source: otx
country: DE
reverse_dns: avdel-ds420j-001.direct.quickconnect.to,seed.multidoge.org
hosting_provider: sentrypeer,Honeypot,cowrie,tpot,dionaea,2026-02,probing,sftp,scanning,Adbhoney
queried_at: 2026-03-11T10:46:49.037115
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.150", "tags": ["sentrypeer", "Honeypot", "cowrie", "tpot", "dionaea", "2026-02", "probing", "sftp", "scanning", "Adbhoney", "OpenCTI", "heralding", "webscan", "email", "ssh", "LAMP", "p0f", "fatt", "SSH", "Automated", "malicious", "Bruteforce", "honeypot", "Brute-Force", "sensor-tagged", "sip", "mailoney", "honeytrap", "anonymization_n


indicator: 185.220.101.143
indicator_type: ipv4
source: otx
country: DE
hosting_provider: sentrypeer,tpot,Honeypot,cowrie,dionaea,2026-02,sftp,OpenCTI,heralding,email
queried_at: 2026-03-11T10:46:52.403390
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.143", "tags": ["sentrypeer", "tpot", "Honeypot", "cowrie", "dionaea", "2026-02", "sftp", "OpenCTI", "heralding", "email", "ssh", "LAMP", "p0f", "fatt", "SSH", "Automated", "malicious", "Bruteforce", "Redishoneypot", "honeypot", "Brute-Force", "sensor-tagged", "sip", "mailoney", "honeytrap", "2026-01", "anonymization_network", "elasticp


indicator: 185.220.101.168
indicator_type: ipv4
source: otx
country: DE
hosting_provider: sentrypeer,Honeypot,cowrie,tpot,dionaea,2026-02,sftp,OpenCTI,heralding,email
queried_at: 2026-03-11T10:46:55.200206
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.168", "tags": ["sentrypeer", "Honeypot", "cowrie", "tpot", "dionaea", "2026-02", "sftp", "OpenCTI", "heralding", "email", "ssh", "LAMP", "p0f", "fatt", "SSH", "Automated", "malicious", "Bruteforce", "honeypot", "Brute-Force", "sip", "sensor-tagged", "mailoney", "honeytrap", "anonymization_network", "elasticpot", "cisco", "suricata", "t


indicator: 185.220.101.152
indicator_type: ipv4
source: otx
country: DE
reverse_dns: diweoy302.gw.to
hosting_provider: sentrypeer,Honeypot,cowrie,tpot,dionaea,2026-02,sftp,Adbhoney,OpenCTI,heralding
queried_at: 2026-03-11T10:46:57.951174
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.152", "tags": ["sentrypeer", "Honeypot", "cowrie", "tpot", "dionaea", "2026-02", "sftp", "Adbhoney", "OpenCTI", "heralding", "email", "ssh", "LAMP", "p0f", "fatt", "SSH", "Automated", "malicious", "Bruteforce", "honeypot", "Brute-Force", "sensor-tagged", "sip", "mailoney", "honeytrap", "anonymization_network", "cisco", "suricata", "tan


indicator: 185.220.101.177
indicator_type: ipv4
source: otx
country: DE
hosting_provider: sentrypeer,tpot,cowrie,dionaea,probing,sftp,scanning,heralding,monthly,webscan
queried_at: 2026-03-11T10:47:11.060597
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS208294 cia triad security llc", "indicator": "185.220.101.177", "tags": ["sentrypeer", "tpot", "cowrie", "dionaea", "probing", "sftp", "scanning", "heralding", "monthly", "webscan", "email", "ciscoasa", "ssh", "LAMP", "p0f", "fatt", "malicious", "honeypot", "sensor-tagged", "sip", "mailoney", "honeytrap", "anonymization_network", "elasticpot", "cisco", "suricata", "webscanner, bruteforce, web


indicator: 185.220.101.138
indicator_type: ipv4
source: abuseipdb
country: DE
city: 146
hosting_provider: CIA TRIAD SECURITY LLC
queried_at: 2026-03-11T10:47:12.042275
raw_data:
  {"abuse_confidence": 100, "total_reports": 146, "is_public": true, "is_tor": true, "country": "DE", "isp": "CIA TRIAD SECURITY LLC", "domain": "relayon.org", "usage_type": "Fixed Line ISP", "last_reported": "2026-03-10T12:38:15+00:00", "categories": [4, 7, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22]}


