# enrichment_results

indicator: 5.104.218.21
indicator_type: ipv4
source: dshield
country: AT
reverse_dns: 5.104.216.0/21
hosting_provider: INFOTECH-AT-AS Schaerdinger Str. 35
queried_at: 2026-03-10T03:40:14.622925
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@infotech.at", "as": 28760, "asname": "INFOTECH-AT-AS Schaerdinger Str. 35", "ascountry": "AT", "assource": "", "network": "5.104.216.0/21", "threatfeeds": {}}


indicator: 5.12.238.195
indicator_type: ipv4
source: dshield
country: RO
reverse_dns: 5.12.0.0/14
hosting_provider: RCS-RDS 73-75 Dr. Staicovici
queried_at: 2026-03-10T03:40:15.935564
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@rcs-rds.ro", "as": 8708, "asname": "RCS-RDS 73-75 Dr. Staicovici", "ascountry": "RO", "assource": "", "network": "5.12.0.0/14", "threatfeeds": {}}


indicator: 5.141.215.107
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 5.141.214.0/23
hosting_provider: ROSTELECOM-AS
queried_at: 2026-03-10T03:40:19.977798
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@rt.ru", "as": 12389, "asname": "ROSTELECOM-AS", "ascountry": "RU", "assource": "", "network": "5.141.214.0/23", "threatfeeds": {"ciarmy": {"lastseen": "2017-07-13", "firstseen": "2017-07-03"}}}


indicator: 5.147.107.16
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 5.147.0.0/16
hosting_provider: VODANET International IP-Backbone of Vodafone
queried_at: 2026-03-10T03:40:21.336904
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@arcor-ip.de", "as": 3209, "asname": "VODANET International IP-Backbone of Vodafone", "ascountry": "DE", "assource": "", "network": "5.147.0.0/16", "threatfeeds": {}}


indicator: 5.163.183.111
indicator_type: ipv4
source: dshield
country: SA
reverse_dns: 5.163.176.0/20
hosting_provider: SAUDINETSTC-AS
queried_at: 2026-03-10T03:40:22.667764
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "registry@stc.com.sa", "as": 25019, "asname": "SAUDINETSTC-AS", "ascountry": "SA", "assource": "", "network": "5.163.176.0/20", "threatfeeds": {}}


indicator: 5.17.6.83
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 5.17.0.0/17
hosting_provider: ZTELECOM-AS
queried_at: 2026-03-10T03:40:23.981774
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "registry@interzet.ru", "as": 41733, "asname": "ZTELECOM-AS", "ascountry": "RU", "assource": "", "network": "5.17.0.0/17", "threatfeeds": {"blocklistdebots": {"lastseen": "2025-03-31", "firstseen": "2025-03-27"}, "forumspam": {"lastseen": "2024-08-19", "firstseen": "2024-08-19"}}}


indicator: 5.175.234.3
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 5.175.128.0/17
hosting_provider: ASGHOSTNET
queried_at: 2026-03-10T03:40:25.307126
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ghostnet.de", "as": 12586, "asname": "ASGHOSTNET", "ascountry": "DE", "assource": "", "network": "5.175.128.0/17", "threatfeeds": {}}


indicator: 5.178.111.227
indicator_type: ipv4
source: dshield
country: TR
reverse_dns: 5.178.111.0/24
hosting_provider: DEHOST-BILISIM-VE-YAZILIM-HIZMETLERI-NAZIM-DOGUKAN-ERDIC DeHost Bilisim ve Yazilim Hizmetleri
queried_at: 2026-03-10T03:40:26.609276
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ip.ro", "as": 47516, "asname": "DEHOST-BILISIM-VE-YAZILIM-HIZMETLERI-NAZIM-DOGUKAN-ERDIC DeHost Bilisim ve Yazilim Hizmetleri", "ascountry": "TR", "assource": "", "network": "5.178.111.0/24", "threatfeeds": {}}


indicator: 5.180.148.33
indicator_type: ipv4
source: dshield
country: IE
reverse_dns: 5.180.148.0/23
hosting_provider: LOCOTORPI
queried_at: 2026-03-10T03:40:27.928197
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": ">>UNKNOWN<<", "as": 211439, "asname": "LOCOTORPI", "ascountry": "IE", "assource": "", "network": "5.180.148.0/23", "threatfeeds": {}}


indicator: 5.180.155.29
indicator_type: ipv4
source: dshield
country: TR
reverse_dns: 5.180.155.0/24
hosting_provider: TAYNET
queried_at: 2026-03-10T03:40:29.256345
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": ">>UNKNOWN<<", "as": 211557, "asname": "TAYNET", "ascountry": "TR", "assource": "", "network": "5.180.155.0/24", "threatfeeds": {}}


indicator: 5.180.27.6
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 5.180.24.0/22
hosting_provider: ENZUINC-
queried_at: 2026-03-10T03:40:30.564522
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@scalabledns.com", "as": 18978, "asname": "ENZUINC-", "ascountry": "US", "assource": "", "network": "5.180.24.0/22", "threatfeeds": {}}


indicator: 5.182.19.40
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 5.182.19.0/24
hosting_provider: NOCIX
queried_at: 2026-03-10T03:40:31.854782
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "security@datashack.net", "as": 33387, "asname": "NOCIX", "ascountry": "US", "assource": "", "network": "5.182.19.0/24", "threatfeeds": {}}


indicator: 5.189.183.63
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 5.189.176.0/20
hosting_provider: CONTABO
queried_at: 2026-03-10T03:40:33.281999
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@contabo.de", "as": 51167, "asname": "CONTABO", "ascountry": "DE", "assource": "", "network": "5.189.176.0/20", "threatfeeds": {"rosti": {"lastseen": "2024-12-13", "firstseen": "2024-12-04"}}}


indicator: 5.199.174.114
indicator_type: ipv4
source: dshield
country: LT
reverse_dns: 5.199.172.0/22
hosting_provider: CHERRYSERVERS1-AS
queried_at: 2026-03-10T03:40:34.582063
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@cherryservers.com", "as": 16125, "asname": "CHERRYSERVERS1-AS", "ascountry": "LT", "assource": "", "network": "5.199.172.0/22", "threatfeeds": {}}


indicator: 5.200.210.1
indicator_type: ipv4
source: dshield
country: IR
reverse_dns: 5.200.208.0/20
hosting_provider: TCI
queried_at: 2026-03-10T03:40:39.768348
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "LIRadmin@tci.ir", "as": 58224, "asname": "TCI", "ascountry": "IR", "assource": "", "network": "5.200.208.0/20", "threatfeeds": {}}


indicator: 5.206.224.92
indicator_type: ipv4
source: dshield
country: MO
reverse_dns: 5.206.224.0/24
hosting_provider: NETSOLUTIONS
queried_at: 2026-03-10T03:40:41.068872
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "rabih.haddad@saatchi.com.lb", "as": 47674, "asname": "NETSOLUTIONS", "ascountry": "MO", "assource": "", "network": "5.206.224.0/24", "threatfeeds": {}}


indicator: 5.227.65.129
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 5.227.64.0/19
hosting_provider: SANDY MTS Nizhniy Novgorod, Russia
queried_at: 2026-03-10T03:40:43.668374
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "noc.nnov@mts.ru", "as": 8580, "asname": "SANDY MTS Nizhniy Novgorod, Russia", "ascountry": "RU", "assource": "", "network": "5.227.64.0/19", "threatfeeds": {}}


indicator: 5.230.227.30
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 5.230.0.0/15
hosting_provider: ASGHOSTNET
queried_at: 2026-03-10T03:40:44.968420
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ghostnet.de", "as": 12586, "asname": "ASGHOSTNET", "ascountry": "DE", "assource": "", "network": "5.230.0.0/15", "threatfeeds": {}}


indicator: 5.249.164.16
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 5.249.164.0/24
hosting_provider: AUROLOGIC aurologic GmbH
queried_at: 2026-03-10T03:40:52.753954
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@combahton.net", "as": 30823, "asname": "AUROLOGIC aurologic GmbH", "ascountry": "DE", "assource": "", "network": "5.249.164.0/24", "threatfeeds": {}}


indicator: 5.252.118.50
indicator_type: ipv4
source: dshield
country: GB
reverse_dns: 5.252.118.0/24
hosting_provider: AEZA-AS
queried_at: 2026-03-10T03:40:54.051440
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": ">>UNKNOWN<<", "as": 210644, "asname": "AEZA-AS", "ascountry": "GB", "assource": "", "network": "5.252.118.0/24", "threatfeeds": {"rosti": {"lastseen": "2024-10-16", "firstseen": "2024-10-16"}}}


indicator: 5.252.176.179
indicator_type: ipv4
source: dshield
country: MD
reverse_dns: 5.252.176.0/24
hosting_provider: MIVOCLOUD
queried_at: 2026-03-10T03:40:55.355539
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@mivocloud.com", "as": 39798, "asname": "MIVOCLOUD", "ascountry": "MD", "assource": "", "network": "5.252.176.0/24", "threatfeeds": {}}


indicator: 5.252.74.203
indicator_type: ipv4
source: dshield
country: TR
reverse_dns: 5.252.74.0/24
hosting_provider: OMER-FARUK-DEMIRCI
queried_at: 2026-03-10T03:40:58.166033
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@vodafone.net.tr", "as": 47436, "asname": "OMER-FARUK-DEMIRCI", "ascountry": "TR", "assource": "", "network": "5.252.74.0/24", "threatfeeds": {}}


indicator: 5.253.18.67
indicator_type: ipv4
source: dshield
country: VN
reverse_dns: 5.253.18.0/24
hosting_provider: GREENCLOUD
queried_at: 2026-03-10T03:40:59.475388
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": ">>UNKNOWN<<", "as": 202602, "asname": "GREENCLOUD", "ascountry": "VN", "assource": "", "network": "5.253.18.0/24", "threatfeeds": {"ciarmy": {"lastseen": "2023-08-08", "firstseen": "2023-08-04"}}}


indicator: 5.253.204.150
indicator_type: ipv4
source: dshield
country: RO
reverse_dns: 5.253.204.0/24
hosting_provider: M247
queried_at: 2026-03-10T03:41:00.775632
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@m247.com", "as": 9009, "asname": "M247", "ascountry": "RO", "assource": "", "network": "5.253.204.0/24", "threatfeeds": {"blocklistde110": {"lastseen": "2022-10-27", "firstseen": "2022-10-25"}, "blocklistde143": {"lastseen": "2022-10-27", "firstseen": "2022-10-25"}, "blocklistde22": {"lastseen": "2022-10-17", "firstseen": "2022-10-11"}, "blocklistde25": {"lastseen": "2022-10-26


indicator: 5.253.247.217
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 5.253.247.0/24
hosting_provider: ITP-SOLUTIONS
queried_at: 2026-03-10T03:41:02.078735
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@itp-solutions.de", "as": 213250, "asname": "ITP-SOLUTIONS", "ascountry": "DE", "assource": "", "network": "5.253.247.0/24", "threatfeeds": {}}


indicator: 5.255.101.10
indicator_type: ipv4
source: dshield
country: NL
reverse_dns: 5.255.96.0/19
hosting_provider: LITESERVER
queried_at: 2026-03-10T03:41:04.714479
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "ripe@liteserver.nl", "as": 60404, "asname": "LITESERVER", "ascountry": "NL", "assource": "", "network": "5.255.96.0/19", "threatfeeds": {"alltor": {"lastseen": "2026-03-04", "firstseen": "2025-02-04"}, "blocklistde22": {"lastseen": "2026-03-04", "firstseen": "2022-11-10"}, "blocklistde443": {"lastseen": "2026-03-04", "firstseen": "2023-10-15"}, "blocklistde80": {"lastseen": "2026-03-


indicator: 5.255.111.114
indicator_type: ipv4
source: dshield
country: NL
reverse_dns: 5.255.96.0/19
hosting_provider: LITESERVER
queried_at: 2026-03-10T03:41:06.016482
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "ripe@liteserver.nl", "as": 60404, "asname": "LITESERVER", "ascountry": "NL", "assource": "", "network": "5.255.96.0/19", "threatfeeds": {}}


indicator: 5.255.99.189
indicator_type: ipv4
source: dshield
country: NL
reverse_dns: 5.255.96.0/19
hosting_provider: LITESERVER
queried_at: 2026-03-10T03:41:07.335920
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "ripe@liteserver.nl", "as": 60404, "asname": "LITESERVER", "ascountry": "NL", "assource": "", "network": "5.255.96.0/19", "threatfeeds": {"alltor": {"lastseen": "2025-10-07", "firstseen": "2025-02-05"}}}


indicator: 5.34.176.111
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 5.34.176.0/23
hosting_provider: GREENFLOID-AS
queried_at: 2026-03-10T03:41:08.708289
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@itldc.com", "as": 204957, "asname": "GREENFLOID-AS", "ascountry": "US", "assource": "", "network": "5.34.176.0/23", "threatfeeds": {}}


indicator: 5.45.86.13
indicator_type: ipv4
source: dshield
country: LV
reverse_dns: 5.45.84.0/22
hosting_provider: SCALAXY-AS
queried_at: 2026-03-10T03:41:11.307053
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "contact@ipsecpro.com", "as": 58061, "asname": "SCALAXY-AS", "ascountry": "LV", "assource": "", "network": "5.45.84.0/22", "threatfeeds": {"ciarmy": {"lastseen": "2021-05-04", "firstseen": "2021-05-04"}}}


indicator: 5.59.249.58
indicator_type: ipv4
source: dshield
country: IT
reverse_dns: 5.59.248.0/21
hosting_provider: C1V
queried_at: 2026-03-10T03:41:12.613502
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": ">>UNKNOWN<<", "as": 212271, "asname": "C1V", "ascountry": "IT", "assource": "", "network": "5.59.248.0/21", "threatfeeds": {"ciarmy": {"lastseen": "2025-03-04", "firstseen": "2025-02-27"}}}


indicator: 5.63.45.102
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 5.63.32.0/20
hosting_provider: PURTEL-AS # Upstream
queried_at: 2026-03-10T03:41:13.918309
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@purtel.com", "as": 62336, "asname": "PURTEL-AS # Upstream", "ascountry": "DE", "assource": "", "network": "5.63.32.0/20", "threatfeeds": {}}


indicator: 5.63.55.231
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 5.63.32.0/19
hosting_provider: PURTEL-AS # Upstream
queried_at: 2026-03-10T03:41:15.227569
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@purtel.com", "as": 62336, "asname": "PURTEL-AS # Upstream", "ascountry": "DE", "assource": "", "network": "5.63.32.0/19", "threatfeeds": {}}


indicator: 5.75.164.35
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 5.75.128.0/17
hosting_provider: HETZNER-AS
queried_at: 2026-03-10T03:41:16.535558
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@hetzner.de", "as": 24940, "asname": "HETZNER-AS", "ascountry": "DE", "assource": "", "network": "5.75.128.0/17", "threatfeeds": {}}


indicator: 5.78.134.229
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 5.78.0.0/16
hosting_provider: HETZNER-CLOUD3-AS
queried_at: 2026-03-10T03:41:19.159532
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": ">>UNKNOWN<<", "as": 212317, "asname": "HETZNER-CLOUD3-AS", "ascountry": "DE", "assource": "", "network": "5.78.0.0/16", "threatfeeds": {}}


indicator: 5.78.41.255
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 5.78.41.0/24
hosting_provider: HETZNER-CLOUD3-AS
queried_at: 2026-03-10T03:41:20.520575
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": ">>UNKNOWN<<", "as": 212317, "asname": "HETZNER-CLOUD3-AS", "ascountry": "DE", "assource": "", "network": "5.78.41.0/24", "threatfeeds": {"rosti": {"lastseen": "2025-03-03", "firstseen": "2025-03-03"}}}


indicator: 5.79.71.205
indicator_type: ipv4
source: dshield
country: NL
reverse_dns: 5.79.64.0/18
hosting_provider: LEASEWEB-NL-AMS-01 Netherlands
queried_at: 2026-03-10T03:41:21.807520
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@nl.leaseweb.com", "as": 60781, "asname": "LEASEWEB-NL-AMS-01 Netherlands", "ascountry": "NL", "assource": "", "network": "5.79.64.0/18", "threatfeeds": {}}


indicator: 50.16.235.131
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 50.16.0.0/16
hosting_provider: AMAZON-AES
queried_at: 2026-03-10T03:41:24.460128
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 14618, "asname": "AMAZON-AES", "ascountry": "US", "assource": "", "network": "50.16.0.0/16", "threatfeeds": {}}


indicator: 50.17.80.96
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 50.17.0.0/16
hosting_provider: AMAZON-AES
queried_at: 2026-03-10T03:41:25.787307
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 14618, "asname": "AMAZON-AES", "ascountry": "US", "assource": "", "network": "50.17.0.0/16", "threatfeeds": {}}


indicator: 50.233.74.170
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 50.128.0.0/9
hosting_provider: COMCAST-7922
queried_at: 2026-03-10T03:41:27.118779
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@comcast.net", "as": 7922, "asname": "COMCAST-7922", "ascountry": "US", "assource": "", "network": "50.128.0.0/9", "threatfeeds": {}}


indicator: 50.35.63.195
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 50.34.0.0/15
hosting_provider: AS-WHOLESAIL
queried_at: 2026-03-10T03:41:28.443364
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "Mike.Sullivan@alsglobal.com", "as": 20055, "asname": "AS-WHOLESAIL", "ascountry": "US", "assource": "", "network": "50.34.0.0/15", "threatfeeds": {}}


indicator: 50.39.223.201
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 50.39.128.0/17
hosting_provider: AS-WHOLESAIL
queried_at: 2026-03-10T03:41:29.764732
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "Mike.Sullivan@alsglobal.com", "as": 20055, "asname": "AS-WHOLESAIL", "ascountry": "US", "assource": "", "network": "50.39.128.0/17", "threatfeeds": {}}


indicator: 50.46.255.143
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 50.46.0.0/15
hosting_provider: AS-WHOLESAIL
queried_at: 2026-03-10T03:41:32.458496
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "Mike.Sullivan@alsglobal.com", "as": 20055, "asname": "AS-WHOLESAIL", "ascountry": "US", "assource": "", "network": "50.46.0.0/15", "threatfeeds": {}}


indicator: 51.103.166.59
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 51.103.0.0/16
hosting_provider: MICROSOFT-CORP-MSN-AS-BLOCK
queried_at: 2026-03-10T03:41:35.336256
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@microsoft.com", "as": 8075, "asname": "MICROSOFT-CORP-MSN-AS-BLOCK", "ascountry": "US", "assource": "", "network": "51.103.0.0/16", "threatfeeds": {}}


indicator: 51.11.214.78
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 51.10.0.0/15
hosting_provider: MICROSOFT-CORP-MSN-AS-BLOCK
queried_at: 2026-03-10T03:41:37.983383
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@microsoft.com", "as": 8075, "asname": "MICROSOFT-CORP-MSN-AS-BLOCK", "ascountry": "US", "assource": "", "network": "51.10.0.0/15", "threatfeeds": {}}


indicator: 51.12.243.123
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 51.12.0.0/15
hosting_provider: MICROSOFT-CORP-MSN-AS-BLOCK
queried_at: 2026-03-10T03:41:39.326282
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@microsoft.com", "as": 8075, "asname": "MICROSOFT-CORP-MSN-AS-BLOCK", "ascountry": "US", "assource": "", "network": "51.12.0.0/15", "threatfeeds": {}}


indicator: 51.15.224.30
indicator_type: ipv4
source: dshield
country: FR
reverse_dns: 51.15.0.0/16
hosting_provider: Online SAS
queried_at: 2026-03-10T03:41:40.655005
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@proxad.net", "as": 12876, "asname": "Online SAS", "ascountry": "FR", "assource": "", "network": "51.15.0.0/16", "threatfeeds": {}}


indicator: 51.154.46.245
indicator_type: ipv4
source: dshield
country: CH
reverse_dns: 51.154.0.0/16
hosting_provider: SALT-
queried_at: 2026-03-10T03:41:42.040537
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse-contact@salt.ch", "as": 15796, "asname": "SALT-", "ascountry": "CH", "assource": "", "network": "51.154.0.0/16", "threatfeeds": {}}


indicator: 51.158.106.82
indicator_type: ipv4
source: dshield
country: FR
reverse_dns: 51.158.0.0/15
hosting_provider: Online SAS
queried_at: 2026-03-10T03:41:43.338538
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@proxad.net", "as": 12876, "asname": "Online SAS", "ascountry": "FR", "assource": "", "network": "51.158.0.0/15", "threatfeeds": {}}


indicator: 51.158.151.139
indicator_type: ipv4
source: dshield
country: FR
reverse_dns: 51.158.128.0/17
hosting_provider: Online SAS
queried_at: 2026-03-10T03:41:46.010011
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@proxad.net", "as": 12876, "asname": "Online SAS", "ascountry": "FR", "assource": "", "network": "51.158.128.0/17", "threatfeeds": {}}


indicator: 51.161.107.22
indicator_type: ipv4
source: dshield
country: FR
reverse_dns: 51.161.0.0/17
hosting_provider: OVH
queried_at: 2026-03-10T03:41:47.330925
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ovh.net", "as": 16276, "asname": "OVH", "ascountry": "FR", "assource": "", "network": "51.161.0.0/17", "threatfeeds": {}}


indicator: 51.161.213.152
indicator_type: ipv4
source: dshield
country: FR
reverse_dns: 51.161.128.0/17
hosting_provider: OVH
queried_at: 2026-03-10T03:41:48.509863
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ovh.net", "as": 16276, "asname": "OVH", "ascountry": "FR", "assource": "", "network": "51.161.128.0/17", "threatfeeds": {}}


indicator: 51.17.79.84
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 51.16.0.0/15
hosting_provider: AMAZON-02
queried_at: 2026-03-10T03:41:49.703406
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "51.16.0.0/15", "threatfeeds": {}}


indicator: 51.178.28.213
indicator_type: ipv4
source: dshield
country: FR
reverse_dns: 51.178.0.0/16
hosting_provider: OVH
queried_at: 2026-03-10T03:41:51.032563
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ovh.net", "as": 16276, "asname": "OVH", "ascountry": "FR", "assource": "", "network": "51.178.0.0/16", "threatfeeds": {}}


indicator: 51.195.193.143
indicator_type: ipv4
source: dshield
country: FR
reverse_dns: 51.195.0.0/16
hosting_provider: OVH
queried_at: 2026-03-10T03:41:52.353899
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ovh.net", "as": 16276, "asname": "OVH", "ascountry": "FR", "assource": "", "network": "51.195.0.0/16", "threatfeeds": {}}


indicator: 51.198.130.30
indicator_type: ipv4
source: dshield
country: GB
reverse_dns: 51.198.0.0/16
hosting_provider: BSKYB-BROADBAND-AS
queried_at: 2026-03-10T03:41:58.893970
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@sky.uk", "as": 5607, "asname": "BSKYB-BROADBAND-AS", "ascountry": "GB", "assource": "", "network": "51.198.0.0/16", "threatfeeds": {}}


indicator: 51.20.31.88
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 51.20.0.0/16
hosting_provider: AMAZON-02
queried_at: 2026-03-10T03:42:00.213368
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "51.20.0.0/16", "threatfeeds": {}}


indicator: 51.21.171.165
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 51.21.0.0/16
hosting_provider: AMAZON-02
queried_at: 2026-03-10T03:42:05.588428
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "51.21.0.0/16", "threatfeeds": {}}


indicator: 51.210.107.197
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: vps-dfb3ae1c.vps.ovh.net
queried_at: 2026-03-10T03:58:54.620875
raw_data:
  {"ports": [80, 3000], "vulns": [], "hostnames": ["vps-dfb3ae1c.vps.ovh.net"], "tags": ["eol-product"], "cpes": ["cpe:/o:canonical:ubuntu_linux", "cpe:/a:python:python", "cpe:/a:f5:nginx:1.26.3", "cpe:/a:encode:uvicorn", "cpe:/o:linux:linux_kernel"]}

hosting_provider:
  cpe:/o:canonical:ubuntu_linux,cpe:/a:python:python,cpe:/a:f5:nginx:1.26.3,cpe:/a:encode:uvicorn,cpe:/o:linux:linux_kernel


indicator: 51.210.150.70
indicator_type: ipv4
source: shodan
reverse_dns: vps-b2204798.vps.ovh.net
hosting_provider: cpe:/o:canonical:ubuntu_linux,cpe:/a:openbsd:openssh:8.9p1
queried_at: 2026-03-10T03:58:56.250235
raw_data:
  {"ports": [22, 3389], "vulns": [], "hostnames": ["vps-b2204798.vps.ovh.net"], "tags": [], "cpes": ["cpe:/o:canonical:ubuntu_linux", "cpe:/a:openbsd:openssh:8.9p1"]}


indicator: 51.222.110.148
indicator_type: ipv4
source: shodan
reverse_dns: vps-277291ac.vps.ovh.ca
hosting_provider: cpe:/o:linux:linux_kernel,cpe:/a:openbsd:openssh:9.2p1,cpe:/o:debian:debian_linux
queried_at: 2026-03-10T03:58:59.553636
raw_data:
  {"ports": [22, 80], "vulns": [], "hostnames": ["vps-277291ac.vps.ovh.ca"], "tags": [], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:9.2p1", "cpe:/o:debian:debian_linux"]}


indicator: 51.222.185.197
indicator_type: ipv4
source: shodan
reverse_dns: ip197.ip-51-222-185.net
queried_at: 2026-03-10T03:59:01.281076
raw_data:
  {"ports": [135, 137, 139, 445, 5985, 47001], "vulns": ["CVE-2020-0796"], "hostnames": ["ip197.ip-51-222-185.net"], "tags": [], "cpes": []}


indicator: 51.38.109.145
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: ip145.ip-51-38-109.eu
queried_at: 2026-03-10T03:59:04.567476
raw_data:
  {"ports": [3389], "vulns": [], "hostnames": ["ip145.ip-51-38-109.eu"], "tags": ["self-signed"], "cpes": []}


indicator: 51.38.129.35
indicator_type: ipv4
source: shodan
city: database,eol-product
reverse_dns: vps-48cc858b.vps.ovh.net,api.turniej.betekipa.pl
hosting_provider: cpe:/a:f5:nginx:1.18.0,cpe:/a:microsoft:sql_server:15.0.4445.0
queried_at: 2026-03-10T03:59:06.217240
raw_data:
  {"ports": [80, 443, 1433], "vulns": ["CVE-2025-23419", "CVE-2021-23017", "CVE-2023-44487", "CVE-2021-3618"], "hostnames": ["vps-48cc858b.vps.ovh.net", "api.turniej.betekipa.pl"], "tags": ["database", "eol-product"], "cpes": ["cpe:/a:f5:nginx:1.18.0", "cpe:/a:microsoft:sql_server:15.0.4445.0"]}


indicator: 51.38.137.108
indicator_type: ipv4
source: shodan
city: eol-product,database
reverse_dns: dashboard.eapprendo.cloud,ip108.ip-51-38-137.eu
queried_at: 2026-03-10T03:59:07.871377
raw_data:
  {"ports": [80, 443, 3000, 3001, 5432, 8081, 8082], "vulns": ["CVE-2025-23419", "CVE-2023-44487"], "hostnames": ["dashboard.eapprendo.cloud", "ip108.ip-51-38-137.eu"], "tags": ["eol-product", "database"], "cpes": ["cpe:/a:postgresql:postgresql", "cpe:/o:linux:linux_kernel", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:expressjs:express", "cpe:/a:apache:superset", "cpe:/a:nodejs:node.js", "cpe:/a:f5:nginx:1.24.0"]}

hosting_provider:
  cpe:/a:postgresql:postgresql,cpe:/o:linux:linux_kernel,cpe:/o:canonical:ubuntu_linux,cpe:/a:expressjs:express,cpe:/a:apache:superset,cpe:/a:nodejs:node.js,cpe:/a:f5:nginx:1.24.0


indicator: 51.38.137.97
indicator_type: ipv4
source: shodan
city: database,eol-product
reverse_dns: ip97.ip-51-38-137.eu,dashboard.qa.eapprendo.cloud
queried_at: 2026-03-10T03:59:09.506880
raw_data:
  {"ports": [80, 443, 3000, 3001, 5432, 8081], "vulns": ["CVE-2025-23419", "CVE-2023-44487"], "hostnames": ["ip97.ip-51-38-137.eu", "dashboard.qa.eapprendo.cloud"], "tags": ["database", "eol-product"], "cpes": ["cpe:/a:expressjs:express", "cpe:/a:apache:superset", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:nodejs:node.js", "cpe:/o:linux:linux_kernel", "cpe:/a:postgresql:postgresql", "cpe:/a:f5:nginx:1.24.0"]}

hosting_provider:
  cpe:/a:expressjs:express,cpe:/a:apache:superset,cpe:/o:canonical:ubuntu_linux,cpe:/a:nodejs:node.js,cpe:/o:linux:linux_kernel,cpe:/a:postgresql:postgresql,cpe:/a:f5:nginx:1.24.0


indicator: 51.38.48.197
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: vps-727a0b84.vps.ovh.net,pointage-test.polyswantech.com
hosting_provider: cpe:/a:expressjs:express,cpe:/a:f5:nginx:1.22.1,cpe:/a:nodejs:node.js
queried_at: 2026-03-10T03:59:14.421245
raw_data:
  {"ports": [80, 443, 3333, 3389], "vulns": ["CVE-2025-23419", "CVE-2023-44487"], "hostnames": ["vps-727a0b84.vps.ovh.net", "pointage-test.polyswantech.com"], "tags": ["eol-product"], "cpes": ["cpe:/a:expressjs:express", "cpe:/a:f5:nginx:1.22.1", "cpe:/a:nodejs:node.js"]}


indicator: 51.68.152.89
indicator_type: ipv4
source: shodan
city: tor
reverse_dns: ns3122942.ip-51-68-152.eu
queried_at: 2026-03-10T03:59:17.844320
raw_data:
  {"ports": [443], "vulns": [], "hostnames": ["ns3122942.ip-51-68-152.eu"], "tags": ["tor"], "cpes": []}


indicator: 51.68.172.253
indicator_type: ipv4
source: shodan
reverse_dns: vps-834cedb1.vps.ovh.net,sos151.com,www.sos151.com
queried_at: 2026-03-10T03:59:19.496210
raw_data:
  {"ports": [22, 443], "vulns": ["CVE-2009-2299", "CVE-2013-2220", "CVE-2013-2765", "CVE-2007-4723", "CVE-2013-0942", "CVE-2013-0941", "CVE-2012-4360", "CVE-2012-4001", "CVE-2007-3205", "CVE-2011-2688", "CVE-2024-3566", "CVE-2011-1176", "CVE-2009-0796", "CVE-2012-3526", "CVE-2013-4365"], "hostnames": ["vps-834cedb1.vps.ovh.net", "sos151.com", "www.sos151.com"], "tags": [], "cpes": ["cpe:/o:canonical:ubuntu_linux", "cpe:/a:openbsd:openssh:9.7p1", "cpe:/a:php:php:8.2.30", "cpe:/a:apache:http_server:

hosting_provider:
  cpe:/o:canonical:ubuntu_linux,cpe:/a:openbsd:openssh:9.7p1,cpe:/a:php:php:8.2.30,cpe:/a:apache:http_server:2.4.66


indicator: 51.75.125.53
indicator_type: ipv4
source: shodan
reverse_dns: vps-2e686fb5.vps.ovh.net,l4e.es
queried_at: 2026-03-10T03:59:21.118659
raw_data:
  {"ports": [443], "vulns": [], "hostnames": ["vps-2e686fb5.vps.ovh.net", "l4e.es"], "tags": [], "cpes": []}


indicator: 51.75.18.71
indicator_type: ipv4
source: shodan
city: starttls
reverse_dns: mx-server-1.as598466.net
hosting_provider: cpe:/a:f5:nginx
queried_at: 2026-03-10T03:59:22.878581
raw_data:
  {"ports": [25, 80, 443, 993], "vulns": [], "hostnames": ["mx-server-1.as598466.net"], "tags": ["starttls"], "cpes": ["cpe:/a:f5:nginx"]}


indicator: 51.75.27.117
indicator_type: ipv4
source: shodan
reverse_dns: 117.ip-51-75-27.eu
queried_at: 2026-03-10T03:59:24.539903
raw_data:
  {"ports": [22, 8888], "vulns": ["CVE-2024-24795", "CVE-2006-20001", "CVE-2021-40438", "CVE-2024-38475", "CVE-2024-38473", "CVE-2022-30556", "CVE-2022-36760", "CVE-2020-11984", "CVE-2024-47252", "CVE-2024-40898", "CVE-2025-59775", "CVE-2020-9490", "CVE-2024-39573", "CVE-2025-49630", "CVE-2021-34798", "CVE-2024-38476", "CVE-2013-2765", "CVE-2024-27316", "CVE-2023-38709", "CVE-2012-4360", "CVE-2022-29404", "CVE-2009-2299", "CVE-2024-38477", "CVE-2025-65082", "CVE-2019-0211", "CVE-2019-17567", "CVE-

hosting_provider:
  cpe:/a:apache:http_server:2.4.38,cpe:/a:openbsd:openssh:7.6p1,cpe:/o:debian:debian_linux,cpe:/o:canonical:ubuntu_linux


indicator: 51.79.186.233
indicator_type: ipv4
source: shodan
reverse_dns: bingrewards.michanger.io,ip233.ip-51-79-186.net
queried_at: 2026-03-10T03:59:27.845174
raw_data:
  {"ports": [22, 80, 443, 1080, 3000, 3001], "vulns": ["CVE-2023-38709", "CVE-2022-26377", "CVE-2022-22719", "CVE-2024-24795", "CVE-2024-38475", "CVE-2021-40438", "CVE-2013-2765", "CVE-2024-27316", "CVE-2025-65082", "CVE-2021-26691", "CVE-2022-22721", "CVE-2024-38474", "CVE-2021-32785", "CVE-2020-11993", "CVE-2009-0796", "CVE-2021-36160", "CVE-2025-53020", "CVE-2021-44790", "CVE-2019-17567", "CVE-2021-32792", "CVE-2013-4365", "CVE-2023-25690", "CVE-2020-35452", "CVE-2022-22720", "CVE-2006-20001", 

hosting_provider:
  cpe:/a:vercel:next.js,cpe:/a:apache:http_server:2.4.41,cpe:/o:canonical:ubuntu_linux,cpe:/a:openbsd:openssh:8.2p1,cpe:/a:facebook:react,cpe:/a:getbootstrap:bootstrap:5.3.0


indicator: 51.79.249.202
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: vps-62f72ebc.vps.ovh.ca,api.hitalk.online
queried_at: 2026-03-10T03:59:31.275235
raw_data:
  {"ports": [22, 80, 443, 4000, 8000], "vulns": ["CVE-2025-23419"], "hostnames": ["vps-62f72ebc.vps.ovh.ca", "api.hitalk.online"], "tags": ["eol-product"], "cpes": ["cpe:/a:f5:nginx:1.26.0", "cpe:/a:openbsd:openssh:9.7p1", "cpe:/o:linux:linux_kernel", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:expressjs:express", "cpe:/a:nodejs:node.js"]}

hosting_provider:
  cpe:/a:f5:nginx:1.26.0,cpe:/a:openbsd:openssh:9.7p1,cpe:/o:linux:linux_kernel,cpe:/o:canonical:ubuntu_linux,cpe:/a:expressjs:express,cpe:/a:nodejs:node.js


indicator: 51.81.171.234
indicator_type: ipv4
source: shodan
city: c2
reverse_dns: ip234.ip-51-81-171.us
hosting_provider: cpe:/o:canonical:ubuntu_linux,cpe:/a:openbsd:openssh:9.6p1,cpe:/a:f5:nginx
queried_at: 2026-03-10T03:59:32.928239
raw_data:
  {"ports": [22, 80, 443], "vulns": [], "hostnames": ["ip234.ip-51-81-171.us"], "tags": ["c2"], "cpes": ["cpe:/o:canonical:ubuntu_linux", "cpe:/a:openbsd:openssh:9.6p1", "cpe:/a:f5:nginx"]}


indicator: 51.81.46.71
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: ns1000422.ip-51-81-46.us
queried_at: 2026-03-10T03:59:34.567070
raw_data:
  {"ports": [80, 443, 3389, 8081, 9000, 9001, 11000], "vulns": [], "hostnames": ["ns1000422.ip-51-81-46.us"], "tags": ["self-signed"], "cpes": ["cpe:/o:microsoft:windows", "cpe:/a:microsoft:internet_information_services", "cpe:/a:microsoft:asp.net", "cpe:/a:microsoft:internet_information_services:10.0"]}

hosting_provider:
  cpe:/o:microsoft:windows,cpe:/a:microsoft:internet_information_services,cpe:/a:microsoft:asp.net,cpe:/a:microsoft:internet_information_services:10.0


indicator: 51.89.153.112
indicator_type: ipv4
source: shodan
reverse_dns: wa.me,whatsapp.com,whatsapp.net,ns3145504.ip-51-89-153.eu
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-03-10T03:59:37.846472
raw_data:
  {"ports": [22, 443], "vulns": [], "hostnames": ["wa.me", "whatsapp.com", "whatsapp.net", "ns3145504.ip-51-89-153.eu"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 51.89.204.162
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: ip162.ip-51-89-204.eu
queried_at: 2026-03-10T03:59:41.126994
raw_data:
  {"ports": [5986], "vulns": [], "hostnames": ["ip162.ip-51-89-204.eu"], "tags": ["self-signed"], "cpes": []}


indicator: 51.89.242.58
indicator_type: ipv4
source: shodan
city: self-signed
reverse_dns: ip58.ip-51-89-242.eu
queried_at: 2026-03-10T03:59:42.766800
raw_data:
  {"ports": [445, 5985, 5986], "vulns": ["CVE-2020-0796"], "hostnames": ["ip58.ip-51-89-242.eu"], "tags": ["self-signed"], "cpes": []}


indicator: 51.91.98.68
indicator_type: ipv4
source: shodan
reverse_dns: vps-04025c1c.vps.ovh.net
queried_at: 2026-03-10T03:59:44.544352
raw_data:
  {"ports": [22, 80, 443], "vulns": [], "hostnames": ["vps-04025c1c.vps.ovh.net"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.2p1", "cpe:/o:debian:debian_linux", "cpe:/a:f5:nginx", "cpe:/o:linux:linux_kernel", "cpe:/a:openresty:openresty"]}

hosting_provider:
  cpe:/a:openbsd:openssh:9.2p1,cpe:/o:debian:debian_linux,cpe:/a:f5:nginx,cpe:/o:linux:linux_kernel,cpe:/a:openresty:openresty


indicator: 51.210.107.197
indicator_type: ipv4
source: otx
country: FR
queried_at: 2026-03-10T04:00:03.932264
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "France", "country_code": "FR", "city": null, "asn": "AS16276 ovh sas", "indicator": "51.210.107.197", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 14, "malware_samples": [], "passive_dns": ["mediaplayer.mediatools.ovh", "adblock-monitoring.com", "koras.store", "boutique.mediatools.ovh", "mercure.mediatools.ovh", "mercure.abdelkhera.com", "api-screen.mosquee-villeneuve92.com", "screen.mosquee-villene

reverse_dns:
  mediaplayer.mediatools.ovh,adblock-monitoring.com,koras.store,boutique.mediatools.ovh,mercure.mediatools.ovh,mercure.abdelkhera.com,api-screen.mosquee-villeneuve92.com,screen.mosquee-villeneuve92.com,mediaplayer.abdelkhera.com,abdelkhera.com


indicator: 51.210.150.70
indicator_type: ipv4
source: otx
country: FR
reverse_dns: seny121.com
queried_at: 2026-03-10T04:00:06.027400
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "France", "country_code": "FR", "city": null, "asn": "AS16276 ovh sas", "indicator": "51.210.150.70", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["seny121.com"]}


indicator: 51.210.61.198
indicator_type: ipv4
source: otx
country: FR
hosting_provider: Nextray,cyber security,malicious,ioc,phishing
queried_at: 2026-03-10T04:00:07.803584
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "France", "country_code": "FR", "city": null, "asn": "AS16276 ovh sas", "indicator": "51.210.61.198", "tags": ["Nextray", "cyber security", "malicious", "ioc", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS_i_am)", "HIVE", "H

reverse_dns:
  bxss.resonanz.art,nc1.mtnhub.net,oc-ser4.ipnet.shop,so-ser4.abinet.shop,amnirancctv.com,51-210-61-198.cprapid.com,www.minercity.online,minercity.online,bitwall.me,boqrat.com


indicator: 51.222.110.148
indicator_type: ipv4
source: otx
country: CA
queried_at: 2026-03-10T04:00:09.695768
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Canada", "country_code": "CA", "city": null, "asn": "AS16276 ovh sas", "indicator": "51.222.110.148", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 8, "malware_samples": [], "passive_dns": ["f3et.com", "www.jardyis.com", "towncrier.atomescroch.us", "www.afsq.me", "jardyis.com", "farador.atomescroch.us", "afsq.me", "abitibi.atomescroch.us"]}

reverse_dns:
  f3et.com,www.jardyis.com,towncrier.atomescroch.us,www.afsq.me,jardyis.com,farador.atomescroch.us,afsq.me,abitibi.atomescroch.us


indicator: 51.222.185.197
indicator_type: ipv4
source: otx
country: CA
reverse_dns: ip197.ip-51-222-185.net
queried_at: 2026-03-10T04:00:11.210022
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Canada", "country_code": "CA", "city": null, "asn": "AS16276 ovh sas", "indicator": "51.222.185.197", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["ip197.ip-51-222-185.net"]}


indicator: 51.255.152.139
indicator_type: ipv4
source: otx
country: FR
reverse_dns: audiotrip.org
queried_at: 2026-03-10T04:00:17.619384
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "France", "country_code": "FR", "city": null, "asn": "AS16276 ovh sas", "indicator": "51.255.152.139", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 1, "passive_dns_count": 1, "malware_samples": ["da76b4d2bb3659cf33a8e06615406c5f52422a7cc7d363a9ea4cb710d8d745e7"], "passive_dns": ["audiotrip.org"]}


