IOC Radar
IPHighVerifiedSignal 86/100

185.212.128.85

Location
The NetherlandsThe Netherlands
Amsterdam, North Holland
ASN
AS200313
OVZ VPS
First Seen
Jun 2, 2026
Last Seen
Jun 21, 2026
Jun 2
First Seen
18d ago
Jun 21
Last Seen
today
395
Reports
source reports
95%
Confidence
high
Found in 395 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
95%
Signal Score
86 / 100
IDS Rule
Yes
Threat Context
Threat Actors1
KKimsuky
Tags

Network Information

CountryNLThe Netherlands
RegionAmsterdam, North Holland
ASNAS200313
OrganizationOVZ VPS

Feed Intelligence Summary

395 reports95% confidence
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (3310 indicators)
2768 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (3309 indicators)
2768 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (3310 indicators)
2768 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (3309 indicators)
2767 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (3167 indicators)
2626 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (3166 indicators)
2625 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (3169 indicators)
2628 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (3166 indicators)
2628 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (3147 indicators)
2618 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (3180 indicators)
2648 IOCs in report

Activity Timeline

395 total obs
Jun 21Jun 2

Threat Activity Heatmap

· Peak: 2026-06-08
Less
More
Mon
Wed
Fri
Jun
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
24h
4
Moderate
7d
138
Critical
30d
395
Critical
3mo
395
Critical
Threat ScoreHigh Risk
86
SIGNAL
Signal Score
95%
Confidence
395
Reports
First seenJun 2, 2026
Last seenJun 21, 2026
Verified IOC
GeolocationNL
CountryThe Netherlands
LocationAmsterdam, North Holland
ASNAS200313
OrgOVZ VPS
Coords52.3676, 4.9041

VirusTotal

Not checked

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

high
First detected 18 days ago · Last seen today
Appeared in 395 threat reports from 10 sources
Associated with: Kimsuky
Used by malware: SocGholish, XMRig, Remcos, Rhysida, FormBook, Lumma, Nanocore, NjRAT, XWorm, WannaCry, AsyncRAT, Dridex, Pegasus, NetWire, QakBot, Sliver, PowerShell Empire, Vidar, Gh0st RAT, Bumblebee, RedLine, Gootloader, Stealc, Havoc, Cobalt Strike, Mirai, Metasploit