indicator: 185.220.101.186
indicator_type: ipv4
source: abuseipdb
country: DE
city: 161
hosting_provider: CIA TRIAD SECURITY LLC
queried_at: 2026-03-11T10:47:13.717971
raw_data:
  {"abuse_confidence": 100, "total_reports": 161, "is_public": true, "is_tor": true, "country": "DE", "isp": "CIA TRIAD SECURITY LLC", "domain": "relayon.org", "usage_type": "Fixed Line ISP", "last_reported": "2026-03-10T06:26:19+00:00", "categories": [4, 7, 10, 11, 13, 14, 15, 17, 18, 19, 20, 21, 22, 23]}


indicator: 185.220.101.175
indicator_type: ipv4
source: abuseipdb
country: DE
city: 140
hosting_provider: CIA TRIAD SECURITY LLC
queried_at: 2026-03-11T10:47:15.412919
raw_data:
  {"abuse_confidence": 100, "total_reports": 140, "is_public": true, "is_tor": true, "country": "DE", "isp": "CIA TRIAD SECURITY LLC", "domain": "relayon.org", "usage_type": "Fixed Line ISP", "last_reported": "2026-03-11T05:00:45+00:00", "categories": [4, 7, 10, 11, 13, 14, 15, 17, 18, 19, 20, 21, 22]}


indicator: 185.220.101.165
indicator_type: ipv4
source: abuseipdb
country: DE
city: 152
hosting_provider: CIA TRIAD SECURITY LLC
queried_at: 2026-03-11T10:47:17.091884
raw_data:
  {"abuse_confidence": 100, "total_reports": 152, "is_public": true, "is_tor": true, "country": "DE", "isp": "CIA TRIAD SECURITY LLC", "domain": "relayon.org", "usage_type": "Fixed Line ISP", "last_reported": "2026-03-10T19:15:04+00:00", "categories": [4, 7, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22]}


indicator: 185.220.101.191
indicator_type: ipv4
source: abuseipdb
country: DE
city: 71
hosting_provider: CIA TRIAD SECURITY LLC
queried_at: 2026-03-11T10:47:18.742484
raw_data:
  {"abuse_confidence": 100, "total_reports": 71, "is_public": true, "is_tor": true, "country": "DE", "isp": "CIA TRIAD SECURITY LLC", "domain": "relayon.org", "usage_type": "Fixed Line ISP", "last_reported": "2026-03-11T07:31:34+00:00", "categories": [4, 7, 10, 11, 14, 15, 17, 18, 19, 20, 21, 22]}


indicator: 185.220.101.129
indicator_type: ipv4
source: abuseipdb
country: DE
city: 144
hosting_provider: CIA TRIAD SECURITY LLC
queried_at: 2026-03-11T10:47:20.420370
raw_data:
  {"abuse_confidence": 92, "total_reports": 144, "is_public": true, "is_tor": true, "country": "DE", "isp": "CIA TRIAD SECURITY LLC", "domain": "relayon.org", "usage_type": "Fixed Line ISP", "last_reported": "2026-03-11T01:32:12+00:00", "categories": [4, 5, 7, 10, 11, 13, 14, 15, 17, 18, 19, 20, 21, 22]}


indicator: 185.220.101.146
indicator_type: ipv4
source: abuseipdb
country: DE
city: 70
hosting_provider: CIA TRIAD SECURITY LLC
queried_at: 2026-03-11T10:47:22.088535
raw_data:
  {"abuse_confidence": 100, "total_reports": 70, "is_public": true, "is_tor": true, "country": "DE", "isp": "CIA TRIAD SECURITY LLC", "domain": "relayon.org", "usage_type": "Fixed Line ISP", "last_reported": "2026-03-10T16:23:11+00:00", "categories": [4, 7, 10, 11, 14, 15, 16, 17, 18, 19, 20, 21, 22]}