indicator: 51.38.109.145
indicator_type: ipv4
source: otx
country: FR
hosting_provider: malware,mozi,germany,hong kong,remcos,police,netherlands,canada,android,india
queried_at: 2026-03-10T04:00:19.231445
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "France", "country_code": "FR", "city": null, "asn": "AS16276 ovh sas", "indicator": "51.38.109.145", "tags": ["malware", "mozi", "germany", "hong kong", "remcos", "police", "netherlands", "canada", "android", "india", "grasscall", "asyncrat", "ukraine", "panama", "indonesia", "dcrat", "friday", "brazil", "ransomware", "date", "mexico", "february", "estonia", "france", "close", "vo1d", "lazarus", "pump", "singapore", "cobaltstrike", "service", "stea


indicator: 51.38.129.35
indicator_type: ipv4
source: otx
country: FR
queried_at: 2026-03-10T04:00:21.063510
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "France", "country_code": "FR", "city": null, "asn": "AS16276 ovh sas", "indicator": "51.38.129.35", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 17, "malware_samples": [], "passive_dns": ["naughty-austin.51-38-129-35.plesk.page", "www.naughty-austin.51-38-129-35.plesk.page", "inspiring-chebyshev.51-38-129-35.plesk.page", "www.inspiring-chebyshev.51-38-129-35.plesk.page", "www.practical-antonelli.51-

reverse_dns:
  naughty-austin.51-38-129-35.plesk.page,www.naughty-austin.51-38-129-35.plesk.page,inspiring-chebyshev.51-38-129-35.plesk.page,www.inspiring-chebyshev.51-38-129-35.plesk.page,www.practical-antonelli.51-38-129-35.plesk.page,practical-antonelli.51-38-129-35.plesk.page,keen-kalam.51-38-129-35.plesk.page,www.clever-wiles.51-38-129-35.plesk.page,clever-wiles.51-38-129-35.plesk.page,www.gracious-raman.51-38-129-35.plesk.page


indicator: 51.38.137.108
indicator_type: ipv4
source: otx
country: FR
reverse_dns: scanforge.net
hosting_provider: login,telnet,Malicious IP,honeypot,mirai,SSH,scan,tcp,attack,botnet
queried_at: 2026-03-10T04:00:23.097509
raw_data:
  {"pulse_count": 3, "reputation": 0, "country": "France", "country_code": "FR", "city": null, "asn": "AS16276 ovh sas", "indicator": "51.38.137.108", "tags": ["login", "telnet", "Malicious IP", "honeypot", "mirai", "SSH", "scan", "tcp", "attack", "botnet", "blacklist", "scanner", "Telnet"], "pulses": ["Ka's Honeypot visitors", "Threatfox Recent Additions", "Scan port 23 Telnet (S3#)"], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["scanforge.net"]}


indicator: 51.38.137.97
indicator_type: ipv4
source: otx
country: FR
queried_at: 2026-03-10T04:00:24.762915
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "France", "country_code": "FR", "city": null, "asn": "AS16276 ovh sas", "indicator": "51.38.137.97", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 4, "passive_dns_count": 0, "malware_samples": ["fe4d74bb1cf8aab409351f25049629857cb2f333cc19480cce02b382941a02a9", "f6e4ad17968d3b486111250fa68dd6a4cca1cfc8740d6dffb88a049af619999e", "46b82456004fcc4ab83e3969d43807b0fb1ebfbe81261d868a2aa0a92f66e343", "d8ac362aaee96a6bb0833dad577f3


indicator: 51.38.185.204
indicator_type: ipv4
source: otx
country: FR
city: Fismes
hosting_provider: ,malware,ransomware
queried_at: 2026-03-10T04:00:26.325279
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "France", "country_code": "FR", "city": "Fismes", "asn": "AS16276 ovh sas", "indicator": "51.38.185.204", "tags": ["", "malware", "ransomware"], "pulses": ["ThreatFix", "Threatfox Recent Additions"], "malware_count": 6, "passive_dns_count": 30, "malware_samples": ["b2774a48885677fd77d7e5ee93d125715c9f31a13fcf45ca96b23a709414ff52", "8d2ca78af48a15453c25b9c6460becad48d9345a94dc702201db823cd465ece5", "104e32a902fd9af118682694117f85a8f38aedce1fec35d6f6b

reverse_dns:
  teams.login-onmicrosoft.com,windows.software-update.fr,cloud-c2.poneycorp.fr,software-update.fr,redirect.compagnie-flduciaire.com,security.login-onmicrosoft.com,login.office.com.shorturi.fr,silae-paie.shorturi.fr,login.pierre-fabre-pharma.shorturi.fr,security.microsoft.com.shorturi.fr


indicator: 51.38.215.206
indicator_type: ipv4
source: otx
country: FR
reverse_dns: ip206.ip-51-38-215.eu
queried_at: 2026-03-10T04:00:27.854382
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "France", "country_code": "FR", "city": null, "asn": "AS16276 ovh sas", "indicator": "51.38.215.206", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["ip206.ip-51-38-215.eu"]}


indicator: 51.38.48.197
indicator_type: ipv4
source: otx
country: FR
queried_at: 2026-03-10T04:00:31.529008
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "France", "country_code": "FR", "city": null, "asn": "AS16276 ovh sas", "indicator": "51.38.48.197", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 7, "malware_samples": [], "passive_dns": ["www.polyswantech.com", "polyswantech.com", "netprimus.indiqueai.com.br", "www.redflagf1.com", "cp.rplt.fr", "cp.rempenault.com", "redflagf1.com"]}

reverse_dns:
  www.polyswantech.com,polyswantech.com,netprimus.indiqueai.com.br,www.redflagf1.com,cp.rplt.fr,cp.rempenault.com,redflagf1.com


indicator: 51.44.180.176
indicator_type: ipv4
source: otx
country: US
queried_at: 2026-03-10T04:00:33.179434
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "51.44.180.176", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 51.68.152.89
indicator_type: ipv4
source: otx
country: FR
queried_at: 2026-03-10T04:00:35.006237
raw_data:
  {"pulse_count": 49, "reputation": 0, "country": "France", "country_code": "FR", "city": null, "asn": "AS16276 ovh sas", "indicator": "51.68.152.89", "tags": ["Nextray", "HoneyNet Connect", "2025", "cyber security", "malicious", "anonymization_network", "ioc", "tor-exit-nodes", "phishing", "tor-guard-nodes", "01.10.2025"], "pulses": ["Anonymization_Network | Mar 10, 2026 | Part 2/5", "Anonymization_Network | Mar 9, 2026 | Part 2/5", "Anonymization_Network | Mar 8, 2026 | Part 2/5", "Anonymization

hosting_provider:
  Nextray,HoneyNet Connect,2025,cyber security,malicious,anonymization_network,ioc,tor-exit-nodes,phishing,tor-guard-nodes


indicator: 51.68.172.253
indicator_type: ipv4
source: otx
country: FR
reverse_dns: campaign.market87jhk43.com
hosting_provider: phishing
queried_at: 2026-03-10T04:00:36.789491
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "France", "country_code": "FR", "city": null, "asn": "AS16276 ovh sas", "indicator": "51.68.172.253", "tags": ["phishing"], "pulses": ["Threatfox Recent Additions", "Go Phish"], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["campaign.market87jhk43.com"]}


indicator: 51.75.125.53
indicator_type: ipv4
source: otx
country: FR
reverse_dns: pbxparmasammarchi.my3cx.it
queried_at: 2026-03-10T04:00:38.595982
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "France", "country_code": "FR", "city": null, "asn": "AS16276 ovh sas", "indicator": "51.75.125.53", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["pbxparmasammarchi.my3cx.it"]}


indicator: 51.75.18.71
indicator_type: ipv4
source: otx
country: FR
reverse_dns: mx-server-1.as598466.net,cerbeross.net
queried_at: 2026-03-10T04:00:40.162989
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "France", "country_code": "FR", "city": null, "asn": "AS16276 ovh sas", "indicator": "51.75.18.71", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["mx-server-1.as598466.net", "cerbeross.net"]}


indicator: 51.75.27.117
indicator_type: ipv4
source: otx
country: FR
reverse_dns: vacaciones.wavecontrol.com
queried_at: 2026-03-10T04:00:41.841201
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "France", "country_code": "FR", "city": null, "asn": "AS16276 ovh sas", "indicator": "51.75.27.117", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["vacaciones.wavecontrol.com"]}


indicator: 51.75.70.246
indicator_type: ipv4
source: otx
country: FR
hosting_provider: HoneyNet Connect,2025,anonymization_network,tor-exit-nodes,tor-guard-nodes,01.10.2025
queried_at: 2026-03-10T04:00:43.646042
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "France", "country_code": "FR", "city": null, "asn": "AS16276 ovh sas", "indicator": "51.75.70.246", "tags": ["HoneyNet Connect", "2025", "anonymization_network", "tor-exit-nodes", "tor-guard-nodes", "01.10.2025"], "pulses": ["Anonymization_Network | Mar 10, 2026 | Part 3/5", "Anonymization_Network | Mar 9, 2026 | Part 3/5", "Anonymization_Network | Mar 8, 2026 | Part 3/5", "Anonymization_Network | Mar 7, 2026 | Part 3/5", "Anonymization_Network | 


indicator: 51.79.203.148
indicator_type: ipv4
source: otx
country: SG
city: Singapore
reverse_dns: toolsactive.online,randagroup.xyz
queried_at: 2026-03-10T04:01:00.922056
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Singapore", "country_code": "SG", "city": "Singapore", "asn": "AS16276 ovh sas", "indicator": "51.79.203.148", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["toolsactive.online", "randagroup.xyz"]}


indicator: 51.79.249.202
indicator_type: ipv4
source: otx
country: SG
city: Singapore
queried_at: 2026-03-10T04:01:04.041603
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Singapore", "country_code": "SG", "city": "Singapore", "asn": "AS16276 ovh sas", "indicator": "51.79.249.202", "tags": ["feed", "ransomware feed", "iocs", "sentinel misp", "compromise", "protect", "agent tesla", "nanocore rat", "cobalt", "linkedin page", "find", "strong", "cobalt strike", "precisionsec", "api contact"], "pulses": ["Cobalt Strike Indicators of Compromise (IOC) Feed - PrecisionSec - Tracking 2025", "Threatfox Recent Additions"], "mal

reverse_dns:
  api.lazorservices.com,tech1.techemailcomp.com,techart3.theemailcomp.online,oenoste.com,massonmagic.xyz

hosting_provider:
  feed,ransomware feed,iocs,sentinel misp,compromise,protect,agent tesla,nanocore rat,cobalt,linkedin page


indicator: 51.81.171.234
indicator_type: ipv4
source: otx
country: US
city: Hillsboro
reverse_dns: ip234.ip-51-81-171.us
hosting_provider: ,malware,ransomware
queried_at: 2026-03-10T04:01:06.296529
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Hillsboro", "asn": "AS16276 ovh sas", "indicator": "51.81.171.234", "tags": ["", "malware", "ransomware"], "pulses": ["ThreatFix", "Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["ip234.ip-51-81-171.us"]}


indicator: 51.81.46.71
indicator_type: ipv4
source: otx
country: US
city: Warrenton
queried_at: 2026-03-10T04:01:07.951305
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Warrenton", "asn": "AS16276 ovh sas", "indicator": "51.81.46.71", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 51.84.68.245
indicator_type: ipv4
source: otx
country: US
queried_at: 2026-03-10T04:01:11.101448
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "51.84.68.245", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 51.89.153.112
indicator_type: ipv4
source: otx
country: GB
city: London
reverse_dns: ns3145504.ip-51-89-153.eu,testdebug.johntechnologiesltd.com,www.zktv.site
hosting_provider: Brute-Force,login,auto-generated security,Bruteforce,cowrie,honeypot,SSH,Honeypot,ssh,tor exit node
queried_at: 2026-03-10T04:01:13.410133
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": "London", "asn": "AS16276 ovh sas", "indicator": "51.89.153.112", "tags": ["Brute-Force", "login", "auto-generated security", "Bruteforce", "cowrie", "honeypot", "SSH", "Honeypot", "ssh", "tor exit node", "attack", "brute force", "tor", "scanner", "Telnet"], "pulses": ["SSH Brute-Force Honeypot Live", "Ka's Honeypot visitors", "SSH Brute-Force Honeypot Live", "SSH


indicator: 51.89.190.23
indicator_type: ipv4
source: otx
country: GB
city: London
hosting_provider: port 80,tcp/80,botnet,http
queried_at: 2026-03-10T04:01:16.486970
raw_data:
  {"pulse_count": 14, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": "London", "asn": "AS16276 ovh sas", "indicator": "51.89.190.23", "tags": ["port 80", "tcp/80", "botnet", "http"], "pulses": ["IP Addresses Logged by the Rosethorn PotNet", "Threatfox Recent Additions", "IPV4_Threat_Actors", "IP Address", "IP Address", "My Test Pulse", "My Test Pulse", "My Test Pulse", "My Test Pulse", "My Test Pulse", "My Test Pulse", "Malicious I

reverse_dns:
  ip23.ip-51-89-190.eu,crypto2.cards,www.crypto2.cards,app.ggcpay.com,api.vuollet.io,shop.codegotech.com,thehbank.com,www.thehbank.com


indicator: 51.89.204.162
indicator_type: ipv4
source: otx
country: GB
city: London
hosting_provider: malware,mozi,germany,ransomhub,remcos,mozi link,pink,asyncrat,ukraine,panama
queried_at: 2026-03-10T04:01:18.056575
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": "London", "asn": "AS16276 ovh sas", "indicator": "51.89.204.162", "tags": ["malware", "mozi", "germany", "ransomhub", "remcos", "mozi link", "pink", "asyncrat", "ukraine", "panama", "indonesia", "snakekeylogger", "agent tesla", "date", "mexico", "turkey", "france", "china", "singapore", "cobaltstrike", "masslogger", "clearfake", "bangladesh", "united kingdom"], "pu


indicator: 51.89.242.58
indicator_type: ipv4
source: otx
country: GB
city: London
queried_at: 2026-03-10T04:01:19.635439
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": "London", "asn": "AS16276 ovh sas", "indicator": "51.89.242.58", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 51.91.98.68
indicator_type: ipv4
source: otx
country: FR
reverse_dns: www.melfiv.com,melfiv.com
queried_at: 2026-03-10T04:01:21.193426
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "France", "country_code": "FR", "city": null, "asn": "AS16276 ovh sas", "indicator": "51.91.98.68", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["www.melfiv.com", "melfiv.com"]}


indicator: 51.92.38.49
indicator_type: ipv4
source: otx
country: US
queried_at: 2026-03-10T04:01:22.858396
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "51.92.38.49", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 52.136.38.252
indicator_type: ipv4
source: otx
country: IN
city: Mumbai
queried_at: 2026-03-10T04:01:24.365207
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "India", "country_code": "IN", "city": "Mumbai", "asn": "AS8075 microsoft corporation", "indicator": "52.136.38.252", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 52.14.195.173
indicator_type: ipv4
source: otx
country: US
city: Columbus
queried_at: 2026-03-10T04:01:26.166600
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Columbus", "asn": "AS16509 amazon.com inc", "indicator": "52.14.195.173", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 52.14.93.110
indicator_type: ipv4
source: otx
country: US
city: Columbus
queried_at: 2026-03-10T04:01:27.945037
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Columbus", "asn": "AS16509 amazon.com inc", "indicator": "52.14.93.110", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 52.165.19.23
indicator_type: ipv4
source: otx
country: US
city: Des Moines
queried_at: 2026-03-10T04:01:32.342214
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Des Moines", "asn": "AS8075 microsoft corporation", "indicator": "52.165.19.23", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 52.169.163.36
indicator_type: ipv4
source: otx
country: IE
city: Dublin
queried_at: 2026-03-10T04:01:33.872294
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Ireland", "country_code": "IE", "city": "Dublin", "asn": "AS8075 microsoft corporation", "indicator": "52.169.163.36", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 52.169.179.34
indicator_type: ipv4
source: otx
country: IE
city: Dublin
queried_at: 2026-03-10T04:01:35.365384
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Ireland", "country_code": "IE", "city": "Dublin", "asn": "AS8075 microsoft corporation", "indicator": "52.169.179.34", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 52.173.131.28
indicator_type: ipv4
source: otx
country: US
city: Des Moines
hosting_provider: ,malware,Sliver C2,ransomware
queried_at: 2026-03-10T04:01:38.465973
raw_data:
  {"pulse_count": 3, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Des Moines", "asn": "AS8075 microsoft corporation", "indicator": "52.173.131.28", "tags": ["", "malware", "Sliver C2", "ransomware"], "pulses": ["Sliver C2", "ThreatFix", "Threatfox Recent Additions"], "malware_count": 1, "passive_dns_count": 118, "malware_samples": ["6a6ae5ab7a2fcfe826bac0880ef4dd1365332f21bafe2a5eb06da4b34d3c738c"], "passive_dns": ["update.www.www.www.staging.chess.us.org"

reverse_dns:
  update.www.www.www.staging.chess.us.org,www.www.www.www.res.chess.us.org,api.kepumegiry.gawwwres.chess.us.org,www.res.chess.us.org,www.dev.chess.us.org,update.update.update.chess.us.org,www.admin.admin.chess.us.org,www.www.www.131.28staging.chess.us.org,www.www.www.api.admin.chess.us.org,update.update.backend.chess.us.org


indicator: 52.178.102.206
indicator_type: ipv4
source: otx
country: NL
city: Amsterdam
hosting_provider: la-safe.org,tsec,tpot19,honeypot
queried_at: 2026-03-10T04:01:39.999139
raw_data:
  {"pulse_count": 3, "reputation": 0, "country": "Netherlands", "country_code": "NL", "city": "Amsterdam", "asn": "AS8075 microsoft corporation", "indicator": "52.178.102.206", "tags": ["la-safe.org", "tsec", "tpot19", "honeypot"], "pulses": ["Threatfox Recent Additions", "LCIA:HoneyNet:2024", "LCIA:HoneyNet:March 2024"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 52.190.60.170
indicator_type: ipv4
source: otx
country: US
city: Washington
queried_at: 2026-03-10T04:01:41.549569
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Washington", "asn": "AS8075 microsoft corporation", "indicator": "52.190.60.170", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 51.79.186.233
indicator_type: ipv4
source: abuseipdb
country: SG
city: 0
hosting_provider: OVH SAS
queried_at: 2026-03-10T04:01:42.355194
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "SG", "isp": "OVH SAS", "domain": "ovhcloud.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-10-19T22:14:50+00:00", "categories": []}


indicator: 51.210.107.197
indicator_type: ipv4
source: abuseipdb
country: FR
city: 0
hosting_provider: OVH SAS
queried_at: 2026-03-10T04:01:44.346993
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "FR", "isp": "OVH SAS", "domain": "ovh.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-04-13T21:00:37+00:00", "categories": []}


indicator: 51.210.150.70
indicator_type: ipv4
source: abuseipdb
country: FR
city: 0
hosting_provider: OVH SAS
queried_at: 2026-03-10T04:01:46.110296
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "FR", "isp": "OVH SAS", "domain": "ovh.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 51.222.110.148
indicator_type: ipv4
source: abuseipdb
country: CA
city: 0
hosting_provider: OVH Hosting, Inc.
queried_at: 2026-03-10T04:01:49.542507
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "CA", "isp": "OVH Hosting, Inc.", "domain": "ovh.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 51.222.185.197
indicator_type: ipv4
source: abuseipdb
country: CA
city: 0
hosting_provider: 1337 Services, GmbH
queried_at: 2026-03-10T04:01:51.189995
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "CA", "isp": "1337 Services, GmbH", "domain": "as210558.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2023-11-28T00:19:49+00:00", "categories": []}


indicator: 51.38.109.145
indicator_type: ipv4
source: abuseipdb
country: DE
city: 0
hosting_provider: v S
queried_at: 2026-03-10T04:01:54.550528
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "DE", "isp": "v S", "domain": "ovh.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 51.38.129.35
indicator_type: ipv4
source: abuseipdb
country: PL
city: 0
hosting_provider: OVH Sp. z o. o.
queried_at: 2026-03-10T04:01:56.261549
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "PL", "isp": "OVH Sp. z o. o.", "domain": "ovh.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 51.38.137.108
indicator_type: ipv4
source: abuseipdb
country: PL
city: 0
hosting_provider: Pasquale Rota
queried_at: 2026-03-10T04:01:58.020121
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "PL", "isp": "Pasquale Rota", "domain": "ovh.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-04-04T18:25:06+00:00", "categories": []}


indicator: 51.38.137.97
indicator_type: ipv4
source: abuseipdb
country: PL
city: 0
hosting_provider: Pasquale Rota
queried_at: 2026-03-10T04:01:59.742754
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "PL", "isp": "Pasquale Rota", "domain": "ovh.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-04-02T02:20:56+00:00", "categories": []}


indicator: 51.38.185.204
indicator_type: ipv4
source: abuseipdb
country: FR
city: 0
hosting_provider: OVH SAS
queried_at: 2026-03-10T04:02:01.400431
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "FR", "isp": "OVH SAS", "domain": "ovh.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-07-02T07:05:27+00:00", "categories": []}


indicator: 51.38.215.206
indicator_type: ipv4
source: abuseipdb
country: FR
city: 1
hosting_provider: OVH SAS
queried_at: 2026-03-10T04:02:03.163105
raw_data:
  {"abuse_confidence": 0, "total_reports": 1, "is_public": true, "is_tor": false, "country": "FR", "isp": "OVH SAS", "domain": "ovh.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-01-10T23:06:10+00:00", "categories": [15]}


indicator: 51.44.180.176
indicator_type: ipv4
source: abuseipdb
country: FR
city: 0
hosting_provider: A100 ROW Inc
queried_at: 2026-03-10T04:02:06.719324
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "FR", "isp": "A100 ROW Inc", "domain": "auth-tec-on-beta.space", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 51.68.152.89
indicator_type: ipv4
source: abuseipdb
country: PL
city: 0
hosting_provider: OVH Sp. z o. o.
queried_at: 2026-03-10T04:02:08.542594
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "PL", "isp": "OVH Sp. z o. o.", "domain": "ovh.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-12-15T09:58:25+00:00", "categories": []}


indicator: 51.68.172.253
indicator_type: ipv4
source: abuseipdb
country: DE
city: 0
hosting_provider: OVH GmbH
queried_at: 2026-03-10T04:02:10.448893
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "DE", "isp": "OVH GmbH", "domain": "ovh.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 51.75.18.71
indicator_type: ipv4
source: abuseipdb
country: FR
city: 1
hosting_provider: OVH SAS
queried_at: 2026-03-10T04:02:14.029164
raw_data:
  {"abuse_confidence": 0, "total_reports": 1, "is_public": true, "is_tor": false, "country": "FR", "isp": "OVH SAS", "domain": "ovh.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2026-01-10T23:06:12+00:00", "categories": [15]}


indicator: 51.210.107.197
indicator_type: ipv4
source: virustotal
country: FR
hosting_provider: OVH SAS
queried_at: 2026-03-10T04:02:17.828086
raw_data:
  {"malicious": 2, "suspicious": 0, "harmless": 60, "undetected": 32, "reputation": -1, "country": "FR", "as_owner": "OVH SAS", "asn": 16276, "network": "51.210.0.0/16", "last_analysis_date": 1770337734}


indicator: 51.210.150.70
indicator_type: ipv4
source: virustotal
country: FR
hosting_provider: OVH SAS
queried_at: 2026-03-10T04:02:38.256731
raw_data:
  {"malicious": 7, "suspicious": 0, "harmless": 53, "undetected": 34, "reputation": -12, "country": "FR", "as_owner": "OVH SAS", "asn": 16276, "network": "51.210.0.0/16", "last_analysis_date": 1769327786}


indicator: 51.210.61.198
indicator_type: ipv4
source: virustotal
country: FR
hosting_provider: OVH SAS
queried_at: 2026-03-10T04:02:58.790008
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "FR", "as_owner": "OVH SAS", "asn": 16276, "network": "51.210.0.0/16", "last_analysis_date": 1730079645}


indicator: 51.222.110.148
indicator_type: ipv4
source: virustotal
country: CA
hosting_provider: OVH SAS
queried_at: 2026-03-10T04:03:19.188801
raw_data:
  {"malicious": 7, "suspicious": 0, "harmless": 54, "undetected": 33, "reputation": -1, "country": "CA", "as_owner": "OVH SAS", "asn": 16276, "network": "51.222.0.0/16", "last_analysis_date": 1770502245}


indicator: 51.222.185.197
indicator_type: ipv4
source: virustotal
country: CA
hosting_provider: OVH SAS
queried_at: 2026-03-10T04:03:39.435813
raw_data:
  {"malicious": 8, "suspicious": 0, "harmless": 55, "undetected": 31, "reputation": -1, "country": "CA", "as_owner": "OVH SAS", "asn": 16276, "network": "51.222.0.0/16", "last_analysis_date": 1770504579}


indicator: 51.255.152.139
indicator_type: ipv4
source: virustotal
country: FR
hosting_provider: OVH SAS
queried_at: 2026-03-10T04:03:59.658417
raw_data:
  {"malicious": 4, "suspicious": 0, "harmless": 57, "undetected": 33, "reputation": -1, "country": "FR", "as_owner": "OVH SAS", "asn": 16276, "network": "51.254.0.0/15", "last_analysis_date": 1771327270}


indicator: 51.38.109.145
indicator_type: ipv4
source: virustotal
country: FR
hosting_provider: OVH SAS
queried_at: 2026-03-10T04:04:20.072198
raw_data:
  {"malicious": 8, "suspicious": 0, "harmless": 53, "undetected": 33, "reputation": -1, "country": "FR", "as_owner": "OVH SAS", "asn": 16276, "network": "51.38.0.0/16", "last_analysis_date": 1770502210}


indicator: 51.38.129.35
indicator_type: ipv4
source: virustotal
country: FR
hosting_provider: OVH SAS
queried_at: 2026-03-10T04:04:40.308827
raw_data:
  {"malicious": 5, "suspicious": 0, "harmless": 57, "undetected": 32, "reputation": 0, "country": "FR", "as_owner": "OVH SAS", "asn": 16276, "network": "51.38.0.0/16", "last_analysis_date": 1770091257}


indicator: 51.38.137.108
indicator_type: ipv4
source: virustotal
country: FR
hosting_provider: OVH SAS
queried_at: 2026-03-10T04:05:00.580467
raw_data:
  {"malicious": 6, "suspicious": 0, "harmless": 52, "undetected": 36, "reputation": -1, "country": "FR", "as_owner": "OVH SAS", "asn": 16276, "network": "51.38.0.0/16", "last_analysis_date": 1772766337}


indicator: 51.38.137.97
indicator_type: ipv4
source: virustotal
country: FR
hosting_provider: OVH SAS
queried_at: 2026-03-10T04:05:20.836403
raw_data:
  {"malicious": 7, "suspicious": 0, "harmless": 53, "undetected": 34, "reputation": -1, "country": "FR", "as_owner": "OVH SAS", "asn": 16276, "network": "51.38.0.0/16", "last_analysis_date": 1765491733}


indicator: 51.210.107.197
indicator_type: ipv4
source: dshield
country: FR
reverse_dns: 51.210.0.0/16
hosting_provider: OVH
queried_at: 2026-03-10T04:05:41.387953
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ovh.net", "as": 16276, "asname": "OVH", "ascountry": "FR", "assource": "", "network": "51.210.0.0/16", "threatfeeds": {}}


indicator: 51.222.110.148
indicator_type: ipv4
source: dshield
country: FR
reverse_dns: 51.222.0.0/16
hosting_provider: OVH
queried_at: 2026-03-10T04:05:45.369852
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ovh.net", "as": 16276, "asname": "OVH", "ascountry": "FR", "assource": "", "network": "51.222.0.0/16", "threatfeeds": {}}


indicator: 51.255.152.139
indicator_type: ipv4
source: dshield
country: FR
reverse_dns: 51.254.0.0/15
hosting_provider: OVH
queried_at: 2026-03-10T04:05:47.982305
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ovh.net", "as": 16276, "asname": "OVH", "ascountry": "FR", "assource": "", "network": "51.254.0.0/15", "threatfeeds": {}}


indicator: 51.38.109.145
indicator_type: ipv4
source: dshield
country: FR
reverse_dns: 51.38.0.0/16
hosting_provider: OVH
queried_at: 2026-03-10T04:05:49.315419
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ovh.net", "as": 16276, "asname": "OVH", "ascountry": "FR", "assource": "", "network": "51.38.0.0/16", "threatfeeds": {}}


indicator: 51.38.185.204
indicator_type: ipv4
source: dshield
country: FR
reverse_dns: 51.38.0.0/16
hosting_provider: OVH
queried_at: 2026-03-10T04:05:54.580912
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ovh.net", "as": 16276, "asname": "OVH", "ascountry": "FR", "assource": "", "network": "51.38.0.0/16", "threatfeeds": {"threatview": {"lastseen": "2024-10-02", "firstseen": "2024-01-11"}}}


indicator: 51.44.180.176
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 51.44.0.0/16
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:05:58.875502
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "51.44.0.0/16", "threatfeeds": {}}


indicator: 51.68.152.89
indicator_type: ipv4
source: dshield
country: FR
reverse_dns: 51.68.0.0/16
hosting_provider: OVH
queried_at: 2026-03-10T04:06:00.190701
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ovh.net", "as": 16276, "asname": "OVH", "ascountry": "FR", "assource": "", "network": "51.68.0.0/16", "threatfeeds": {"alltor": {"lastseen": "2026-03-02", "firstseen": "2025-02-12"}}}


indicator: 51.68.172.253
indicator_type: ipv4
source: dshield
country: FR
reverse_dns: 51.68.0.0/16
hosting_provider: OVH
queried_at: 2026-03-10T04:06:01.555290
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ovh.net", "as": 16276, "asname": "OVH", "ascountry": "FR", "assource": "", "network": "51.68.0.0/16", "threatfeeds": {}}


indicator: 51.75.125.53
indicator_type: ipv4
source: dshield
country: FR
reverse_dns: 51.75.0.0/16
hosting_provider: OVH
queried_at: 2026-03-10T04:06:02.740733
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ovh.net", "as": 16276, "asname": "OVH", "ascountry": "FR", "assource": "", "network": "51.75.0.0/16", "threatfeeds": {}}


indicator: 51.75.18.71
indicator_type: ipv4
source: dshield
country: FR
reverse_dns: 51.75.0.0/16
hosting_provider: OVH
queried_at: 2026-03-10T04:06:04.044066
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ovh.net", "as": 16276, "asname": "OVH", "ascountry": "FR", "assource": "", "network": "51.75.0.0/16", "threatfeeds": {"threatview": {"lastseen": "2024-04-13", "firstseen": "2024-04-05"}}}


indicator: 51.75.70.246
indicator_type: ipv4
source: dshield
country: FR
reverse_dns: 51.75.0.0/16
hosting_provider: OVH
queried_at: 2026-03-10T04:06:06.769678
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ovh.net", "as": 16276, "asname": "OVH", "ascountry": "FR", "assource": "", "network": "51.75.0.0/16", "threatfeeds": {"alltor": {"lastseen": "2026-03-02", "firstseen": "2025-02-04"}}}


indicator: 51.79.186.233
indicator_type: ipv4
source: dshield
country: FR
reverse_dns: 51.79.128.0/17
hosting_provider: OVH
queried_at: 2026-03-10T04:06:08.086631
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ovh.net", "as": 16276, "asname": "OVH", "ascountry": "FR", "assource": "", "network": "51.79.128.0/17", "threatfeeds": {"blocklistde22": {"lastseen": "2023-01-31", "firstseen": "2022-12-20"}}}


indicator: 51.79.203.148
indicator_type: ipv4
source: dshield
country: FR
reverse_dns: 51.79.128.0/17
hosting_provider: OVH
queried_at: 2026-03-10T04:06:09.404393
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ovh.net", "as": 16276, "asname": "OVH", "ascountry": "FR", "assource": "", "network": "51.79.128.0/17", "threatfeeds": {}}


indicator: 51.81.171.234
indicator_type: ipv4
source: dshield
country: FR
reverse_dns: 51.81.128.0/17
hosting_provider: OVH
queried_at: 2026-03-10T04:06:12.051768
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ovh.net", "as": 16276, "asname": "OVH", "ascountry": "FR", "assource": "", "network": "51.81.128.0/17", "threatfeeds": {}}


indicator: 51.81.46.71
indicator_type: ipv4
source: dshield
country: FR
reverse_dns: 51.81.0.0/17
hosting_provider: OVH
queried_at: 2026-03-10T04:06:13.412169
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ovh.net", "as": 16276, "asname": "OVH", "ascountry": "FR", "assource": "", "network": "51.81.0.0/17", "threatfeeds": {}}


indicator: 51.84.68.245
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 51.84.0.0/16
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:06:14.722126
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "51.84.0.0/16", "threatfeeds": {}}


indicator: 51.89.153.112
indicator_type: ipv4
source: dshield
country: FR
reverse_dns: 51.89.0.0/16
hosting_provider: OVH
queried_at: 2026-03-10T04:06:16.044975
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ovh.net", "as": 16276, "asname": "OVH", "ascountry": "FR", "assource": "", "network": "51.89.0.0/16", "threatfeeds": {"blocklistde110": {"lastseen": "2025-01-13", "firstseen": "2023-07-07"}, "blocklistde143": {"lastseen": "2025-01-13", "firstseen": "2023-07-07"}, "blocklistde22": {"lastseen": "2025-01-13", "firstseen": "2022-10-17"}, "blocklistde25": {"lastseen": "2025-01-13", 


indicator: 51.89.190.23
indicator_type: ipv4
source: dshield
country: FR
reverse_dns: 51.89.0.0/16
hosting_provider: OVH
queried_at: 2026-03-10T04:06:17.540564
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ovh.net", "as": 16276, "asname": "OVH", "ascountry": "FR", "assource": "", "network": "51.89.0.0/16", "threatfeeds": {}}


indicator: 51.89.204.162
indicator_type: ipv4
source: dshield
country: FR
reverse_dns: 51.89.0.0/16
hosting_provider: OVH
queried_at: 2026-03-10T04:06:19.211416
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ovh.net", "as": 16276, "asname": "OVH", "ascountry": "FR", "assource": "", "network": "51.89.0.0/16", "threatfeeds": {"blocklistde443": {"lastseen": "2020-05-27", "firstseen": "2020-05-25"}, "blocklistde80": {"lastseen": "2020-05-27", "firstseen": "2020-05-25"}, "blocklistdeapache": {"lastseen": "2020-05-27", "firstseen": "2020-05-25"}, "blocklistdebruteforcelogin": {"lastseen"


indicator: 51.91.98.68
indicator_type: ipv4
source: dshield
country: FR
reverse_dns: 51.91.0.0/16
hosting_provider: OVH
queried_at: 2026-03-10T04:06:22.064639
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ovh.net", "as": 16276, "asname": "OVH", "ascountry": "FR", "assource": "", "network": "51.91.0.0/16", "threatfeeds": {}}


indicator: 51.92.38.49
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 51.92.0.0/16
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:06:23.377963
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "51.92.0.0/16", "threatfeeds": {}}


indicator: 52.136.38.252
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 52.136.0.0/13
hosting_provider: MICROSOFT-CORP-MSN-AS-BLOCK
queried_at: 2026-03-10T04:06:24.694189
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@microsoft.com", "as": 8075, "asname": "MICROSOFT-CORP-MSN-AS-BLOCK", "ascountry": "US", "assource": "", "network": "52.136.0.0/13", "threatfeeds": {}}


indicator: 52.14.195.173
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 52.14.0.0/16
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:06:25.999331
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "52.14.0.0/16", "threatfeeds": {}}


indicator: 52.165.19.23
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 52.160.0.0/11
hosting_provider: MICROSOFT-CORP-MSN-AS-BLOCK
queried_at: 2026-03-10T04:06:28.643668
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@microsoft.com", "as": 8075, "asname": "MICROSOFT-CORP-MSN-AS-BLOCK", "ascountry": "US", "assource": "", "network": "52.160.0.0/11", "threatfeeds": {}}


indicator: 52.193.58.5
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 52.192.0.0/15
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:06:36.865161
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "52.192.0.0/15", "threatfeeds": {}}


indicator: 52.198.46.216
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 52.196.0.0/14
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:06:38.181893
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "52.196.0.0/14", "threatfeeds": {}}


indicator: 52.201.232.45
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 52.200.0.0/13
hosting_provider: AMAZON-AES
queried_at: 2026-03-10T04:06:39.487580
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 14618, "asname": "AMAZON-AES", "ascountry": "US", "assource": "", "network": "52.200.0.0/13", "threatfeeds": {}}


indicator: 52.209.223.124
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 52.208.0.0/13
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:06:43.452517
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "52.208.0.0/13", "threatfeeds": {}}


indicator: 52.221.213.139
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 52.220.0.0/15
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:06:47.461125
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "52.220.0.0/15", "threatfeeds": {}}


indicator: 52.237.129.18
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 52.224.0.0/11
hosting_provider: MICROSOFT-CORP-MSN-AS-BLOCK
queried_at: 2026-03-10T04:06:48.791199
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@microsoft.com", "as": 8075, "asname": "MICROSOFT-CORP-MSN-AS-BLOCK", "ascountry": "US", "assource": "", "network": "52.224.0.0/11", "threatfeeds": {}}


indicator: 52.24.182.51
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 52.24.0.0/14
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:06:51.410649
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "52.24.0.0/14", "threatfeeds": {}}


indicator: 52.29.22.28
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 52.29.0.0/16
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:06:54.031428
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "52.29.0.0/16", "threatfeeds": {}}


indicator: 52.33.2.63
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 52.32.0.0/14
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:06:55.371362
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "52.32.0.0/14", "threatfeeds": {}}


indicator: 52.37.189.73
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 52.36.0.0/14
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:06:59.361627
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "52.36.0.0/14", "threatfeeds": {}}


indicator: 52.50.101.30
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 52.48.0.0/14
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:07:01.873756
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "52.48.0.0/14", "threatfeeds": {}}


indicator: 52.53.183.22
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 52.52.0.0/15
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:07:04.506732
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "52.52.0.0/15", "threatfeeds": {}}


indicator: 52.57.50.216
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 52.57.0.0/16
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:07:08.484855
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "52.57.0.0/16", "threatfeeds": {}}


indicator: 52.59.145.165
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 52.58.0.0/15
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:07:09.793625
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "52.58.0.0/15", "threatfeeds": {}}


indicator: 52.63.25.206
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 52.62.0.0/15
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:07:11.119076
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "52.62.0.0/15", "threatfeeds": {}}


indicator: 52.65.232.189
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 52.65.0.0/16
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:07:12.454477
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "52.65.0.0/16", "threatfeeds": {}}


indicator: 52.66.229.131
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 52.66.128.0/17
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:07:13.763589
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "52.66.128.0/17", "threatfeeds": {}}


indicator: 52.67.231.24
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 52.67.0.0/16
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:07:15.087744
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "52.67.0.0/16", "threatfeeds": {}}


indicator: 52.68.47.107
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 52.68.0.0/15
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:07:17.815610
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "52.68.0.0/15", "threatfeeds": {}}


indicator: 52.74.10.157
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 52.74.0.0/16
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:07:19.109565
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "52.74.0.0/16", "threatfeeds": {}}


indicator: 52.76.203.85
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 52.76.128.0/17
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:07:20.409983
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "52.76.128.0/17", "threatfeeds": {}}


indicator: 52.77.3.235
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 52.77.0.0/16
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:07:21.743278
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "52.77.0.0/16", "threatfeeds": {}}


indicator: 52.78.43.89
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 52.78.0.0/16
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:07:23.041294
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "52.78.0.0/16", "threatfeeds": {}}


indicator: 52.87.98.176
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 52.86.0.0/15
hosting_provider: AMAZON-AES
queried_at: 2026-03-10T04:07:24.354435
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 14618, "asname": "AMAZON-AES", "ascountry": "US", "assource": "", "network": "52.86.0.0/15", "threatfeeds": {}}


indicator: 52.91.72.92
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 52.90.0.0/15
hosting_provider: AMAZON-AES
queried_at: 2026-03-10T04:07:25.665394
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 14618, "asname": "AMAZON-AES", "ascountry": "US", "assource": "", "network": "52.90.0.0/15", "threatfeeds": {}}


indicator: 54.153.145.247
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 54.153.128.0/17
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:07:27.141470
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "54.153.128.0/17", "threatfeeds": {}}


indicator: 54.154.74.193
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 54.154.0.0/16
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:07:28.513107
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "54.154.0.0/16", "threatfeeds": {}}


indicator: 54.165.112.96
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 54.164.0.0/15
hosting_provider: AMAZON-AES
queried_at: 2026-03-10T04:07:29.833946
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 14618, "asname": "AMAZON-AES", "ascountry": "US", "assource": "", "network": "54.164.0.0/15", "threatfeeds": {}}


indicator: 54.166.193.172
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 54.166.0.0/15
hosting_provider: AMAZON-AES
queried_at: 2026-03-10T04:07:31.139152
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 14618, "asname": "AMAZON-AES", "ascountry": "US", "assource": "", "network": "54.166.0.0/15", "threatfeeds": {}}


indicator: 54.168.200.156
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 54.168.0.0/16
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:07:32.457506
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "54.168.0.0/16", "threatfeeds": {}}


indicator: 54.169.93.143
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 54.169.0.0/17
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:07:33.796379
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "54.169.0.0/17", "threatfeeds": {}}


indicator: 54.173.222.119
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 54.172.0.0/15
hosting_provider: AMAZON-AES
queried_at: 2026-03-10T04:07:35.105305
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 14618, "asname": "AMAZON-AES", "ascountry": "US", "assource": "", "network": "54.172.0.0/15", "threatfeeds": {}}


indicator: 54.177.153.237
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 54.176.0.0/15
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:07:36.425129
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "54.176.0.0/15", "threatfeeds": {}}


indicator: 54.180.235.236
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 54.180.0.0/15
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:07:39.078298
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "54.180.0.0/15", "threatfeeds": {}}


indicator: 54.183.190.151
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 54.183.128.0/17
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:07:40.373026
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "54.183.128.0/17", "threatfeeds": {}}


indicator: 54.183.76.134
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 54.183.0.0/17
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:07:41.716218
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "54.183.0.0/17", "threatfeeds": {}}


indicator: 54.185.242.138
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 54.184.0.0/15
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:07:42.921207
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "54.184.0.0/15", "threatfeeds": {}}


indicator: 54.186.96.95
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 54.186.0.0/15
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:07:44.241712
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "54.186.0.0/15", "threatfeeds": {}}


indicator: 54.188.72.230
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 54.188.0.0/15
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:07:45.507492
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "54.188.0.0/15", "threatfeeds": {}}


indicator: 54.191.118.2
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 54.191.0.0/16
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:07:48.130039
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "54.191.0.0/16", "threatfeeds": {}}


indicator: 54.193.163.62
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 54.193.128.0/17
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:07:50.762974
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "54.193.128.0/17", "threatfeeds": {}}


indicator: 54.196.216.193
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 54.196.0.0/15
hosting_provider: AMAZON-AES
queried_at: 2026-03-10T04:07:52.070622
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 14618, "asname": "AMAZON-AES", "ascountry": "US", "assource": "", "network": "54.196.0.0/15", "threatfeeds": {}}


indicator: 54.198.204.238
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 54.198.0.0/16
hosting_provider: AMAZON-AES
queried_at: 2026-03-10T04:07:54.711204
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 14618, "asname": "AMAZON-AES", "ascountry": "US", "assource": "", "network": "54.198.0.0/16", "threatfeeds": {}}


indicator: 54.203.9.92
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 54.202.0.0/15
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:07:56.030718
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "54.202.0.0/15", "threatfeeds": {}}


indicator: 54.204.231.234
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 54.204.0.0/15
hosting_provider: AMAZON-AES
queried_at: 2026-03-10T04:07:57.334118
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 14618, "asname": "AMAZON-AES", "ascountry": "US", "assource": "", "network": "54.204.0.0/15", "threatfeeds": {}}


indicator: 54.206.46.15
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 54.206.0.0/17
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:07:58.659256
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "54.206.0.0/17", "threatfeeds": {}}


indicator: 54.228.98.238
indicator_type: ipv4
source: shodan
city: cloud
reverse_dns: ec2-54-228-98-238.eu-west-1.compute.amazonaws.com,alphadub.orchestra.eu-west-1.one.alameda.aws.dev
queried_at: 2026-03-10T04:24:58.010747
raw_data:
  {"ports": [443], "vulns": [], "hostnames": ["ec2-54-228-98-238.eu-west-1.compute.amazonaws.com", "alphadub.orchestra.eu-west-1.one.alameda.aws.dev"], "tags": ["cloud"], "cpes": []}


indicator: 54.233.36.163
indicator_type: ipv4
source: shodan
city: cloud
reverse_dns: ec2-54-233-36-163.sa-east-1.compute.amazonaws.com
hosting_provider: cpe:/a:oracle:jre,cpe:/a:eclipse:jetty:9.2.11
queried_at: 2026-03-10T04:25:01.461797
raw_data:
  {"ports": [8765], "vulns": ["CVE-2017-7658", "CVE-2021-28165", "CVE-2017-9735", "CVE-2023-44487", "CVE-2018-12536", "CVE-2024-9823", "CVE-2022-2048", "CVE-2024-6763", "CVE-2022-2047", "CVE-2017-7656", "CVE-2023-26048", "CVE-2020-27216", "CVE-2021-34428", "CVE-2019-10241", "CVE-2019-10247", "CVE-2017-7657", "CVE-2021-28169", "CVE-2023-40167", "CVE-2023-26049", "CVE-2023-36479"], "hostnames": ["ec2-54-233-36-163.sa-east-1.compute.amazonaws.com"], "tags": ["cloud"], "cpes": ["cpe:/a:oracle:jre", "c


indicator: 54.233.69.35
indicator_type: ipv4
source: shodan
city: cloud
reverse_dns: ec2-54-233-69-35.sa-east-1.compute.amazonaws.com
queried_at: 2026-03-10T04:25:03.083625
raw_data:
  {"ports": [2320, 8171, 12228], "vulns": ["CVE-2001-1556", "CVE-2017-9735", "CVE-2023-38709", "CVE-2022-22719", "CVE-2011-4317", "CVE-2023-44487", "CVE-2021-40438", "CVE-2013-2765", "CVE-2003-0020", "CVE-2022-2048", "CVE-2022-22721", "CVE-2023-26048", "CVE-2004-0942", "CVE-2011-3368", "CVE-2019-10241", "CVE-2004-0940", "CVE-2009-0796", "CVE-2004-2343", "CVE-2017-7657", "CVE-2021-44790", "CVE-2023-40167", "CVE-2007-3304", "CVE-2013-4365", "CVE-2023-26049", "CVE-2003-0987", "CVE-2017-9788", "CVE-20

hosting_provider:
  cpe:/a:apache:http_server:1.3.9,cpe:/a:f5:nginx,cpe:/a:oracle:jre,cpe:/a:eclipse:jetty:9.2.11,cpe:/a:openresty:openresty


indicator: 54.36.191.194
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: vps-cf5e89eb.vps.ovh.net
queried_at: 2026-03-10T04:25:04.747032
raw_data:
  {"ports": [22, 80], "vulns": ["CVE-2025-23419", "CVE-2023-44487"], "hostnames": ["vps-cf5e89eb.vps.ovh.net"], "tags": ["eol-product"], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:9.6p1", "cpe:/a:f5:nginx:1.24.0", "cpe:/o:canonical:ubuntu_linux"]}

hosting_provider:
[cell repeats an earlier one in this file: 107 characters]


indicator: 54.79.231.85
indicator_type: ipv4
source: shodan
city: cloud
reverse_dns: ec2-54-79-231-85.ap-southeast-2.compute.amazonaws.com
hosting_provider: cpe:/a:amazon:elastic_load_balancing
queried_at: 2026-03-10T04:25:15.054931
raw_data:
  {"ports": [443], "vulns": [], "hostnames": ["ec2-54-79-231-85.ap-southeast-2.compute.amazonaws.com"], "tags": ["cloud"], "cpes": ["cpe:/a:amazon:elastic_load_balancing"]}


indicator: 54.92.152.14
indicator_type: ipv4
source: shodan
city: cloud
reverse_dns: ec2-54-92-152-14.compute-1.amazonaws.com
queried_at: 2026-03-10T04:25:21.910349
raw_data:
  {"ports": [80, 8080], "vulns": [], "hostnames": ["ec2-54-92-152-14.compute-1.amazonaws.com"], "tags": ["cloud"], "cpes": []}


indicator: 57.128.224.217
indicator_type: ipv4
source: shodan
reverse_dns: vps-a82cce92.vps.ovh.net
hosting_provider: cpe:/o:linux:linux_kernel,cpe:/a:openbsd:openssh:9.2p1,cpe:/o:debian:debian_linux
queried_at: 2026-03-10T04:25:33.533304
raw_data:
  {"ports": [22, 80], "vulns": [], "hostnames": ["vps-a82cce92.vps.ovh.net"], "tags": [], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:9.2p1", "cpe:/o:debian:debian_linux"]}


indicator: 57.134.18.229
indicator_type: ipv4
source: shodan
reverse_dns: 57-134-18-229.resi.cgocable.ca
queried_at: 2026-03-10T04:25:38.492438
raw_data:
  {"ports": [7547], "vulns": [], "hostnames": ["57-134-18-229.resi.cgocable.ca"], "tags": [], "cpes": []}


indicator: 57.180.221.59
indicator_type: ipv4
source: shodan
city: cloud
reverse_dns: reporting.trendmicro.com,ec2-57-180-221-59.ap-northeast-1.compute.amazonaws.com
hosting_provider: cpe:/a:f5:nginx:1.29.1,cpe:/a:amazon:elastic_load_balancing
queried_at: 2026-03-10T04:25:41.762404
raw_data:
  {"ports": [80, 443], "vulns": [], "hostnames": ["reporting.trendmicro.com", "ec2-57-180-221-59.ap-northeast-1.compute.amazonaws.com"], "tags": ["cloud"], "cpes": ["cpe:/a:f5:nginx:1.29.1", "cpe:/a:amazon:elastic_load_balancing"]}


indicator: 58.65.172.130
indicator_type: ipv4
source: shodan
reverse_dns: 58-65-172-130.nayatel.pk
hosting_provider: cpe:/a:openbsd:openssh:8.2p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-03-10T04:25:46.825251
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["58-65-172-130.nayatel.pk"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.2p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 59.110.140.142
indicator_type: ipv4
source: shodan
city: database
hosting_provider: cpe:/a:oracle:mysql:8.0.43-0ubuntu0.24.04.1
queried_at: 2026-03-10T04:25:50.204056
raw_data:
  {"ports": [3306], "vulns": [], "hostnames": [], "tags": ["database"], "cpes": ["cpe:/a:oracle:mysql:8.0.43-0ubuntu0.24.04.1"]}


indicator: 59.110.4.100
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/a:openbsd:openssh:7.4
queried_at: 2026-03-10T04:25:51.857031
raw_data:
  {"ports": [22, 111], "vulns": ["CVE-2023-51385", "CVE-2019-6110", "CVE-2020-14145", "CVE-2023-51767", "CVE-2007-2768", "CVE-2019-6111", "CVE-2020-15778", "CVE-2017-15906", "CVE-2023-48795", "CVE-2021-36368", "CVE-2023-38408", "CVE-2008-3844", "CVE-2025-26465", "CVE-2018-15919", "CVE-2016-20012", "CVE-2025-32728", "CVE-2021-41617", "CVE-2018-15473", "CVE-2019-6109", "CVE-2018-20685"], "hostnames": [], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:7.4"]}


indicator: 59.110.94.209
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/a:openbsd:openssh:8.0
queried_at: 2026-03-10T04:25:53.782091
raw_data:
  {"ports": [22], "vulns": ["CVE-2021-36368", "CVE-2025-26465", "CVE-2025-32728", "CVE-2019-16905", "CVE-2020-15778", "CVE-2021-41617", "CVE-2023-38408", "CVE-2023-51767", "CVE-2008-3844", "CVE-2023-51385", "CVE-2016-20012", "CVE-2007-2768", "CVE-2020-14145", "CVE-2023-48795"], "hostnames": [], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.0"]}


indicator: 54.207.42.231
indicator_type: ipv4
source: otx
country: BR
city: São Paulo
reverse_dns: jusbrasilflash.com,flashjusbrasil.com
queried_at: 2026-03-10T04:25:56.378820
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Brazil", "country_code": "BR", "city": "S\u00e3o Paulo", "asn": "AS16509 amazon.com inc", "indicator": "54.207.42.231", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["jusbrasilflash.com", "flashjusbrasil.com"]}


indicator: 54.210.76.140
indicator_type: ipv4
source: otx
country: US
city: Ashburn
queried_at: 2026-03-10T04:25:58.228136
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Ashburn", "asn": "AS14618 amazon.com  inc.", "indicator": "54.210.76.140", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 54.211.137.88
indicator_type: ipv4
source: otx
country: US
city: Ashburn
queried_at: 2026-03-10T04:26:00.071515
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Ashburn", "asn": "AS14618 amazon.com  inc.", "indicator": "54.211.137.88", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 54.213.206.148
indicator_type: ipv4
source: otx
country: US
city: Boardman
hosting_provider: ioc,malicious,cyber security,Nextray,phishing
queried_at: 2026-03-10T04:26:02.910316
raw_data:
  {"pulse_count": 35, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Boardman", "asn": "AS16509 amazon.com inc", "indicator": "54.213.206.148", "tags": ["ioc", "malicious", "cyber security", "Nextray", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse c


indicator: 54.213.218.45
indicator_type: ipv4
source: otx
country: US
city: Boardman
reverse_dns: 54-213-218-45.ipv4.nknlabs.io
queried_at: 2026-03-10T04:26:04.832959
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Boardman", "asn": "AS16509 amazon.com inc", "indicator": "54.213.218.45", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["54-213-218-45.ipv4.nknlabs.io"]}


indicator: 54.213.235.215
indicator_type: ipv4
source: otx
country: US
city: Boardman
reverse_dns: vault-smoke-test-c440e61c-72dc-44f7.vault.11eb0449-3343-7d63-a423-0242ac11000b.aws.hcp.to
queried_at: 2026-03-10T04:26:06.411988
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Boardman", "asn": "AS16509 amazon.com inc", "indicator": "54.213.235.215", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["vault-smoke-test-c440e61c-72dc-44f7.vault.11eb0449-3343-7d63-a423-0242ac11000b.aws.hcp.to"]}


indicator: 54.216.72.51
indicator_type: ipv4
source: otx
country: IE
city: Dublin
reverse_dns: ec2-54-216-72-51.eu-west-1.compute.amazonaws.com
queried_at: 2026-03-10T04:26:08.263408
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Ireland", "country_code": "IE", "city": "Dublin", "asn": "AS16509 amazon.com inc", "indicator": "54.216.72.51", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["ec2-54-216-72-51.eu-west-1.compute.amazonaws.com"]}


indicator: 54.228.98.238
indicator_type: ipv4
source: otx
country: IE
city: Dublin
queried_at: 2026-03-10T04:26:09.865187
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Ireland", "country_code": "IE", "city": "Dublin", "asn": "AS16509 amazon.com inc", "indicator": "54.228.98.238", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 54.232.43.57
indicator_type: ipv4
source: otx
country: BR
city: São Paulo
queried_at: 2026-03-10T04:26:11.633244
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Brazil", "country_code": "BR", "city": "S\u00e3o Paulo", "asn": "AS16509 amazon.com inc", "indicator": "54.232.43.57", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 54.233.36.163
indicator_type: ipv4
source: otx
country: BR
city: São Paulo
queried_at: 2026-03-10T04:26:13.166655
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Brazil", "country_code": "BR", "city": "S\u00e3o Paulo", "asn": "AS16509 amazon.com inc", "indicator": "54.233.36.163", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 54.233.69.35
indicator_type: ipv4
source: otx
country: BR
city: São Paulo
reverse_dns: v2raykond.kondgk2.club,morgan.oxnishost.com
queried_at: 2026-03-10T04:26:14.950002
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Brazil", "country_code": "BR", "city": "S\u00e3o Paulo", "asn": "AS16509 amazon.com inc", "indicator": "54.233.69.35", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["v2raykond.kondgk2.club", "morgan.oxnishost.com"]}


indicator: 54.36.191.194
indicator_type: ipv4
source: otx
country: GB
city: Leyton
queried_at: 2026-03-10T04:26:16.679591
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": "Leyton", "asn": "AS16276 ovh sas", "indicator": "54.36.191.194", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 54.65.69.99
indicator_type: ipv4
source: otx
country: JP
city: Tokyo
queried_at: 2026-03-10T04:26:18.426938
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Japan", "country_code": "JP", "city": "Tokyo", "asn": "AS16509 amazon.com inc", "indicator": "54.65.69.99", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 54.71.7.37
indicator_type: ipv4
source: otx
country: US
city: Boardman
queried_at: 2026-03-10T04:26:19.905312
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Boardman", "asn": "AS16509 amazon.com inc", "indicator": "54.71.7.37", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 54.74.255.67
indicator_type: ipv4
source: otx
country: IE
city: Dublin
reverse_dns: staging.promowinners.com
queried_at: 2026-03-10T04:26:21.739527
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Ireland", "country_code": "IE", "city": "Dublin", "asn": "AS16509 amazon.com inc", "indicator": "54.74.255.67", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["staging.promowinners.com"]}


indicator: 54.75.204.104
indicator_type: ipv4
source: otx
country: IE
city: Dublin
queried_at: 2026-03-10T04:26:23.234103
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Ireland", "country_code": "IE", "city": "Dublin", "asn": "AS16509 amazon.com inc", "indicator": "54.75.204.104", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 54.79.220.38
indicator_type: ipv4
source: otx
country: AU
city: Sydney
queried_at: 2026-03-10T04:26:24.989032
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS16509 amazon.com inc", "indicator": "54.79.220.38", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 54.79.231.85
indicator_type: ipv4
source: otx
country: AU
city: Sydney
reverse_dns: decloud.com.au,vpp.ai
queried_at: 2026-03-10T04:26:26.673912
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Australia", "country_code": "AU", "city": "Sydney", "asn": "AS16509 amazon.com inc", "indicator": "54.79.231.85", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["decloud.com.au", "vpp.ai"]}


indicator: 54.82.229.132
indicator_type: ipv4
source: otx
country: US
city: Ashburn
queried_at: 2026-03-10T04:26:28.513654
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Ashburn", "asn": "AS14618 amazon.com  inc.", "indicator": "54.82.229.132", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 54.87.180.125
indicator_type: ipv4
source: otx
country: US
city: Ashburn
queried_at: 2026-03-10T04:26:30.660559
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Ashburn", "asn": "AS14618 amazon.com  inc.", "indicator": "54.87.180.125", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 54.90.212.140
indicator_type: ipv4
source: otx
country: US
city: Ashburn
queried_at: 2026-03-10T04:26:32.670918
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Ashburn", "asn": "AS14618 amazon.com  inc.", "indicator": "54.90.212.140", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 54.92.152.14
indicator_type: ipv4
source: otx
country: US
city: Ashburn
reverse_dns: gophish.apollosecure.com,tedk12.com,candidly-yours.com
queried_at: 2026-03-10T04:26:34.200146
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Ashburn", "asn": "AS14618 amazon.com  inc.", "indicator": "54.92.152.14", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["gophish.apollosecure.com", "tedk12.com", "candidly-yours.com"]}


indicator: 54.93.36.37
indicator_type: ipv4
source: otx
country: DE
city: Frankfurt am Main
reverse_dns: ec2-54-93-36-37.eu-central-1.compute.amazonaws.com
queried_at: 2026-03-10T04:26:35.803535
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Frankfurt am Main", "asn": "AS16509 amazon.com inc", "indicator": "54.93.36.37", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["ec2-54-93-36-37.eu-central-1.compute.amazonaws.com"]}


indicator: 56.124.52.240
indicator_type: ipv4
source: otx
country: US
hosting_provider: CobaltStrike,Remcos,Deimos,Mythic,NetSupportRAT,Havoc,Sliver,C2
queried_at: 2026-03-10T04:26:37.392104
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "56.124.52.240", "tags": ["CobaltStrike", "Remcos", "Deimos", "Mythic", "NetSupportRAT", "Havoc", "Sliver", "C2"], "pulses": ["Threatfox Recent Additions", "Twitter Feed - drb_ra - 05-03-2025"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 56.155.12.98
indicator_type: ipv4
source: otx
country: US
queried_at: 2026-03-10T04:26:39.245268
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "56.155.12.98", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 56.155.3.36
indicator_type: ipv4
source: otx
country: US
queried_at: 2026-03-10T04:26:40.893430
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "56.155.3.36", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 56.155.32.7
indicator_type: ipv4
source: otx
country: US
queried_at: 2026-03-10T04:26:42.912055
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "56.155.32.7", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 57.128.134.229
indicator_type: ipv4
source: otx
country: BE
queried_at: 2026-03-10T04:26:44.482577
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Belgium", "country_code": "BE", "city": null, "asn": "ASNone ", "indicator": "57.128.134.229", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 57.128.224.217
indicator_type: ipv4
source: otx
country: BE
queried_at: 2026-03-10T04:26:45.988911
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Belgium", "country_code": "BE", "city": null, "asn": "ASNone ", "indicator": "57.128.224.217", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 57.128.224.32
indicator_type: ipv4
source: otx
country: BE
queried_at: 2026-03-10T04:26:47.680864
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Belgium", "country_code": "BE", "city": null, "asn": "ASNone ", "indicator": "57.128.224.32", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 57.129.69.173
indicator_type: ipv4
source: otx
country: BE
reverse_dns: vps-2914f053.vps.ovh.net
queried_at: 2026-03-10T04:26:49.190853
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Belgium", "country_code": "BE", "city": null, "asn": "ASNone ", "indicator": "57.129.69.173", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["vps-2914f053.vps.ovh.net"]}


indicator: 57.134.18.229
indicator_type: ipv4
source: otx
country: BE
queried_at: 2026-03-10T04:26:50.801134
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Belgium", "country_code": "BE", "city": null, "asn": "AS11290 cogeco connexion inc", "indicator": "57.134.18.229", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 57.152.53.24
indicator_type: ipv4
source: otx
country: BE
queried_at: 2026-03-10T04:26:52.334190
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Belgium", "country_code": "BE", "city": null, "asn": "ASNone ", "indicator": "57.152.53.24", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 57.180.221.59
indicator_type: ipv4
source: otx
country: BE
reverse_dns: ec2-57-180-221-59.ap-northeast-1.compute.amazonaws.com
queried_at: 2026-03-10T04:26:54.087815
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Belgium", "country_code": "BE", "city": null, "asn": "ASNone ", "indicator": "57.180.221.59", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["ec2-57-180-221-59.ap-northeast-1.compute.amazonaws.com"]}


indicator: 58.218.215.231
indicator_type: ipv4
source: otx
country: CN
hosting_provider: AsyncRAT,Hak5_Cloud_C2,Remcos,CobaltStrike,Reverse_SSH,Deimos,Mythic,Qakbot,Evilginx,Interactsh
queried_at: 2026-03-10T04:26:55.838114
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "China", "country_code": "CN", "city": null, "asn": "AS4134 chinanet", "indicator": "58.218.215.231", "tags": ["AsyncRAT", "Hak5_Cloud_C2", "Remcos", "CobaltStrike", "Reverse_SSH", "Deimos", "Mythic", "Qakbot", "Evilginx", "Interactsh", "Hookbot", "Pegasus", "EvilGoPhish", "NetSupportRAT", "Havoc", "Sliver", "C2"], "pulses": ["Threatfox Recent Additions", "Twitter Feed - drb_ra - 01-03-2025"], "malware_count": 0, "passive_dns_count": 0, "malware_sam


indicator: 58.220.52.248
indicator_type: ipv4
source: otx
country: CN
queried_at: 2026-03-10T04:26:57.780064
raw_data:
  {"pulse_count": 6, "reputation": 0, "country": "China", "country_code": "CN", "city": null, "asn": "AS137697 chinatelecom jiangsu yangzhou idc networkdescr", "indicator": "58.220.52.248", "tags": ["Evilginx", "cobalt strike", "tsec", "linkedin page", "strong", "feed", "ransomware feed", "Interactsh", "agent tesla", "api contact", "sentinel misp", "Deimos", "Mythic", "Brute_Ratel_C4", "la-safe.org", "protect", "honeypot", "NetSupportRAT", "Havoc", "C2", "compromise", "nanocore rat", "Remcos", "sc

reverse_dns:
  shinysnake.com,xyb1.com,jsc.schedule.ksc-test.com,xz.pphimalayanrt.com,jjbcdn.zaoshu.so,qiniucdn.maitoutou.com,s-1.kaibei168.com,blogcdn.wangdajiao.top,p.khbox.cn,p.kh7.net

hosting_provider:
  Evilginx,cobalt strike,tsec,linkedin page,strong,feed,ransomware feed,Interactsh,agent tesla,api contact


indicator: 58.65.172.130
indicator_type: ipv4
source: otx
country: PK
city: Rawalpindi
reverse_dns: 58-65-172-130.nayatel.pk
queried_at: 2026-03-10T04:27:00.229784
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Pakistan", "country_code": "PK", "city": "Rawalpindi", "asn": "AS23674 nayatel (pvt) ltd", "indicator": "58.65.172.130", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["58-65-172-130.nayatel.pk"]}


indicator: 58.87.94.202
indicator_type: ipv4
source: otx
country: CN
queried_at: 2026-03-10T04:27:01.935553
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "China", "country_code": "CN", "city": null, "asn": "AS45090 shenzhen tencent computer systems company limited", "indicator": "58.87.94.202", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 59.110.140.142
indicator_type: ipv4
source: otx
country: CN
city: Beijing
reverse_dns: caihp.vip,www.liuzphi.cn,liuzphi.cn,api.wpf123.cn,wpf123.cn,www.wpf123.cn
hosting_provider: AsyncRAT,Remcos,CobaltStrike,Deimos,Qakbot,Hookbot,Interactsh,Pegasus,Supershell,NetSupportRAT
queried_at: 2026-03-10T04:27:03.894683
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "China", "country_code": "CN", "city": "Beijing", "asn": "AS37963 hangzhou alibaba advertising co. ltd.", "indicator": "59.110.140.142", "tags": ["AsyncRAT", "Remcos", "CobaltStrike", "Deimos", "Qakbot", "Hookbot", "Interactsh", "Pegasus", "Supershell", "NetSupportRAT", "Havoc", "Sliver", "C2"], "pulses": ["Threatfox Recent Additions", "Twitter Feed - drb_ra - 04-03-2025"], "malware_count": 0, "passive_dns_count": 6, "malware_samples": [], "passive_


indicator: 59.110.4.100
indicator_type: ipv4
source: otx
country: CN
city: Beijing
reverse_dns: joylinkmode.com
queried_at: 2026-03-10T04:27:05.516427
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "China", "country_code": "CN", "city": "Beijing", "asn": "AS37963 hangzhou alibaba advertising co. ltd.", "indicator": "59.110.4.100", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["joylinkmode.com"]}


indicator: 59.110.94.209
indicator_type: ipv4
source: otx
country: CN
city: Beijing
hosting_provider: CZE,SpyNote,intel,32,bitbucket,rat,AgentTesla,zip,mips,CHE
queried_at: 2026-03-10T04:27:07.099638
raw_data:
  {"pulse_count": 3, "reputation": 0, "country": "China", "country_code": "CN", "city": "Beijing", "asn": "AS37963 hangzhou alibaba advertising co. ltd.", "indicator": "59.110.94.209", "tags": ["CZE", "SpyNote", "intel", "32", "bitbucket", "rat", "AgentTesla", "zip", "mips", "CHE", "ready.apk", "base64", "LummaStealer", "exe", "rev_base64_loader", "32-bit", "Sliver", "iocs", "c2", "shellcode", "campaign", "dizemp", "fbi.gov", "rar", "sh", "x86-64", "Boatnet", "open-dir", "info", "trojan", "craxsra


indicator: 54.207.42.231
indicator_type: ipv4
source: abuseipdb
country: BR
city: 0
hosting_provider: Amazon Data Services Brazil
queried_at: 2026-03-10T04:27:07.846443
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "BR", "isp": "Amazon Data Services Brazil", "domain": "amazon.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 54.213.206.148
indicator_type: ipv4
source: abuseipdb
country: US
city: 0
hosting_provider: Amazon.com, Inc.
queried_at: 2026-03-10T04:27:12.788659
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "US", "isp": "Amazon.com, Inc.", "domain": "amazon.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-05-05T07:07:59+00:00", "categories": []}


indicator: 54.213.235.215
indicator_type: ipv4
source: abuseipdb
country: US
city: 0
hosting_provider: Amazon.com, Inc.
queried_at: 2026-03-10T04:27:16.139420
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "US", "isp": "Amazon.com, Inc.", "domain": "amazon.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2023-08-31T22:54:37+00:00", "categories": []}


indicator: 54.216.72.51
indicator_type: ipv4
source: abuseipdb
country: IE
city: 0
hosting_provider: Amazon.com, Inc.
queried_at: 2026-03-10T04:27:17.781138
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "IE", "isp": "Amazon.com, Inc.", "domain": "amazon.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 54.232.43.57
indicator_type: ipv4
source: abuseipdb
country: BR
city: 0
hosting_provider: Amazon Data Services Brazil
queried_at: 2026-03-10T04:27:21.145265
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "BR", "isp": "Amazon Data Services Brazil", "domain": "amazon.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2023-11-17T09:33:51+00:00", "categories": []}


indicator: 54.233.69.35
indicator_type: ipv4
source: abuseipdb
country: BR
city: 1
hosting_provider: Amazon Data Services Brazil
queried_at: 2026-03-10T04:27:24.535771
raw_data:
  {"abuse_confidence": 0, "total_reports": 1, "is_public": true, "is_tor": false, "country": "BR", "isp": "Amazon Data Services Brazil", "domain": "amazon.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-12-13T08:00:21+00:00", "categories": [9, 18, 21]}


indicator: 54.65.69.99
indicator_type: ipv4
source: abuseipdb
country: JP
city: 0
hosting_provider: Amazon Technologies Inc.
queried_at: 2026-03-10T04:27:28.064985
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "JP", "isp": "Amazon Technologies Inc.", "domain": "amazon.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 54.71.7.37
indicator_type: ipv4
source: abuseipdb
country: US
city: 0
hosting_provider: Amazon Technologies Inc.
queried_at: 2026-03-10T04:27:29.698907
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "US", "isp": "Amazon Technologies Inc.", "domain": "amazon.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 54.74.255.67
indicator_type: ipv4
source: abuseipdb
country: IE
city: 0
hosting_provider: Amazon Technologies Inc.
queried_at: 2026-03-10T04:27:31.372842
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "IE", "isp": "Amazon Technologies Inc.", "domain": "amazon.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 54.79.220.38
indicator_type: ipv4
source: abuseipdb
country: AU
city: 0
hosting_provider: Amazon.com, Inc.
queried_at: 2026-03-10T04:27:34.858339
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "AU", "isp": "Amazon.com, Inc.", "domain": "amazon.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 54.87.180.125
indicator_type: ipv4
source: abuseipdb
country: US
city: 0
hosting_provider: Amazon Technologies Inc.
queried_at: 2026-03-10T04:27:40.058264
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "US", "isp": "Amazon Technologies Inc.", "domain": "amazon.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-11-11T16:49:52+00:00", "categories": []}


indicator: 54.207.42.231
indicator_type: ipv4
source: virustotal
country: BR
hosting_provider: Amazon.com, Inc.
queried_at: 2026-03-10T04:27:41.826532
raw_data:
  {"malicious": 2, "suspicious": 1, "harmless": 60, "undetected": 31, "reputation": 0, "country": "BR", "as_owner": "Amazon.com, Inc.", "asn": 16509, "network": "54.206.0.0/15", "last_analysis_date": 1741853705}


indicator: 54.210.76.140
indicator_type: ipv4
source: virustotal
country: US
hosting_provider: Amazon.com, Inc.
queried_at: 2026-03-10T04:28:02.153277
raw_data:
  {"malicious": 1, "suspicious": 1, "harmless": 61, "undetected": 31, "reputation": -1, "country": "US", "as_owner": "Amazon.com, Inc.", "asn": 14618, "network": "54.208.0.0/14", "last_analysis_date": 1766998035}


indicator: 54.211.137.88
indicator_type: ipv4
source: virustotal
country: US
hosting_provider: Amazon.com, Inc.
queried_at: 2026-03-10T04:28:22.363631
raw_data:
  {"malicious": 2, "suspicious": 1, "harmless": 59, "undetected": 32, "reputation": 0, "country": "US", "as_owner": "Amazon.com, Inc.", "asn": 14618, "network": "54.208.0.0/14", "last_analysis_date": 1742591968}


indicator: 54.213.206.148
indicator_type: ipv4
source: virustotal
country: US
hosting_provider: Amazon.com, Inc.
queried_at: 2026-03-10T04:28:42.893474
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": -1, "country": "US", "as_owner": "Amazon.com, Inc.", "asn": 16509, "network": "54.212.0.0/14", "last_analysis_date": 1754920324}


indicator: 54.213.218.45
indicator_type: ipv4
source: virustotal
country: US
hosting_provider: Amazon.com, Inc.
queried_at: 2026-03-10T04:29:03.152896
raw_data:
  {"malicious": 1, "suspicious": 0, "harmless": 61, "undetected": 32, "reputation": -1, "country": "US", "as_owner": "Amazon.com, Inc.", "asn": 16509, "network": "54.212.0.0/14", "last_analysis_date": 1766998102}


indicator: 54.213.235.215
indicator_type: ipv4
source: virustotal
country: US
hosting_provider: Amazon.com, Inc.
queried_at: 2026-03-10T04:29:23.432719
raw_data:
  {"malicious": 1, "suspicious": 0, "harmless": 61, "undetected": 32, "reputation": -1, "country": "US", "as_owner": "Amazon.com, Inc.", "asn": 16509, "network": "54.212.0.0/14", "last_analysis_date": 1766998131}


indicator: 54.216.72.51
indicator_type: ipv4
source: virustotal
country: IE
hosting_provider: Amazon.com, Inc.
queried_at: 2026-03-10T04:29:43.667693
raw_data:
  {"malicious": 0, "suspicious": 1, "harmless": 59, "undetected": 34, "reputation": -1, "country": "IE", "as_owner": "Amazon.com, Inc.", "asn": 16509, "network": "54.216.0.0/14", "last_analysis_date": 1768572653}


indicator: 54.228.98.238
indicator_type: ipv4
source: virustotal
country: IE
hosting_provider: Amazon.com, Inc.
queried_at: 2026-03-10T04:30:03.930924
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "IE", "as_owner": "Amazon.com, Inc.", "asn": 16509, "network": "54.228.0.0/14", "last_analysis_date": 1760952693}


indicator: 54.232.43.57
indicator_type: ipv4
source: virustotal
country: BR
hosting_provider: Amazon.com, Inc.
queried_at: 2026-03-10T04:30:24.373499
raw_data:
  {"malicious": 5, "suspicious": 1, "harmless": 60, "undetected": 28, "reputation": -1, "country": "BR", "as_owner": "Amazon.com, Inc.", "asn": 16509, "network": "54.232.0.0/15", "last_analysis_date": 1742351864}


indicator: 54.233.36.163
indicator_type: ipv4
source: virustotal
country: BR
hosting_provider: Amazon.com, Inc.
queried_at: 2026-03-10T04:30:44.743034
raw_data:
  {"malicious": 6, "suspicious": 1, "harmless": 58, "undetected": 29, "reputation": -1, "country": "BR", "as_owner": "Amazon.com, Inc.", "asn": 16509, "network": "54.232.0.0/15", "last_analysis_date": 1743077473}


indicator: 54.207.42.231
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 54.207.0.0/17
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:31:05.084408
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "54.207.0.0/17", "threatfeeds": {}}


indicator: 54.210.76.140
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 54.210.0.0/16
hosting_provider: AMAZON-AES
queried_at: 2026-03-10T04:31:06.405934
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 14618, "asname": "AMAZON-AES", "ascountry": "US", "assource": "", "network": "54.210.0.0/16", "threatfeeds": {}}


indicator: 54.211.137.88
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 54.211.0.0/16
hosting_provider: AMAZON-AES
queried_at: 2026-03-10T04:31:07.730344
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 14618, "asname": "AMAZON-AES", "ascountry": "US", "assource": "", "network": "54.211.0.0/16", "threatfeeds": {}}


indicator: 54.213.206.148
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 54.213.0.0/16
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:31:09.035636
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "54.213.0.0/16", "threatfeeds": {"alltor": {"lastseen": "2026-03-03", "firstseen": "2025-02-04"}}}


indicator: 54.213.218.45
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 54.213.0.0/16
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:31:10.350675
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "54.213.0.0/16", "threatfeeds": {}}


indicator: 54.216.72.51
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 54.216.0.0/15
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:31:13.009505
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "54.216.0.0/15", "threatfeeds": {}}


indicator: 54.228.98.238
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 54.228.0.0/16
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:31:14.323704
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "54.228.0.0/16", "threatfeeds": {}}


indicator: 54.232.43.57
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 54.232.0.0/17
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:31:15.616508
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "54.232.0.0/17", "threatfeeds": {}}


indicator: 54.233.36.163
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 54.233.0.0/18
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:31:16.937722
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "54.233.0.0/18", "threatfeeds": {}}


indicator: 54.233.69.35
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 54.233.64.0/18
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:31:18.279559
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "54.233.64.0/18", "threatfeeds": {}}


indicator: 54.36.191.194
indicator_type: ipv4
source: dshield
country: FR
reverse_dns: 54.36.0.0/16
hosting_provider: OVH
queried_at: 2026-03-10T04:31:19.589870
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ovh.net", "as": 16276, "asname": "OVH", "ascountry": "FR", "assource": "", "network": "54.36.0.0/16", "threatfeeds": {}}


indicator: 54.65.69.99
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 54.64.0.0/15
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:31:20.915157
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "54.64.0.0/15", "threatfeeds": {}}


indicator: 54.71.7.37
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 54.70.0.0/15
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:31:22.264868
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "54.70.0.0/15", "threatfeeds": {}}


indicator: 54.74.255.67
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 54.74.0.0/15
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:31:23.441020
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "54.74.0.0/15", "threatfeeds": {}}


indicator: 54.79.220.38
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 54.79.128.0/17
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:31:25.944012
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "54.79.128.0/17", "threatfeeds": {}}


indicator: 54.82.229.132
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 54.80.0.0/14
hosting_provider: AMAZON-AES
queried_at: 2026-03-10T04:31:28.587935
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 14618, "asname": "AMAZON-AES", "ascountry": "US", "assource": "", "network": "54.80.0.0/14", "threatfeeds": {}}


indicator: 54.87.180.125
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 54.87.0.0/16
hosting_provider: AMAZON-AES
queried_at: 2026-03-10T04:31:29.909852
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 14618, "asname": "AMAZON-AES", "ascountry": "US", "assource": "", "network": "54.87.0.0/16", "threatfeeds": {}}


indicator: 54.90.212.140
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 54.90.0.0/15
hosting_provider: AMAZON-AES
queried_at: 2026-03-10T04:31:31.237300
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 14618, "asname": "AMAZON-AES", "ascountry": "US", "assource": "", "network": "54.90.0.0/15", "threatfeeds": {}}


indicator: 54.92.152.14
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 54.92.128.0/17
hosting_provider: AMAZON-AES
queried_at: 2026-03-10T04:31:32.547717
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 14618, "asname": "AMAZON-AES", "ascountry": "US", "assource": "", "network": "54.92.128.0/17", "threatfeeds": {}}


indicator: 54.93.36.37
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 54.93.32.0/19
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:31:33.875416
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "54.93.32.0/19", "threatfeeds": {}}


indicator: 57.128.134.229
indicator_type: ipv4
source: dshield
country: FR
reverse_dns: 57.128.128.0/18
hosting_provider: OVH
queried_at: 2026-03-10T04:31:41.330656
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ovh.net", "as": 16276, "asname": "OVH", "ascountry": "FR", "assource": "", "network": "57.128.128.0/18", "threatfeeds": {}}


indicator: 57.128.224.217
indicator_type: ipv4
source: dshield
country: FR
reverse_dns: 57.128.192.0/18
hosting_provider: OVH
queried_at: 2026-03-10T04:31:42.653148
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ovh.net", "as": 16276, "asname": "OVH", "ascountry": "FR", "assource": "", "network": "57.128.192.0/18", "threatfeeds": {}}


indicator: 57.129.69.173
indicator_type: ipv4
source: dshield
country: FR
reverse_dns: 57.129.0.0/17
hosting_provider: OVH
queried_at: 2026-03-10T04:31:45.135094
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ovh.net", "as": 16276, "asname": "OVH", "ascountry": "FR", "assource": "", "network": "57.129.0.0/17", "threatfeeds": {}}


indicator: 57.134.18.229
indicator_type: ipv4
source: dshield
country: CA
reverse_dns: 57.134.0.0/17
hosting_provider: CC-3272
queried_at: 2026-03-10T04:31:46.437421
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@cgocable.ca", "as": 11290, "asname": "CC-3272", "ascountry": "CA", "assource": "", "network": "57.134.0.0/17", "threatfeeds": {}}


indicator: 57.152.53.24
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 57.152.0.0/14
hosting_provider: MICROSOFT-CORP-MSN-AS-BLOCK
queried_at: 2026-03-10T04:31:47.749497
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@microsoft.com", "as": 8075, "asname": "MICROSOFT-CORP-MSN-AS-BLOCK", "ascountry": "US", "assource": "", "network": "57.152.0.0/14", "threatfeeds": {}}


indicator: 57.180.221.59
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 57.180.0.0/14
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:31:49.079782
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "57.180.0.0/14", "threatfeeds": {}}


indicator: 58.218.215.231
indicator_type: ipv4
source: dshield
country: CN
reverse_dns: 58.208.0.0/12
hosting_provider: CHINANET-BACKBONE No.31,Jin-rong Street
queried_at: 2026-03-10T04:31:50.403035
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "anti-spam@ns.chinanet.cn.net", "as": 4134, "asname": "CHINANET-BACKBONE No.31,Jin-rong Street", "ascountry": "CN", "assource": "", "network": "58.208.0.0/12", "threatfeeds": {}}


indicator: 58.220.52.248
indicator_type: ipv4
source: dshield
country: CN
reverse_dns: 58.220.52.0/24
queried_at: 2026-03-10T04:31:51.721077
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "anti-spam@ns.chinanet.cn.net", "as": 137697, "asname": "CHINATELECOM-JIANGSU-YANGZHOU-IDC CHINATELECOM JiangSu YangZhou IDC networkdescr: YangZhouJiangsu Province, P.R.China.", "ascountry": "CN", "assource": "", "network": "58.220.52.0/24", "threatfeeds": {}}

hosting_provider:
  CHINATELECOM-JIANGSU-YANGZHOU-IDC CHINATELECOM JiangSu YangZhou IDC networkdescr: YangZhouJiangsu Province, P.R.China.