indicator: 185.220.101.163
indicator_type: ipv4
source: abuseipdb
country: DE
city: 74
hosting_provider: CIA TRIAD SECURITY LLC
queried_at: 2026-03-11T10:47:23.772172
raw_data:
  {"abuse_confidence": 100, "total_reports": 74, "is_public": true, "is_tor": true, "country": "DE", "isp": "CIA TRIAD SECURITY LLC", "domain": "relayon.org", "usage_type": "Fixed Line ISP", "last_reported": "2026-03-11T03:28:44+00:00", "categories": [7, 10, 11, 14, 15, 17, 18, 19, 20, 21, 22, 23]}


indicator: 185.220.101.171
indicator_type: ipv4
source: abuseipdb
country: DE
city: 78
hosting_provider: CIA TRIAD SECURITY LLC
queried_at: 2026-03-11T10:47:25.467104
raw_data:
  {"abuse_confidence": 100, "total_reports": 78, "is_public": true, "is_tor": true, "country": "DE", "isp": "CIA TRIAD SECURITY LLC", "domain": "relayon.org", "usage_type": "Fixed Line ISP", "last_reported": "2026-03-11T08:30:30+00:00", "categories": [4, 7, 10, 11, 14, 15, 17, 18, 19, 20, 21, 22]}


indicator: 185.220.101.184
indicator_type: ipv4
source: abuseipdb
country: DE
city: 69
hosting_provider: CIA TRIAD SECURITY LLC
queried_at: 2026-03-11T10:47:27.129293
raw_data:
  {"abuse_confidence": 100, "total_reports": 69, "is_public": true, "is_tor": true, "country": "DE", "isp": "CIA TRIAD SECURITY LLC", "domain": "relayon.org", "usage_type": "Fixed Line ISP", "last_reported": "2026-03-11T02:43:40+00:00", "categories": [4, 5, 7, 9, 10, 14, 15, 18, 19, 20, 21, 22]}


indicator: 185.220.101.131
indicator_type: ipv4
source: abuseipdb
country: DE
city: 157
hosting_provider: CIA TRIAD SECURITY LLC
queried_at: 2026-03-11T10:47:28.903340
raw_data:
  {"abuse_confidence": 100, "total_reports": 157, "is_public": true, "is_tor": true, "country": "DE", "isp": "CIA TRIAD SECURITY LLC", "domain": "relayon.org", "usage_type": "Fixed Line ISP", "last_reported": "2026-03-11T13:46:32+00:00", "categories": [4, 7, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23]}


indicator: 185.220.101.128
indicator_type: ipv4
source: abuseipdb
country: DE
city: 76
hosting_provider: CIA TRIAD SECURITY LLC
queried_at: 2026-03-11T10:47:30.568681
raw_data:
  {"abuse_confidence": 100, "total_reports": 76, "is_public": true, "is_tor": true, "country": "DE", "isp": "CIA TRIAD SECURITY LLC", "domain": "relayon.org", "usage_type": "Fixed Line ISP", "last_reported": "2026-03-11T06:24:16+00:00", "categories": [4, 10, 14, 15, 18, 19, 20, 21, 22, 23]}


indicator: 185.220.101.140
indicator_type: ipv4
source: abuseipdb
country: DE
city: 143
hosting_provider: CIA TRIAD SECURITY LLC
queried_at: 2026-03-11T10:47:32.269943
raw_data:
  {"abuse_confidence": 100, "total_reports": 143, "is_public": true, "is_tor": true, "country": "DE", "isp": "CIA TRIAD SECURITY LLC", "domain": "relayon.org", "usage_type": "Fixed Line ISP", "last_reported": "2026-03-11T08:12:36+00:00", "categories": [3, 4, 5, 10, 11, 13, 14, 15, 16, 18, 19, 20, 21, 22]}


indicator: 185.220.101.183
indicator_type: ipv4
source: abuseipdb
country: DE
city: 147
hosting_provider: CIA TRIAD SECURITY LLC
queried_at: 2026-03-11T10:47:33.948251
raw_data:
  {"abuse_confidence": 100, "total_reports": 147, "is_public": true, "is_tor": true, "country": "DE", "isp": "CIA TRIAD SECURITY LLC", "domain": "relayon.org", "usage_type": "Fixed Line ISP", "last_reported": "2026-03-11T02:25:13+00:00", "categories": [4, 10, 13, 14, 15, 16, 18, 19, 20, 21, 22]}