indicator: 58.65.172.130
indicator_type: ipv4
source: dshield
country: PK
reverse_dns: 58.65.172.0/24
hosting_provider: NAYATEL-PK Nayatel Pvt Ltd
queried_at: 2026-03-10T04:31:53.038659
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@nayatel.com", "as": 23674, "asname": "NAYATEL-PK Nayatel Pvt Ltd", "ascountry": "PK", "assource": "", "network": "58.65.172.0/24", "threatfeeds": {}}


indicator: 58.87.94.202
indicator_type: ipv4
source: dshield
country: CN
reverse_dns: 58.87.92.0/22
hosting_provider: TENCENT-NET-AP Shenzhen Tencent Computer Systems Company Limited
queried_at: 2026-03-10T04:31:54.364301
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "ipas@cnnic.cn", "as": 45090, "asname": "TENCENT-NET-AP Shenzhen Tencent Computer Systems Company Limited", "ascountry": "CN", "assource": "", "network": "58.87.92.0/22", "threatfeeds": {}}


indicator: 59.110.140.142
indicator_type: ipv4
source: dshield
country: CN
reverse_dns: 59.110.128.0/17
hosting_provider: ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.,Ltd.
queried_at: 2026-03-10T04:31:55.715301
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "ipas@cnnic.cn", "as": 37963, "asname": "ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.,Ltd.", "ascountry": "CN", "assource": "", "network": "59.110.128.0/17", "threatfeeds": {}}


indicator: 59.110.4.100
indicator_type: ipv4
source: dshield
country: CN
reverse_dns: 59.110.0.0/17
hosting_provider: ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.,Ltd.
queried_at: 2026-03-10T04:31:57.031934
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "ipas@cnnic.cn", "as": 37963, "asname": "ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.,Ltd.", "ascountry": "CN", "assource": "", "network": "59.110.0.0/17", "threatfeeds": {}}


indicator: 59.36.188.253
indicator_type: ipv4
source: dshield
country: CN
reverse_dns: 59.32.0.0/13
hosting_provider: CHINANET-BACKBONE No.31,Jin-rong Street
queried_at: 2026-03-10T04:31:59.689566
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "anti-spam@ns.chinanet.cn.net", "as": 4134, "asname": "CHINANET-BACKBONE No.31,Jin-rong Street", "ascountry": "CN", "assource": "", "network": "59.32.0.0/13", "threatfeeds": {}}


indicator: 60.191.87.75
indicator_type: ipv4
source: dshield
country: CN
reverse_dns: 60.191.80.0/21
hosting_provider: CT-HANGZHOU-IDC No.288,Fu-chun Road
queried_at: 2026-03-10T04:32:01.002833
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "anti-spam@ns.chinanet.cn.net", "as": 58461, "asname": "CT-HANGZHOU-IDC No.288,Fu-chun Road", "ascountry": "CN", "assource": "", "network": "60.191.80.0/21", "threatfeeds": {}}


indicator: 60.204.218.12
indicator_type: ipv4
source: dshield
country: CN
reverse_dns: 60.204.192.0/18
hosting_provider: HWCSNET Huawei Cloud Service data center
queried_at: 2026-03-10T04:32:02.314078
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "ipas@cnnic.cn", "as": 55990, "asname": "HWCSNET Huawei Cloud Service data center", "ascountry": "CN", "assource": "", "network": "60.204.192.0/18", "threatfeeds": {}}


indicator: 60.205.5.44
indicator_type: ipv4
source: dshield
country: CN
reverse_dns: 60.205.0.0/17
hosting_provider: ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.,Ltd.
queried_at: 2026-03-10T04:32:06.289156
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "ipas@cnnic.cn", "as": 37963, "asname": "ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.,Ltd.", "ascountry": "CN", "assource": "", "network": "60.205.0.0/17", "threatfeeds": {}}


indicator: 60.242.218.236
indicator_type: ipv4
source: dshield
country: AU
reverse_dns: 60.242.218.0/23
hosting_provider: TPG-INTERNET-AP TPG Telecom Limited
queried_at: 2026-03-10T04:32:07.629570
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@tpg.com.au", "as": 7545, "asname": "TPG-INTERNET-AP TPG Telecom Limited", "ascountry": "AU", "assource": "", "network": "60.242.218.0/23", "threatfeeds": {}}


indicator: 61.228.69.42
indicator_type: ipv4
source: dshield
country: TW
reverse_dns: 61.228.0.0/16
hosting_provider: HINET Data Communication Business Group
queried_at: 2026-03-10T04:32:08.954304
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "b-noc@cht.com.tw", "as": 3462, "asname": "HINET Data Communication Business Group", "ascountry": "TW", "assource": "", "network": "61.228.0.0/16", "threatfeeds": {}}


indicator: 61.4.102.134
indicator_type: ipv4
source: dshield
country: MY
reverse_dns: 61.4.102.0/24
hosting_provider: GIGABIT-MY Gigabit Hosting Sdn Bhd
queried_at: 2026-03-10T04:32:10.151191
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@colo.my", "as": 55720, "asname": "GIGABIT-MY Gigabit Hosting Sdn Bhd", "ascountry": "MY", "assource": "", "network": "61.4.102.0/24", "threatfeeds": {}}


indicator: 61.48.83.227
indicator_type: ipv4
source: dshield
country: CN
reverse_dns: 61.48.64.0/18
hosting_provider: CHINA169-BJ China Unicom Beijing Province Network
queried_at: 2026-03-10T04:32:11.342740
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "hqs-ipabuse@chinaunicom.cn", "as": 4808, "asname": "CHINA169-BJ China Unicom Beijing Province Network", "ascountry": "CN", "assource": "", "network": "61.48.64.0/18", "threatfeeds": {}}


indicator: 62.1.109.30
indicator_type: ipv4
source: dshield
country: EU
reverse_dns: 62.1.0.0/17
hosting_provider: FORTHNET-GR Forthnet
queried_at: 2026-03-10T04:32:12.669515
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@forthnet.gr", "as": 1241, "asname": "FORTHNET-GR Forthnet", "ascountry": "EU", "assource": "", "network": "62.1.0.0/17", "threatfeeds": {}}


indicator: 62.1.144.146
indicator_type: ipv4
source: dshield
country: EU
reverse_dns: 62.1.128.0/17
hosting_provider: FORTHNET-GR Forthnet
queried_at: 2026-03-10T04:32:13.989257
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@forthnet.gr", "as": 1241, "asname": "FORTHNET-GR Forthnet", "ascountry": "EU", "assource": "", "network": "62.1.128.0/17", "threatfeeds": {}}


indicator: 62.109.15.27
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 62.109.8.0/21
hosting_provider: RU-JSCIOT
queried_at: 2026-03-10T04:32:15.315530
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@abusehost.ru", "as": 29182, "asname": "RU-JSCIOT", "ascountry": "RU", "assource": "", "network": "62.109.8.0/21", "threatfeeds": {}}


indicator: 62.113.118.24
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 62.113.118.0/24
hosting_provider: VDSINA-AS
queried_at: 2026-03-10T04:32:16.644417
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@mchost.ru", "as": 48282, "asname": "VDSINA-AS", "ascountry": "RU", "assource": "", "network": "62.113.118.0/24", "threatfeeds": {}}


indicator: 62.133.60.136
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 62.133.60.0/24
hosting_provider: GIR-AS
queried_at: 2026-03-10T04:32:17.958776
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@fionera.de", "as": 207713, "asname": "GIR-AS", "ascountry": "RU", "assource": "", "network": "62.133.60.0/24", "threatfeeds": {}}


indicator: 62.138.6.193
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 62.138.6.0/24
hosting_provider: GD-EMEA-DC-SXB1
queried_at: 2026-03-10T04:32:20.655834
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@hosteurope.de", "as": 8972, "asname": "GD-EMEA-DC-SXB1", "ascountry": "DE", "assource": "", "network": "62.138.6.0/24", "threatfeeds": {}}


indicator: 62.143.219.225
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 62.143.128.0/17
hosting_provider: VODANET International IP-Backbone of Vodafone
queried_at: 2026-03-10T04:32:21.994620
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@arcor-ip.de", "as": 3209, "asname": "VODANET International IP-Backbone of Vodafone", "ascountry": "DE", "assource": "", "network": "62.143.128.0/17", "threatfeeds": {}}


indicator: 62.146.169.174
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 62.146.168.0/21
hosting_provider: NL-811-40021
queried_at: 2026-03-10T04:32:23.314122
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "hostmaster@norcalmutual.com", "as": 40021, "asname": "NL-811-40021", "ascountry": "US", "assource": "", "network": "62.146.168.0/21", "threatfeeds": {"ciarmy": {"lastseen": "2025-04-06", "firstseen": "2024-10-19"}}}


indicator: 62.146.226.21
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 62.146.224.0/21
hosting_provider: NL-811-40021
queried_at: 2026-03-10T04:32:24.642229
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "hostmaster@norcalmutual.com", "as": 40021, "asname": "NL-811-40021", "ascountry": "US", "assource": "", "network": "62.146.224.0/21", "threatfeeds": {}}


indicator: 62.171.159.81
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 62.171.158.0/23
hosting_provider: CONTABO
queried_at: 2026-03-10T04:32:25.953737
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@contabo.de", "as": 51167, "asname": "CONTABO", "ascountry": "DE", "assource": "", "network": "62.171.158.0/23", "threatfeeds": {}}


indicator: 62.171.178.152
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 62.171.178.0/23
hosting_provider: CONTABO
queried_at: 2026-03-10T04:32:27.288818
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@contabo.de", "as": 51167, "asname": "CONTABO", "ascountry": "DE", "assource": "", "network": "62.171.178.0/23", "threatfeeds": {}}


indicator: 62.171.189.68
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 62.171.188.0/23
hosting_provider: CONTABO
queried_at: 2026-03-10T04:32:28.588000
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@contabo.de", "as": 51167, "asname": "CONTABO", "ascountry": "DE", "assource": "", "network": "62.171.188.0/23", "threatfeeds": {}}


indicator: 62.192.174.138
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 62.192.174.0/24
hosting_provider: PEACEWEB
queried_at: 2026-03-10T04:32:29.906032
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "dfulgham@casaworks.com", "as": 14445, "asname": "PEACEWEB", "ascountry": "US", "assource": "", "network": "62.192.174.0/24", "threatfeeds": {}}


indicator: 62.201.240.82
indicator_type: ipv4
source: dshield
country: IQ
reverse_dns: 62.201.240.0/24
hosting_provider: IQNETWORKS
queried_at: 2026-03-10T04:32:31.225384
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@iqnet.com", "as": 44217, "asname": "IQNETWORKS", "ascountry": "IQ", "assource": "", "network": "62.201.240.0/24", "threatfeeds": {}}


indicator: 62.205.169.74
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 62.205.160.0/19
hosting_provider: CORBINA-AS OJSC Vimpelcom
queried_at: 2026-03-10T04:32:32.527024
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": "IP may participate in DDoS against russian websites (3/3/2022)", "asabusecontact": "abuse@beeline.ru", "as": 8402, "asname": "CORBINA-AS OJSC Vimpelcom", "ascountry": "RU", "assource": "", "network": "62.205.160.0/19", "threatfeeds": {"blocklistdebots": {"lastseen": "2025-03-31", "firstseen": "2025-03-27"}, "forumspam": {"lastseen": "2025-04-02", "firstseen": "2018-07-26"}}}


indicator: 62.213.23.99
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 62.213.0.0/19
hosting_provider: ROSTELECOM-AS
queried_at: 2026-03-10T04:32:33.837198
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@rt.ru", "as": 12389, "asname": "ROSTELECOM-AS", "ascountry": "RU", "assource": "", "network": "62.213.0.0/19", "threatfeeds": {}}


indicator: 62.234.27.146
indicator_type: ipv4
source: dshield
country: CN
reverse_dns: 62.234.16.0/20
hosting_provider: TENCENT-NET-AP Shenzhen Tencent Computer Systems Company Limited
queried_at: 2026-03-10T04:32:35.172048
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "ipas@cnnic.cn", "as": 45090, "asname": "TENCENT-NET-AP Shenzhen Tencent Computer Systems Company Limited", "ascountry": "CN", "assource": "", "network": "62.234.16.0/20", "threatfeeds": {}}


indicator: 62.33.53.248
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 62.33.0.0/16
hosting_provider: TRANSTELECOM Moscow, Russia
queried_at: 2026-03-10T04:32:36.490809
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ttk.ru", "as": 20485, "asname": "TRANSTELECOM Moscow, Russia", "ascountry": "RU", "assource": "", "network": "62.33.0.0/16", "threatfeeds": {"forumspam": {"lastseen": "2025-01-05", "firstseen": "2024-04-02"}, "myip": {"lastseen": "2024-11-26", "firstseen": "2024-07-18"}, "openresolver": {"lastseen": "2026-03-10", "firstseen": "2022-10-03"}}}


indicator: 62.45.180.50
indicator_type: ipv4
source: dshield
country: NL
reverse_dns: 62.45.0.0/16
hosting_provider: KABELFOON DELTA Fiber Nederland
queried_at: 2026-03-10T04:32:37.795512
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@caiw.nl", "as": 15435, "asname": "KABELFOON DELTA Fiber Nederland", "ascountry": "NL", "assource": "", "network": "62.45.0.0/16", "threatfeeds": {}}


indicator: 62.60.154.178
indicator_type: ipv4
source: dshield
country: XX
hosting_provider: not routed
queried_at: 2026-03-10T04:32:40.862795
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": null, "as": 0, "asname": "not routed", "ascountry": "XX", "assource": "", "network": "", "threatfeeds": {"blocklistde443": {"lastseen": "2024-12-05", "firstseen": "2024-12-03"}, "blocklistde80": {"lastseen": "2024-12-05", "firstseen": "2024-12-03"}, "blocklistdeapache": {"lastseen": "2024-12-05", "firstseen": "2024-12-04"}, "blocklistdebruteforcelogin": {"lastseen": "2024-12-05", "fir


indicator: 62.60.248.116
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 62.60.248.0/24
hosting_provider: HOSTYPE
queried_at: 2026-03-10T04:32:47.739671
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "fredrik.lundqvist@empir.se", "as": 49217, "asname": "HOSTYPE", "ascountry": "US", "assource": "", "network": "62.60.248.0/24", "threatfeeds": {}}


indicator: 62.72.36.127
indicator_type: ipv4
source: dshield
country: CY
reverse_dns: 62.72.36.0/22
hosting_provider: AS-HOSTINGER
queried_at: 2026-03-10T04:32:49.049050
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@hostinger.com", "as": 47583, "asname": "AS-HOSTINGER", "ascountry": "CY", "assource": "", "network": "62.72.36.0/22", "threatfeeds": {}}


indicator: 62.78.196.84
indicator_type: ipv4
source: dshield
country: FI
reverse_dns: 62.78.128.0/17
hosting_provider: DNA
queried_at: 2026-03-10T04:32:50.383146
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@dnaip.fi", "as": 16086, "asname": "DNA", "ascountry": "FI", "assource": "", "network": "62.78.128.0/17", "threatfeeds": {}}


indicator: 63.177.170.151
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 63.176.0.0/14
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:32:51.704599
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "63.176.0.0/14", "threatfeeds": {}}


indicator: 64.176.50.187
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 64.176.32.0/19
hosting_provider: AS-CHOOPA
queried_at: 2026-03-10T04:32:53.034588
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@choopa.com", "as": 20473, "asname": "AS-CHOOPA", "ascountry": "US", "assource": "", "network": "64.176.32.0/19", "threatfeeds": {}}


indicator: 64.190.113.237
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 64.190.113.0/24
hosting_provider: BLNWX
queried_at: 2026-03-10T04:32:55.663206
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": null, "as": 399629, "asname": "BLNWX", "ascountry": "US", "assource": "", "network": "64.190.113.0/24", "threatfeeds": {}}


indicator: 64.223.149.100
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 64.223.148.0/23
hosting_provider: CTELCO
queried_at: 2026-03-10T04:32:57.074407
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@fairpoint.com", "as": 13977, "asname": "CTELCO", "ascountry": "US", "assource": "", "network": "64.223.148.0/23", "threatfeeds": {}}


indicator: 64.225.64.178
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 64.225.64.0/20
hosting_provider: DIGITALOCEAN-ASN
queried_at: 2026-03-10T04:32:58.399608
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@digitalocean.com", "as": 14061, "asname": "DIGITALOCEAN-ASN", "ascountry": "US", "assource": "", "network": "64.225.64.0/20", "threatfeeds": {}}


indicator: 64.226.81.244
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 64.226.80.0/20
hosting_provider: DIGITALOCEAN-ASN
queried_at: 2026-03-10T04:32:59.732707
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@digitalocean.com", "as": 14061, "asname": "DIGITALOCEAN-ASN", "ascountry": "US", "assource": "", "network": "64.226.80.0/20", "threatfeeds": {}}


indicator: 64.227.71.55
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 64.227.64.0/20
hosting_provider: DIGITALOCEAN-ASN
queried_at: 2026-03-10T04:33:01.044319
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@digitalocean.com", "as": 14061, "asname": "DIGITALOCEAN-ASN", "ascountry": "US", "assource": "", "network": "64.227.64.0/20", "threatfeeds": {}}


indicator: 64.227.96.87
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 64.227.96.0/20
hosting_provider: DIGITALOCEAN-ASN
queried_at: 2026-03-10T04:33:02.374675
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@digitalocean.com", "as": 14061, "asname": "DIGITALOCEAN-ASN", "ascountry": "US", "assource": "", "network": "64.227.96.0/20", "threatfeeds": {"ciarmy": {"lastseen": "2026-02-17", "firstseen": "2021-01-31"}}}


indicator: 64.229.116.177
indicator_type: ipv4
source: dshield
country: CA
reverse_dns: 64.229.0.0/16
hosting_provider: BACOM
queried_at: 2026-03-10T04:33:03.569000
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@bell.ca", "as": 577, "asname": "BACOM", "ascountry": "CA", "assource": "", "network": "64.229.0.0/16", "threatfeeds": {}}


indicator: 64.252.194.167
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 64.252.192.0/18
hosting_provider: ATT-INTERNET4
queried_at: 2026-03-10T04:33:14.490025
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@att.net", "as": 7018, "asname": "ATT-INTERNET4", "ascountry": "US", "assource": "", "network": "64.252.192.0/18", "threatfeeds": {}}


indicator: 64.44.167.120
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 64.44.160.0/20
hosting_provider: NEXEON
queried_at: 2026-03-10T04:33:15.802326
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@nexeontech.com", "as": 20278, "asname": "NEXEON", "ascountry": "US", "assource": "", "network": "64.44.160.0/20", "threatfeeds": {}}


indicator: 64.52.80.165
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 64.52.80.0/24
hosting_provider: BLNWX
queried_at: 2026-03-10T04:33:17.138387
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": null, "as": 399629, "asname": "BLNWX", "ascountry": "US", "assource": "", "network": "64.52.80.0/24", "threatfeeds": {}}


indicator: 64.52.80.96
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 64.52.80.0/24
hosting_provider: BLNWX
queried_at: 2026-03-10T04:33:18.490421
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": null, "as": 399629, "asname": "BLNWX", "ascountry": "US", "assource": "", "network": "64.52.80.0/24", "threatfeeds": {"blocklistde22": {"lastseen": "2022-06-29", "firstseen": "2022-06-27"}}}


indicator: 64.72.205.68
indicator_type: ipv4
source: dshield
country: GB
reverse_dns: 64.72.205.0/24
hosting_provider: A1NX
queried_at: 2026-03-10T04:33:21.381644
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "gherasim@gherasim.net", "as": 51082, "asname": "A1NX", "ascountry": "GB", "assource": "", "network": "64.72.205.0/24", "threatfeeds": {}}


indicator: 64.95.11.150
indicator_type: ipv4
source: dshield
country: XX
hosting_provider: not routed
queried_at: 2026-03-10T04:33:24.520695
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": null, "as": 0, "asname": "not routed", "ascountry": "XX", "assource": "", "network": "", "threatfeeds": {"alltor": {"lastseen": "2025-02-21", "firstseen": "2025-02-20"}}}


indicator: 62.33.53.248
indicator_type: ipv4
source: firehol
reverse_dns: 62.33.53.248/32
queried_at: 2026-03-10T04:35:11.396360
raw_data:
  {"listed": true, "matched_networks": ["62.33.53.248/32"], "match_count": 1, "lists_checked": 4, "total_networks": 196960}


indicator: 77.48.28.204
indicator_type: ipv4
source: firehol
reverse_dns: 77.48.28.204/32
queried_at: 2026-03-10T04:35:28.224891
raw_data:
  {"listed": true, "matched_networks": ["77.48.28.204/32"], "match_count": 1, "lists_checked": 4, "total_networks": 196960}


indicator: 79.124.40.107
indicator_type: ipv4
source: firehol
reverse_dns: 79.124.40.0/24
queried_at: 2026-03-10T04:35:32.469488
raw_data:
  {"listed": true, "matched_networks": ["79.124.40.0/24"], "match_count": 1, "lists_checked": 4, "total_networks": 196960}


indicator: 84.54.51.107
indicator_type: ipv4
source: firehol
reverse_dns: 84.54.51.0/24
queried_at: 2026-03-10T04:35:53.058137
raw_data:
  {"listed": true, "matched_networks": ["84.54.51.0/24"], "match_count": 1, "lists_checked": 4, "total_networks": 196960}


indicator: 87.121.79.75
indicator_type: ipv4
source: firehol
reverse_dns: 87.121.79.0/24
queried_at: 2026-03-10T04:35:58.660306
raw_data:
  {"listed": true, "matched_networks": ["87.121.79.0/24"], "match_count": 1, "lists_checked": 4, "total_networks": 196960}


indicator: 91.218.244.153
indicator_type: ipv4
source: firehol
reverse_dns: 91.218.244.153/32
queried_at: 2026-03-10T04:36:10.160889
raw_data:
  {"listed": true, "matched_networks": ["91.218.244.153/32"], "match_count": 1, "lists_checked": 4, "total_networks": 196960}


indicator: 91.240.118.2
indicator_type: ipv4
source: firehol
reverse_dns: 91.240.118.0/24
queried_at: 2026-03-10T04:36:10.889322
raw_data:
  {"listed": true, "matched_networks": ["91.240.118.0/24"], "match_count": 1, "lists_checked": 4, "total_networks": 196960}


indicator: 92.242.62.131
indicator_type: ipv4
source: firehol
reverse_dns: 92.242.62.0/24
queried_at: 2026-03-10T04:36:15.926543
raw_data:
  {"listed": true, "matched_networks": ["92.242.62.0/24"], "match_count": 1, "lists_checked": 4, "total_networks": 196960}


indicator: 92.255.57.221
indicator_type: ipv4
source: firehol
reverse_dns: 92.255.57.0/24
queried_at: 2026-03-10T04:36:16.456811
raw_data:
  {"listed": true, "matched_networks": ["92.255.57.0/24"], "match_count": 1, "lists_checked": 4, "total_networks": 196960}


indicator: 92.255.85.2
indicator_type: ipv4
source: firehol
reverse_dns: 92.255.85.0/24
queried_at: 2026-03-10T04:36:16.614521
raw_data:
  {"listed": true, "matched_networks": ["92.255.85.0/24"], "match_count": 1, "lists_checked": 4, "total_networks": 196960}


indicator: 94.103.188.118
indicator_type: ipv4
source: firehol
reverse_dns: 94.103.188.0/24
queried_at: 2026-03-10T04:36:21.194273
raw_data:
  {"listed": true, "matched_networks": ["94.103.188.0/24"], "match_count": 1, "lists_checked": 4, "total_networks": 196960}


indicator: 65.108.103.92
indicator_type: ipv4
source: shodan
reverse_dns: static.92.103.108.65.clients.your-server.de
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-03-10T04:51:45.973546
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["static.92.103.108.65.clients.your-server.de"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 65.108.146.139
indicator_type: ipv4
source: shodan
reverse_dns: static.139.146.108.65.clients.your-server.de
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-03-10T04:51:47.606227
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["static.139.146.108.65.clients.your-server.de"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 65.108.148.13
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: www.everyversecounts.online,everyversecounts.online,static.13.148.108.65.clients.your-server.de
queried_at: 2026-03-10T04:51:49.235624
raw_data:
  {"ports": [22, 80, 443, 8000], "vulns": ["CVE-2025-23419", "CVE-2023-44487"], "hostnames": ["www.everyversecounts.online", "everyversecounts.online", "static.13.148.108.65.clients.your-server.de"], "tags": ["eol-product"], "cpes": ["cpe:/o:canonical:ubuntu_linux", "cpe:/o:linux:linux_kernel", "cpe:/a:f5:nginx:1.24.0", "cpe:/a:openbsd:openssh:9.6p1"]}

hosting_provider:
  cpe:/o:canonical:ubuntu_linux,cpe:/o:linux:linux_kernel,cpe:/a:f5:nginx:1.24.0,cpe:/a:openbsd:openssh:9.6p1


indicator: 65.109.133.207
indicator_type: ipv4
source: shodan
city: eol-product
reverse_dns: static.207.133.109.65.clients.your-server.de
queried_at: 2026-03-10T04:51:50.896886
raw_data:
  {"ports": [22, 80, 443], "vulns": ["CVE-2025-14177", "CVE-2025-1220", "CVE-2025-6491", "CVE-2025-14180", "CVE-2013-2220", "CVE-2025-1735", "CVE-2024-3566", "CVE-2025-14178", "CVE-2007-3205"], "hostnames": ["static.207.133.109.65.clients.your-server.de"], "tags": ["eol-product"], "cpes": ["cpe:/a:php:php:8.4.5", "cpe:/a:openbsd:openssh:9.6p1", "cpe:/a:f5:nginx:1.27.4", "cpe:/o:canonical:ubuntu_linux"]}

hosting_provider:
  cpe:/a:php:php:8.4.5,cpe:/a:openbsd:openssh:9.6p1,cpe:/a:f5:nginx:1.27.4,cpe:/o:canonical:ubuntu_linux


indicator: 65.109.176.86
indicator_type: ipv4
source: shodan
city: self-signed,starttls
reverse_dns: static.86.176.109.65.clients.your-server.de
hosting_provider: cpe:/a:pureftpd:pure-ftpd,cpe:/a:openbsd:openssh:9.9,cpe:/a:f5:nginx
queried_at: 2026-03-10T04:51:52.471926
raw_data:
  {"ports": [21, 22, 80, 443], "vulns": ["CVE-2023-51767", "CVE-2025-26465", "CVE-2025-26466", "CVE-2008-3844", "CVE-2007-2768", "CVE-2025-32728"], "hostnames": ["static.86.176.109.65.clients.your-server.de"], "tags": ["self-signed", "starttls"], "cpes": ["cpe:/a:pureftpd:pure-ftpd", "cpe:/a:openbsd:openssh:9.9", "cpe:/a:f5:nginx"]}


indicator: 65.109.209.214
indicator_type: ipv4
source: shodan
reverse_dns: static.214.209.109.65.clients.your-server.de
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-03-10T04:51:54.209653
raw_data:
  {"ports": [22, 53, 2086, 5555, 8880], "vulns": [], "hostnames": ["static.214.209.109.65.clients.your-server.de"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 65.109.6.39
indicator_type: ipv4
source: shodan
reverse_dns: static.39.6.109.65.clients.your-server.de
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-03-10T04:51:55.837357
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["static.39.6.109.65.clients.your-server.de"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 65.19.178.73
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/a:nodejs:node.js,cpe:/a:expressjs:express
queried_at: 2026-03-10T04:51:57.480812
raw_data:
  {"ports": [3000], "vulns": [], "hostnames": [], "tags": [], "cpes": ["cpe:/a:nodejs:node.js", "cpe:/a:expressjs:express"]}


indicator: 65.21.55.101
indicator_type: ipv4
source: shodan
city: videogame
reverse_dns: static.101.55.21.65.clients.your-server.de
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/a:minecraft:minecraft:1.7.10,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-03-10T04:52:02.470402
raw_data:
  {"ports": [22, 3389, 25565], "vulns": [], "hostnames": ["static.101.55.21.65.clients.your-server.de"], "tags": ["videogame"], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/a:minecraft:minecraft:1.7.10", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 65.49.235.251
indicator_type: ipv4
source: shodan
reverse_dns: 65.49.235.251.16clouds.com
hosting_provider: cpe:/a:amazon:amazon_cloudfront,cpe:/a:openbsd:openssh:8.7
queried_at: 2026-03-10T04:52:05.738468
raw_data:
  {"ports": [22, 443], "vulns": ["CVE-2008-3844", "CVE-2025-26465", "CVE-2023-51767", "CVE-2023-51385", "CVE-2016-20012", "CVE-2025-32728", "CVE-2021-41617", "CVE-2007-2768", "CVE-2021-36368", "CVE-2023-38408", "CVE-2023-48795", "CVE-2024-6387"], "hostnames": ["65.49.235.251.16clouds.com"], "tags": [], "cpes": ["cpe:/a:amazon:amazon_cloudfront", "cpe:/a:openbsd:openssh:8.7"]}


indicator: 65.75.211.232
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/a:openbsd:openssh:8.7
queried_at: 2026-03-10T04:52:07.392342
raw_data:
  {"ports": [22], "vulns": ["CVE-2021-36368", "CVE-2025-26465", "CVE-2024-6387", "CVE-2025-32728", "CVE-2021-41617", "CVE-2023-38408", "CVE-2023-51767", "CVE-2008-3844", "CVE-2023-51385", "CVE-2016-20012", "CVE-2007-2768", "CVE-2023-48795"], "hostnames": [], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.7"]}


indicator: 65.75.211.237
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/a:openbsd:openssh:8.7
queried_at: 2026-03-10T04:52:09.017328
raw_data:
  {"ports": [22], "vulns": ["CVE-2008-3844", "CVE-2025-26465", "CVE-2023-51767", "CVE-2023-51385", "CVE-2016-20012", "CVE-2025-32728", "CVE-2021-41617", "CVE-2007-2768", "CVE-2021-36368", "CVE-2023-38408", "CVE-2023-48795", "CVE-2024-6387"], "hostnames": [], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.7"]}


indicator: 65.87.7.138
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/a:openbsd:openssh:9.2p1,cpe:/o:debian:debian_linux,cpe:/o:linux:linux_kernel
queried_at: 2026-03-10T04:52:10.657816
raw_data:
  {"ports": [21, 22], "vulns": [], "hostnames": [], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.2p1", "cpe:/o:debian:debian_linux", "cpe:/o:linux:linux_kernel"]}


indicator: 65.87.7.79
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/a:f5:nginx:1.29.0,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx
queried_at: 2026-03-10T04:52:12.296913
raw_data:
  {"ports": [22, 80, 443, 8060], "vulns": [], "hostnames": [], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/a:f5:nginx:1.29.0", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx"]}


indicator: 66.111.2.16
indicator_type: ipv4
source: shodan
city: tor
reverse_dns: nycbug1.nycbug.org
hosting_provider: cpe:/a:openbsd:openssh:10.2,cpe:/a:apache:http_server,cpe:/a:openbsd:openbsd
queried_at: 2026-03-10T04:52:17.352144
raw_data:
  {"ports": [80, 443, 2221, 9001, 9030], "vulns": [], "hostnames": ["nycbug1.nycbug.org"], "tags": ["tor"], "cpes": ["cpe:/a:openbsd:openssh:10.2", "cpe:/a:apache:http_server", "cpe:/a:openbsd:openbsd"]}


indicator: 66.179.208.62
indicator_type: ipv4
source: shodan
city: database
reverse_dns: ip66-179-208-62.pbiaas.com
queried_at: 2026-03-10T04:52:24.057985
raw_data:
  {"ports": [22, 80, 443, 3306, 8070, 8080, 8081, 8083, 8084, 8087], "vulns": ["CVE-2007-4723", "CVE-2025-58098", "CVE-2013-2220", "CVE-2023-38709", "CVE-2025-59775", "CVE-2013-0942", "CVE-2024-43204", "CVE-2009-2299", "CVE-2012-3526", "CVE-2024-24795", "CVE-2024-39573", "CVE-2024-38476", "CVE-2024-38475", "CVE-2011-1176", "CVE-2024-38472", "CVE-2025-66200", "CVE-2013-2765", "CVE-2025-49630", "CVE-2024-43394", "CVE-2024-27316", "CVE-2012-4360", "CVE-2007-3205", "CVE-2025-65082", "CVE-2025-49812", 

hosting_provider:
  cpe:/a:openbsd:openssh:9.6p1,cpe:/a:apache:http_server:2.4.65,cpe:/o:debian:debian_linux,cpe:/a:php:php:8.3.24,cpe:/a:f5:nginx,cpe:/o:canonical:ubuntu_linux,cpe:/a:apache:http_server:2.4.62,cpe:/a:getbootstrap:bootstrap:3.4.1,cpe:/a:openresty:openresty,cpe:/a:oracle:mysql:8.0.43,cpe:/a:apache:http_server:2.4.58


indicator: 66.248.206.248
indicator_type: ipv4
source: shodan
city: self-signed
hosting_provider: cpe:/a:python:python:3.11.9,cpe:/a:palletsprojects:flask:3.1.3
queried_at: 2026-03-10T04:52:28.947448
raw_data:
  {"ports": [135, 137, 445, 3389, 5000, 5985, 5986, 47001], "vulns": ["CVE-2009-3720", "CVE-2009-2940", "CVE-2025-13836", "CVE-2021-32052", "CVE-2024-6232", "CVE-2024-7592", "CVE-2024-9287", "CVE-2023-27043", "CVE-2025-12084", "CVE-2020-29396", "CVE-2025-13837", "CVE-2025-12781"], "hostnames": [], "tags": ["self-signed"], "cpes": ["cpe:/a:python:python:3.11.9", "cpe:/a:palletsprojects:flask:3.1.3"]}


indicator: 67.217.243.217
indicator_type: ipv4
source: shodan
reverse_dns: ip67-217-243-217.pbiaas.com
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-03-10T04:52:45.788770
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["ip67-217-243-217.pbiaas.com"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 67.61.43.10
indicator_type: ipv4
source: shodan
reverse_dns: 67-61-43-10.cpe.sparklight.net
queried_at: 2026-03-10T04:52:49.133727
raw_data:
  {"ports": [161], "vulns": [], "hostnames": ["67-61-43-10.cpe.sparklight.net"], "tags": [], "cpes": []}


indicator: 64.95.11.214
indicator_type: ipv4
source: otx
country: US
queried_at: 2026-03-10T04:52:51.791782
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "ASNone ", "indicator": "64.95.11.214", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 65.0.11.173
indicator_type: ipv4
source: otx
country: IN
city: Mumbai
queried_at: 2026-03-10T04:52:53.358066
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "India", "country_code": "IN", "city": "Mumbai", "asn": "AS16509 amazon.com inc", "indicator": "65.0.11.173", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 65.108.103.92
indicator_type: ipv4
source: otx
country: DE
queried_at: 2026-03-10T04:52:54.917112
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS24940 hetzner online gmbh", "indicator": "65.108.103.92", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 1, "passive_dns_count": 0, "malware_samples": ["0f6463489489f48f06b60658f3459c9b11300814502ee83cae57fc19197f29da"], "passive_dns": []}


indicator: 65.108.146.139
indicator_type: ipv4
source: otx
country: DE
reverse_dns: fiets.taxi
hosting_provider: Nextray,cyber security,malicious,ioc,phishing
queried_at: 2026-03-10T04:52:56.927127
raw_data:
  {"pulse_count": 30, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS24940 hetzner online gmbh", "indicator": "65.108.146.139", "tags": ["Nextray", "cyber security", "malicious", "ioc", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS_i_am


indicator: 65.108.148.13
indicator_type: ipv4
source: otx
country: DE
reverse_dns: www.everyversecounts.online,everyversecounts.online,wg.ritehandparts.com,a5.noazi.com
queried_at: 2026-03-10T04:52:58.594016
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS24940 hetzner online gmbh", "indicator": "65.108.148.13", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 4, "malware_samples": [], "passive_dns": ["www.everyversecounts.online", "everyversecounts.online", "wg.ritehandparts.com", "a5.noazi.com"]}


indicator: 65.109.133.207
indicator_type: ipv4
source: otx
country: DE
reverse_dns: www.server7189.duckdns.org,server7189.duckdns.org,hz.sankord.xyz
queried_at: 2026-03-10T04:53:00.337946
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS24940 hetzner online gmbh", "indicator": "65.109.133.207", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["www.server7189.duckdns.org", "server7189.duckdns.org", "hz.sankord.xyz"]}


indicator: 65.109.176.86
indicator_type: ipv4
source: otx
country: DE
reverse_dns: static.86.176.109.65.clients.your-server.de
queried_at: 2026-03-10T04:53:02.035584
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS24940 hetzner online gmbh", "indicator": "65.109.176.86", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["static.86.176.109.65.clients.your-server.de"]}


indicator: 65.109.209.214
indicator_type: ipv4
source: otx
country: DE
queried_at: 2026-03-10T04:53:08.879799
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS24940 hetzner online gmbh", "indicator": "65.109.209.214", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 9, "malware_samples": [], "passive_dns": ["leader.eliman.ir", "hd.sv2mmdy.ga", "bori.almgto574.arzdigital.store", "bori.almgto512.arzdigital.store", "ff782.25pro.arzdigital.store", "sub.shirvpn.com", "bncron.arzdigital.store", "portainer.sina

reverse_dns:
  leader.eliman.ir,hd.sv2mmdy.ga,bori.almgto574.arzdigital.store,bori.almgto512.arzdigital.store,ff782.25pro.arzdigital.store,sub.shirvpn.com,bncron.arzdigital.store,portainer.sinarashidiazar.com,65.109.209.214.sslip.io


indicator: 65.109.6.39
indicator_type: ipv4
source: otx
country: DE
reverse_dns: fland8.janminsta.ir
queried_at: 2026-03-10T04:53:12.777945
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS24940 hetzner online gmbh", "indicator": "65.109.6.39", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["fland8.janminsta.ir"]}


indicator: 65.19.178.73
indicator_type: ipv4
source: otx
country: US
city: Fremont
queried_at: 2026-03-10T04:53:14.630275
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Fremont", "asn": "AS63949 linode  llc", "indicator": "65.19.178.73", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 1, "passive_dns_count": 0, "malware_samples": ["d64a30c5e46fc47d4279e626b42f90abdde028a5c4c7510fc296e0c92c56b537"], "passive_dns": []}


indicator: 65.2.74.7
indicator_type: ipv4
source: otx
country: IN
city: Mumbai
queried_at: 2026-03-10T04:53:16.489277
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "India", "country_code": "IN", "city": "Mumbai", "asn": "AS16509 amazon.com inc", "indicator": "65.2.74.7", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 65.20.70.235
indicator_type: ipv4
source: otx
country: US
reverse_dns: dermakilatsyuhada.ddns.net,cablus.co,4.qinghaihuaer.com
queried_at: 2026-03-10T04:53:18.192823
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "AS20473 the constant company  llc", "indicator": "65.20.70.235", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["dermakilatsyuhada.ddns.net", "cablus.co", "4.qinghaihuaer.com"]}


indicator: 65.21.55.101
indicator_type: ipv4
source: otx
country: FI
city: Helsinki
reverse_dns: plsn.xyz,seed.bitcoinstats.com,seed.bitcoin.sipa.be
hosting_provider: Nextray,cyber security,malicious,ioc,phishing
queried_at: 2026-03-10T04:53:20.950067
raw_data:
  {"pulse_count": 30, "reputation": 0, "country": "Finland", "country_code": "FI", "city": "Helsinki", "asn": "AS24940 hetzner online gmbh", "indicator": "65.21.55.101", "tags": ["Nextray", "cyber security", "malicious", "ioc", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS_


indicator: 65.49.235.234
indicator_type: ipv4
source: otx
country: CA
city: Vancouver
queried_at: 2026-03-10T04:53:22.570716
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Canada", "country_code": "CA", "city": "Vancouver", "asn": "AS25820 it7 networks inc", "indicator": "65.49.235.234", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 65.49.235.251
indicator_type: ipv4
source: otx
country: CA
city: Vancouver
queried_at: 2026-03-10T04:53:24.910564
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Canada", "country_code": "CA", "city": "Vancouver", "asn": "AS25820 it7 networks inc", "indicator": "65.49.235.251", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 65.75.211.232
indicator_type: ipv4
source: otx
queried_at: 2026-03-10T04:53:27.793801
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "", "country_code": "", "city": "", "asn": "ASNone ", "indicator": "65.75.211.232", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 21, "malware_samples": [], "passive_dns": ["vuibb4n0.8319.site", "o2mvfhxe.8319.site", "o70qfk5x.3659.site", "f7c4f0.oltorksz.com", "ca076b.oltorksz.com", "12730c.oltorksz.com", "mhwfz.rlksivff.com", "9fd83c.oltorksz.com", "bzv3mskg.6395.site", "gursy5nt.jgx895.xyz", "www.u

reverse_dns:
  vuibb4n0.8319.site,o2mvfhxe.8319.site,o70qfk5x.3659.site,f7c4f0.oltorksz.com,ca076b.oltorksz.com,12730c.oltorksz.com,mhwfz.rlksivff.com,9fd83c.oltorksz.com,bzv3mskg.6395.site,gursy5nt.jgx895.xyz


indicator: 65.75.211.237
indicator_type: ipv4
source: otx
queried_at: 2026-03-10T04:53:29.328348
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "", "country_code": "", "city": "", "asn": "ASNone ", "indicator": "65.75.211.237", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 14, "malware_samples": [], "passive_dns": ["vuibb4n0.8319.site", "o2mvfhxe.8319.site", "o70qfk5x.3659.site", "f7c4f0.oltorksz.com", "ca076b.oltorksz.com", "12730c.oltorksz.com", "mhwfz.rlksivff.com", "9fd83c.oltorksz.com", "bzv3mskg.6395.site", "gursy5nt.jgx895.xyz", "www.u

reverse_dns:
  vuibb4n0.8319.site,o2mvfhxe.8319.site,o70qfk5x.3659.site,f7c4f0.oltorksz.com,ca076b.oltorksz.com,12730c.oltorksz.com,mhwfz.rlksivff.com,9fd83c.oltorksz.com,bzv3mskg.6395.site,gursy5nt.jgx895.xyz


indicator: 65.87.7.138
indicator_type: ipv4
source: otx
country: US
city: Mountain View
queried_at: 2026-03-10T04:53:32.136544
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Mountain View", "asn": "AS25752 methean professional  llc", "indicator": "65.87.7.138", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 65.87.7.79
indicator_type: ipv4
source: otx
country: US
city: Mountain View
queried_at: 2026-03-10T04:53:33.774423
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Mountain View", "asn": "AS25752 methean professional  llc", "indicator": "65.87.7.79", "tags": ["strong", "iocs", "api contact", "cobalt strike", "nanocore rat", "protect", "linkedin page", "compromise", "agent tesla", "cobalt", "find", "precisionsec", "sentinel misp", "ransomware feed", "feed"], "pulses": ["Cobalt Strike Indicators of Compromise (IOC) Feed - PrecisionSec - Tracking 2025", "

hosting_provider:
  strong,iocs,api contact,cobalt strike,nanocore rat,protect,linkedin page,compromise,agent tesla,cobalt


indicator: 65.87.7.80
indicator_type: ipv4
source: otx
country: US
city: Mountain View
queried_at: 2026-03-10T04:53:35.423589
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Mountain View", "asn": "AS25752 methean professional  llc", "indicator": "65.87.7.80", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 66.11.124.67
indicator_type: ipv4
source: otx
country: US
city: Charlotte
reverse_dns: ns2.lapakseo.id,ns1.lapakseo.id
hosting_provider: Nextray,cyber security,malicious,ioc,phishing
queried_at: 2026-03-10T04:53:37.081277
raw_data:
  {"pulse_count": 34, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Charlotte", "asn": "AS397423 tier.net technologies llc", "indicator": "66.11.124.67", "tags": ["Nextray", "cyber security", "malicious", "ioc", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE        


indicator: 66.111.2.16
indicator_type: ipv4
source: otx
country: US
reverse_dns: nycbug1.nycbug.org
queried_at: 2026-03-10T04:53:38.890741
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "AS11403 nyi", "indicator": "66.111.2.16", "tags": ["anonymization_network", "Nextray", "cyber security", "phishing", "malicious", "2025", "ioc", "tor-guard-nodes", "01.10.2025", "HoneyNet Connect", "tor-exit-nodes"], "pulses": ["Anonymization_Network | Mar 10, 2026 | Part 2/5", "Anonymization_Network | Mar 9, 2026 | Part 2/5", "Anonymization_Network | Mar 8, 2026 | Part 2/5", "

hosting_provider:
  anonymization_network,Nextray,cyber security,phishing,malicious,2025,ioc,tor-guard-nodes,01.10.2025,HoneyNet Connect


indicator: 66.150.198.157
indicator_type: ipv4
source: otx
country: US
hosting_provider: CobaltStrike,Deimos,Supershell,Interactsh,Pegasus,Sliver,NetSupportRAT,Hookbot,Reverse_SSH,Remcos
queried_at: 2026-03-10T04:53:40.463224
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "AS64249 charles river operation", "indicator": "66.150.198.157", "tags": ["CobaltStrike", "Deimos", "Supershell", "Interactsh", "Pegasus", "Sliver", "NetSupportRAT", "Hookbot", "Reverse_SSH", "Remcos", "Brute_Ratel_C4", "Havoc", "Mythic", "Dcrat", "C2", "AsyncRAT"], "pulses": ["Threatfox Recent Additions", "Twitter Feed - drb_ra - 03-03-2025"], "malware_count": 0, "passive_dns_c


indicator: 66.150.198.182
indicator_type: ipv4
source: otx
country: US
hosting_provider: Deimos,CobaltStrike,NetSupportRAT,Sliver,Havoc,Remcos,Mythic,C2
queried_at: 2026-03-10T04:53:43.290145
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "AS64249 charles river operation", "indicator": "66.150.198.182", "tags": ["Deimos", "CobaltStrike", "NetSupportRAT", "Sliver", "Havoc", "Remcos", "Mythic", "C2"], "pulses": ["Threatfox Recent Additions", "Twitter Feed - drb_ra - 05-03-2025"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 66.178.107.140
indicator_type: ipv4
source: otx
country: US
hosting_provider: apt,turla,whitebear
queried_at: 2026-03-10T04:53:45.657757
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "AS12684 ses astra s.a.", "indicator": "66.178.107.140", "tags": ["apt", "turla", "whitebear"], "pulses": ["Introducing WhiteBear"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 66.179.208.62
indicator_type: ipv4
source: otx
country: US
queried_at: 2026-03-10T04:53:47.608743
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "AS7381 sungard availability services lp", "indicator": "66.179.208.62", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 5, "malware_samples": [], "passive_dns": ["indicadores.nouclima.com.mx", "activos-ti.nouclima.com.mx", "solicitudes.nouclima.com.mx", "soporte.jrgeek.app", "nouclima-mysql.jrgeek.app"]}

reverse_dns:
  indicadores.nouclima.com.mx,activos-ti.nouclima.com.mx,solicitudes.nouclima.com.mx,soporte.jrgeek.app,nouclima-mysql.jrgeek.app


indicator: 66.179.209.30
indicator_type: ipv4
source: otx
country: US
reverse_dns: jakodns.con-ip.com,ip66-179-209-30.pbiaas.com
queried_at: 2026-03-10T04:53:49.269976
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "AS7381 sungard availability services lp", "indicator": "66.179.209.30", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["jakodns.con-ip.com", "ip66-179-209-30.pbiaas.com"]}


indicator: 66.220.29.133
indicator_type: ipv4
source: otx
country: US
queried_at: 2026-03-10T04:53:50.795643
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "AS6939 hurricane electric llc", "indicator": "66.220.29.133", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 66.248.206.248
indicator_type: ipv4
source: otx
country: NL
city: Amsterdam
reverse_dns: c48wzv74g5qmzlss1f.servehttp.com,bydv.xyz,apartments.com-r982872-postc.agency
hosting_provider: ,ransomware,malware
queried_at: 2026-03-10T04:53:58.293349
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "Netherlands", "country_code": "NL", "city": "Amsterdam", "asn": "AS57043 hostkey b.v.", "indicator": "66.248.206.248", "tags": ["", "ransomware", "malware"], "pulses": ["ThreatFix", "Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 3, "malware_samples": [], "passive_dns": ["c48wzv74g5qmzlss1f.servehttp.com", "bydv.xyz", "apartments.com-r982872-postc.agency"]}


indicator: 66.42.49.254
indicator_type: ipv4
source: otx
country: SG
city: Singapore
queried_at: 2026-03-10T04:54:00.184943
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Singapore", "country_code": "SG", "city": "Singapore", "asn": "AS20473 the constant company  llc", "indicator": "66.42.49.254", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 66.42.85.46
indicator_type: ipv4
source: otx
country: US
city: Atlanta
reverse_dns: processing.hulagallery.com
queried_at: 2026-03-10T04:54:01.712807
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Atlanta", "asn": "AS20473 the constant company  llc", "indicator": "66.42.85.46", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["processing.hulagallery.com"]}


indicator: 66.55.75.102
indicator_type: ipv4
source: otx
country: US
reverse_dns: youhum.com
hosting_provider: Deimos,CobaltStrike,NetSupportRAT,Sliver,Havoc,Remcos,Mythic,C2
queried_at: 2026-03-10T04:54:03.335203
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "AS46176 komputer king llc", "indicator": "66.55.75.102", "tags": ["Deimos", "CobaltStrike", "NetSupportRAT", "Sliver", "Havoc", "Remcos", "Mythic", "C2"], "pulses": ["Threatfox Recent Additions", "Twitter Feed - drb_ra - 05-03-2025"], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["youhum.com"]}


indicator: 66.70.238.102
indicator_type: ipv4
source: otx
country: CA
queried_at: 2026-03-10T04:54:04.913547
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Canada", "country_code": "CA", "city": null, "asn": "AS16276 ovh sas", "indicator": "66.70.238.102", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 67.159.18.50
indicator_type: ipv4
source: otx
country: US
reverse_dns: www.cloudflare-ssl-cdn.work,ddos-app.com
hosting_provider: telnet,mirai,honeypot,login,scanner,botnet,attack,tcp,blacklist,scan
queried_at: 2026-03-10T04:54:06.550532
raw_data:
  {"pulse_count": 4, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "AS174 cogent communications", "indicator": "67.159.18.50", "tags": ["telnet", "mirai", "honeypot", "login", "scanner", "botnet", "attack", "tcp", "blacklist", "scan", "SSH", "Telnet", "Malicious IP"], "pulses": ["Ka's Honeypot visitors", "Threatfox Recent Additions", "Scan port 23 Telnet (S3#)", "Scan port 23 Telnet (S3#)"], "malware_count": 0, "passive_dns_count": 2, "malware_s


indicator: 67.183.168.80
indicator_type: ipv4
source: otx
country: US
city: Lynnwood
hosting_provider: Nextray,cyber security,malicious,ioc,phishing
queried_at: 2026-03-10T04:54:15.603753
raw_data:
  {"pulse_count": 37, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Lynnwood", "asn": "AS7922 comcast", "indicator": "67.183.168.80", "tags": ["Nextray", "cyber security", "malicious", "ioc", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by


indicator: 67.184.187.50
indicator_type: ipv4
source: otx
country: US
city: McHenry
hosting_provider: Nextray,cyber security,malicious,ioc,phishing
queried_at: 2026-03-10T04:54:18.598031
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "McHenry", "asn": "AS7922 comcast", "indicator": "67.184.187.50", "tags": ["Nextray", "cyber security", "malicious", "ioc", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by 


indicator: 67.184.189.211
indicator_type: ipv4
source: otx
country: US
city: McHenry
hosting_provider: Nextray,cyber security,malicious,ioc,phishing
queried_at: 2026-03-10T04:54:20.956796
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "McHenry", "asn": "AS7922 comcast", "indicator": "67.184.189.211", "tags": ["Nextray", "cyber security", "malicious", "ioc", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by


indicator: 67.215.65.32
indicator_type: ipv4
source: otx
country: US
city: Santa Clara
queried_at: 2026-03-10T04:54:22.576749
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Santa Clara", "asn": "AS36692 cisco opendns  llc", "indicator": "67.215.65.32", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 67.217.243.217
indicator_type: ipv4
source: otx
country: US
queried_at: 2026-03-10T04:54:24.646927
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "AS7381 sungard availability services lp", "indicator": "67.217.243.217", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 67.219.99.34
indicator_type: ipv4
source: otx
country: US
queried_at: 2026-03-10T04:54:26.131166
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "AS20473 the constant company  llc", "indicator": "67.219.99.34", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 67.61.43.10
indicator_type: ipv4
source: otx
country: US
city: Ada
queried_at: 2026-03-10T04:54:27.891935
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Ada", "asn": "AS11492 cable one  inc.", "indicator": "67.61.43.10", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 65.108.103.92
indicator_type: ipv4
source: abuseipdb
country: FI
city: 0
hosting_provider: Hetzner Online GmbH
queried_at: 2026-03-10T04:54:31.906191
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "FI", "isp": "Hetzner Online GmbH", "domain": "hetzner.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 65.108.148.13
indicator_type: ipv4
source: abuseipdb
country: FI
city: 0
hosting_provider: Hetzner Online GmbH
queried_at: 2026-03-10T04:54:35.258410
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "FI", "isp": "Hetzner Online GmbH", "domain": "hetzner.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-07-29T17:21:44+00:00", "categories": []}


indicator: 65.109.133.207
indicator_type: ipv4
source: abuseipdb
country: FI
city: 0
hosting_provider: Hetzner Online GmbH
queried_at: 2026-03-10T04:54:36.987718
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "FI", "isp": "Hetzner Online GmbH", "domain": "hetzner.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2022-12-12T09:57:11+00:00", "categories": []}


indicator: 65.19.178.73
indicator_type: ipv4
source: abuseipdb
country: US
city: 0
hosting_provider: ServerOptima
queried_at: 2026-03-10T04:54:43.721250
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "US", "isp": "ServerOptima", "domain": "serveroptima.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 65.20.70.235
indicator_type: ipv4
source: abuseipdb
country: IN
city: 0
hosting_provider: Vultr Holdings LLC
queried_at: 2026-03-10T04:54:47.155551
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "IN", "isp": "Vultr Holdings LLC", "domain": "vultr.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 65.49.235.234
indicator_type: ipv4
source: abuseipdb
country: CA
city: 0
hosting_provider: IT7 Networks Inc
queried_at: 2026-03-10T04:54:50.533426
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "CA", "isp": "IT7 Networks Inc", "domain": "it7.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 65.75.211.232
indicator_type: ipv4
source: abuseipdb
country: US
city: 0
hosting_provider: Spartan Host Ltd
queried_at: 2026-03-10T04:54:53.828015
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "US", "isp": "Spartan Host Ltd", "domain": "spartanhost.org", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 65.75.211.237
indicator_type: ipv4
source: abuseipdb
country: US
city: 1
hosting_provider: Spartan Host Ltd
queried_at: 2026-03-10T04:54:55.487480
raw_data:
  {"abuse_confidence": 0, "total_reports": 1, "is_public": true, "is_tor": false, "country": "US", "isp": "Spartan Host Ltd", "domain": "spartanhost.org", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-12-10T12:01:13+00:00", "categories": [17, 4, 20, 23]}


indicator: 65.87.7.80
indicator_type: ipv4
source: abuseipdb
country: US
city: 0
hosting_provider: Internet Utilities NA LLC
queried_at: 2026-03-10T04:55:00.410419
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "US", "isp": "Internet Utilities NA LLC", "domain": "iana.org", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-12-09T13:09:59+00:00", "categories": []}


indicator: 64.95.11.214
indicator_type: ipv4
source: virustotal
country: US
hosting_provider: BL Networks
queried_at: 2026-03-10T04:55:02.522302
raw_data:
  {"malicious": 4, "suspicious": 0, "harmless": 57, "undetected": 33, "reputation": 0, "country": "US", "as_owner": "BL Networks", "asn": 399629, "network": "64.95.10.0/23", "last_analysis_date": 1771894881}


indicator: 65.0.11.173
indicator_type: ipv4
source: virustotal
country: IN
hosting_provider: Amazon.com, Inc.
queried_at: 2026-03-10T04:55:22.797783
raw_data:
  {"malicious": 1, "suspicious": 0, "harmless": 60, "undetected": 33, "reputation": -1, "country": "IN", "as_owner": "Amazon.com, Inc.", "asn": 16509, "network": "65.0.0.0/14", "last_analysis_date": 1766999008}


indicator: 65.108.103.92
indicator_type: ipv4
source: virustotal
country: FI
hosting_provider: Hetzner Online GmbH
queried_at: 2026-03-10T04:55:43.420040
raw_data:
  {"malicious": 2, "suspicious": 0, "harmless": 57, "undetected": 35, "reputation": -1, "country": "FI", "as_owner": "Hetzner Online GmbH", "asn": 24940, "network": "65.108.0.0/15", "last_analysis_date": 1771447504}


indicator: 65.108.146.139
indicator_type: ipv4
source: virustotal
country: FI
hosting_provider: Hetzner Online GmbH
queried_at: 2026-03-10T04:56:04.231513
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "FI", "as_owner": "Hetzner Online GmbH", "asn": 24940, "network": "65.108.0.0/15", "last_analysis_date": 1734205962}


indicator: 65.108.148.13
indicator_type: ipv4
source: virustotal
country: FI
hosting_provider: Hetzner Online GmbH
queried_at: 2026-03-10T04:56:24.632457
raw_data:
  {"malicious": 5, "suspicious": 0, "harmless": 54, "undetected": 35, "reputation": -1, "country": "FI", "as_owner": "Hetzner Online GmbH", "asn": 24940, "network": "65.108.0.0/15", "last_analysis_date": 1771607879}


indicator: 65.109.133.207
indicator_type: ipv4
source: virustotal
country: FI
hosting_provider: Hetzner Online GmbH
queried_at: 2026-03-10T04:56:45.291143
raw_data:
  {"malicious": 3, "suspicious": 1, "harmless": 55, "undetected": 35, "reputation": -1, "country": "FI", "as_owner": "Hetzner Online GmbH", "asn": 24940, "network": "65.108.0.0/15", "last_analysis_date": 1772455244}


indicator: 65.109.176.86
indicator_type: ipv4
source: virustotal
country: FI
hosting_provider: Hetzner Online GmbH
queried_at: 2026-03-10T04:57:05.563102
raw_data:
  {"malicious": 13, "suspicious": 0, "harmless": 50, "undetected": 31, "reputation": -1, "country": "FI", "as_owner": "Hetzner Online GmbH", "asn": 24940, "network": "65.108.0.0/15", "last_analysis_date": 1770335874}


indicator: 65.109.209.214
indicator_type: ipv4
source: virustotal
country: FI
hosting_provider: Hetzner Online GmbH
queried_at: 2026-03-10T04:57:25.918874
raw_data:
  {"malicious": 0, "suspicious": 2, "harmless": 60, "undetected": 32, "reputation": -1, "country": "FI", "as_owner": "Hetzner Online GmbH", "asn": 24940, "network": "65.108.0.0/15", "last_analysis_date": 1771587226}


indicator: 65.109.6.39
indicator_type: ipv4
source: virustotal
country: FI
hosting_provider: Hetzner Online GmbH
queried_at: 2026-03-10T04:57:46.206370
raw_data:
  {"malicious": 6, "suspicious": 0, "harmless": 56, "undetected": 32, "reputation": -1, "country": "FI", "as_owner": "Hetzner Online GmbH", "asn": 24940, "network": "65.108.0.0/15", "last_analysis_date": 1770419706}


indicator: 65.19.178.73
indicator_type: ipv4
source: virustotal
country: US
hosting_provider: ServerOptima
queried_at: 2026-03-10T04:58:06.681826
raw_data:
  {"malicious": 3, "suspicious": 0, "harmless": 59, "undetected": 32, "reputation": -1, "country": "US", "as_owner": "ServerOptima", "asn": 401742, "network": "65.19.178.0/24", "last_analysis_date": 1770337676}


indicator: 65.0.11.173
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 65.0.0.0/14
hosting_provider: AMAZON-02
queried_at: 2026-03-10T04:58:28.607183
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@amazonaws.com", "as": 16509, "asname": "AMAZON-02", "ascountry": "US", "assource": "", "network": "65.0.0.0/14", "threatfeeds": {}}


indicator: 65.108.103.92
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 65.108.0.0/16
hosting_provider: HETZNER-AS
queried_at: 2026-03-10T04:58:29.930644
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@hetzner.de", "as": 24940, "asname": "HETZNER-AS", "ascountry": "DE", "assource": "", "network": "65.108.0.0/16", "threatfeeds": {}}


indicator: 65.109.133.207
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 65.109.0.0/16
hosting_provider: HETZNER-AS
queried_at: 2026-03-10T04:58:33.933963
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@hetzner.de", "as": 24940, "asname": "HETZNER-AS", "ascountry": "DE", "assource": "", "network": "65.109.0.0/16", "threatfeeds": {}}


indicator: 65.19.178.73
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 65.19.128.0/18
hosting_provider: HURRICANE
queried_at: 2026-03-10T04:58:39.177118
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@he.net", "as": 6939, "asname": "HURRICANE", "ascountry": "US", "assource": "", "network": "65.19.128.0/18", "threatfeeds": {}}


indicator: 65.20.70.235
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 65.20.68.0/22
hosting_provider: AS-CHOOPA
queried_at: 2026-03-10T04:58:41.825054
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@choopa.com", "as": 20473, "asname": "AS-CHOOPA", "ascountry": "US", "assource": "", "network": "65.20.68.0/22", "threatfeeds": {}}


indicator: 65.21.55.101
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 65.21.0.0/16
hosting_provider: HETZNER-AS
queried_at: 2026-03-10T04:58:43.175297
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@hetzner.de", "as": 24940, "asname": "HETZNER-AS", "ascountry": "DE", "assource": "", "network": "65.21.0.0/16", "threatfeeds": {}}


indicator: 65.49.235.234
indicator_type: ipv4
source: dshield
country: CA
reverse_dns: 65.49.232.0/22
hosting_provider: IT7NET
queried_at: 2026-03-10T04:58:44.486047
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@sioru.com", "as": 25820, "asname": "IT7NET", "ascountry": "CA", "assource": "", "network": "65.49.232.0/22", "threatfeeds": {}}


indicator: 65.75.211.232
indicator_type: ipv4
source: dshield
country: GB
reverse_dns: 65.75.211.0/24
hosting_provider: SPARTANHOST
queried_at: 2026-03-10T04:58:47.112625
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "judy.issa@freshgroup.me", "as": 50131, "asname": "SPARTANHOST", "ascountry": "GB", "assource": "", "network": "65.75.211.0/24", "threatfeeds": {}}


indicator: 66.11.124.67
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 66.11.124.0/24
hosting_provider: TIER-NET
queried_at: 2026-03-10T04:58:54.643695
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": null, "as": 397423, "asname": "TIER-NET", "ascountry": "US", "assource": "", "network": "66.11.124.0/24", "threatfeeds": {}}


indicator: 66.111.2.16
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 66.111.0.0/22
hosting_provider: NYINTERNET
queried_at: 2026-03-10T04:58:55.988950
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "phil@nyiholdings.com", "as": 11403, "asname": "NYINTERNET", "ascountry": "US", "assource": "", "network": "66.111.0.0/22", "threatfeeds": {"alltor": {"lastseen": "2026-02-10", "firstseen": "2025-02-04"}}}


indicator: 66.150.198.157
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 66.150.198.0/24
hosting_provider: ENDOFFICE
queried_at: 2026-03-10T04:58:57.311584
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "jcopson@endoffice.com", "as": 64249, "asname": "ENDOFFICE", "ascountry": "US", "assource": "", "network": "66.150.198.0/24", "threatfeeds": {}}


indicator: 66.178.107.140
indicator_type: ipv4
source: dshield
country: LU
reverse_dns: 66.178.0.0/17
hosting_provider: SES-LUX-AS
queried_at: 2026-03-10T04:58:59.967386
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ses.com", "as": 12684, "asname": "SES-LUX-AS", "ascountry": "LU", "assource": "", "network": "66.178.0.0/17", "threatfeeds": {}}


indicator: 66.220.29.133
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 66.220.0.0/19
hosting_provider: HURRICANE
queried_at: 2026-03-10T04:59:04.346427
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@he.net", "as": 6939, "asname": "HURRICANE", "ascountry": "US", "assource": "", "network": "66.220.0.0/19", "threatfeeds": {}}


indicator: 66.248.206.248
indicator_type: ipv4
source: dshield
country: NL
reverse_dns: 66.248.206.0/24
hosting_provider: HOSTKEY-AS
queried_at: 2026-03-10T04:59:05.671089
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@hostkey.nl", "as": 57043, "asname": "HOSTKEY-AS", "ascountry": "NL", "assource": "", "network": "66.248.206.0/24", "threatfeeds": {"forumspam": {"lastseen": "2015-10-10", "firstseen": "2015-10-03"}}}


indicator: 66.42.49.254
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 66.42.48.0/20
hosting_provider: AS-CHOOPA
queried_at: 2026-03-10T04:59:07.004621
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@choopa.com", "as": 20473, "asname": "AS-CHOOPA", "ascountry": "US", "assource": "", "network": "66.42.48.0/20", "threatfeeds": {}}


indicator: 66.42.85.46
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 66.42.80.0/20
hosting_provider: AS-CHOOPA
queried_at: 2026-03-10T04:59:08.310425
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@choopa.com", "as": 20473, "asname": "AS-CHOOPA", "ascountry": "US", "assource": "", "network": "66.42.80.0/20", "threatfeeds": {}}


indicator: 66.70.238.102
indicator_type: ipv4
source: dshield
country: FR
reverse_dns: 66.70.128.0/17
hosting_provider: OVH
queried_at: 2026-03-10T04:59:11.216638
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ovh.net", "as": 16276, "asname": "OVH", "ascountry": "FR", "assource": "", "network": "66.70.128.0/17", "threatfeeds": {}}


indicator: 67.159.18.50
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 67.159.0.0/18
hosting_provider: COGENT-174
queried_at: 2026-03-10T04:59:12.536093
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@cogentco.com", "as": 174, "asname": "COGENT-174", "ascountry": "US", "assource": "", "network": "67.159.0.0/18", "threatfeeds": {"ciarmy": {"lastseen": "2025-04-01", "firstseen": "2025-03-29"}}}


indicator: 67.183.168.80
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 67.160.0.0/11
hosting_provider: COMCAST-7922
queried_at: 2026-03-10T04:59:13.860016
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@comcast.net", "as": 7922, "asname": "COMCAST-7922", "ascountry": "US", "assource": "", "network": "67.160.0.0/11", "threatfeeds": {}}


indicator: 67.215.65.32
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 67.215.65.0/24
hosting_provider: OPENDNS
queried_at: 2026-03-10T04:59:17.833945
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "andree@opendns.com", "as": 36692, "asname": "OPENDNS", "ascountry": "US", "assource": "", "network": "67.215.65.0/24", "threatfeeds": {}}


indicator: 67.219.99.34
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 67.219.96.0/20
hosting_provider: AS-CHOOPA
queried_at: 2026-03-10T04:59:20.655041
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@choopa.com", "as": 20473, "asname": "AS-CHOOPA", "ascountry": "US", "assource": "", "network": "67.219.96.0/20", "threatfeeds": {}}


indicator: 67.61.43.10
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 67.61.43.0/24
hosting_provider: CABLEONE
queried_at: 2026-03-10T04:59:21.979913
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@cableone.net", "as": 11492, "asname": "CABLEONE", "ascountry": "US", "assource": "", "network": "67.61.43.0/24", "threatfeeds": {}}


indicator: 68.129.122.43
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 68.129.0.0/16
hosting_provider: UUNET
queried_at: 2026-03-10T04:59:23.282237
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse-mail@verizonbusiness.com", "as": 701, "asname": "UUNET", "ascountry": "US", "assource": "", "network": "68.129.0.0/16", "threatfeeds": {}}


indicator: 68.168.223.108
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 68.168.208.0/20
hosting_provider: IS-AS-1
queried_at: 2026-03-10T04:59:24.596405
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abusencc@interserver.net", "as": 19318, "asname": "IS-AS-1", "ascountry": "US", "assource": "", "network": "68.168.208.0/20", "threatfeeds": {}}


indicator: 68.168.31.113
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 68.168.31.0/24
hosting_provider: AS-GLOBALTELEHOST
queried_at: 2026-03-10T04:59:25.893329
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "info@globaltelehost.com", "as": 63023, "asname": "AS-GLOBALTELEHOST", "ascountry": "US", "assource": "", "network": "68.168.31.0/24", "threatfeeds": {}}


indicator: 68.178.207.33
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 68.178.200.0/21
hosting_provider: GO-DADDY-COM-LLC
queried_at: 2026-03-10T04:59:27.202392
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": null, "as": 398101, "asname": "GO-DADDY-COM-LLC", "ascountry": "US", "assource": "", "network": "68.178.200.0/21", "threatfeeds": {}}


indicator: 68.183.118.150
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 68.183.112.0/20
hosting_provider: DIGITALOCEAN-ASN
queried_at: 2026-03-10T04:59:28.522020
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@digitalocean.com", "as": 14061, "asname": "DIGITALOCEAN-ASN", "ascountry": "US", "assource": "", "network": "68.183.112.0/20", "threatfeeds": {}}


indicator: 68.183.84.31
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 68.183.80.0/20
hosting_provider: DIGITALOCEAN-ASN
queried_at: 2026-03-10T04:59:29.819833
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@digitalocean.com", "as": 14061, "asname": "DIGITALOCEAN-ASN", "ascountry": "US", "assource": "", "network": "68.183.80.0/20", "threatfeeds": {}}


indicator: 68.193.108.241
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 68.192.0.0/14
hosting_provider: CABLE-NET-1
queried_at: 2026-03-10T04:59:32.466759
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@cv.net", "as": 6128, "asname": "CABLE-NET-1", "ascountry": "US", "assource": "", "network": "68.192.0.0/14", "threatfeeds": {}}


indicator: 68.199.156.207
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 68.196.0.0/14
hosting_provider: CABLE-NET-1
queried_at: 2026-03-10T04:59:33.796317
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@cv.net", "as": 6128, "asname": "CABLE-NET-1", "ascountry": "US", "assource": "", "network": "68.196.0.0/14", "threatfeeds": {}}


indicator: 68.219.250.95
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 68.218.0.0/15
hosting_provider: MICROSOFT-CORP-MSN-AS-BLOCK
queried_at: 2026-03-10T04:59:35.124688
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@microsoft.com", "as": 8075, "asname": "MICROSOFT-CORP-MSN-AS-BLOCK", "ascountry": "US", "assource": "", "network": "68.218.0.0/15", "threatfeeds": {}}


indicator: 68.235.46.116
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 68.235.46.0/24
hosting_provider: TZULO
queried_at: 2026-03-10T04:59:36.453843
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@tzulo.com", "as": 11878, "asname": "TZULO", "ascountry": "US", "assource": "", "network": "68.235.46.0/24", "threatfeeds": {}}


indicator: 68.63.132.222
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 68.32.0.0/11
hosting_provider: COMCAST-7922
queried_at: 2026-03-10T04:59:37.749648
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@comcast.net", "as": 7922, "asname": "COMCAST-7922", "ascountry": "US", "assource": "", "network": "68.32.0.0/11", "threatfeeds": {}}


indicator: 69.116.218.10
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 69.116.0.0/14
hosting_provider: CABLE-NET-1
queried_at: 2026-03-10T04:59:39.054833
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@cv.net", "as": 6128, "asname": "CABLE-NET-1", "ascountry": "US", "assource": "", "network": "69.116.0.0/14", "threatfeeds": {}}


indicator: 69.157.7.227
indicator_type: ipv4
source: dshield
country: CA
reverse_dns: 69.157.0.0/16
hosting_provider: BACOM
queried_at: 2026-03-10T04:59:41.682546
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@bell.ca", "as": 577, "asname": "BACOM", "ascountry": "CA", "assource": "", "network": "69.157.0.0/16", "threatfeeds": {}}


indicator: 69.159.0.205
indicator_type: ipv4
source: dshield
country: CA
reverse_dns: 69.159.0.0/16
hosting_provider: BACOM
queried_at: 2026-03-10T04:59:42.998156
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@bell.ca", "as": 577, "asname": "BACOM", "ascountry": "CA", "assource": "", "network": "69.159.0.0/16", "threatfeeds": {}}


indicator: 69.166.235.227
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 69.166.235.0/24
hosting_provider: IPXO
queried_at: 2026-03-10T04:59:44.316124
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "admin@rockorb.com", "as": 834, "asname": "IPXO", "ascountry": "US", "assource": "", "network": "69.166.235.0/24", "threatfeeds": {}}


indicator: 69.197.174.136
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 69.197.128.0/18
hosting_provider: WII
queried_at: 2026-03-10T04:59:45.634856
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@wholesaleinternet.net", "as": 32097, "asname": "WII", "ascountry": "US", "assource": "", "network": "69.197.128.0/18", "threatfeeds": {}}


indicator: 69.222.140.36
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 69.216.0.0/13
hosting_provider: ATT-INTERNET4
queried_at: 2026-03-10T04:59:46.945117
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@att.net", "as": 7018, "asname": "ATT-INTERNET4", "ascountry": "US", "assource": "", "network": "69.216.0.0/13", "threatfeeds": {}}


indicator: 69.55.60.146
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 69.55.60.0/22
hosting_provider: DIGITALOCEAN-ASN
queried_at: 2026-03-10T04:59:48.254143
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@digitalocean.com", "as": 14061, "asname": "DIGITALOCEAN-ASN", "ascountry": "US", "assource": "", "network": "69.55.60.0/22", "threatfeeds": {"ciarmy": {"lastseen": "2022-05-21", "firstseen": "2022-05-15"}}}


indicator: 69.57.161.93
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 69.57.161.0/24
hosting_provider: NAMECHEAP-NET
queried_at: 2026-03-10T04:59:49.570750
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@namecheaphosting.com", "as": 22612, "asname": "NAMECHEAP-NET", "ascountry": "US", "assource": "", "network": "69.57.161.0/24", "threatfeeds": {}}


indicator: 69.61.84.210
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 69.61.0.0/17
hosting_provider: GLOBALCOMPASS
queried_at: 2026-03-10T04:59:50.886750
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@cyberwurx.com", "as": 22653, "asname": "GLOBALCOMPASS", "ascountry": "US", "assource": "", "network": "69.61.0.0/17", "threatfeeds": {}}


indicator: 69.62.163.75
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 69.62.128.0/17
hosting_provider: SUREWEST
queried_at: 2026-03-10T04:59:52.209058
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@consolidated.net", "as": 14051, "asname": "SUREWEST", "ascountry": "US", "assource": "", "network": "69.62.128.0/17", "threatfeeds": {}}


indicator: 69.90.132.215
indicator_type: ipv4
source: dshield
country: CA
reverse_dns: 69.90.132.0/23
hosting_provider: COGECO-PEER1
queried_at: 2026-03-10T04:59:53.529830
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@peer1.net", "as": 13768, "asname": "COGECO-PEER1", "ascountry": "CA", "assource": "", "network": "69.90.132.0/23", "threatfeeds": {}}


indicator: 70.109.185.209
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 70.109.184.0/23
hosting_provider: CTELCO
queried_at: 2026-03-10T04:59:54.863116
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@fairpoint.com", "as": 13977, "asname": "CTELCO", "ascountry": "US", "assource": "", "network": "70.109.184.0/23", "threatfeeds": {}}


indicator: 70.173.145.2
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 70.173.0.0/16
hosting_provider: ASN-CXA-ALL-CCI-22773-RDC
queried_at: 2026-03-10T04:59:56.234540
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@cox.net", "as": 22773, "asname": "ASN-CXA-ALL-CCI-22773-RDC", "ascountry": "US", "assource": "", "network": "70.173.0.0/16", "threatfeeds": {}}


indicator: 70.185.170.81
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 70.185.160.0/20
hosting_provider: ASN-CXA-ALL-CCI-22773-RDC
queried_at: 2026-03-10T04:59:57.545609
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@cox.net", "as": 22773, "asname": "ASN-CXA-ALL-CCI-22773-RDC", "ascountry": "US", "assource": "", "network": "70.185.160.0/20", "threatfeeds": {}}


indicator: 70.27.138.120
indicator_type: ipv4
source: dshield
country: CA
reverse_dns: 70.27.0.0/16
hosting_provider: BACOM
queried_at: 2026-03-10T04:59:58.914768
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@bell.ca", "as": 577, "asname": "BACOM", "ascountry": "CA", "assource": "", "network": "70.27.0.0/16", "threatfeeds": {}}


indicator: 70.31.125.222
indicator_type: ipv4
source: dshield
country: CA
reverse_dns: 70.31.0.0/16
hosting_provider: BACOM
queried_at: 2026-03-10T05:00:04.931049
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@bell.ca", "as": 577, "asname": "BACOM", "ascountry": "CA", "assource": "", "network": "70.31.0.0/16", "threatfeeds": {}}


indicator: 70.34.242.59
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 70.34.240.0/20
hosting_provider: AS-CHOOPA
queried_at: 2026-03-10T05:01:11.758371
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@choopa.com", "as": 20473, "asname": "AS-CHOOPA", "ascountry": "US", "assource": "", "network": "70.34.240.0/20", "threatfeeds": {}}


indicator: 70.41.9.56
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 70.41.9.0/24
hosting_provider: VIASAT-SP-BACKBONE
queried_at: 2026-03-10T05:01:13.073750
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "Exede_SOC@viasat.com", "as": 7155, "asname": "VIASAT-SP-BACKBONE", "ascountry": "US", "assource": "", "network": "70.41.9.0/24", "threatfeeds": {}}


indicator: 70.49.208.89
indicator_type: ipv4
source: dshield
country: CA
reverse_dns: 70.49.0.0/16
hosting_provider: BACOM
queried_at: 2026-03-10T05:01:14.409966
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@bell.ca", "as": 577, "asname": "BACOM", "ascountry": "CA", "assource": "", "network": "70.49.0.0/16", "threatfeeds": {}}


indicator: 70.53.179.73
indicator_type: ipv4
source: dshield
country: CA
reverse_dns: 70.53.0.0/16
hosting_provider: BACOM
queried_at: 2026-03-10T05:01:15.732540
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@bell.ca", "as": 577, "asname": "BACOM", "ascountry": "CA", "assource": "", "network": "70.53.0.0/16", "threatfeeds": {}}


indicator: 70.59.0.174
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 70.59.0.0/18
hosting_provider: CENTURYLINK-US-LEGACY-QWEST
queried_at: 2026-03-10T05:01:17.076070
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@centurylinkservices.net", "as": 209, "asname": "CENTURYLINK-US-LEGACY-QWEST", "ascountry": "US", "assource": "", "network": "70.59.0.0/18", "threatfeeds": {}}


indicator: 70.92.4.215
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 70.92.0.0/19
hosting_provider: TWC-10796-MIDWEST
queried_at: 2026-03-10T05:01:18.400476
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@rr.com", "as": 10796, "asname": "TWC-10796-MIDWEST", "ascountry": "US", "assource": "", "network": "70.92.0.0/19", "threatfeeds": {}}


indicator: 70.93.72.15
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 70.93.0.0/16
hosting_provider: TWC-20001-PACWEST
queried_at: 2026-03-10T05:01:19.723218
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@rr.com", "as": 20001, "asname": "TWC-20001-PACWEST", "ascountry": "US", "assource": "", "network": "70.93.0.0/16", "threatfeeds": {}}


indicator: 71.120.30.213
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 71.120.0.0/19
hosting_provider: UUNET
queried_at: 2026-03-10T05:01:21.037564
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse-mail@verizonbusiness.com", "as": 701, "asname": "UUNET", "ascountry": "US", "assource": "", "network": "71.120.0.0/19", "threatfeeds": {}}


indicator: 71.125.33.153
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 71.125.0.0/18
hosting_provider: UUNET
queried_at: 2026-03-10T05:01:22.356580
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse-mail@verizonbusiness.com", "as": 701, "asname": "UUNET", "ascountry": "US", "assource": "", "network": "71.125.0.0/18", "threatfeeds": {}}


indicator: 71.178.248.9
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 71.178.0.0/16
hosting_provider: UUNET
queried_at: 2026-03-10T05:01:23.545201
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse-mail@verizonbusiness.com", "as": 701, "asname": "UUNET", "ascountry": "US", "assource": "", "network": "71.178.0.0/16", "threatfeeds": {}}


indicator: 71.19.144.65
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 71.19.144.0/24
hosting_provider: PRGMR
queried_at: 2026-03-10T05:01:24.859782
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@prgmr.com", "as": 47066, "asname": "PRGMR", "ascountry": "US", "assource": "", "network": "71.19.144.0/24", "threatfeeds": {"alltor": {"lastseen": "2026-03-02", "firstseen": "2025-02-04"}}}


indicator: 71.19.148.13
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 71.19.148.0/24
hosting_provider: PRGMR
queried_at: 2026-03-10T05:01:26.184781
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@prgmr.com", "as": 47066, "asname": "PRGMR", "ascountry": "US", "assource": "", "network": "71.19.148.0/24", "threatfeeds": {"blocklistde22": {"lastseen": "2022-10-22", "firstseen": "2022-10-20"}, "forumspam": {"lastseen": "2022-11-24", "firstseen": "2022-10-12"}, "torexit": {"lastseen": "2022-12-20", "firstseen": "2022-10-10"}}}


indicator: 71.34.135.69
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 71.34.128.0/19
hosting_provider: CENTURYLINK-US-LEGACY-QWEST
queried_at: 2026-03-10T05:01:27.390597
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@centurylinkservices.net", "as": 209, "asname": "CENTURYLINK-US-LEGACY-QWEST", "ascountry": "US", "assource": "", "network": "71.34.128.0/19", "threatfeeds": {}}


indicator: 71.34.94.117
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 71.34.64.0/18
hosting_provider: CENTURYLINK-US-LEGACY-QWEST
queried_at: 2026-03-10T05:01:28.712941
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@centurylinkservices.net", "as": 209, "asname": "CENTURYLINK-US-LEGACY-QWEST", "ascountry": "US", "assource": "", "network": "71.34.64.0/18", "threatfeeds": {}}


indicator: 72.109.215.184
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 72.109.192.0/18
hosting_provider: CELLCO-PART
queried_at: 2026-03-10T05:01:30.032269
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@verizonwireless.com", "as": 6167, "asname": "CELLCO-PART", "ascountry": "US", "assource": "", "network": "72.109.192.0/18", "threatfeeds": {}}


indicator: 72.110.56.29
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 72.110.0.0/18
hosting_provider: CELLCO-PART
queried_at: 2026-03-10T05:01:31.360583
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@verizonwireless.com", "as": 6167, "asname": "CELLCO-PART", "ascountry": "US", "assource": "", "network": "72.110.0.0/18", "threatfeeds": {}}


indicator: 72.167.40.98
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 72.167.32.0/20
hosting_provider: GO-DADDY-COM-LLC
queried_at: 2026-03-10T05:01:32.691043
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": null, "as": 398101, "asname": "GO-DADDY-COM-LLC", "ascountry": "US", "assource": "", "network": "72.167.32.0/20", "threatfeeds": {}}


indicator: 72.174.136.71
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 72.174.0.0/15
hosting_provider: BRESNAN-33588
queried_at: 2026-03-10T05:01:33.999525
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@charter.net", "as": 33588, "asname": "BRESNAN-33588", "ascountry": "US", "assource": "", "network": "72.174.0.0/15", "threatfeeds": {}}


indicator: 72.39.80.238
indicator_type: ipv4
source: dshield
country: CA
reverse_dns: 72.38.0.0/15
hosting_provider: COGECOWAVE
queried_at: 2026-03-10T05:01:36.629652
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "security@cogeco.net", "as": 7992, "asname": "COGECOWAVE", "ascountry": "CA", "assource": "", "network": "72.38.0.0/15", "threatfeeds": {}}


indicator: 73.129.229.156
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 73.0.0.0/8
hosting_provider: COMCAST-7922
queried_at: 2026-03-10T05:01:39.406559
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@comcast.net", "as": 7922, "asname": "COMCAST-7922", "ascountry": "US", "assource": "", "network": "73.0.0.0/8", "threatfeeds": {}}


indicator: 74.117.196.250
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 74.117.196.0/22
hosting_provider: SYSTEMINPLACE
queried_at: 2026-03-10T05:01:44.723879
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": null, "as": 398493, "asname": "SYSTEMINPLACE", "ascountry": "US", "assource": "", "network": "74.117.196.0/22", "threatfeeds": {}}