indicator: 185.220.101.180
indicator_type: ipv4
source: abuseipdb
country: DE
city: 74
hosting_provider: CIA TRIAD SECURITY LLC
queried_at: 2026-03-11T10:47:35.618634
raw_data:
  {"abuse_confidence": 100, "total_reports": 74, "is_public": true, "is_tor": true, "country": "DE", "isp": "CIA TRIAD SECURITY LLC", "domain": "relayon.org", "usage_type": "Fixed Line ISP", "last_reported": "2026-03-10T01:13:11+00:00", "categories": [4, 10, 14, 15, 18, 19, 20, 21, 22]}


indicator: 185.220.101.161
indicator_type: ipv4
source: abuseipdb
country: DE
city: 70
hosting_provider: CIA TRIAD SECURITY LLC
queried_at: 2026-03-11T10:47:37.281923
raw_data:
  {"abuse_confidence": 100, "total_reports": 70, "is_public": true, "is_tor": true, "country": "DE", "isp": "CIA TRIAD SECURITY LLC", "domain": "relayon.org", "usage_type": "Fixed Line ISP", "last_reported": "2026-03-11T05:15:19+00:00", "categories": [4, 10, 11, 14, 15, 18, 19, 20, 21, 22]}


indicator: 185.220.101.156
indicator_type: ipv4
source: abuseipdb
country: DE
city: 165
hosting_provider: CIA TRIAD SECURITY LLC
queried_at: 2026-03-11T10:47:38.947540
raw_data:
  {"abuse_confidence": 100, "total_reports": 165, "is_public": true, "is_tor": true, "country": "DE", "isp": "CIA TRIAD SECURITY LLC", "domain": "relayon.org", "usage_type": "Fixed Line ISP", "last_reported": "2026-03-09T23:00:36+00:00", "categories": [4, 5, 7, 9, 10, 11, 13, 14, 15, 17, 18, 19, 20, 21, 22]}


indicator: 185.220.101.169
indicator_type: ipv4
source: abuseipdb
country: DE
city: 138
hosting_provider: CIA TRIAD SECURITY LLC
queried_at: 2026-03-11T10:47:40.621699
raw_data:
  {"abuse_confidence": 100, "total_reports": 138, "is_public": true, "is_tor": true, "country": "DE", "isp": "CIA TRIAD SECURITY LLC", "domain": "relayon.org", "usage_type": "Fixed Line ISP", "last_reported": "2026-03-11T03:30:24+00:00", "categories": [4, 10, 11, 13, 14, 15, 18, 19, 20, 21, 22]}


indicator: 185.220.101.160
indicator_type: ipv4
source: abuseipdb
country: DE
city: 179
hosting_provider: CIA TRIAD SECURITY LLC
queried_at: 2026-03-11T10:47:42.321269
raw_data:
  {"abuse_confidence": 100, "total_reports": 179, "is_public": true, "is_tor": true, "country": "DE", "isp": "CIA TRIAD SECURITY LLC", "domain": "relayon.org", "usage_type": "Fixed Line ISP", "last_reported": "2026-03-10T12:45:07+00:00", "categories": [4, 7, 9, 10, 11, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22]}


indicator: 185.220.101.181
indicator_type: ipv4
source: abuseipdb
country: DE
city: 73
hosting_provider: CIA TRIAD SECURITY LLC
queried_at: 2026-03-11T10:47:43.998193
raw_data:
  {"abuse_confidence": 100, "total_reports": 73, "is_public": true, "is_tor": true, "country": "DE", "isp": "CIA TRIAD SECURITY LLC", "domain": "relayon.org", "usage_type": "Fixed Line ISP", "last_reported": "2026-03-11T10:40:07+00:00", "categories": [4, 7, 10, 11, 14, 15, 16, 17, 18, 19, 20, 21, 22]}