indicator: 74.12.129.6
indicator_type: ipv4
source: dshield
country: CA
reverse_dns: 74.12.0.0/16
hosting_provider: BACOM
queried_at: 2026-03-10T05:01:46.801356
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@bell.ca", "as": 577, "asname": "BACOM", "ascountry": "CA", "assource": "", "network": "74.12.0.0/16", "threatfeeds": {}}


indicator: 74.120.121.126
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 74.120.121.0/24
hosting_provider: ATT-INTERNET4
queried_at: 2026-03-10T05:01:48.143524
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@att.net", "as": 7018, "asname": "ATT-INTERNET4", "ascountry": "US", "assource": "", "network": "74.120.121.0/24", "threatfeeds": {}}


indicator: 74.121.148.61
indicator_type: ipv4
source: dshield
country: CA
reverse_dns: 74.121.148.0/22
hosting_provider: IT7NET
queried_at: 2026-03-10T05:01:50.801380
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@sioru.com", "as": 25820, "asname": "IT7NET", "ascountry": "CA", "assource": "", "network": "74.121.148.0/22", "threatfeeds": {}}


indicator: 74.48.25.232
indicator_type: ipv4
source: shodan
reverse_dns: admincloud.org
hosting_provider: cpe:/o:linux:linux_kernel,cpe:/a:openbsd:openssh:9.2p1,cpe:/o:debian:debian_linux
queried_at: 2026-03-10T05:18:46.250889
raw_data:
  {"ports": [22, 80, 137], "vulns": [], "hostnames": ["admincloud.org"], "tags": [], "cpes": ["cpe:/o:linux:linux_kernel", "cpe:/a:openbsd:openssh:9.2p1", "cpe:/o:debian:debian_linux"]}


indicator: 74.50.120.106
indicator_type: ipv4
source: shodan
reverse_dns: 74-50-120-106.static.hvvc.us,manager.sparklenode.openmesh.cloud
hosting_provider: cpe:/a:facebook:react,cpe:/a:vercel:next.js,cpe:/a:f5:nginx
queried_at: 2026-03-10T05:18:47.904913
raw_data:
  {"ports": [80, 443], "vulns": [], "hostnames": ["74-50-120-106.static.hvvc.us", "manager.sparklenode.openmesh.cloud"], "tags": [], "cpes": ["cpe:/a:facebook:react", "cpe:/a:vercel:next.js", "cpe:/a:f5:nginx"]}


indicator: 74.50.81.138
indicator_type: ipv4
source: shodan
reverse_dns: vps3232119.trouble-free.net
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-03-10T05:18:51.199299
raw_data:
  {"ports": [22, 53, 8888], "vulns": [], "hostnames": ["vps3232119.trouble-free.net"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 74.50.94.137
indicator_type: ipv4
source: shodan
reverse_dns: vps3115821.trouble-free.net
queried_at: 2026-03-10T05:18:52.846608
raw_data:
  {"ports": [445], "vulns": ["CVE-2020-0796"], "hostnames": ["vps3115821.trouble-free.net"], "tags": [], "cpes": []}


indicator: 75.119.142.109
indicator_type: ipv4
source: shodan
reverse_dns: vmi2912439.contaboserver.net
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-03-10T05:18:54.495761
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["vmi2912439.contaboserver.net"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 75.127.0.221
indicator_type: ipv4
source: shodan
reverse_dns: mail.teams-live-login.com
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/a:google:web_server,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-03-10T05:18:57.780773
raw_data:
  {"ports": [22, 80, 8443], "vulns": [], "hostnames": ["mail.teams-live-login.com"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/a:google:web_server", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 75.28.165.140
indicator_type: ipv4
source: shodan
reverse_dns: 75-28-165-140.lightspeed.tukrga.sbcglobal.net
queried_at: 2026-03-10T05:19:09.732573
raw_data:
  {"ports": [22, 80, 123, 443, 32400], "vulns": [], "hostnames": ["75-28-165-140.lightspeed.tukrga.sbcglobal.net"], "tags": [], "cpes": ["cpe:/a:plex:media_server:1.43.0.10492", "cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:ntp:ntp:4"]}

hosting_provider:
  cpe:/a:plex:media_server:1.43.0.10492,cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux,cpe:/a:ntp:ntp:4


indicator: 76.70.75.222
indicator_type: ipv4
source: shodan
reverse_dns: bras-base-toroon474qw-grc-92-76-70-75-222.dsl.bell.ca
queried_at: 2026-03-10T05:19:16.336588
raw_data:
  {"ports": [50001], "vulns": [], "hostnames": ["bras-base-toroon474qw-grc-92-76-70-75-222.dsl.bell.ca"], "tags": [], "cpes": []}


indicator: 77.12.108.220
indicator_type: ipv4
source: shodan
reverse_dns: dynamic-077-012-108-220.77.12.pool.telefonica.de
queried_at: 2026-03-10T05:19:19.610223
raw_data:
  {"ports": [8089], "vulns": [], "hostnames": ["dynamic-077-012-108-220.77.12.pool.telefonica.de"], "tags": [], "cpes": []}


indicator: 77.12.148.12
indicator_type: ipv4
source: shodan
reverse_dns: dynamic-077-012-148-012.77.12.pool.telefonica.de
queried_at: 2026-03-10T05:19:21.263809
raw_data:
  {"ports": [7170, 8089], "vulns": [], "hostnames": ["dynamic-077-012-148-012.77.12.pool.telefonica.de"], "tags": [], "cpes": []}


indicator: 77.13.164.233
indicator_type: ipv4
source: shodan
reverse_dns: dynamic-077-013-164-233.77.13.pool.telefonica.de
queried_at: 2026-03-10T05:19:24.549450
raw_data:
  {"ports": [8089], "vulns": [], "hostnames": ["dynamic-077-013-164-233.77.13.pool.telefonica.de"], "tags": [], "cpes": []}


indicator: 77.13.187.110
indicator_type: ipv4
source: shodan
reverse_dns: dynamic-077-013-187-110.77.13.pool.telefonica.de
queried_at: 2026-03-10T05:19:27.838925
raw_data:
  {"ports": [8089], "vulns": [], "hostnames": ["dynamic-077-013-187-110.77.13.pool.telefonica.de"], "tags": [], "cpes": []}


indicator: 77.13.244.216
indicator_type: ipv4
source: shodan
reverse_dns: dynamic-077-013-244-216.77.13.pool.telefonica.de
queried_at: 2026-03-10T05:19:29.462977
raw_data:
  {"ports": [8089], "vulns": [], "hostnames": ["dynamic-077-013-244-216.77.13.pool.telefonica.de"], "tags": [], "cpes": []}


indicator: 77.174.164.37
indicator_type: ipv4
source: shodan
city: tor
reverse_dns: anitya.au.rolandvanipenburg.com,77-174-164-37.fixed.kpn.net
hosting_provider: cpe:/a:apache:http_server:2.4.66,cpe:/o:debian:debian_linux
queried_at: 2026-03-10T05:19:34.564312
raw_data:
  {"ports": [443, 9001], "vulns": ["CVE-2013-2765", "CVE-2012-4001", "CVE-2011-2688", "CVE-2011-1176", "CVE-2013-0941", "CVE-2013-0942", "CVE-2012-4360", "CVE-2007-4723", "CVE-2009-0796", "CVE-2013-4365", "CVE-2009-2299", "CVE-2012-3526"], "hostnames": ["anitya.au.rolandvanipenburg.com", "77-174-164-37.fixed.kpn.net"], "tags": ["tor"], "cpes": ["cpe:/a:apache:http_server:2.4.66", "cpe:/o:debian:debian_linux"]}


indicator: 77.179.96.247
indicator_type: ipv4
source: shodan
reverse_dns: dynamic-077-179-096-247.77.179.pool.telefonica.de
queried_at: 2026-03-10T05:19:36.355654
raw_data:
  {"ports": [8089], "vulns": [], "hostnames": ["dynamic-077-179-096-247.77.179.pool.telefonica.de"], "tags": [], "cpes": []}


indicator: 77.181.137.18
indicator_type: ipv4
source: shodan
reverse_dns: dynamic-077-181-137-018.77.181.pool.telefonica.de
queried_at: 2026-03-10T05:19:38.010082
raw_data:
  {"ports": [8089], "vulns": [], "hostnames": ["dynamic-077-181-137-018.77.181.pool.telefonica.de"], "tags": [], "cpes": []}


indicator: 74.176.200.142
indicator_type: ipv4
source: otx
country: US
queried_at: 2026-03-10T05:19:51.675888
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "AS8075 microsoft corporation", "indicator": "74.176.200.142", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 74.226.241.33
indicator_type: ipv4
source: otx
country: US
reverse_dns: qatar-air.online
queried_at: 2026-03-10T05:19:53.184495
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "AS8075 microsoft corporation", "indicator": "74.226.241.33", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["qatar-air.online"]}


indicator: 74.235.56.15
indicator_type: ipv4
source: otx
country: US
hosting_provider: tsec,tpot19,webscan,probing,scanning,la-safe.org,webscanner, bruteforce, web app attack,honeypot
queried_at: 2026-03-10T05:20:06.408839
raw_data:
  {"pulse_count": 22, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "AS8075 microsoft corporation", "indicator": "74.235.56.15", "tags": ["tsec", "tpot19", "webscan", "probing", "scanning", "la-safe.org", "webscanner, bruteforce, web app attack", "honeypot"], "pulses": ["Webscanners 2018-02-09  thru current day", "Ghosty", "Ghosty", "Ghosty", "Threatfox Recent Additions", "\u7f51\u7edc\u626b\u63cf\u4eea", "\u7f51\u7edc\u626b\u63cf\u4eea", "<scri


indicator: 74.248.137.135
indicator_type: ipv4
source: otx
country: US
queried_at: 2026-03-10T05:20:08.538369
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "AS8075 microsoft corporation", "indicator": "74.248.137.135", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 1, "passive_dns_count": 2, "malware_samples": ["d43745c822f15eeb567ee16881206b14086e320a5758071e91809facfee427be"], "passive_dns": ["tms-booking-staging.postgres.database.azure.com", "azuregateway-74740050-b16c-4937-833a-5158bf618ba6-fbbd2e3e64c4.v

reverse_dns:
  tms-booking-staging.postgres.database.azure.com,azuregateway-74740050-b16c-4937-833a-5158bf618ba6-fbbd2e3e64c4.vpn.azure.com


indicator: 74.48.25.232
indicator_type: ipv4
source: otx
country: CA
queried_at: 2026-03-10T05:20:11.195777
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Canada", "country_code": "CA", "city": null, "asn": "AS14663 telus communications inc.", "indicator": "74.48.25.232", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 74.50.120.106
indicator_type: ipv4
source: otx
country: US
queried_at: 2026-03-10T05:20:12.839144
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "AS29802 hivelocity  inc.", "indicator": "74.50.120.106", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 74.50.120.69
indicator_type: ipv4
source: otx
country: US
reverse_dns: 74-50-120-69.static.hvvc.us
queried_at: 2026-03-10T05:20:14.516742
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "AS29802 hivelocity  inc.", "indicator": "74.50.120.69", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["74-50-120-69.static.hvvc.us"]}


indicator: 74.50.81.138
indicator_type: ipv4
source: otx
country: US
reverse_dns: bettylingerie.store,bettylingerie.com
hosting_provider: mirai,win,tcp,botnet,RDP,windows,blacklist,scan,admin,honeypot
queried_at: 2026-03-10T05:20:16.214149
raw_data:
  {"pulse_count": 2, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "AS19318 interserver  inc", "indicator": "74.50.81.138", "tags": ["mirai", "win", "tcp", "botnet", "RDP", "windows", "blacklist", "scan", "admin", "honeypot", "Malicious IP"], "pulses": ["Threatfox Recent Additions", "Scan port 3389 RDP (S3#)"], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["bettylingerie.store", "bettylingerie.com"]}


indicator: 74.50.94.137
indicator_type: ipv4
source: otx
country: US
reverse_dns: nwemarkets.com
queried_at: 2026-03-10T05:20:17.984954
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "AS19318 interserver  inc", "indicator": "74.50.94.137", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["nwemarkets.com"]}


indicator: 75.119.142.109
indicator_type: ipv4
source: otx
country: DE
city: Düsseldorf
reverse_dns: snap.heshamkarm.icu,blog.heshamka.icu,blog.heshamkarm.icu,heshamkarm.icu,heshamka.icu
hosting_provider: cyber security,malicious,ioc,Nextray,phishing
queried_at: 2026-03-10T05:20:19.610955
raw_data:
  {"pulse_count": 36, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "D\u00fcsseldorf", "asn": "AS51167 contabo gmbh", "indicator": "75.119.142.109", "tags": ["cyber security", "malicious", "ioc", "Nextray", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RV


indicator: 75.119.155.34
indicator_type: ipv4
source: otx
country: DE
city: Düsseldorf
reverse_dns: naardetyfus.nl,naardetyfus.online,amileaked.com
queried_at: 2026-03-10T05:20:21.254792
raw_data:
  {"pulse_count": 31, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "D\u00fcsseldorf", "asn": "AS51167 contabo gmbh", "indicator": "75.119.155.34", "tags": ["sha256", "malware-as_a_service", "command_and_control", "ascii text", "http response", "guest system", "click", "colors", "critical", "windir", "report", "professional", "local", "service pack", "catalog file", "gc", "facebook", "ssl certificate", "body length", "done adding", "threat roundup", "blacklist", "windows nt"

hosting_provider:
  sha256,malware-as_a_service,command_and_control,ascii text,http response,guest system,click,colors,critical,windir


indicator: 75.127.0.221
indicator_type: ipv4
source: otx
country: US
reverse_dns: teams-live-login.com
queried_at: 2026-03-10T05:20:23.921142
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "AS36352 colocrossing", "indicator": "75.127.0.221", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 1, "malware_samples": [], "passive_dns": ["teams-live-login.com"]}


indicator: 75.127.106.18
indicator_type: ipv4
source: otx
country: US
queried_at: 2026-03-10T05:20:25.622652
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "AS7226 latisys", "indicator": "75.127.106.18", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 2, "passive_dns_count": 0, "malware_samples": ["e70ab74a4ad44d829dda04e3e7908d6c00a08ef68add7001b92df39de4251832", "a4e7bfc9586708ff9696bb0cd5a2f93373966762d1b3e0a210d15639a1fba922"], "passive_dns": []}


indicator: 75.127.89.194
indicator_type: ipv4
source: otx
country: US
reverse_dns: beidc.top
hosting_provider: C2,Sliver,Interactsh,Hookbot,Evilginx,Hak5_Cloud_C2,Pegasus,AsyncRAT,EvilGoPhish,Qakbot
queried_at: 2026-03-10T05:20:27.190705
raw_data:
  {"pulse_count": 3, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "AS11042 network transit holdings llc", "indicator": "75.127.89.194", "tags": ["C2", "Sliver", "Interactsh", "Hookbot", "Evilginx", "Hak5_Cloud_C2", "Pegasus", "AsyncRAT", "EvilGoPhish", "Qakbot", "Supershell", "Reverse_SSH", "Havoc", "NetSupportRAT", "Mythic", "Brute_Ratel_C4", "CobaltStrike", "Remcos"], "pulses": ["Malware Filter - Botnet List - 10-11-2025", "Threatfox Recent A


indicator: 75.139.55.97
indicator_type: ipv4
source: otx
country: US
city: Pelham
queried_at: 2026-03-10T05:20:28.752940
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Pelham", "asn": "AS20115 charter communications", "indicator": "75.139.55.97", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 75.155.111.250
indicator_type: ipv4
source: otx
country: CA
city: Edmonton
hosting_provider: cyber security,malicious,ioc,Nextray,phishing
queried_at: 2026-03-10T05:20:30.599172
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Canada", "country_code": "CA", "city": "Edmonton", "asn": "AS852 telus communications inc.", "indicator": "75.155.111.250", "tags": ["cyber security", "malicious", "ioc", "Nextray", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by


indicator: 75.169.159.104
indicator_type: ipv4
source: otx
country: US
city: South Jordan
reverse_dns: www.swagzone.de
hosting_provider: cyber security,malicious,ioc,Nextray,phishing
queried_at: 2026-03-10T05:20:32.811020
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "South Jordan", "asn": "AS209 centurylink communications  llc", "indicator": "75.169.159.104", "tags": ["cyber security", "malicious", "ioc", "Nextray", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE


indicator: 75.28.165.140
indicator_type: ipv4
source: otx
country: US
city: Woodstock
hosting_provider: cyber security,malicious,ioc,Nextray,phishing
queried_at: 2026-03-10T05:20:34.561613
raw_data:
  {"pulse_count": 30, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Woodstock", "asn": "AS7018 att services inc", "indicator": "75.28.165.140", "tags": ["cyber security", "malicious", "ioc", "Nextray", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse 

reverse_dns:
  nextcloud.dilos.link,tv.dilos.io,bluebubbles.dilos.io,audiobooks.dilos.io,sync.dilos.io,movies.dilos.io,nzb.dilos.io,chat.dilos.io,search.dilos.io,element.dilos.io


indicator: 75.49.120.132
indicator_type: ipv4
source: otx
country: US
city: Round Rock
queried_at: 2026-03-10T05:20:36.320129
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Round Rock", "asn": "AS7018 att services inc", "indicator": "75.49.120.132", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 75.80.209.66
indicator_type: ipv4
source: otx
country: US
city: Waianae
hosting_provider: ,week,pump,mozi,mexico,dcrat,february,ransomware,grasscall,asyncrat
queried_at: 2026-03-10T05:20:38.096108
raw_data:
  {"pulse_count": 3, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Waianae", "asn": "AS20001 charter communications inc", "indicator": "75.80.209.66", "tags": ["", "week", "pump", "mozi", "mexico", "dcrat", "february", "ransomware", "grasscall", "asyncrat", "ukraine", "france", "brazil", "hong kong", "panama", "malware", "friday", "close", "date", "germany", "android", "cobaltstrike", "indonesia", "netherlands", "vo1d", "canada", "singapore", "india", "remc


indicator: 76.247.178.82
indicator_type: ipv4
source: otx
country: US
city: Milpitas
hosting_provider: cyber security,malicious,ioc,Nextray,phishing
queried_at: 2026-03-10T05:20:39.870023
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Milpitas", "asn": "AS7018 att services inc", "indicator": "76.247.178.82", "tags": ["cyber security", "malicious", "ioc", "Nextray", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse c


indicator: 76.70.75.222
indicator_type: ipv4
source: otx
country: CA
city: Toronto
hosting_provider: cyber security,malicious,ioc,Nextray,phishing
queried_at: 2026-03-10T05:20:42.746588
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Canada", "country_code": "CA", "city": "Toronto", "asn": "AS577 bell canada", "indicator": "76.70.75.222", "tags": ["cyber security", "malicious", "ioc", "Nextray", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS_i_am)", "HIV


indicator: 76.95.215.3
indicator_type: ipv4
source: otx
country: US
city: Culver City
hosting_provider: cyber security,malicious,ioc,Nextray,phishing
queried_at: 2026-03-10T05:20:44.586902
raw_data:
  {"pulse_count": 35, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Culver City", "asn": "AS20001 charter communications inc", "indicator": "76.95.215.3", "tags": ["cyber security", "malicious", "ioc", "Nextray", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE       


indicator: 77.12.108.220
indicator_type: ipv4
source: otx
country: DE
city: Offenbach
hosting_provider: cyber security,malicious,ioc,Nextray,phishing
queried_at: 2026-03-10T05:20:48.124971
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Offenbach", "asn": "AS6805 telefonica germany gmbh & co.ohg", "indicator": "77.12.108.220", "tags": ["cyber security", "malicious", "ioc", "Nextray", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse c


indicator: 77.12.148.12
indicator_type: ipv4
source: otx
country: DE
city: Stuttgart
reverse_dns: bxsjxrqlw0kjns39.myfritz.net
hosting_provider: cyber security,malicious,ioc,Nextray,phishing
queried_at: 2026-03-10T05:20:49.922465
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Stuttgart", "asn": "AS6805 telefonica germany gmbh & co.ohg", "indicator": "77.12.148.12", "tags": ["cyber security", "malicious", "ioc", "Nextray", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse cr


indicator: 77.120.29.157
indicator_type: ipv4
source: otx
country: UA
city: Khmelnytskyy
queried_at: 2026-03-10T05:20:51.500927
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Ukraine", "country_code": "UA", "city": "Khmelnytskyy", "asn": "AS25229 kyivski telekomunikatsiyni merezhi llc", "indicator": "77.120.29.157", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 1, "passive_dns_count": 0, "malware_samples": ["a0765d2800c0ad0ee6dff1f252f63e26ccf759739c48d2c008c67b1be106a8b3"], "passive_dns": []}


indicator: 77.13.164.233
indicator_type: ipv4
source: otx
country: DE
city: Berlin
reverse_dns: ostx.kkollektiv.org
hosting_provider: cyber security,malicious,ioc,Nextray,phishing
queried_at: 2026-03-10T05:20:53.238094
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Berlin", "asn": "AS6805 telefonica germany gmbh & co.ohg", "indicator": "77.13.164.233", "tags": ["cyber security", "malicious", "ioc", "Nextray", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse crea


indicator: 77.13.173.98
indicator_type: ipv4
source: otx
country: DE
city: Berlin
reverse_dns: secretbackend.link
hosting_provider: cyber security,malicious,ioc,Nextray,phishing
queried_at: 2026-03-10T05:20:55.141918
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Berlin", "asn": "AS6805 telefonica germany gmbh & co.ohg", "indicator": "77.13.173.98", "tags": ["cyber security", "malicious", "ioc", "Nextray", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse creat


indicator: 77.13.187.110
indicator_type: ipv4
source: otx
country: DE
city: Berlin
reverse_dns: dsm.pgmr2.com,gruene.pgmr2.com
hosting_provider: cyber security,malicious,ioc,Nextray,phishing
queried_at: 2026-03-10T05:20:56.876518
raw_data:
  {"pulse_count": 34, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Berlin", "asn": "AS6805 telefonica germany gmbh & co.ohg", "indicator": "77.13.187.110", "tags": ["cyber security", "malicious", "ioc", "Nextray", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse crea


indicator: 77.13.244.216
indicator_type: ipv4
source: otx
country: DE
city: Berlin
hosting_provider: cyber security,malicious,ioc,Nextray,phishing
queried_at: 2026-03-10T05:20:58.521504
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Berlin", "asn": "AS6805 telefonica germany gmbh & co.ohg", "indicator": "77.13.244.216", "tags": ["cyber security", "malicious", "ioc", "Nextray", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse crea


indicator: 77.13.32.185
indicator_type: ipv4
source: otx
country: DE
city: Berlin
reverse_dns: tgtoshiba.synology.me
hosting_provider: cyber security,malicious,ioc,Nextray,phishing
queried_at: 2026-03-10T05:21:00.324088
raw_data:
  {"pulse_count": 30, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Berlin", "asn": "AS6805 telefonica germany gmbh & co.ohg", "indicator": "77.13.32.185", "tags": ["cyber security", "malicious", "ioc", "Nextray", "phishing"], "pulses": ["PurpleSynapz", "IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE       


indicator: 77.13.54.26
indicator_type: ipv4
source: otx
country: DE
city: Berlin
hosting_provider: cyber security,malicious,ioc,Nextray,phishing
queried_at: 2026-03-10T05:21:02.544769
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Berlin", "asn": "AS6805 telefonica germany gmbh & co.ohg", "indicator": "77.13.54.26", "tags": ["cyber security", "malicious", "ioc", "Nextray", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse create


indicator: 77.174.164.37
indicator_type: ipv4
source: otx
country: NL
queried_at: 2026-03-10T05:21:04.544725
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Netherlands", "country_code": "NL", "city": null, "asn": "AS1136 kpn b.v.", "indicator": "77.174.164.37", "tags": ["cyber security", "malicious", "HoneyNet Connect", "tor-guard-nodes", "ioc", "Nextray", "phishing", "01.10.2025", "2025", "tor-exit-nodes", "anonymization_network"], "pulses": ["Anonymization_Network | Mar 10, 2026 | Part 4/5", "Anonymization_Network | Mar 9, 2026 | Part 4/5", "Anonymization_Network | Mar 8, 2026 | Part 4/5", "Anonymi

reverse_dns:
  gitlab.rolandvanipenburg.com,jabber.rolandvanipenburg.com,mastodon.rolandvanipenburg.com,api.rolandvanipenburg.com,astro.rolandvanipenburg.com,vrs.rolandvanipenburg.com,hq.rolandvanipenburg.com,lh.rolandvanipenburg.com

hosting_provider:
  cyber security,malicious,HoneyNet Connect,tor-guard-nodes,ioc,Nextray,phishing,01.10.2025,2025,tor-exit-nodes


indicator: 77.179.96.247
indicator_type: ipv4
source: otx
country: DE
city: Erzhausen
reverse_dns: device-c53a5e16-9aa3-401a-a214-12a24cc2c39a.remotewd.com
hosting_provider: cyber security,malicious,ioc,Nextray,phishing
queried_at: 2026-03-10T05:21:06.218125
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Erzhausen", "asn": "AS6805 telefonica germany gmbh & co.ohg", "indicator": "77.179.96.247", "tags": ["cyber security", "malicious", "ioc", "Nextray", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse c


indicator: 77.181.137.18
indicator_type: ipv4
source: otx
country: DE
city: Mainz
hosting_provider: cyber security,malicious,ioc,Nextray,phishing
queried_at: 2026-03-10T05:21:08.002804
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Mainz", "asn": "AS6805 telefonica germany gmbh & co.ohg", "indicator": "77.181.137.18", "tags": ["cyber security", "malicious", "ioc", "Nextray", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse creat


indicator: 77.182.51.146
indicator_type: ipv4
source: otx
country: DE
city: Mannheim
hosting_provider: cyber security,malicious,ioc,Nextray,phishing
queried_at: 2026-03-10T05:21:09.579057
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Mannheim", "asn": "AS6805 telefonica germany gmbh & co.ohg", "indicator": "77.182.51.146", "tags": ["cyber security", "malicious", "ioc", "Nextray", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse cr


indicator: 77.185.185.100
indicator_type: ipv4
source: otx
country: DE
city: Frankfurt am Main
reverse_dns: rpg.galad.hopto.me,cloud.galad.hopto.me,y06a7y62arhdxaa7.myfritz.net
hosting_provider: cyber security,malicious,ioc,Nextray,phishing
queried_at: 2026-03-10T05:21:11.800343
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Frankfurt am Main", "asn": "AS6805 telefonica germany gmbh & co.ohg", "indicator": "77.185.185.100", "tags": ["cyber security", "malicious", "ioc", "Nextray", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE          


indicator: 77.185.20.65
indicator_type: ipv4
source: otx
country: DE
city: Denkendorf
hosting_provider: cyber security,malicious,ioc,Nextray,phishing
queried_at: 2026-03-10T05:21:14.046489
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Denkendorf", "asn": "AS6805 telefonica germany gmbh & co.ohg", "indicator": "77.185.20.65", "tags": ["cyber security", "malicious", "ioc", "Nextray", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse c


indicator: 77.185.30.173
indicator_type: ipv4
source: otx
country: DE
city: Mainz
reverse_dns: registry.cluster.dbaur.eu
hosting_provider: cyber security,malicious,ioc,Nextray,phishing
queried_at: 2026-03-10T05:21:16.404617
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Mainz", "asn": "AS6805 telefonica germany gmbh & co.ohg", "indicator": "77.185.30.173", "tags": ["cyber security", "malicious", "ioc", "Nextray", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse creat


indicator: 77.188.107.66
indicator_type: ipv4
source: otx
country: DE
hosting_provider: cyber security,malicious,ioc,Nextray,phishing
queried_at: 2026-03-10T05:21:18.160514
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS6805 telefonica germany gmbh & co.ohg", "indicator": "77.188.107.66", "tags": ["cyber security", "malicious", "ioc", "Nextray", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created 


indicator: 77.190.97.115
indicator_type: ipv4
source: otx
country: DE
city: Stuttgart
hosting_provider: cyber security,malicious,ioc,Nextray,phishing
queried_at: 2026-03-10T05:21:20.398824
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Stuttgart", "asn": "AS6805 telefonica germany gmbh & co.ohg", "indicator": "77.190.97.115", "tags": ["cyber security", "malicious", "ioc", "Nextray", "phishing"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse c


indicator: 74.176.200.142
indicator_type: ipv4
source: abuseipdb
country: JP
city: 0
hosting_provider: Microsoft Corporation
queried_at: 2026-03-10T05:21:21.126355
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "JP", "isp": "Microsoft Corporation", "domain": "microsoft.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 74.235.56.15
indicator_type: ipv4
source: abuseipdb
country: US
city: 0
hosting_provider: Microsoft Corporation
queried_at: 2026-03-10T05:21:24.489645
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "US", "isp": "Microsoft Corporation", "domain": "microsoft.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2023-10-05T17:50:16+00:00", "categories": []}


indicator: 74.248.137.135
indicator_type: ipv4
source: abuseipdb
country: PL
city: 0
hosting_provider: Microsoft Corporation
queried_at: 2026-03-10T05:21:26.141585
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "PL", "isp": "Microsoft Corporation", "domain": "microsoft.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-03-29T04:08:45+00:00", "categories": []}


indicator: 74.48.25.232
indicator_type: ipv4
source: abuseipdb
country: US
city: 0
hosting_provider: MULTACOM CORPORATION
queried_at: 2026-03-10T05:21:27.911872
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "US", "isp": "MULTACOM CORPORATION", "domain": "multacom.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 74.50.120.106
indicator_type: ipv4
source: abuseipdb
country: US
city: 0
hosting_provider: HIVELOCITY, Inc.
queried_at: 2026-03-10T05:21:29.594707
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "US", "isp": "HIVELOCITY, Inc.", "domain": "hivelocity.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 74.50.81.138
indicator_type: ipv4
source: abuseipdb
country: US
city: 0
hosting_provider: Host Department NJ, LLC
queried_at: 2026-03-10T05:21:32.926575
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "US", "isp": "Host Department NJ, LLC", "domain": "interserver.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2023-03-02T10:45:53+00:00", "categories": []}


indicator: 75.127.106.18
indicator_type: ipv4
source: abuseipdb
country: US
city: 0
hosting_provider: zColo
queried_at: 2026-03-10T05:21:41.378388
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "US", "isp": "zColo", "domain": "zcolo.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 75.127.89.194
indicator_type: ipv4
source: abuseipdb
country: HK
city: 0
hosting_provider: NetLab Global
queried_at: 2026-03-10T05:21:43.026116
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "HK", "isp": "NetLab Global", "domain": "as979.net", "usage_type": "Commercial", "last_reported": "2025-11-29T20:10:52+00:00", "categories": []}


indicator: 75.139.55.97
indicator_type: ipv4
source: abuseipdb
country: US
city: 0
hosting_provider: Charter Communications LLC
queried_at: 2026-03-10T05:21:44.730462
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "US", "isp": "Charter Communications LLC", "domain": "charter.com", "usage_type": "Fixed Line ISP", "last_reported": null, "categories": []}


indicator: 75.155.111.250
indicator_type: ipv4
source: abuseipdb
country: CA
city: 0
hosting_provider: TELUS-FIBRE-EDTNABXL
queried_at: 2026-03-10T05:21:46.576268
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "CA", "isp": "TELUS-FIBRE-EDTNABXL", "domain": "telus.net", "usage_type": "Fixed Line ISP", "last_reported": null, "categories": []}


indicator: 75.169.159.104
indicator_type: ipv4
source: abuseipdb
country: US
city: 0
hosting_provider: CenturyLink Communications, LLC
queried_at: 2026-03-10T05:21:48.235059
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "US", "isp": "CenturyLink Communications, LLC", "domain": "centurylink.com", "usage_type": "Fixed Line ISP", "last_reported": null, "categories": []}


indicator: 75.28.165.140
indicator_type: ipv4
source: abuseipdb
country: US
city: 0
hosting_provider: AT&T Enterprises, LLC
queried_at: 2026-03-10T05:21:49.979848
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "US", "isp": "AT&T Enterprises, LLC", "domain": "att.com", "usage_type": "Fixed Line ISP", "last_reported": "2024-07-04T23:28:46+00:00", "categories": []}


indicator: 74.176.200.142
indicator_type: ipv4
source: virustotal
country: JP
hosting_provider: Microsoft Corporation
queried_at: 2026-03-10T05:21:55.369075
raw_data:
  {"malicious": 6, "suspicious": 2, "harmless": 57, "undetected": 29, "reputation": -1, "country": "JP", "as_owner": "Microsoft Corporation", "asn": 8075, "network": "74.176.0.0/14", "last_analysis_date": 1743022885}


indicator: 74.226.241.33
indicator_type: ipv4
source: virustotal
country: JP
hosting_provider: Microsoft Corporation
queried_at: 2026-03-10T05:22:15.640821
raw_data:
  {"malicious": 5, "suspicious": 2, "harmless": 57, "undetected": 30, "reputation": -1, "country": "JP", "as_owner": "Microsoft Corporation", "asn": 8075, "network": "74.224.0.0/14", "last_analysis_date": 1742731749}


indicator: 74.235.56.15
indicator_type: ipv4
source: virustotal
country: US
hosting_provider: Microsoft Corporation
queried_at: 2026-03-10T05:22:35.902552
raw_data:
  {"malicious": 2, "suspicious": 2, "harmless": 59, "undetected": 31, "reputation": -2, "country": "US", "as_owner": "Microsoft Corporation", "asn": 8075, "network": "74.234.0.0/15", "last_analysis_date": 1752905668}


indicator: 74.248.137.135
indicator_type: ipv4
source: virustotal
country: PL
hosting_provider: Microsoft Corporation
queried_at: 2026-03-10T05:22:56.183529
raw_data:
  {"malicious": 4, "suspicious": 1, "harmless": 57, "undetected": 32, "reputation": -1, "country": "PL", "as_owner": "Microsoft Corporation", "asn": 8075, "network": "74.248.0.0/15", "last_analysis_date": 1768582627}


indicator: 74.48.25.232
indicator_type: ipv4
source: virustotal
country: US
hosting_provider: MULTACOM CORPORATION
queried_at: 2026-03-10T05:23:16.403837
raw_data:
  {"malicious": 7, "suspicious": 0, "harmless": 56, "undetected": 31, "reputation": 0, "country": "US", "as_owner": "MULTACOM CORPORATION", "asn": 35916, "network": "74.48.0.0/17", "last_analysis_date": 1770570675}


indicator: 74.50.120.106
indicator_type: ipv4
source: virustotal
country: US
hosting_provider: HIVELOCITY, Inc.
queried_at: 2026-03-10T05:23:36.666331
raw_data:
  {"malicious": 4, "suspicious": 0, "harmless": 58, "undetected": 32, "reputation": -1, "country": "US", "as_owner": "HIVELOCITY, Inc.", "asn": 29802, "network": "74.50.112.0/20", "last_analysis_date": 1770335193}


indicator: 74.50.120.69
indicator_type: ipv4
source: virustotal
country: US
hosting_provider: HIVELOCITY, Inc.
queried_at: 2026-03-10T05:23:56.997568
raw_data:
  {"malicious": 8, "suspicious": 0, "harmless": 54, "undetected": 32, "reputation": -1, "country": "US", "as_owner": "HIVELOCITY, Inc.", "asn": 29802, "network": "74.50.112.0/20", "last_analysis_date": 1770503609}


indicator: 74.50.81.138
indicator_type: ipv4
source: virustotal
country: US
hosting_provider: Interserver, Inc
queried_at: 2026-03-10T05:24:17.252021
raw_data:
  {"malicious": 7, "suspicious": 0, "harmless": 55, "undetected": 32, "reputation": -1, "country": "US", "as_owner": "Interserver, Inc", "asn": 19318, "network": "74.50.64.0/19", "last_analysis_date": 1770420114}


indicator: 74.50.94.137
indicator_type: ipv4
source: virustotal
country: US
hosting_provider: Interserver, Inc
queried_at: 2026-03-10T05:24:37.630480
raw_data:
  {"malicious": 3, "suspicious": 0, "harmless": 59, "undetected": 32, "reputation": -1, "country": "US", "as_owner": "Interserver, Inc", "asn": 19318, "network": "74.50.64.0/19", "last_analysis_date": 1766411773}


indicator: 75.119.142.109
indicator_type: ipv4
source: virustotal
country: FR
hosting_provider: Contabo GmbH
queried_at: 2026-03-10T05:24:57.902310
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "FR", "as_owner": "Contabo GmbH", "asn": 51167, "network": "75.119.128.0/19", "last_analysis_date": 1730080344}


indicator: 74.176.200.142
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 74.176.0.0/14
hosting_provider: MICROSOFT-CORP-MSN-AS-BLOCK
queried_at: 2026-03-10T05:25:18.282186
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@microsoft.com", "as": 8075, "asname": "MICROSOFT-CORP-MSN-AS-BLOCK", "ascountry": "US", "assource": "", "network": "74.176.0.0/14", "threatfeeds": {}}


indicator: 74.226.241.33
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 74.224.0.0/14
hosting_provider: MICROSOFT-CORP-MSN-AS-BLOCK
queried_at: 2026-03-10T05:25:19.627725
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@microsoft.com", "as": 8075, "asname": "MICROSOFT-CORP-MSN-AS-BLOCK", "ascountry": "US", "assource": "", "network": "74.224.0.0/14", "threatfeeds": {}}


indicator: 74.235.56.15
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 74.234.0.0/15
hosting_provider: MICROSOFT-CORP-MSN-AS-BLOCK
queried_at: 2026-03-10T05:25:20.967595
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@microsoft.com", "as": 8075, "asname": "MICROSOFT-CORP-MSN-AS-BLOCK", "ascountry": "US", "assource": "", "network": "74.234.0.0/15", "threatfeeds": {"blocklistde443": {"lastseen": "2023-03-13", "firstseen": "2023-03-11"}, "blocklistde80": {"lastseen": "2023-03-13", "firstseen": "2023-03-11"}, "blocklistdeapache": {"lastseen": "2023-03-13", "firstseen": "2023-03-11"}, "blocklistd


indicator: 74.248.137.135
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 74.248.0.0/15
hosting_provider: MICROSOFT-CORP-MSN-AS-BLOCK
queried_at: 2026-03-10T05:25:22.316161
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@microsoft.com", "as": 8075, "asname": "MICROSOFT-CORP-MSN-AS-BLOCK", "ascountry": "US", "assource": "", "network": "74.248.0.0/15", "threatfeeds": {}}


indicator: 74.48.25.232
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 74.48.0.0/18
hosting_provider: MULTA-ASN1
queried_at: 2026-03-10T05:25:23.649109
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@multacom.com", "as": 35916, "asname": "MULTA-ASN1", "ascountry": "US", "assource": "", "network": "74.48.0.0/18", "threatfeeds": {}}


indicator: 74.50.81.138
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 74.50.64.0/19
hosting_provider: IS-AS-1
queried_at: 2026-03-10T05:25:28.221570
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abusencc@interserver.net", "as": 19318, "asname": "IS-AS-1", "ascountry": "US", "assource": "", "network": "74.50.64.0/19", "threatfeeds": {}}


indicator: 75.119.142.109
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 75.119.128.0/19
hosting_provider: CONTABO
queried_at: 2026-03-10T05:25:30.839980
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@contabo.de", "as": 51167, "asname": "CONTABO", "ascountry": "DE", "assource": "", "network": "75.119.128.0/19", "threatfeeds": {}}


indicator: 75.127.0.221
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 75.127.0.0/24
hosting_provider: AS-COLOCROSSING
queried_at: 2026-03-10T05:25:33.493865
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@colocrossing.com", "as": 36352, "asname": "AS-COLOCROSSING", "ascountry": "US", "assource": "", "network": "75.127.0.0/24", "threatfeeds": {"blocklistdebots": {"lastseen": "2017-07-30", "firstseen": "2017-07-30"}}}


indicator: 75.127.106.18
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 75.127.104.0/22
hosting_provider: DATABANK-LATISYS
queried_at: 2026-03-10T05:25:34.826679
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "DCAbuse@zayo.com", "as": 7226, "asname": "DATABANK-LATISYS", "ascountry": "US", "assource": "", "network": "75.127.104.0/22", "threatfeeds": {}}


indicator: 75.139.55.97
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 75.139.32.0/19
hosting_provider: CHARTER-20115
queried_at: 2026-03-10T05:25:37.811137
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@charter.net", "as": 20115, "asname": "CHARTER-20115", "ascountry": "US", "assource": "", "network": "75.139.32.0/19", "threatfeeds": {}}


indicator: 75.155.111.250
indicator_type: ipv4
source: dshield
country: CA
reverse_dns: 75.155.0.0/16
hosting_provider: TELUS Communications
queried_at: 2026-03-10T05:25:39.128404
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@telus.com", "as": 852, "asname": "TELUS Communications", "ascountry": "CA", "assource": "", "network": "75.155.0.0/16", "threatfeeds": {}}


indicator: 75.169.159.104
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 75.169.0.0/16
hosting_provider: CENTURYLINK-US-LEGACY-QWEST
queried_at: 2026-03-10T05:25:40.471674
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@centurylinkservices.net", "as": 209, "asname": "CENTURYLINK-US-LEGACY-QWEST", "ascountry": "US", "assource": "", "network": "75.169.0.0/16", "threatfeeds": {}}


indicator: 75.28.165.140
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 75.24.0.0/13
hosting_provider: ATT-INTERNET4
queried_at: 2026-03-10T05:25:41.804814
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@att.net", "as": 7018, "asname": "ATT-INTERNET4", "ascountry": "US", "assource": "", "network": "75.24.0.0/13", "threatfeeds": {}}


indicator: 75.49.120.132
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 75.48.0.0/12
hosting_provider: ATT-INTERNET4
queried_at: 2026-03-10T05:25:43.122645
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@att.net", "as": 7018, "asname": "ATT-INTERNET4", "ascountry": "US", "assource": "", "network": "75.48.0.0/12", "threatfeeds": {}}