indicator: 185.220.101.175
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: Stiftung Erneuerbare Freiheit
queried_at: 2026-03-11T10:47:46.019845
raw_data:
  {"malicious": 16, "suspicious": 1, "harmless": 46, "undetected": 31, "reputation": -16, "country": "DE", "as_owner": "Stiftung Erneuerbare Freiheit", "asn": 60729, "network": "185.220.101.0/24", "last_analysis_date": 1772248280}


indicator: 185.220.101.165
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: Stiftung Erneuerbare Freiheit
queried_at: 2026-03-11T10:48:06.707692
raw_data:
  {"malicious": 15, "suspicious": 2, "harmless": 46, "undetected": 31, "reputation": -15, "country": "DE", "as_owner": "Stiftung Erneuerbare Freiheit", "asn": 60729, "network": "185.220.101.0/24", "last_analysis_date": 1773045728}


indicator: 185.220.101.191
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: Stiftung Erneuerbare Freiheit
queried_at: 2026-03-11T10:48:26.998708
raw_data:
  {"malicious": 16, "suspicious": 1, "harmless": 46, "undetected": 31, "reputation": -17, "country": "DE", "as_owner": "Stiftung Erneuerbare Freiheit", "asn": 60729, "network": "185.220.101.0/24", "last_analysis_date": 1773228448}


indicator: 185.220.101.129
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: Stiftung Erneuerbare Freiheit
queried_at: 2026-03-11T10:48:47.343171
raw_data:
  {"malicious": 14, "suspicious": 2, "harmless": 48, "undetected": 30, "reputation": -16, "country": "DE", "as_owner": "Stiftung Erneuerbare Freiheit", "asn": 60729, "network": "185.220.101.0/24", "last_analysis_date": 1773111252}


indicator: 185.220.101.146
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: Stiftung Erneuerbare Freiheit
queried_at: 2026-03-11T10:49:07.752642
raw_data:
  {"malicious": 14, "suspicious": 2, "harmless": 46, "undetected": 32, "reputation": -25, "country": "DE", "as_owner": "Stiftung Erneuerbare Freiheit", "asn": 60729, "network": "185.220.101.0/24", "last_analysis_date": 1773045728}


indicator: 185.220.101.132
indicator_type: ipv4
source: abuseipdb
country: DE
city: 141
hosting_provider: CIA TRIAD SECURITY LLC
queried_at: 2026-03-11T12:47:16.148158
raw_data:
  {"abuse_confidence": 100, "total_reports": 141, "is_public": true, "is_tor": true, "country": "DE", "isp": "CIA TRIAD SECURITY LLC", "domain": "relayon.org", "usage_type": "Fixed Line ISP", "last_reported": "2026-03-11T02:01:22+00:00", "categories": [4, 7, 10, 11, 12, 13, 14, 15, 17, 18, 19, 20, 21, 22]}


indicator: 185.220.101.159
indicator_type: ipv4
source: abuseipdb
country: DE
city: 67
hosting_provider: CIA TRIAD SECURITY LLC
queried_at: 2026-03-11T12:47:17.785771
raw_data:
  {"abuse_confidence": 100, "total_reports": 67, "is_public": true, "is_tor": true, "country": "DE", "isp": "CIA TRIAD SECURITY LLC", "domain": "relayon.org", "usage_type": "Fixed Line ISP", "last_reported": "2026-03-10T22:51:15+00:00", "categories": [4, 7, 10, 11, 14, 15, 17, 18, 19, 20, 21, 22]}


indicator: 185.220.101.150
indicator_type: ipv4
source: abuseipdb
country: DE
city: 71
hosting_provider: CIA TRIAD SECURITY LLC
queried_at: 2026-03-11T12:47:19.562501
raw_data:
  {"abuse_confidence": 100, "total_reports": 71, "is_public": true, "is_tor": true, "country": "DE", "isp": "CIA TRIAD SECURITY LLC", "domain": "relayon.org", "usage_type": "Fixed Line ISP", "last_reported": "2026-03-11T15:53:08+00:00", "categories": [4, 10, 14, 15, 16, 18, 19, 20, 21, 22, 23]}