indicator: 75.80.209.66
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 75.80.192.0/19
hosting_provider: TWC-20001-PACWEST
queried_at: 2026-03-10T05:25:44.469609
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@rr.com", "as": 20001, "asname": "TWC-20001-PACWEST", "ascountry": "US", "assource": "", "network": "75.80.192.0/19", "threatfeeds": {}}


indicator: 76.247.178.82
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 76.244.0.0/14
hosting_provider: ATT-INTERNET4
queried_at: 2026-03-10T05:25:45.846318
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@att.net", "as": 7018, "asname": "ATT-INTERNET4", "ascountry": "US", "assource": "", "network": "76.244.0.0/14", "threatfeeds": {}}


indicator: 76.70.75.222
indicator_type: ipv4
source: dshield
country: CA
reverse_dns: 76.70.0.0/16
hosting_provider: BACOM
queried_at: 2026-03-10T05:25:47.166725
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@bell.ca", "as": 577, "asname": "BACOM", "ascountry": "CA", "assource": "", "network": "76.70.0.0/16", "threatfeeds": {}}


indicator: 76.95.215.3
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 76.94.0.0/15
hosting_provider: TWC-20001-PACWEST
queried_at: 2026-03-10T05:25:48.510524
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@rr.com", "as": 20001, "asname": "TWC-20001-PACWEST", "ascountry": "US", "assource": "", "network": "76.94.0.0/15", "threatfeeds": {}}


indicator: 77.12.108.220
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 77.0.0.0/12
hosting_provider: TDDE-ASN1
queried_at: 2026-03-10T05:25:49.867434
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse.de@telefonica.com", "as": 6805, "asname": "TDDE-ASN1", "ascountry": "DE", "assource": "", "network": "77.0.0.0/12", "threatfeeds": {}}


indicator: 77.120.29.157
indicator_type: ipv4
source: dshield
country: UA
reverse_dns: 77.120.16.0/20
hosting_provider: VOLIA-AS
queried_at: 2026-03-10T05:25:52.557218
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@volia.net", "as": 25229, "asname": "VOLIA-AS", "ascountry": "UA", "assource": "", "network": "77.120.16.0/20", "threatfeeds": {}}


indicator: 77.13.32.185
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 77.0.0.0/12
hosting_provider: TDDE-ASN1
queried_at: 2026-03-10T05:25:59.215259
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse.de@telefonica.com", "as": 6805, "asname": "TDDE-ASN1", "ascountry": "DE", "assource": "", "network": "77.0.0.0/12", "threatfeeds": {"blocklistde22": {"lastseen": "2024-10-05", "firstseen": "2023-10-17"}}}


indicator: 77.174.164.37
indicator_type: ipv4
source: dshield
country: NL
reverse_dns: 77.174.0.0/16
hosting_provider: KPN KPN National
queried_at: 2026-03-10T05:26:01.857384
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@kpn.com", "as": 1136, "asname": "KPN KPN National", "ascountry": "NL", "assource": "", "network": "77.174.0.0/16", "threatfeeds": {"alltor": {"lastseen": "2026-03-02", "firstseen": "2025-02-04"}}}


indicator: 77.179.96.247
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 77.176.0.0/12
hosting_provider: TDDE-ASN1
queried_at: 2026-03-10T05:26:03.211360
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse.de@telefonica.com", "as": 6805, "asname": "TDDE-ASN1", "ascountry": "DE", "assource": "", "network": "77.176.0.0/12", "threatfeeds": {}}


indicator: 77.222.58.239
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 77.222.58.0/23
hosting_provider: SWEB-AS
queried_at: 2026-03-10T05:26:20.753933
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@sweb.ru", "as": 44112, "asname": "SWEB-AS", "ascountry": "RU", "assource": "", "network": "77.222.58.0/23", "threatfeeds": {}}


indicator: 77.23.145.167
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 77.20.0.0/14
hosting_provider: VODANET International IP-Backbone of Vodafone
queried_at: 2026-03-10T05:26:22.094681
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@arcor-ip.de", "as": 3209, "asname": "VODANET International IP-Backbone of Vodafone", "ascountry": "DE", "assource": "", "network": "77.20.0.0/14", "threatfeeds": {}}


indicator: 77.232.137.165
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 77.232.137.0/24
hosting_provider: TIMEWEB-AS
queried_at: 2026-03-10T05:26:23.459333
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@timeweb.ru", "as": 9123, "asname": "TIMEWEB-AS", "ascountry": "RU", "assource": "", "network": "77.232.137.0/24", "threatfeeds": {}}


indicator: 77.238.237.190
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 77.238.224.0/19
hosting_provider: TELERU-AS
queried_at: 2026-03-10T05:26:24.791629
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@teleru.net", "as": 42429, "asname": "TELERU-AS", "ascountry": "RU", "assource": "", "network": "77.238.224.0/19", "threatfeeds": {}}


indicator: 77.250.252.212
indicator_type: ipv4
source: dshield
country: NL
reverse_dns: 77.250.0.0/15
hosting_provider: TNF-AS
queried_at: 2026-03-10T05:26:31.037978
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "esabuse.nl@vodafone.com", "as": 33915, "asname": "TNF-AS", "ascountry": "NL", "assource": "", "network": "77.250.0.0/15", "threatfeeds": {}}


indicator: 77.255.231.15
indicator_type: ipv4
source: dshield
country: PL
reverse_dns: 77.252.0.0/14
hosting_provider: AS-NETIA Warszawa 02-822
queried_at: 2026-03-10T05:26:32.369814
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@inetia.pl", "as": 12741, "asname": "AS-NETIA Warszawa 02-822", "ascountry": "PL", "assource": "", "network": "77.252.0.0/14", "threatfeeds": {}}


indicator: 77.26.181.51
indicator_type: ipv4
source: dshield
country: ES
reverse_dns: 77.26.128.0/18
hosting_provider: Galicia - Spain
queried_at: 2026-03-10T05:26:33.710491
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@mundo-r.net", "as": 12334, "asname": "Galicia - Spain", "ascountry": "ES", "assource": "", "network": "77.26.128.0/18", "threatfeeds": {}}


indicator: 77.37.244.119
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 77.37.128.0/17
hosting_provider: NCNET-AS PJSC Rostelecom ex NCNET
queried_at: 2026-03-10T05:26:39.019277
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@moscow.rt.ru", "as": 42610, "asname": "NCNET-AS PJSC Rostelecom ex NCNET ", "ascountry": "RU", "assource": "", "network": "77.37.128.0/17", "threatfeeds": {}}


indicator: 77.48.28.204
indicator_type: ipv4
source: dshield
country: CZ
reverse_dns: 77.48.0.0/16
hosting_provider: VODAFONE-CZ-AS
queried_at: 2026-03-10T05:26:40.361299
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@vodafone.cz", "as": 16019, "asname": "VODAFONE-CZ-AS", "ascountry": "CZ", "assource": "", "network": "77.48.0.0/16", "threatfeeds": {"forumspam": {"lastseen": "2026-03-02", "firstseen": "2022-10-14"}, "torexit": {"lastseen": "2026-03-09", "firstseen": "2022-10-11"}}}


indicator: 77.49.195.47
indicator_type: ipv4
source: dshield
country: EU
reverse_dns: 77.49.128.0/17
hosting_provider: FORTHNET-GR Forthnet
queried_at: 2026-03-10T05:26:41.707925
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@forthnet.gr", "as": 1241, "asname": "FORTHNET-GR Forthnet", "ascountry": "EU", "assource": "", "network": "77.49.128.0/17", "threatfeeds": {}}


indicator: 77.50.100.180
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 77.50.64.0/18
hosting_provider: STARLINK-AS Moscow, Russia
queried_at: 2026-03-10T05:26:43.058910
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@starlink.ru", "as": 34602, "asname": "STARLINK-AS Moscow, Russia", "ascountry": "RU", "assource": "", "network": "77.50.64.0/18", "threatfeeds": {}}


indicator: 77.55.212.26
indicator_type: ipv4
source: dshield
country: PL
reverse_dns: 77.55.208.0/20
hosting_provider: NETARTGROUP
queried_at: 2026-03-10T05:26:44.397544
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@nazwa.pl", "as": 15967, "asname": "NETARTGROUP", "ascountry": "PL", "assource": "", "network": "77.55.208.0/20", "threatfeeds": {"blocklistde22": {"lastseen": "2020-04-23", "firstseen": "2020-04-19"}}}


indicator: 77.55.215.17
indicator_type: ipv4
source: dshield
country: PL
reverse_dns: 77.55.208.0/20
hosting_provider: NETARTGROUP
queried_at: 2026-03-10T05:26:45.742829
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@nazwa.pl", "as": 15967, "asname": "NETARTGROUP", "ascountry": "PL", "assource": "", "network": "77.55.208.0/20", "threatfeeds": {}}


indicator: 77.68.9.62
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 77.68.0.0/17
queried_at: 2026-03-10T05:26:48.428255
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@oneandone.net", "as": 8560, "asname": "IONOS-AS This is the joint network for IONOS, Fasthosts, Arsys, 1&1 Mail and Media and 1&1 Telecom. Formerly known as 1&1 Internet SE.", "ascountry": "DE", "assource": "", "network": "77.68.0.0/17", "threatfeeds": {}}

hosting_provider:
  IONOS-AS This is the joint network for IONOS, Fasthosts, Arsys, 1&1 Mail and Media and 1&1 Telecom. Formerly known as 1&1 Internet SE.


indicator: 77.79.6.57
indicator_type: ipv4
source: dshield
country: LT
reverse_dns: 77.79.0.0/20
hosting_provider: SPLIUS-AS
queried_at: 2026-03-10T05:26:49.750102
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@splius.lt", "as": 25406, "asname": "SPLIUS-AS", "ascountry": "LT", "assource": "", "network": "77.79.0.0/20", "threatfeeds": {}}


indicator: 77.8.74.222
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 77.0.0.0/12
hosting_provider: TDDE-ASN1
queried_at: 2026-03-10T05:26:51.121743
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse.de@telefonica.com", "as": 6805, "asname": "TDDE-ASN1", "ascountry": "DE", "assource": "", "network": "77.0.0.0/12", "threatfeeds": {"blocklistde22": {"lastseen": "2016-08-25", "firstseen": "2016-08-24"}}}


indicator: 77.83.198.35
indicator_type: ipv4
source: dshield
country: BG
reverse_dns: 77.83.198.0/24
hosting_provider: HZ-EU-AS
queried_at: 2026-03-10T05:26:52.437468
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@hostzealot.com", "as": 59711, "asname": "HZ-EU-AS", "ascountry": "BG", "assource": "", "network": "77.83.198.0/24", "threatfeeds": {}}


indicator: 77.83.199.161
indicator_type: ipv4
source: dshield
country: BG
reverse_dns: 77.83.199.0/24
hosting_provider: HZ-US-AS
queried_at: 2026-03-10T05:26:53.768057
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@hostzealot.com", "as": 202015, "asname": "HZ-US-AS", "ascountry": "BG", "assource": "", "network": "77.83.199.0/24", "threatfeeds": {}}


indicator: 77.83.242.113
indicator_type: ipv4
source: dshield
country: GB
reverse_dns: 77.83.242.0/24
hosting_provider: LABIXE
queried_at: 2026-03-10T05:26:55.096171
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@unitile.ru", "as": 204914, "asname": "LABIXE", "ascountry": "GB", "assource": "", "network": "77.83.242.0/24", "threatfeeds": {}}


indicator: 77.88.42.115
indicator_type: ipv4
source: dshield
country: RS
reverse_dns: 77.88.0.0/18
hosting_provider: TELETECH
queried_at: 2026-03-10T05:26:56.424069
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "ripe@graphic.red", "as": 208398, "asname": "TELETECH", "ascountry": "RS", "assource": "", "network": "77.88.0.0/18", "threatfeeds": {}}


indicator: 77.90.153.24
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 77.90.153.0/24
hosting_provider: RAPIDNET-DE Haunstetter Str. 19
queried_at: 2026-03-10T05:27:00.441631
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@exklusiv.de", "as": 42821, "asname": "RAPIDNET-DE Haunstetter Str. 19", "ascountry": "DE", "assource": "", "network": "77.90.153.0/24", "threatfeeds": {}}


indicator: 77.91.103.32
indicator_type: ipv4
source: dshield
country: GB
reverse_dns: 77.91.103.0/24
hosting_provider: STARK-INDUSTRIES
queried_at: 2026-03-10T05:27:01.665291
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "aospan@netup.ru", "as": 44477, "asname": "STARK-INDUSTRIES", "ascountry": "GB", "assource": "", "network": "77.91.103.0/24", "threatfeeds": {}}


indicator: 77.92.145.20
indicator_type: ipv4
source: dshield
country: TR
reverse_dns: 77.92.145.0/24
hosting_provider: SISTEMDC
queried_at: 2026-03-10T05:27:03.017619
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": ">>UNKNOWN<<", "as": 211804, "asname": "SISTEMDC", "ascountry": "TR", "assource": "", "network": "77.92.145.0/24", "threatfeeds": {}}


indicator: 77.95.201.55
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 77.95.201.0/24
hosting_provider: SC-NTEL-AS
queried_at: 2026-03-10T05:27:04.357147
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@entelnet.ru", "as": 43152, "asname": "SC-NTEL-AS", "ascountry": "RU", "assource": "", "network": "77.95.201.0/24", "threatfeeds": {}}


indicator: 77.99.80.4
indicator_type: ipv4
source: dshield
country: GB
reverse_dns: 77.98.0.0/15
hosting_provider: NTL
queried_at: 2026-03-10T05:27:05.688851
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@virginmedia.com", "as": 5089, "asname": "NTL", "ascountry": "GB", "assource": "", "network": "77.98.0.0/15", "threatfeeds": {}}


indicator: 78.128.112.209
indicator_type: ipv4
source: dshield
country: BG
reverse_dns: 78.128.112.0/24
hosting_provider: AS_4MEDIA
queried_at: 2026-03-10T05:27:07.009897
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@4media.bg", "as": 202325, "asname": "AS_4MEDIA", "ascountry": "BG", "assource": "", "network": "78.128.112.0/24", "threatfeeds": {"rosti": {"lastseen": "2026-02-24", "firstseen": "2026-02-24"}}}


indicator: 78.141.212.135
indicator_type: ipv4
source: dshield
country: US
reverse_dns: 78.141.208.0/20
hosting_provider: AS-CHOOPA
queried_at: 2026-03-10T05:27:08.195941
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@choopa.com", "as": 20473, "asname": "AS-CHOOPA", "ascountry": "US", "assource": "", "network": "78.141.208.0/20", "threatfeeds": {}}


indicator: 78.166.251.201
indicator_type: ipv4
source: dshield
country: TR
reverse_dns: 78.166.128.0/17
hosting_provider: TTNET
queried_at: 2026-03-10T05:27:09.499893
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ttnet.com.tr", "as": 9121, "asname": "TTNET", "ascountry": "TR", "assource": "", "network": "78.166.128.0/17", "threatfeeds": {}}


indicator: 78.166.52.102
indicator_type: ipv4
source: dshield
country: TR
reverse_dns: 78.166.0.0/17
hosting_provider: TTNET
queried_at: 2026-03-10T05:27:10.716340
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ttnet.com.tr", "as": 9121, "asname": "TTNET", "ascountry": "TR", "assource": "", "network": "78.166.0.0/17", "threatfeeds": {}}


indicator: 78.171.42.106
indicator_type: ipv4
source: dshield
country: TR
reverse_dns: 78.171.0.0/17
hosting_provider: TTNET
queried_at: 2026-03-10T05:27:12.037671
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ttnet.com.tr", "as": 9121, "asname": "TTNET", "ascountry": "TR", "assource": "", "network": "78.171.0.0/17", "threatfeeds": {}}


indicator: 78.179.254.67
indicator_type: ipv4
source: dshield
country: TR
reverse_dns: 78.179.128.0/17
hosting_provider: TTNET
queried_at: 2026-03-10T05:27:13.333909
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ttnet.com.tr", "as": 9121, "asname": "TTNET", "ascountry": "TR", "assource": "", "network": "78.179.128.0/17", "threatfeeds": {}}


indicator: 78.188.218.185
indicator_type: ipv4
source: dshield
country: TR
reverse_dns: 78.188.128.0/17
hosting_provider: TTNET
queried_at: 2026-03-10T05:27:14.652807
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@ttnet.com.tr", "as": 9121, "asname": "TTNET", "ascountry": "TR", "assource": "", "network": "78.188.128.0/17", "threatfeeds": {}}


indicator: 78.24.220.122
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 78.24.216.0/21
hosting_provider: RU-JSCIOT
queried_at: 2026-03-10T05:27:15.970123
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@abusehost.ru", "as": 29182, "asname": "RU-JSCIOT", "ascountry": "RU", "assource": "", "network": "78.24.216.0/21", "threatfeeds": {}}


indicator: 78.35.189.15
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 78.34.0.0/15
hosting_provider: NETCOLOGNE
queried_at: 2026-03-10T05:27:17.295715
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@netcologne.de", "as": 8422, "asname": "NETCOLOGNE", "ascountry": "DE", "assource": "", "network": "78.34.0.0/15", "threatfeeds": {}}


indicator: 78.40.117.13
indicator_type: ipv4
source: dshield
country: RU
reverse_dns: 78.40.116.0/22
hosting_provider: FIRSTDC-AS
queried_at: 2026-03-10T05:27:19.967155
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@o2dc.com", "as": 48430, "asname": "FIRSTDC-AS", "ascountry": "RU", "assource": "", "network": "78.40.116.0/22", "threatfeeds": {}}


indicator: 78.46.233.25
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 78.46.0.0/15
hosting_provider: HETZNER-AS
queried_at: 2026-03-10T05:27:21.288186
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@hetzner.de", "as": 24940, "asname": "HETZNER-AS", "ascountry": "DE", "assource": "", "network": "78.46.0.0/15", "threatfeeds": {}}


indicator: 78.48.69.198
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 78.48.0.0/13
hosting_provider: TDDE-ASN1
queried_at: 2026-03-10T05:27:27.951345
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse.de@telefonica.com", "as": 6805, "asname": "TDDE-ASN1", "ascountry": "DE", "assource": "", "network": "78.48.0.0/13", "threatfeeds": {}}


indicator: 79.110.49.194
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/a:microsoft:internet_information_services:8.5,cpe:/o:microsoft:windows
queried_at: 2026-03-10T05:44:28.296073
raw_data:
  {"ports": [80, 135, 445, 5357], "vulns": ["CVE-2020-0796", "CVE-2014-4078"], "hostnames": [], "tags": [], "cpes": ["cpe:/a:microsoft:internet_information_services:8.5", "cpe:/o:microsoft:windows"]}


indicator: 79.110.49.27
indicator_type: ipv4
source: shodan
city: self-signed,starttls
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/a:f5:nginx
queried_at: 2026-03-10T05:44:29.947593
raw_data:
  {"ports": [21, 22, 25, 53, 80, 110, 143, 465, 587, 993, 995, 8083], "vulns": [], "hostnames": [], "tags": ["self-signed", "starttls"], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/a:f5:nginx"]}


indicator: 79.112.64.146
indicator_type: ipv4
source: shodan
reverse_dns: 79-112-64-146.digimobil.es
hosting_provider: cpe:/a:lighttpd:lighttpd
queried_at: 2026-03-10T05:44:31.666299
raw_data:
  {"ports": [88], "vulns": [], "hostnames": ["79-112-64-146.digimobil.es"], "tags": [], "cpes": ["cpe:/a:lighttpd:lighttpd"]}


indicator: 79.137.199.56
indicator_type: ipv4
source: shodan
reverse_dns: swankycable.ptr.network
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-03-10T05:44:41.494569
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["swankycable.ptr.network"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 79.201.233.14
indicator_type: ipv4
source: shodan
reverse_dns: p4fc9e90e.dip0.t-ipconnect.de
queried_at: 2026-03-10T05:45:03.581809
raw_data:
  {"ports": [8089], "vulns": [], "hostnames": ["p4fc9e90e.dip0.t-ipconnect.de"], "tags": [], "cpes": []}


indicator: 79.207.93.249
indicator_type: ipv4
source: shodan
reverse_dns: p4fcf5df9.dip0.t-ipconnect.de
queried_at: 2026-03-10T05:45:08.678092
raw_data:
  {"ports": [8089], "vulns": [], "hostnames": ["p4fcf5df9.dip0.t-ipconnect.de"], "tags": [], "cpes": []}


indicator: 79.209.27.225
indicator_type: ipv4
source: shodan
reverse_dns: p4fd11be1.dip0.t-ipconnect.de
queried_at: 2026-03-10T05:45:13.610371
raw_data:
  {"ports": [8089], "vulns": [], "hostnames": ["p4fd11be1.dip0.t-ipconnect.de"], "tags": [], "cpes": []}


indicator: 79.215.91.216
indicator_type: ipv4
source: shodan
reverse_dns: p4fd75bd8.dip0.t-ipconnect.de
queried_at: 2026-03-10T05:45:20.206569
raw_data:
  {"ports": [8089], "vulns": [], "hostnames": ["p4fd75bd8.dip0.t-ipconnect.de"], "tags": [], "cpes": []}


indicator: 79.227.55.69
indicator_type: ipv4
source: shodan
reverse_dns: p4fe33745.dip0.t-ipconnect.de
queried_at: 2026-03-10T05:45:30.464127
raw_data:
  {"ports": [8089], "vulns": [], "hostnames": ["p4fe33745.dip0.t-ipconnect.de"], "tags": [], "cpes": []}


indicator: 79.235.136.187
indicator_type: ipv4
source: shodan
reverse_dns: p4feb88bb.dip0.t-ipconnect.de
queried_at: 2026-03-10T05:45:33.753108
raw_data:
  {"ports": [8089], "vulns": [], "hostnames": ["p4feb88bb.dip0.t-ipconnect.de"], "tags": [], "cpes": []}


indicator: 78.80.66.68
indicator_type: ipv4
source: otx
country: CZ
city: Prague
queried_at: 2026-03-10T05:45:36.731003
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Czechia", "country_code": "CZ", "city": "Prague", "asn": "AS13036 t-mobile", "indicator": "78.80.66.68", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 79.110.49.194
indicator_type: ipv4
source: otx
country: US
city: Reston
queried_at: 2026-03-10T05:45:40.766465
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Reston", "asn": "AS209371 private network", "indicator": "79.110.49.194", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 1, "passive_dns_count": 0, "malware_samples": ["4ffa59d114d26bf53f8fd94c7b791701e94c8c0be799864e7a6ddad6dda0652c"], "passive_dns": []}


indicator: 79.110.49.27
indicator_type: ipv4
source: otx
country: US
city: Reston
queried_at: 2026-03-10T05:45:42.523141
raw_data:
  {"pulse_count": 3, "reputation": 0, "country": "United States of America", "country_code": "US", "city": "Reston", "asn": "AS209371 private network", "indicator": "79.110.49.27", "tags": [], "pulses": ["Threatfox Recent Additions", "ETIC Cybersecurity  2024-05-25  Port Scan", "ETIC Cybersecurity  2024-05-18  Port Scan"], "malware_count": 2, "passive_dns_count": 5, "malware_samples": ["17ed12cfd06493159f0d451e4646da980fea39323b0fa53ce6f5a1b8d28a4910", "64317307935c3a00724ba448545de7c74385254f7dab

reverse_dns:
  www.casinolicence.fr,casinolicence.fr,tinseltesting.ddns.net,frontbrockmepronto.sytes.net,frontbrockmepronto.ddns.net


indicator: 79.112.64.146
indicator_type: ipv4
source: otx
country: RO
city: Iasi
reverse_dns: sx.tumacloud.org
hosting_provider: malicious,cyber security,Nextray,phishing,ioc
queried_at: 2026-03-10T05:45:44.229058
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Romania", "country_code": "RO", "city": "Iasi", "asn": "AS8708 rcs & rds sa", "indicator": "79.112.64.146", "tags": ["malicious", "cyber security", "Nextray", "phishing", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS_i_am)", "HI


indicator: 79.116.11.88
indicator_type: ipv4
source: otx
country: ES
city: Madrid
reverse_dns: igsnas.direct.quickconnect.to,lornz-tv.duckdns.org
hosting_provider: malicious,cyber security,Nextray,phishing,ioc
queried_at: 2026-03-10T05:45:47.300158
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Spain", "country_code": "ES", "city": "Madrid", "asn": "AS57269 digi spain telecom s.l.u.", "indicator": "79.116.11.88", "tags": ["malicious", "cyber security", "Nextray", "phishing", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RV


indicator: 79.119.7.130
indicator_type: ipv4
source: otx
country: RO
city: Oradea
queried_at: 2026-03-10T05:45:48.853871
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Romania", "country_code": "RO", "city": "Oradea", "asn": "AS8708 rcs & rds sa", "indicator": "79.119.7.130", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 79.124.40.107
indicator_type: ipv4
source: otx
country: BG
queried_at: 2026-03-10T05:45:50.449745
raw_data:
  {"pulse_count": 4, "reputation": 0, "country": "Bulgaria", "country_code": "BG", "city": null, "asn": "AS49849 mg 2002", "indicator": "79.124.40.107", "tags": ["nanocore rat", "Brute_Ratel_C4", "Sliver", "AsyncRAT", "CobaltStrike", "Dcrat", "sentinel misp", "precisionsec", "protect", "api contact", "cobalt", "Pegasus", "find", "Mythic", "strong", "C2", "feed", "Havoc", "Qakbot", "agent tesla", "NetSupportRAT", "compromise", "Interactsh", "Reverse_SSH", "linkedin page", "Hookbot", "Deimos", "Remc

hosting_provider:
  nanocore rat,Brute_Ratel_C4,Sliver,AsyncRAT,CobaltStrike,Dcrat,sentinel misp,precisionsec,protect,api contact


indicator: 79.133.57.206
indicator_type: ipv4
source: otx
country: DE
reverse_dns: lplglbltrsrymanagement.com,natwestukonline.com
queried_at: 2026-03-10T05:45:52.670715
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Germany", "country_code": "DE", "city": null, "asn": "AS44066 accelerated it services & consulting gmbh", "indicator": "79.133.57.206", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 1, "passive_dns_count": 2, "malware_samples": ["6fc171a516ca3cddd2d0f59929528a5299cd76ec74e6d2ed446c509b6bf1a53c"], "passive_dns": ["lplglbltrsrymanagement.com", "natwestukonline.com"]}


indicator: 79.137.196.223
indicator_type: ipv4
source: otx
country: RU
city: Moscow
reverse_dns: graf.bolshakov.org
hosting_provider: malicious,cyber security,Nextray,phishing,ioc
queried_at: 2026-03-10T05:45:54.331976
raw_data:
  {"pulse_count": 35, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": "Moscow", "asn": "AS12695 llc digital network", "indicator": "79.137.196.223", "tags": ["malicious", "cyber security", "Nextray", "phishing", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse crea


indicator: 79.137.199.56
indicator_type: ipv4
source: otx
country: RU
city: Moscow
hosting_provider: malicious,cyber security,Nextray,phishing,ioc
queried_at: 2026-03-10T05:46:00.928983
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": "Moscow", "asn": "AS12695 llc digital network", "indicator": "79.137.199.56", "tags": ["malicious", "cyber security", "Nextray", "phishing", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse creat


indicator: 79.142.69.160
indicator_type: ipv4
source: otx
country: CH
city: Zurich
hosting_provider: auto-generated security,malicious,login,cyber security,SSH,scanner,Nextray,phishing,ioc,Telnet
queried_at: 2026-03-10T05:46:02.869887
raw_data:
  {"pulse_count": 50, "reputation": 0, "country": "Switzerland", "country_code": "CH", "city": "Zurich", "asn": "AS51430 altushost b.v.", "indicator": "79.142.69.160", "tags": ["auto-generated security", "malicious", "login", "cyber security", "SSH", "scanner", "Nextray", "phishing", "ioc", "Telnet", "attack"], "pulses": ["Ka's Honeypot visitors", "Threatfox Recent Additions", "Auto-generated Pulse", "Greensnow Threat Intelligence Feed", "IOC Records Provided by @NextRayAI", "IOCs Industriales", "

reverse_dns:
  davaj-2156.direct.quickconnect.to,mydima.net,pfannkuchenbratze.dedyn.io,jayb33sclassynas001.myqnapcloud.com,hold.linkpc.net,soultrap102vdsm.synology.me,f7689dfhgthdfhgvbkfocusself8456.dedyn.io,gesten.direct.quickconnect.to,servicepoint.duckdns.org,prjmngmt.jkwakernaak.nl


indicator: 79.148.21.137
indicator_type: ipv4
source: otx
country: ES
city: Las Palmas de Gran Canaria
reverse_dns: familiamv.ml,diskfcg.synology.me
hosting_provider: malicious,cyber security,Nextray,phishing,ioc
queried_at: 2026-03-10T05:46:04.786232
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Spain", "country_code": "ES", "city": "Las Palmas de Gran Canaria", "asn": "AS3352 telefonica de espana", "indicator": "79.148.21.137", "tags": ["malicious", "cyber security", "Nextray", "phishing", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Puls


indicator: 79.180.167.177
indicator_type: ipv4
source: otx
country: IL
city: Ramat Gan
queried_at: 2026-03-10T05:46:06.299147
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Israel", "country_code": "IL", "city": "Ramat Gan", "asn": "AS8551 bezeq international-ltd", "indicator": "79.180.167.177", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 79.183.169.134
indicator_type: ipv4
source: otx
country: IL
city: 'Aseret
queried_at: 2026-03-10T05:46:07.947515
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Israel", "country_code": "IL", "city": "'Aseret", "asn": "AS8551 bezeq international-ltd", "indicator": "79.183.169.134", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 79.185.199.208
indicator_type: ipv4
source: otx
country: PL
city: Jedlnia-Letnisko
hosting_provider: malicious,cyber security,Nextray,phishing,ioc
queried_at: 2026-03-10T05:46:10.191091
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Poland", "country_code": "PL", "city": "Jedlnia-Letnisko", "asn": "AS5617 orange polska spolka akcyjna", "indicator": "79.185.199.208", "tags": ["malicious", "cyber security", "Nextray", "phishing", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Puls


indicator: 79.192.104.235
indicator_type: ipv4
source: otx
country: DE
city: Frankfurt (Oder)
reverse_dns: 9xbaecryvkchapy8.myfritz.net
hosting_provider: malicious,cyber security,Nextray,phishing,ioc
queried_at: 2026-03-10T05:46:11.811842
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Frankfurt (Oder)", "asn": "AS3320 deutsche telekom ag", "indicator": "79.192.104.235", "tags": ["malicious", "cyber security", "Nextray", "phishing", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse create


indicator: 79.192.204.244
indicator_type: ipv4
source: otx
country: DE
city: Herzogenrath
hosting_provider: malicious,cyber security,Nextray,phishing,ioc
queried_at: 2026-03-10T05:46:13.386844
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Herzogenrath", "asn": "AS3320 deutsche telekom ag", "indicator": "79.192.204.244", "tags": ["malicious", "cyber security", "Nextray", "phishing", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by


indicator: 79.192.206.163
indicator_type: ipv4
source: otx
country: DE
city: Herzogenrath
reverse_dns: solib.synology.me,stb-fuss.synology.me,z5jyyzqcbkwyprvc.myfritz.net
hosting_provider: malicious,cyber security,Nextray,phishing,ioc
queried_at: 2026-03-10T05:46:15.270549
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Herzogenrath", "asn": "AS3320 deutsche telekom ag", "indicator": "79.192.206.163", "tags": ["malicious", "cyber security", "Nextray", "phishing", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by


indicator: 79.192.207.252
indicator_type: ipv4
source: otx
country: DE
city: Herzogenrath
hosting_provider: malicious,cyber security,Nextray,phishing,ioc
queried_at: 2026-03-10T05:46:16.924234
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Herzogenrath", "asn": "AS3320 deutsche telekom ag", "indicator": "79.192.207.252", "tags": ["malicious", "cyber security", "Nextray", "phishing", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by


indicator: 79.196.250.77
indicator_type: ipv4
source: otx
country: DE
city: Hamburg
hosting_provider: malicious,cyber security,Nextray,phishing,ioc
queried_at: 2026-03-10T05:46:18.648418
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Hamburg", "asn": "AS3320 deutsche telekom ag", "indicator": "79.196.250.77", "tags": ["malicious", "cyber security", "Nextray", "phishing", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS_i

reverse_dns:
  www.servus-kathi.de,autoconfig.servus-kathi.de,servus-kathi.de,server.ist-immer-online.de,device-36c08a26-89e1-4f1e-8f01-800eca711c9e.remotewd.com


indicator: 79.201.184.238
indicator_type: ipv4
source: otx
country: DE
city: Achim
reverse_dns: oypbdijvhn05d9cm.myfritz.net
hosting_provider: malicious,cyber security,Nextray,phishing,ioc
queried_at: 2026-03-10T05:46:21.888868
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Achim", "asn": "AS3320 deutsche telekom ag", "indicator": "79.201.184.238", "tags": ["malicious", "cyber security", "Nextray", "phishing", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS_i_


indicator: 79.201.184.239
indicator_type: ipv4
source: otx
country: DE
city: Achim
reverse_dns: 5n8puioebmk0vd7u.myfritz.net
hosting_provider: malicious,cyber security,Nextray,phishing,ioc
queried_at: 2026-03-10T05:46:23.595326
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Achim", "asn": "AS3320 deutsche telekom ag", "indicator": "79.201.184.239", "tags": ["malicious", "cyber security", "Nextray", "phishing", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS_i_


indicator: 79.201.233.14
indicator_type: ipv4
source: otx
country: DE
city: Buxtehude
hosting_provider: malicious,cyber security,Nextray,phishing,ioc
queried_at: 2026-03-10T05:46:25.203790
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Buxtehude", "asn": "AS3320 deutsche telekom ag", "indicator": "79.201.233.14", "tags": ["malicious", "cyber security", "Nextray", "phishing", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS


indicator: 79.205.208.100
indicator_type: ipv4
source: otx
country: DE
city: Mering
reverse_dns: ddx5e0r0fst069vk.myfritz.net
hosting_provider: malicious,cyber security,Nextray,phishing,ioc
queried_at: 2026-03-10T05:46:26.823821
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Mering", "asn": "AS3320 deutsche telekom ag", "indicator": "79.205.208.100", "tags": ["malicious", "cyber security", "Nextray", "phishing", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS_i


indicator: 79.205.228.3
indicator_type: ipv4
source: otx
country: DE
city: Wehr
hosting_provider: malicious,cyber security,Nextray,phishing,ioc
queried_at: 2026-03-10T05:46:28.418793
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Wehr", "asn": "AS3320 deutsche telekom ag", "indicator": "79.205.228.3", "tags": ["malicious", "cyber security", "Nextray", "phishing", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS_i_am)


indicator: 79.207.93.249
indicator_type: ipv4
source: otx
country: DE
city: Bad Homburg
reverse_dns: wefamilyr.synology.me
hosting_provider: malicious,cyber security,Nextray,phishing,ioc
queried_at: 2026-03-10T05:46:30.007972
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Bad Homburg", "asn": "AS3320 deutsche telekom ag", "indicator": "79.207.93.249", "tags": ["malicious", "cyber security", "Nextray", "phishing", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by R


indicator: 79.209.18.23
indicator_type: ipv4
source: otx
country: DE
city: Leisnig
hosting_provider: malicious,cyber security,Nextray,phishing,ioc
queried_at: 2026-03-10T05:46:32.536468
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Leisnig", "asn": "AS3320 deutsche telekom ag", "indicator": "79.209.18.23", "tags": ["malicious", "cyber security", "Nextray", "phishing", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS_i_


indicator: 79.209.26.96
indicator_type: ipv4
source: otx
country: DE
city: Doebeln
hosting_provider: malicious,cyber security,Nextray,phishing,ioc
queried_at: 2026-03-10T05:46:34.183028
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Doebeln", "asn": "AS3320 deutsche telekom ag", "indicator": "79.209.26.96", "tags": ["malicious", "cyber security", "Nextray", "phishing", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS_i_


indicator: 79.209.27.225
indicator_type: ipv4
source: otx
country: DE
city: Doebeln
hosting_provider: malicious,cyber security,Nextray,phishing,ioc
queried_at: 2026-03-10T05:46:36.235691
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Doebeln", "asn": "AS3320 deutsche telekom ag", "indicator": "79.209.27.225", "tags": ["malicious", "cyber security", "Nextray", "phishing", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS_i


indicator: 79.211.34.253
indicator_type: ipv4
source: otx
country: DE
city: Hannoversch Münden
reverse_dns: pch-nextcloud.spdns.de
hosting_provider: malicious,cyber security,Nextray,phishing,ioc
queried_at: 2026-03-10T05:46:39.131525
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Hannoversch M\u00fcnden", "asn": "AS3320 deutsche telekom ag", "indicator": "79.211.34.253", "tags": ["malicious", "cyber security", "Nextray", "phishing", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse 


indicator: 79.212.113.205
indicator_type: ipv4
source: otx
country: DE
city: Ahrensburg
hosting_provider: malicious,cyber security,Nextray,phishing,ioc
queried_at: 2026-03-10T05:46:42.157649
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Ahrensburg", "asn": "AS3320 deutsche telekom ag", "indicator": "79.212.113.205", "tags": ["malicious", "cyber security", "Nextray", "phishing", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by R


indicator: 79.214.240.84
indicator_type: ipv4
source: otx
country: DE
city: Gross-Umstadt
reverse_dns: m1nq09h2z25krjiz.myfritz.net
hosting_provider: malicious,cyber security,Nextray,phishing,ioc
queried_at: 2026-03-10T05:46:46.438726
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Gross-Umstadt", "asn": "AS3320 deutsche telekom ag", "indicator": "79.214.240.84", "tags": ["malicious", "cyber security", "Nextray", "phishing", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by


indicator: 79.215.91.216
indicator_type: ipv4
source: otx
country: DE
city: Osnabrück
hosting_provider: malicious,cyber security,Nextray,phishing,ioc
queried_at: 2026-03-10T05:46:48.089447
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Osnabr\u00fcck", "asn": "AS3320 deutsche telekom ag", "indicator": "79.215.91.216", "tags": ["malicious", "cyber security", "Nextray", "phishing", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created b


indicator: 79.216.179.126
indicator_type: ipv4
source: otx
country: DE
city: Leipzig
reverse_dns: iws2gwg67b9k39bk.myfritz.net
hosting_provider: malicious,cyber security,Nextray,phishing,ioc
queried_at: 2026-03-10T05:46:50.165925
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Leipzig", "asn": "AS3320 deutsche telekom ag", "indicator": "79.216.179.126", "tags": ["malicious", "cyber security", "Nextray", "phishing", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS_


indicator: 79.219.150.40
indicator_type: ipv4
source: otx
country: DE
city: Grafenau
hosting_provider: malicious,cyber security,Nextray,phishing,ioc
queried_at: 2026-03-10T05:46:51.891358
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Grafenau", "asn": "AS3320 deutsche telekom ag", "indicator": "79.219.150.40", "tags": ["malicious", "cyber security", "Nextray", "phishing", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS_


indicator: 79.225.104.196
indicator_type: ipv4
source: otx
country: DE
city: Hamburg
reverse_dns: xumzxq2zljsiefct.myfritz.net
hosting_provider: malicious,cyber security,Nextray,phishing,ioc
queried_at: 2026-03-10T05:46:53.741828
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Hamburg", "asn": "AS3320 deutsche telekom ag", "indicator": "79.225.104.196", "tags": ["malicious", "cyber security", "Nextray", "phishing", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS_


indicator: 79.225.87.224
indicator_type: ipv4
source: otx
country: DE
city: Nuremberg
hosting_provider: malicious,cyber security,Nextray,phishing,ioc
queried_at: 2026-03-10T05:46:55.444108
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Nuremberg", "asn": "AS3320 deutsche telekom ag", "indicator": "79.225.87.224", "tags": ["malicious", "cyber security", "Nextray", "phishing", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS


indicator: 79.226.72.229
indicator_type: ipv4
source: otx
country: DE
city: Bad Homburg
hosting_provider: malicious,cyber security,Nextray,phishing,ioc
queried_at: 2026-03-10T05:46:59.584893
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Bad Homburg", "asn": "AS3320 deutsche telekom ag", "indicator": "79.226.72.229", "tags": ["malicious", "cyber security", "Nextray", "phishing", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by R


indicator: 79.227.55.69
indicator_type: ipv4
source: otx
country: DE
city: Kleinheubach
hosting_provider: malicious,cyber security,Nextray,phishing,ioc
queried_at: 2026-03-10T05:47:01.329507
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Kleinheubach", "asn": "AS3320 deutsche telekom ag", "indicator": "79.227.55.69", "tags": ["malicious", "cyber security", "Nextray", "phishing", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by R


indicator: 79.233.183.42
indicator_type: ipv4
source: otx
country: DE
city: Wehr
reverse_dns: vj8inhm90utnx0h2.myfritz.net
hosting_provider: malicious,cyber security,Nextray,phishing,ioc
queried_at: 2026-03-10T05:47:03.871955
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Wehr", "asn": "AS3320 deutsche telekom ag", "indicator": "79.233.183.42", "tags": ["malicious", "cyber security", "Nextray", "phishing", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS_i_am


indicator: 78.80.66.68
indicator_type: ipv4
source: abuseipdb
country: CZ
city: 0
hosting_provider: reselling MMO Cetin OS3
queried_at: 2026-03-10T05:47:09.209139
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "CZ", "isp": "reselling MMO Cetin OS3", "domain": "t-mobile.cz", "usage_type": "Fixed Line ISP", "last_reported": null, "categories": []}


indicator: 79.110.49.194
indicator_type: ipv4
source: abuseipdb
country: FR
city: 0
hosting_provider: Virtuo Networks France SAS
queried_at: 2026-03-10T05:47:10.864900
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "FR", "isp": "Virtuo Networks France SAS", "domain": "virtuo.host", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-10-31T15:07:15+00:00", "categories": []}