indicator: 185.220.101.143
indicator_type: ipv4
source: abuseipdb
country: DE
city: 145
hosting_provider: CIA TRIAD SECURITY LLC
queried_at: 2026-03-11T12:47:21.222410
raw_data:
  {"abuse_confidence": 100, "total_reports": 145, "is_public": true, "is_tor": true, "country": "DE", "isp": "CIA TRIAD SECURITY LLC", "domain": "relayon.org", "usage_type": "Fixed Line ISP", "last_reported": "2026-03-11T07:45:12+00:00", "categories": [3, 4, 5, 7, 10, 11, 12, 13, 14, 15, 17, 18, 19, 20, 21, 22, 23]}


indicator: 185.220.101.168
indicator_type: ipv4
source: abuseipdb
country: DE
city: 72
hosting_provider: CIA TRIAD SECURITY LLC
queried_at: 2026-03-11T12:47:22.900907
raw_data:
  {"abuse_confidence": 100, "total_reports": 72, "is_public": true, "is_tor": true, "country": "DE", "isp": "CIA TRIAD SECURITY LLC", "domain": "relayon.org", "usage_type": "Fixed Line ISP", "last_reported": "2026-03-10T17:45:12+00:00", "categories": [4, 7, 10, 11, 12, 14, 15, 16, 17, 18, 19, 20, 21, 22]}


indicator: 185.220.101.152
indicator_type: ipv4
source: abuseipdb
country: DE
city: 160
hosting_provider: CIA TRIAD SECURITY LLC
queried_at: 2026-03-11T12:47:24.558293
raw_data:
  {"abuse_confidence": 100, "total_reports": 160, "is_public": true, "is_tor": true, "country": "DE", "isp": "CIA TRIAD SECURITY LLC", "domain": "relayon.org", "usage_type": "Fixed Line ISP", "last_reported": "2026-03-10T23:27:58+00:00", "categories": [4, 7, 10, 11, 13, 14, 15, 17, 18, 19, 20, 21, 22]}


indicator: 185.220.101.177
indicator_type: ipv4
source: abuseipdb
country: DE
city: 69
hosting_provider: CIA TRIAD SECURITY LLC
queried_at: 2026-03-11T12:47:26.199184
raw_data:
  {"abuse_confidence": 100, "total_reports": 69, "is_public": true, "is_tor": true, "country": "DE", "isp": "CIA TRIAD SECURITY LLC", "domain": "relayon.org", "usage_type": "Fixed Line ISP", "last_reported": "2026-03-10T06:05:11+00:00", "categories": [4, 10, 14, 15, 18, 19, 20, 21, 22]}


indicator: 185.220.101.132
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: Stiftung Erneuerbare Freiheit
queried_at: 2026-03-11T12:47:28.139145
raw_data:
  {"malicious": 16, "suspicious": 1, "harmless": 46, "undetected": 31, "reputation": -28, "country": "DE", "as_owner": "Stiftung Erneuerbare Freiheit", "asn": 60729, "network": "185.220.101.0/24", "last_analysis_date": 1773228450}


indicator: 185.220.101.159
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: Stiftung Erneuerbare Freiheit
queried_at: 2026-03-11T12:47:48.607411
raw_data:
  {"malicious": 13, "suspicious": 3, "harmless": 48, "undetected": 30, "reputation": -16, "country": "DE", "as_owner": "Stiftung Erneuerbare Freiheit", "asn": 60729, "network": "185.220.101.0/24", "last_analysis_date": 1773163447}


indicator: 185.220.101.150
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: Stiftung Erneuerbare Freiheit
queried_at: 2026-03-11T12:48:09.027797
raw_data:
  {"malicious": 14, "suspicious": 2, "harmless": 47, "undetected": 31, "reputation": -14, "country": "DE", "as_owner": "Stiftung Erneuerbare Freiheit", "asn": 60729, "network": "185.220.101.0/24", "last_analysis_date": 1772989399}


indicator: 185.220.101.143
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: Stiftung Erneuerbare Freiheit
queried_at: 2026-03-11T12:48:29.385518
raw_data:
  {"malicious": 16, "suspicious": 1, "harmless": 46, "undetected": 31, "reputation": -31, "country": "DE", "as_owner": "Stiftung Erneuerbare Freiheit", "asn": 60729, "network": "185.220.101.0/24", "last_analysis_date": 1773240993}