indicator: 79.110.49.27
indicator_type: ipv4
source: abuseipdb
country: FR
city: 0
hosting_provider: Virtuo Networks France SAS
queried_at: 2026-03-10T05:47:12.530691
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "FR", "isp": "Virtuo Networks France SAS", "domain": "virtuo.host", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2024-05-25T16:04:15+00:00", "categories": []}


indicator: 79.112.64.146
indicator_type: ipv4
source: abuseipdb
country: ES
city: 0
hosting_provider: DIGI SPAIN TELECOM S.A
queried_at: 2026-03-10T05:47:14.382403
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "ES", "isp": "DIGI SPAIN TELECOM S.A", "domain": "digimobil.es", "usage_type": "Fixed Line ISP", "last_reported": null, "categories": []}


indicator: 79.116.11.88
indicator_type: ipv4
source: abuseipdb
country: ES
city: 0
hosting_provider: Digi Spain Telecom
queried_at: 2026-03-10T05:47:16.187141
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "ES", "isp": "Digi Spain Telecom", "domain": "digimobil.es", "usage_type": "Fixed Line ISP", "last_reported": null, "categories": []}


indicator: 79.119.7.130
indicator_type: ipv4
source: abuseipdb
country: RO
city: 0
hosting_provider: RCS & RDS Residential
queried_at: 2026-03-10T05:47:18.075928
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "RO", "isp": "RCS & RDS Residential", "domain": "digi.ro", "usage_type": "Fixed Line ISP", "last_reported": null, "categories": []}


indicator: 79.124.40.107
indicator_type: ipv4
source: abuseipdb
country: BG
city: 0
hosting_provider: Tamatiya EOOD
queried_at: 2026-03-10T05:47:19.823039
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "BG", "isp": "Tamatiya EOOD", "domain": "4vendeta.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 79.133.57.206
indicator_type: ipv4
source: abuseipdb
country: DE
city: 0
hosting_provider: UltaHost Inc
queried_at: 2026-03-10T05:47:21.658921
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "DE", "isp": "UltaHost Inc", "domain": "ultahost.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 79.137.196.223
indicator_type: ipv4
source: abuseipdb
country: DE
city: 0
hosting_provider: Aeza International LTD
queried_at: 2026-03-10T05:47:23.430386
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "DE", "isp": "Aeza International LTD", "domain": "aeza.net", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2023-07-12T19:09:28+00:00", "categories": []}


indicator: 79.137.199.56
indicator_type: ipv4
source: abuseipdb
country: DE
city: 0
hosting_provider: AEZA GROUP LLC
queried_at: 2026-03-10T05:47:25.182920
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "DE", "isp": "AEZA GROUP LLC", "domain": "aeza.ru", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": null, "categories": []}


indicator: 79.142.69.160
indicator_type: ipv4
source: abuseipdb
country: CH
city: 0
hosting_provider: AltusHost Switzerland
queried_at: 2026-03-10T05:47:27.889860
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "CH", "isp": "AltusHost Switzerland", "domain": "altushost.com", "usage_type": "Data Center/Web Hosting/Transit", "last_reported": "2025-08-24T13:00:30+00:00", "categories": []}


indicator: 79.148.21.137
indicator_type: ipv4
source: abuseipdb
country: ES
city: 0
hosting_provider: TELEFONICA DE ESPANA S.A.U.
queried_at: 2026-03-10T05:47:29.735296
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "ES", "isp": "TELEFONICA DE ESPANA S.A.U.", "domain": "movistar.es", "usage_type": "Fixed Line ISP", "last_reported": null, "categories": []}


indicator: 79.180.167.177
indicator_type: ipv4
source: abuseipdb
country: IL
city: 0
hosting_provider: Bezeq International Ltd.
queried_at: 2026-03-10T05:47:31.660076
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "IL", "isp": "Bezeq International Ltd.", "domain": "bezeqint.net", "usage_type": "Fixed Line ISP", "last_reported": null, "categories": []}


indicator: 79.183.169.134
indicator_type: ipv4
source: abuseipdb
country: IL
city: 0
hosting_provider: *SE6-DRP*
queried_at: 2026-03-10T05:47:33.559896
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "IL", "isp": "*SE6-DRP*", "domain": "bezeqint.net", "usage_type": "Fixed Line ISP", "last_reported": null, "categories": []}


indicator: 79.185.199.208
indicator_type: ipv4
source: abuseipdb
country: PL
city: 0
hosting_provider: Neostrada Plus
queried_at: 2026-03-10T05:47:35.408345
raw_data:
  {"abuse_confidence": 0, "total_reports": 0, "is_public": true, "is_tor": false, "country": "PL", "isp": "Neostrada Plus", "domain": "tpnet.pl", "usage_type": "Fixed Line ISP", "last_reported": null, "categories": []}


indicator: 78.80.66.68
indicator_type: ipv4
source: virustotal
country: CZ
hosting_provider: T-Mobile Czech Republic a.s.
queried_at: 2026-03-10T05:47:44.764570
raw_data:
  {"malicious": 0, "suspicious": 1, "harmless": 60, "undetected": 33, "reputation": -1, "country": "CZ", "as_owner": "T-Mobile Czech Republic a.s.", "asn": 13036, "network": "78.80.0.0/16", "last_analysis_date": 1766595326}


indicator: 79.110.49.194
indicator_type: ipv4
source: virustotal
country: FR
hosting_provider: 12651980 CANADA INC.
queried_at: 2026-03-10T05:48:05.099787
raw_data:
  {"malicious": 4, "suspicious": 1, "harmless": 57, "undetected": 32, "reputation": -1, "country": "FR", "as_owner": "12651980 CANADA INC.", "asn": 399486, "network": "79.110.49.0/24", "last_analysis_date": 1768007299}


indicator: 79.110.49.27
indicator_type: ipv4
source: virustotal
country: FR
hosting_provider: 12651980 CANADA INC.
queried_at: 2026-03-10T05:48:25.485349
raw_data:
  {"malicious": 2, "suspicious": 1, "harmless": 56, "undetected": 35, "reputation": -1, "country": "FR", "as_owner": "12651980 CANADA INC.", "asn": 399486, "network": "79.110.49.0/24", "last_analysis_date": 1772391340}


indicator: 79.112.64.146
indicator_type: ipv4
source: virustotal
country: ES
hosting_provider: Digi Spain Telecom S.A
queried_at: 2026-03-10T05:48:45.695996
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "ES", "as_owner": "Digi Spain Telecom S.A", "asn": 57269, "network": "79.112.0.0/15", "last_analysis_date": 1730080395}


indicator: 79.116.11.88
indicator_type: ipv4
source: virustotal
country: ES
hosting_provider: Digi Spain Telecom S.A
queried_at: 2026-03-10T05:49:06.001956
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "ES", "as_owner": "Digi Spain Telecom S.A", "asn": 57269, "network": "79.116.0.0/15", "last_analysis_date": 1762785213}


indicator: 79.119.7.130
indicator_type: ipv4
source: virustotal
country: RO
hosting_provider: Digi Romania S.A.
queried_at: 2026-03-10T05:49:26.230940
raw_data:
  {"malicious": 9, "suspicious": 1, "harmless": 53, "undetected": 31, "reputation": -1, "country": "RO", "as_owner": "Digi Romania S.A.", "asn": 8708, "network": "79.118.0.0/15", "last_analysis_date": 1741626888}


indicator: 79.124.40.107
indicator_type: ipv4
source: virustotal
country: BG
hosting_provider: Tamatiya EOOD
queried_at: 2026-03-10T05:49:46.788558
raw_data:
  {"malicious": 5, "suspicious": 0, "harmless": 56, "undetected": 33, "reputation": -1, "country": "BG", "as_owner": "Tamatiya EOOD", "asn": 50360, "network": "79.124.40.0/24", "last_analysis_date": 1771902427}


indicator: 79.133.57.206
indicator_type: ipv4
source: virustotal
country: DE
hosting_provider: Ultahost, Inc.
queried_at: 2026-03-10T05:50:07.141622
raw_data:
  {"malicious": 1, "suspicious": 1, "harmless": 59, "undetected": 33, "reputation": 0, "country": "DE", "as_owner": "Ultahost, Inc.", "asn": 214036, "network": "79.133.56.0/23", "last_analysis_date": 1770336609}


indicator: 79.137.196.223
indicator_type: ipv4
source: virustotal
country: NL
hosting_provider: Aeza International Ltd
queried_at: 2026-03-10T05:50:27.468262
raw_data:
  {"malicious": 0, "suspicious": 1, "harmless": 59, "undetected": 34, "reputation": -1, "country": "NL", "as_owner": "Aeza International Ltd", "asn": 210644, "network": "79.137.196.0/22", "last_analysis_date": 1773124953}


indicator: 79.137.199.56
indicator_type: ipv4
source: virustotal
country: NL
hosting_provider: Aeza International Ltd
queried_at: 2026-03-10T05:50:47.797978
raw_data:
  {"malicious": 0, "suspicious": 0, "harmless": 0, "undetected": 94, "reputation": 0, "country": "NL", "as_owner": "Aeza International Ltd", "asn": 210644, "network": "79.137.196.0/22", "last_analysis_date": 1730080376}


indicator: 78.80.66.68
indicator_type: ipv4
source: dshield
country: CZ
reverse_dns: 78.80.0.0/16
hosting_provider: TMOBILE-
queried_at: 2026-03-10T05:51:08.160787
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@t-mobile.cz", "as": 13036, "asname": "TMOBILE-", "ascountry": "CZ", "assource": "", "network": "78.80.0.0/16", "threatfeeds": {"forumspam": {"lastseen": "2022-04-21", "firstseen": "2022-04-20"}}}


indicator: 79.110.49.194
indicator_type: ipv4
source: dshield
country: XX
hosting_provider: not routed
queried_at: 2026-03-10T05:51:09.810821
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": null, "as": 0, "asname": "not routed", "ascountry": "XX", "assource": "", "network": "", "threatfeeds": {"blocklistde110": {"lastseen": "2023-06-28", "firstseen": "2023-06-26"}, "blocklistde143": {"lastseen": "2023-06-28", "firstseen": "2023-06-26"}, "blocklistde25": {"lastseen": "2023-06-28", "firstseen": "2023-06-26"}, "blocklistde993": {"lastseen": "2023-06-28", "firstseen": "2023-


indicator: 79.110.49.27
indicator_type: ipv4
source: dshield
country: XX
hosting_provider: not routed
queried_at: 2026-03-10T05:51:11.441983
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": null, "as": 0, "asname": "not routed", "ascountry": "XX", "assource": "", "network": "", "threatfeeds": {"blocklistde21": {"lastseen": "2024-05-25", "firstseen": "2023-07-10"}}}


indicator: 79.112.64.146
indicator_type: ipv4
source: dshield
country: RO
reverse_dns: 79.112.0.0/14
hosting_provider: RCS-RDS 73-75 Dr. Staicovici
queried_at: 2026-03-10T05:51:12.767681
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@rcs-rds.ro", "as": 8708, "asname": "RCS-RDS 73-75 Dr. Staicovici", "ascountry": "RO", "assource": "", "network": "79.112.0.0/14", "threatfeeds": {}}


indicator: 79.116.11.88
indicator_type: ipv4
source: dshield
country: ES
reverse_dns: 79.116.0.0/15
hosting_provider: DIGISPAINTELECOM
queried_at: 2026-03-10T05:51:14.095780
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@digimobil.es", "as": 57269, "asname": "DIGISPAINTELECOM", "ascountry": "ES", "assource": "", "network": "79.116.0.0/15", "threatfeeds": {}}


indicator: 79.119.7.130
indicator_type: ipv4
source: dshield
country: RO
reverse_dns: 79.118.0.0/15
hosting_provider: RCS-RDS 73-75 Dr. Staicovici
queried_at: 2026-03-10T05:51:15.423248
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@rcs-rds.ro", "as": 8708, "asname": "RCS-RDS 73-75 Dr. Staicovici", "ascountry": "RO", "assource": "", "network": "79.118.0.0/15", "threatfeeds": {}}


indicator: 79.124.40.107
indicator_type: ipv4
source: dshield
country: BG
reverse_dns: 79.124.40.0/24
hosting_provider: TAMATIYA-AS
queried_at: 2026-03-10T05:51:16.763902
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "noc@4vendeta.com", "as": 50360, "asname": "TAMATIYA-AS", "ascountry": "BG", "assource": "", "network": "79.124.40.0/24", "threatfeeds": {}}


indicator: 79.133.57.206
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 79.133.32.0/19
hosting_provider: DE-FIRSTCOLO www.first-colo.net
queried_at: 2026-03-10T05:51:18.120510
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@first-colo.de", "as": 44066, "asname": "DE-FIRSTCOLO www.first-colo.net", "ascountry": "DE", "assource": "", "network": "79.133.32.0/19", "threatfeeds": {}}


indicator: 79.137.196.223
indicator_type: ipv4
source: dshield
country: GB
reverse_dns: 79.137.196.0/22
hosting_provider: AEZA-AS
queried_at: 2026-03-10T05:51:19.465688
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": ">>UNKNOWN<<", "as": 210644, "asname": "AEZA-AS", "ascountry": "GB", "assource": "", "network": "79.137.196.0/22", "threatfeeds": {"blocklistde22": {"lastseen": "2023-05-01", "firstseen": "2022-11-29"}, "forumspam": {"lastseen": "2023-05-01", "firstseen": "2022-10-08"}, "torexit": {"lastseen": "2023-09-18", "firstseen": "2022-10-02"}}}


indicator: 79.137.199.56
indicator_type: ipv4
source: dshield
country: GB
reverse_dns: 79.137.196.0/22
hosting_provider: AEZA-AS
queried_at: 2026-03-10T05:51:20.805018
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": ">>UNKNOWN<<", "as": 210644, "asname": "AEZA-AS", "ascountry": "GB", "assource": "", "network": "79.137.196.0/22", "threatfeeds": {}}


indicator: 79.142.69.160
indicator_type: ipv4
source: dshield
country: NL
reverse_dns: 79.142.69.0/24
hosting_provider: ALTUS
queried_at: 2026-03-10T05:51:22.130762
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@as51430.net", "as": 51430, "asname": "ALTUS", "ascountry": "NL", "assource": "", "network": "79.142.69.0/24", "threatfeeds": {"blocklistde110": {"lastseen": "2025-08-11", "firstseen": "2022-09-09"}, "blocklistde143": {"lastseen": "2025-08-11", "firstseen": "2022-09-09"}, "blocklistde25": {"lastseen": "2025-08-11", "firstseen": "2022-09-09"}, "blocklistde443": {"lastseen": "2025


indicator: 79.148.21.137
indicator_type: ipv4
source: dshield
country: ES
reverse_dns: 79.148.0.0/16
hosting_provider: TELEFONICA_DE_ESPANA
queried_at: 2026-03-10T05:51:23.459199
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "nemesys@telefonica.com", "as": 3352, "asname": "TELEFONICA_DE_ESPANA", "ascountry": "ES", "assource": "", "network": "79.148.0.0/16", "threatfeeds": {}}


indicator: 79.180.167.177
indicator_type: ipv4
source: dshield
country: IL
reverse_dns: 79.180.160.0/20
hosting_provider: BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbone
queried_at: 2026-03-10T05:51:24.783336
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@bezeqint.net", "as": 8551, "asname": "BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbone", "ascountry": "IL", "assource": "", "network": "79.180.160.0/20", "threatfeeds": {}}


indicator: 79.183.169.134
indicator_type: ipv4
source: dshield
country: IL
reverse_dns: 79.183.169.0/24
hosting_provider: BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbone
queried_at: 2026-03-10T05:51:26.107169
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@bezeqint.net", "as": 8551, "asname": "BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbone", "ascountry": "IL", "assource": "", "network": "79.183.169.0/24", "threatfeeds": {}}


indicator: 79.185.199.208
indicator_type: ipv4
source: dshield
country: PL
reverse_dns: 79.184.0.0/13
hosting_provider: TPNET
queried_at: 2026-03-10T05:51:27.447716
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@tpnet.pl", "as": 5617, "asname": "TPNET", "ascountry": "PL", "assource": "", "network": "79.184.0.0/13", "threatfeeds": {}}


indicator: 79.192.104.235
indicator_type: ipv4
source: dshield
country: DE
reverse_dns: 79.192.0.0/10
hosting_provider: DTAG Internet service provider operations
queried_at: 2026-03-10T05:51:28.766245
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "auftrag@nic.telekom.de", "as": 3320, "asname": "DTAG Internet service provider operations", "ascountry": "DE", "assource": "", "network": "79.192.0.0/10", "threatfeeds": {}}


indicator: 79.32.224.230
indicator_type: ipv4
source: dshield
country: IT
reverse_dns: 79.32.0.0/15
hosting_provider: ASN-IBSNAZ
queried_at: 2026-03-10T05:52:11.731777
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@business.telecomitalia.it", "as": 3269, "asname": "ASN-IBSNAZ", "ascountry": "IT", "assource": "", "network": "79.32.0.0/15", "threatfeeds": {}}


indicator: 79.40.100.85
indicator_type: ipv4
source: dshield
country: IT
reverse_dns: 79.40.0.0/15
hosting_provider: ASN-IBSNAZ
queried_at: 2026-03-10T05:52:13.064884
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "abuse@business.telecomitalia.it", "as": 3269, "asname": "ASN-IBSNAZ", "ascountry": "IT", "assource": "", "network": "79.40.0.0/15", "threatfeeds": {}}


indicator: 8.129.233.201
indicator_type: ipv4
source: dshield
country: CN
reverse_dns: 8.129.128.0/17
hosting_provider: ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.,Ltd.
queried_at: 2026-03-10T05:52:16.036924
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "ipas@cnnic.cn", "as": 37963, "asname": "ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.,Ltd.", "ascountry": "CN", "assource": "", "network": "8.129.128.0/17", "threatfeeds": {}}


indicator: 8.130.107.173
indicator_type: ipv4
source: dshield
country: CN
reverse_dns: 8.130.0.0/16
hosting_provider: ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.,Ltd.
queried_at: 2026-03-10T05:52:17.363866
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "ipas@cnnic.cn", "as": 37963, "asname": "ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.,Ltd.", "ascountry": "CN", "assource": "", "network": "8.130.0.0/16", "threatfeeds": {}}


indicator: 8.133.199.150
indicator_type: ipv4
source: dshield
country: CN
reverse_dns: 8.133.0.0/16
hosting_provider: ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.,Ltd.
queried_at: 2026-03-10T05:52:22.563856
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "ipas@cnnic.cn", "as": 37963, "asname": "ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.,Ltd.", "ascountry": "CN", "assource": "", "network": "8.133.0.0/16", "threatfeeds": {}}


indicator: 8.134.163.255
indicator_type: ipv4
source: dshield
country: CN
reverse_dns: 8.134.128.0/17
hosting_provider: ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.,Ltd.
queried_at: 2026-03-10T05:52:27.731388
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "ipas@cnnic.cn", "as": 37963, "asname": "ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.,Ltd.", "ascountry": "CN", "assource": "", "network": "8.134.128.0/17", "threatfeeds": {}}


indicator: 8.134.98.235
indicator_type: ipv4
source: dshield
country: CN
reverse_dns: 8.134.0.0/17
hosting_provider: ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.,Ltd.
queried_at: 2026-03-10T05:52:30.427006
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "ipas@cnnic.cn", "as": 37963, "asname": "ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.,Ltd.", "ascountry": "CN", "assource": "", "network": "8.134.0.0/17", "threatfeeds": {}}


indicator: 8.135.14.237
indicator_type: ipv4
source: dshield
country: CN
reverse_dns: 8.135.0.0/17
hosting_provider: ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.,Ltd.
queried_at: 2026-03-10T05:52:31.739093
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "ipas@cnnic.cn", "as": 37963, "asname": "ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.,Ltd.", "ascountry": "CN", "assource": "", "network": "8.135.0.0/17", "threatfeeds": {}}


indicator: 8.137.109.17
indicator_type: ipv4
source: dshield
country: CN
reverse_dns: 8.137.0.0/17
hosting_provider: ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.,Ltd.
queried_at: 2026-03-10T05:52:33.022405
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "ipas@cnnic.cn", "as": 37963, "asname": "ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.,Ltd.", "ascountry": "CN", "assource": "", "network": "8.137.0.0/17", "threatfeeds": {}}


indicator: 8.138.189.137
indicator_type: ipv4
source: dshield
country: CN
reverse_dns: 8.138.128.0/17
hosting_provider: ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.,Ltd.
queried_at: 2026-03-10T05:52:43.408334
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "ipas@cnnic.cn", "as": 37963, "asname": "ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.,Ltd.", "ascountry": "CN", "assource": "", "network": "8.138.128.0/17", "threatfeeds": {}}


indicator: 8.138.22.215
indicator_type: ipv4
source: dshield
country: CN
reverse_dns: 8.138.0.0/17
hosting_provider: ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.,Ltd.
queried_at: 2026-03-10T05:52:45.998430
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "ipas@cnnic.cn", "as": 37963, "asname": "ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.,Ltd.", "ascountry": "CN", "assource": "", "network": "8.138.0.0/17", "threatfeeds": {}}


indicator: 8.140.194.194
indicator_type: ipv4
source: dshield
country: CN
reverse_dns: 8.140.0.0/15
hosting_provider: ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.,Ltd.
queried_at: 2026-03-10T05:52:52.503760
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "ipas@cnnic.cn", "as": 37963, "asname": "ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.,Ltd.", "ascountry": "CN", "assource": "", "network": "8.140.0.0/15", "threatfeeds": {}}


indicator: 8.146.210.125
indicator_type: ipv4
source: dshield
country: CN
reverse_dns: 8.146.0.0/15
hosting_provider: ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.,Ltd.
queried_at: 2026-03-10T05:52:57.457534
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "ipas@cnnic.cn", "as": 37963, "asname": "ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.,Ltd.", "ascountry": "CN", "assource": "", "network": "8.146.0.0/15", "threatfeeds": {}}


indicator: 8.148.20.113
indicator_type: ipv4
source: dshield
country: CN
reverse_dns: 8.148.16.0/20
hosting_provider: ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.,Ltd.
queried_at: 2026-03-10T05:52:58.763597
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "ipas@cnnic.cn", "as": 37963, "asname": "ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.,Ltd.", "ascountry": "CN", "assource": "", "network": "8.148.16.0/20", "threatfeeds": {"threatview": {"lastseen": "2025-03-22", "firstseen": "2025-03-22"}}}


indicator: 8.209.249.160
indicator_type: ipv4
source: dshield
country: CN
reverse_dns: 8.209.224.0/19
hosting_provider: ALIBABA-CN-NET Alibaba US Technology Co., Ltd.
queried_at: 2026-03-10T05:53:16.194748
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "ipas@cnnic.cn", "as": 45102, "asname": "ALIBABA-CN-NET Alibaba US Technology Co., Ltd.", "ascountry": "CN", "assource": "", "network": "8.209.224.0/19", "threatfeeds": {}}


indicator: 8.210.159.194
indicator_type: ipv4
source: dshield
country: CN
reverse_dns: 8.210.128.0/17
hosting_provider: ALIBABA-CN-NET Alibaba US Technology Co., Ltd.
queried_at: 2026-03-10T05:53:17.490119
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "ipas@cnnic.cn", "as": 45102, "asname": "ALIBABA-CN-NET Alibaba US Technology Co., Ltd.", "ascountry": "CN", "assource": "", "network": "8.210.128.0/17", "threatfeeds": {}}


indicator: 8.213.228.20
indicator_type: ipv4
source: dshield
country: CN
reverse_dns: 8.213.224.0/19
hosting_provider: ALIBABA-CN-NET Alibaba US Technology Co., Ltd.
queried_at: 2026-03-10T05:53:18.816462
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "ipas@cnnic.cn", "as": 45102, "asname": "ALIBABA-CN-NET Alibaba US Technology Co., Ltd.", "ascountry": "CN", "assource": "", "network": "8.213.224.0/19", "threatfeeds": {}}


indicator: 8.217.32.119
indicator_type: ipv4
source: dshield
country: CN
reverse_dns: 8.217.0.0/17
hosting_provider: ALIBABA-CN-NET Alibaba US Technology Co., Ltd.
queried_at: 2026-03-10T05:53:21.434230
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "ipas@cnnic.cn", "as": 45102, "asname": "ALIBABA-CN-NET Alibaba US Technology Co., Ltd.", "ascountry": "CN", "assource": "", "network": "8.217.0.0/17", "threatfeeds": {}}


indicator: 8.218.113.210
indicator_type: ipv4
source: dshield
country: CN
reverse_dns: 8.218.0.0/17
hosting_provider: ALIBABA-CN-NET Alibaba US Technology Co., Ltd.
queried_at: 2026-03-10T05:53:22.739060
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "ipas@cnnic.cn", "as": 45102, "asname": "ALIBABA-CN-NET Alibaba US Technology Co., Ltd.", "ascountry": "CN", "assource": "", "network": "8.218.0.0/17", "threatfeeds": {}}


indicator: 8.218.157.182
indicator_type: ipv4
source: dshield
country: CN
reverse_dns: 8.218.128.0/17
hosting_provider: ALIBABA-CN-NET Alibaba US Technology Co., Ltd.
queried_at: 2026-03-10T05:53:24.030495
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "ipas@cnnic.cn", "as": 45102, "asname": "ALIBABA-CN-NET Alibaba US Technology Co., Ltd.", "ascountry": "CN", "assource": "", "network": "8.218.128.0/17", "threatfeeds": {}}


indicator: 8.222.192.178
indicator_type: ipv4
source: dshield
country: CN
reverse_dns: 8.222.192.0/18
hosting_provider: ALIBABA-CN-NET Alibaba US Technology Co., Ltd.
queried_at: 2026-03-10T05:53:25.315050
raw_data:
  {"count": 0, "attacks": 0, "maxdate": null, "mindate": null, "updated": null, "comment": null, "asabusecontact": "ipas@cnnic.cn", "as": 45102, "asname": "ALIBABA-CN-NET Alibaba US Technology Co., Ltd.", "ascountry": "CN", "assource": "", "network": "8.222.192.0/18", "threatfeeds": {}}


indicator: 80.131.233.194
indicator_type: ipv4
source: shodan
reverse_dns: p5083e9c2.dip0.t-ipconnect.de
queried_at: 2026-03-10T06:10:15.241676
raw_data:
  {"ports": [8089], "vulns": [], "hostnames": ["p5083e9c2.dip0.t-ipconnect.de"], "tags": [], "cpes": []}


indicator: 80.147.22.137
indicator_type: ipv4
source: shodan
reverse_dns: p50931689.dip0.t-ipconnect.de
queried_at: 2026-03-10T06:10:26.777580
raw_data:
  {"ports": [443], "vulns": [], "hostnames": ["p50931689.dip0.t-ipconnect.de"], "tags": [], "cpes": []}


indicator: 80.180.123.169
indicator_type: ipv4
source: shodan
reverse_dns: host-80-180-123-169.retail.telecomitalia.it,host-80-180-123-169.pool80180.interbusiness.it
queried_at: 2026-03-10T06:10:30.220428
raw_data:
  {"ports": [7170], "vulns": [], "hostnames": ["host-80-180-123-169.retail.telecomitalia.it", "host-80-180-123-169.pool80180.interbusiness.it"], "tags": [], "cpes": []}


indicator: 80.255.6.5
indicator_type: ipv4
source: shodan
city: starttls
reverse_dns: 11662-2-webtest.nsd.li
queried_at: 2026-03-10T06:10:33.521854
raw_data:
  {"ports": [587], "vulns": [], "hostnames": ["11662-2-webtest.nsd.li"], "tags": ["starttls"], "cpes": []}


indicator: 80.78.24.116
indicator_type: ipv4
source: shodan
reverse_dns: 504e1874.host.njalla.net
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-03-10T06:10:41.720809
raw_data:
  {"ports": [22, 443, 8080], "vulns": [], "hostnames": ["504e1874.host.njalla.net"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 80.78.25.185
indicator_type: ipv4
source: shodan
reverse_dns: 504e19b9.host.njalla.net
hosting_provider: cpe:/a:openbsd:openssh:10.2
queried_at: 2026-03-10T06:10:43.388339
raw_data:
  {"ports": [22, 80], "vulns": [], "hostnames": ["504e19b9.host.njalla.net"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:10.2"]}


indicator: 80.78.28.74
indicator_type: ipv4
source: shodan
city: eol-product,starttls
reverse_dns: xfr.bet,www.xfr.bet,504e1c4a.host.njalla.net
queried_at: 2026-03-10T06:10:45.028659
raw_data:
  {"ports": [22, 25, 443, 587, 993, 8000], "vulns": ["CVE-2021-23017", "CVE-2025-23419", "CVE-2021-3618", "CVE-2023-44487"], "hostnames": ["xfr.bet", "www.xfr.bet", "504e1c4a.host.njalla.net"], "tags": ["eol-product", "starttls"], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/a:postfix:postfix", "cpe:/o:linux:linux_kernel", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx:1.18.0"]}

hosting_provider:
  cpe:/a:openbsd:openssh:8.9p1,cpe:/a:postfix:postfix,cpe:/o:linux:linux_kernel,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx:1.18.0


indicator: 80.85.154.56
indicator_type: ipv4
source: shodan
reverse_dns: quantihousetech-1.com
hosting_provider: cpe:/a:openbsd:openssh:9.6p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-03-10T06:10:46.659995
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["quantihousetech-1.com"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:9.6p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 81.16.177.142
indicator_type: ipv4
source: shodan
city: database
queried_at: 2026-03-10T06:10:51.594555
raw_data:
  {"ports": [22, 80, 888, 3000, 3306, 5000], "vulns": ["CVE-2020-10735", "CVE-2009-3720", "CVE-2016-3189", "CVE-2025-13836", "CVE-2024-6232", "CVE-2022-45061", "CVE-2024-9287", "CVE-2015-20107", "CVE-2022-42919", "CVE-2025-12084", "CVE-2025-13837", "CVE-2007-4559", "CVE-2023-40217", "CVE-2022-26488", "CVE-2021-32052", "CVE-2023-27043", "CVE-2019-12900", "CVE-2023-24329", "CVE-2020-29396", "CVE-2021-28861", "CVE-2024-7592", "CVE-2018-25032", "CVE-2022-37454", "CVE-2025-12781", "CVE-2009-2940", "CVE

hosting_provider:
  cpe:/o:canonical:ubuntu_linux,cpe:/a:python:python:3.9.7,cpe:/a:f5:nginx,cpe:/a:oracle:mysql,cpe:/a:palletsprojects:flask:3.1.3,cpe:/a:openbsd:openssh:9.6p1


indicator: 81.17.24.234
indicator_type: ipv4
source: shodan
reverse_dns: hostedby.privatelayer.com
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-03-10T06:10:53.237539
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["hostedby.privatelayer.com"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 81.170.128.221
indicator_type: ipv4
source: shodan
reverse_dns: h-81-170-128-221.A258.priv.bahnhof.se
queried_at: 2026-03-10T06:10:54.876839
raw_data:
  {"ports": [49152], "vulns": [], "hostnames": ["h-81-170-128-221.A258.priv.bahnhof.se"], "tags": [], "cpes": []}


indicator: 81.177.215.30
indicator_type: ipv4
source: shodan
reverse_dns: 45360.ip-ptr.tech
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-03-10T06:10:58.153952
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["45360.ip-ptr.tech"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 81.177.6.63
indicator_type: ipv4
source: shodan
hosting_provider: cpe:/a:f5:nginx,cpe:/a:openbsd:openssh:8.2p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-03-10T06:10:59.934535
raw_data:
  {"ports": [22, 80], "vulns": [], "hostnames": [], "tags": [], "cpes": ["cpe:/a:f5:nginx", "cpe:/a:openbsd:openssh:8.2p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 81.184.154.233
indicator_type: ipv4
source: shodan
reverse_dns: 81.184.154.233.dyn.user.ono.com
queried_at: 2026-03-10T06:11:01.582057
raw_data:
  {"ports": [161], "vulns": [], "hostnames": ["81.184.154.233.dyn.user.ono.com"], "tags": [], "cpes": []}


indicator: 81.19.136.61
indicator_type: ipv4
source: shodan
city: starttls,self-signed
reverse_dns: 4925051-en88475.twc1.net
queried_at: 2026-03-10T06:11:08.448395
raw_data:
  {"ports": [21, 22, 25, 80, 110, 143, 443, 465, 993, 995, 7777, 8888, 10050], "vulns": ["CVE-2024-39929", "CVE-2025-67896", "CVE-2023-51766", "CVE-2022-3559", "CVE-2023-42115", "CVE-2023-42116", "CVE-2022-3620", "CVE-2022-37451", "CVE-2023-42117", "CVE-2023-42114", "CVE-2023-42119"], "hostnames": ["4925051-en88475.twc1.net"], "tags": ["starttls", "self-signed"], "cpes": ["cpe:/a:exim:exim:4.95", "cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux", "cpe:/a:f5:nginx", "cpe:/a:f5:nginx:1

hosting_provider:
  cpe:/a:exim:exim:4.95,cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux,cpe:/a:f5:nginx,cpe:/a:f5:nginx:1.28.0


indicator: 81.19.139.76
indicator_type: ipv4
source: shodan
reverse_dns: 24276.ip-ptr.tech
hosting_provider: cpe:/a:openbsd:openssh:8.9p1,cpe:/o:canonical:ubuntu_linux
queried_at: 2026-03-10T06:11:10.065121
raw_data:
  {"ports": [22], "vulns": [], "hostnames": ["24276.ip-ptr.tech"], "tags": [], "cpes": ["cpe:/a:openbsd:openssh:8.9p1", "cpe:/o:canonical:ubuntu_linux"]}


indicator: 81.29.131.193
indicator_type: ipv4
source: shodan
reverse_dns: host-29-131-193.iqdata.center
queried_at: 2026-03-10T06:11:18.300406
raw_data:
  {"ports": [3128], "vulns": [], "hostnames": ["host-29-131-193.iqdata.center"], "tags": [], "cpes": []}


indicator: 81.30.196.146
indicator_type: ipv4
source: shodan
reverse_dns: 81.30.196.146.static.ufanet.ru
hosting_provider: cpe:/a:famatech:radmin:3,cpe:/o:microsoft:windows
queried_at: 2026-03-10T06:11:19.958320
raw_data:
  {"ports": [4899], "vulns": [], "hostnames": ["81.30.196.146.static.ufanet.ru"], "tags": [], "cpes": ["cpe:/a:famatech:radmin:3", "cpe:/o:microsoft:windows"]}


indicator: 8.48.85.83
indicator_type: ipv4
source: otx
country: US
queried_at: 2026-03-10T06:11:23.737727
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United States of America", "country_code": "US", "city": null, "asn": "AS24429 zhejiang taobao network co. ltd", "indicator": "8.48.85.83", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 80.131.233.194
indicator_type: ipv4
source: otx
country: DE
city: Nassenfels
reverse_dns: hmorwrdrk96xvsfm.myfritz.net
hosting_provider: Nextray,cyber security,malicious,phishing,ioc
queried_at: 2026-03-10T06:11:26.342571
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Nassenfels", "asn": "AS3320 deutsche telekom ag", "indicator": "80.131.233.194", "tags": ["Nextray", "cyber security", "malicious", "phishing", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by R


indicator: 80.132.197.234
indicator_type: ipv4
source: otx
country: DE
city: Waltrop
hosting_provider: Nextray,cyber security,malicious,phishing,ioc
queried_at: 2026-03-10T06:11:27.918024
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Waltrop", "asn": "AS3320 deutsche telekom ag", "indicator": "80.132.197.234", "tags": ["Nextray", "cyber security", "malicious", "phishing", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS_


indicator: 80.133.247.104
indicator_type: ipv4
source: otx
country: DE
city: Braunschweig
hosting_provider: Nextray,cyber security,malicious,phishing,ioc
queried_at: 2026-03-10T06:11:29.571788
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Braunschweig", "asn": "AS3320 deutsche telekom ag", "indicator": "80.133.247.104", "tags": ["Nextray", "cyber security", "malicious", "phishing", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by


indicator: 80.140.4.126
indicator_type: ipv4
source: otx
country: DE
city: Eberswalde
hosting_provider: Nextray,cyber security,malicious,phishing,ioc
queried_at: 2026-03-10T06:11:31.480924
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Eberswalde", "asn": "AS3320 deutsche telekom ag", "indicator": "80.140.4.126", "tags": ["Nextray", "cyber security", "malicious", "phishing", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS


indicator: 80.144.166.121
indicator_type: ipv4
source: otx
country: DE
city: Grafenau
hosting_provider: Nextray,cyber security,malicious,phishing,ioc
queried_at: 2026-03-10T06:11:33.356794
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Grafenau", "asn": "AS3320 deutsche telekom ag", "indicator": "80.144.166.121", "tags": ["Nextray", "cyber security", "malicious", "phishing", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS


indicator: 80.144.166.164
indicator_type: ipv4
source: otx
country: DE
city: Grafenau
hosting_provider: Nextray,cyber security,malicious,phishing,ioc
queried_at: 2026-03-10T06:11:34.933462
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Grafenau", "asn": "AS3320 deutsche telekom ag", "indicator": "80.144.166.164", "tags": ["Nextray", "cyber security", "malicious", "phishing", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS


indicator: 80.144.217.151
indicator_type: ipv4
source: otx
country: DE
city: Munich
hosting_provider: Nextray,cyber security,malicious,phishing,ioc
queried_at: 2026-03-10T06:11:36.602768
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Munich", "asn": "AS3320 deutsche telekom ag", "indicator": "80.144.217.151", "tags": ["Nextray", "cyber security", "malicious", "phishing", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS_i


indicator: 80.147.22.137
indicator_type: ipv4
source: otx
country: DE
city: Stuttgart
queried_at: 2026-03-10T06:11:39.591376
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Stuttgart", "asn": "AS3320 deutsche telekom ag", "indicator": "80.147.22.137", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 80.151.36.96
indicator_type: ipv4
source: otx
country: DE
city: Berlin
reverse_dns: jwgn.de,dtag-static.jwgn.de
hosting_provider: Nextray,cyber security,malicious,phishing,ioc
queried_at: 2026-03-10T06:11:41.221695
raw_data:
  {"pulse_count": 30, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Berlin", "asn": "AS3320 deutsche telekom ag", "indicator": "80.151.36.96", "tags": ["Nextray", "cyber security", "malicious", "phishing", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS_i_a


indicator: 80.180.123.169
indicator_type: ipv4
source: otx
country: IT
city: Rome
reverse_dns: host-80-180-123-169.pool80180.interbusiness.it,host-80-180-123-169.retail.telecomitalia.it
queried_at: 2026-03-10T06:11:42.874925
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Italy", "country_code": "IT", "city": "Rome", "asn": "AS3269 telecom italia s.p.a.", "indicator": "80.180.123.169", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 2, "malware_samples": [], "passive_dns": ["host-80-180-123-169.pool80180.interbusiness.it", "host-80-180-123-169.retail.telecomitalia.it"]}


indicator: 80.182.36.252
indicator_type: ipv4
source: otx
country: IT
city: Fabbrico
reverse_dns: block.r.licheni.net
hosting_provider: Nextray,cyber security,malicious,phishing,ioc
queried_at: 2026-03-10T06:11:44.499648
raw_data:
  {"pulse_count": 29, "reputation": 0, "country": "Italy", "country_code": "IT", "city": "Fabbrico", "asn": "AS3269 telecom italia s.p.a.", "indicator": "80.182.36.252", "tags": ["Nextray", "cyber security", "malicious", "phishing", "ioc"], "pulses": ["IOC Records Provided by @NextRayAI", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOCs Industriales", "IOC Records \u2192Provided by @NextRayAI", "HIVE           (Pulse created by RVS_i_am)", "HIVE           (Pulse created by RVS_


indicator: 80.255.6.5
indicator_type: ipv4
source: otx
country: DE
city: Erlangen
reverse_dns: mailshare.co,dzbank-umfrage.de,wit2.nsd.li
queried_at: 2026-03-10T06:11:46.054068
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "Germany", "country_code": "DE", "city": "Erlangen", "asn": "AS201011 as33891 netzbetrieb gmbh", "indicator": "80.255.6.5", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 3, "passive_dns_count": 3, "malware_samples": ["01bca6481a3a55dc5de5bfa4124bba47d37018d8ee93e5dbb80a60a14f243889", "cfb3b175b3958a2692f0c15de94a9a86ebbf5c544f1386abe57310cf1fb38641", "cee54133f85a19e2b095ab6cad5ab7a9291a57afcde0830d9962ad4851a699cb"], "passi


indicator: 80.46.100.166
indicator_type: ipv4
source: otx
country: GB
queried_at: 2026-03-10T06:11:49.969928
raw_data:
  {"pulse_count": 1, "reputation": 0, "country": "United Kingdom of Great Britain and Northern Ireland", "country_code": "GB", "city": null, "asn": "AS9105 talktalk communications", "indicator": "80.46.100.166", "tags": [], "pulses": ["Threatfox Recent Additions"], "malware_count": 0, "passive_dns_count": 0, "malware_samples": [], "passive_dns": []}


indicator: 80.66.66.197
indicator_type: ipv4
source: otx
country: RU
queried_at: 2026-03-10T06:11:51.536612
raw_data:
  {"pulse_count": 5, "reputation": 0, "country": "Russian Federation", "country_code": "RU", "city": null, "asn": "AS51765 oy crea nova hosting solution ltd", "indicator": "80.66.66.197", "tags": ["korean", "clickfix", "unkremoterogue", "january", "north korea", "powershell", "muddywater", "Zeppelin, Bloat-A, W32.Bloat-A, Zero-Day-Delivery, Protocol-Devi", "ta427", "ta450", "ta422", "MD5: b47266fef17ad4b2e4ca6ee1d06c39a7 SHA-1: cb92796715c799d7e71", "9698f46495ce9401c8bcaf9a2afe1598", "Filename: b

hosting_provider:
  korean,clickfix,unkremoterogue,january,north korea,powershell,muddywater,Zeppelin, Bloat-A, W32.Bloat-A, Zero-Day-Delivery, Protocol-Devi,ta427,ta450