indicator: 185.220.101.168
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: Stiftung Erneuerbare Freiheit
queried_at: 2026-03-11T12:48:49.733023
raw_data:
  {"malicious": 17, "suspicious": 2, "harmless": 45, "undetected": 30, "reputation": -15, "country": "DE", "as_owner": "Stiftung Erneuerbare Freiheit", "asn": 60729, "network": "185.220.101.0/24", "last_analysis_date": 1772526245}


indicator: 185.220.101.152
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: Stiftung Erneuerbare Freiheit
queried_at: 2026-03-11T12:49:10.126475
raw_data:
  {"malicious": 16, "suspicious": 1, "harmless": 46, "undetected": 31, "reputation": -19, "country": "DE", "as_owner": "Stiftung Erneuerbare Freiheit", "asn": 60729, "network": "185.220.101.0/24", "last_analysis_date": 1772702917}


indicator: 185.220.101.177
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: Stiftung Erneuerbare Freiheit
queried_at: 2026-03-11T12:49:30.616689
raw_data:
  {"malicious": 16, "suspicious": 2, "harmless": 46, "undetected": 30, "reputation": -14, "country": "DE", "as_owner": "Stiftung Erneuerbare Freiheit", "asn": 60729, "network": "185.220.101.0/24", "last_analysis_date": 1773158326}


indicator: 185.220.101.132
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T12:49:51.395828
raw_data:
  {"count": 109, "attacks": 34, "maxdate": "2026-03-11", "mindate": "2023-01-14", "updated": "2026-03-11 11:23:07", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-04", "firstseen": "2025-02-04"}, "blocklistde110": {"lastseen": "2026-03-04", "firstseen": "2020-07-05"}, "blocklistde143": {"lastseen": "2026-03-04", "firstseen": "2020-07-0


indicator: 185.220.101.159
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T12:49:52.760539
raw_data:
  {"count": 24, "attacks": 8, "maxdate": "2026-03-07", "mindate": "2026-01-22", "updated": "2026-03-07 18:47:09", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-03", "firstseen": "2025-02-04"}, "blocklistde22": {"lastseen": "2026-03-03", "firstseen": "2020-04-12"}, "blocklistde443": {"lastseen": "2026-03-03", "firstseen": "2021-12-22"}


indicator: 185.220.101.150
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T12:49:54.059337
raw_data:
  {"count": 31, "attacks": 10, "maxdate": "2026-03-10", "mindate": "2026-02-02", "updated": "2026-03-11 09:08:17", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-02", "firstseen": "2025-02-04"}, "blocklistde22": {"lastseen": "2026-03-02", "firstseen": "2023-11-09"}, "blocklistde443": {"lastseen": "2026-03-02", "firstseen": "2020-11-07"


indicator: 185.220.101.143
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T12:49:55.349367
raw_data:
  {"count": 93, "attacks": 29, "maxdate": "2026-03-11", "mindate": "2023-01-20", "updated": "2026-03-11 11:10:52", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-06", "firstseen": "2025-02-04"}, "blocklistde110": {"lastseen": "2026-03-06", "firstseen": "2020-07-08"}, "blocklistde143": {"lastseen": "2026-03-06", "firstseen": "2020-07-08


indicator: 185.220.101.168
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T12:49:56.659595
raw_data:
  {"count": 26, "attacks": 14, "maxdate": "2026-03-06", "mindate": "2026-01-24", "updated": "2026-03-07 03:36:27", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-06", "firstseen": "2025-02-04"}, "blocklistde110": {"lastseen": "2026-03-06", "firstseen": "2021-12-20"}, "blocklistde143": {"lastseen": "2026-03-06", "firstseen": "2021-12-20


indicator: 185.220.101.152
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T12:49:57.879276
raw_data:
  {"count": 119, "attacks": 24, "maxdate": "2026-03-11", "mindate": "2024-10-09", "updated": "2026-03-11 11:27:25", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-02-27", "firstseen": "2025-02-04"}, "blocklistde110": {"lastseen": "2026-02-27", "firstseen": "2024-05-05"}, "blocklistde143": {"lastseen": "2026-02-27", "firstseen": "2024-05-0


indicator: 185.220.101.177
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 185.220.101.0/24
hosting_provider: ZWIEBELFREUN
queried_at: 2026-03-11T12:49:59.101112
raw_data:
  {"count": 24, "attacks": 7, "maxdate": "2026-03-10", "mindate": "2026-01-26", "updated": "2026-03-11 04:18:27", "comment": null, "asabusecontact": "admin@torservers.net", "as": 60729, "asname": "ZWIEBELFREUN", "ascountry": "DE", "assource": "", "network": "185.220.101.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-06", "firstseen": "2025-02-04"}, "blocklistde22": {"lastseen": "2026-03-06", "firstseen": "2020-04-13"}, "blocklistde443": {"lastseen": "2026-03-06", "firstseen": "2021-12-22"}


indicator: 185.220.101.132
indicator_type: ipv4
source: firehol
reverse_dns: 185.220.101.128/26,185.220.101.132/32
queried_at: 2026-03-11T12:50:08.007031
raw_data:
  {"listed": true, "matched_networks": ["185.220.101.128/26", "185.220.101.132/32"], "match_count": 2, "lists_checked": 4, "total_networks": 197613}


indicator: 185.220.101.159
indicator_type: ipv4
source: firehol
reverse_dns: 185.220.101.128/26
queried_at: 2026-03-11T12:50:08.086851
raw_data:
  {"listed": true, "matched_networks": ["185.220.101.128/26"], "match_count": 1, "lists_checked": 4, "total_networks": 197613}


indicator: 185.220.101.132
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-11T12:50:08.541061
raw_data:
  {"hostnames_checked": ["vsk.myds.me", "tor-exit-132.relayon.org", "polaeltd.3cx.com.tr"], "hostnames_count": 3, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 185.220.101.159
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-11T12:50:08.556908
raw_data:
  {"hostnames_checked": ["tor-exit-159.relayon.org"], "hostnames_count": 1, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 185.220.101.150
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-11T12:50:08.570974
raw_data:
  {"hostnames_checked": ["avdel-ds420j-001.direct.quickconnect.to", "seed.multidoge.org", "tor-exit-150.relayon.org"], "hostnames_count": 3, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 185.220.101.143
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-11T12:50:08.585263
raw_data:
  {"hostnames_checked": ["tor-exit-143.relayon.org"], "hostnames_count": 1, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 185.220.101.168
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-11T12:50:08.599902
raw_data:
  {"hostnames_checked": ["tor-exit-168.relayon.org"], "hostnames_count": 1, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 185.220.101.152
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-11T12:50:08.613898
raw_data:
  {"hostnames_checked": ["tor-exit-152.relayon.org", "diweoy302.gw.to"], "hostnames_count": 2, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 185.220.101.177
indicator_type: ipv4
source: stevenblack
queried_at: 2026-03-11T12:50:08.627773
raw_data:
  {"hostnames_checked": ["tor-exit-177.relayon.org"], "hostnames_count": 1, "matched_domains": [], "match_count": 0, "blocklist_size": 76456}


indicator: 157.250.202.215
indicator_type: ipv4
source: shodan
city: eol-product
queried_at: 2026-03-11T13:37:41.297062
raw_data:
  {"ports": [22, 80, 3389], "vulns": ["CVE-2025-23419", "CVE-2023-44487"], "hostnames": [], "tags": ["eol-product"], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:linux:linux_kernel", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:microsoft:internet_information_services", "cpe:/o:microsoft:windows", "cpe:/a:f5:nginx:1.24.0", "cpe:/a:microsoft:asp.net:4.0.30319"]}

hosting_provider:
  cpe:/a:openbsd:openssh:9.6p1,cpe:/o:linux:linux_kernel,cpe:/o:canonical:ubuntu_linux,cpe:/a:microsoft:internet_information_services,cpe:/o:microsoft:windows,cpe:/a:f5:nginx:1.24.0,cpe:/a:microsoft:asp.net:4.0.30319


