IOC Radar
IPHighVerifiedSignal 86/100

95.211.182.120

Location
The NetherlandsThe Netherlands
Haarlem, North Holland
ASN
AS60781
LeaseWeb Netherlands B.V.
First Seen
Jun 6, 2026
Last Seen
Jun 22, 2026
Jun 6
First Seen
15d ago
Jun 22
Last Seen
today
340
Reports
source reports
95%
Confidence
high
Found in 340 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
95%
Signal Score
86 / 100
IDS Rule
Yes
Threat Context
Tags

Network Information

CountryNLThe Netherlands
RegionHaarlem, North Holland
ASNAS60781
OrganizationLeaseWeb Netherlands B.V.

IP Category

⬢
Hosting
Hosting provider

Feed Intelligence Summary

340 reports95% confidence
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (3696 indicators)
3158 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (3729 indicators)
3192 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (3727 indicators)
3190 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (3726 indicators)
3189 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (3721 indicators)
3184 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (3718 indicators)
3181 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (3719 indicators)
3181 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (3718 indicators)
3180 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (3714 indicators)
3177 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (3702 indicators)
3172 IOCs in report

Activity Timeline

340 total obs
Jun 22Jun 6

Threat Activity Heatmap

· Peak: 2026-06-08
Less
More
Mon
Wed
Fri
Jun
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
24h
5
Moderate
7d
142
Critical
30d
340
Critical
3mo
340
Critical
Threat ScoreHigh Risk
86
SIGNAL
Signal Score
95%
Confidence
340
Reports
First seenJun 6, 2026
Last seenJun 22, 2026
Verified IOC
GeolocationNL
CountryThe Netherlands
LocationHaarlem, North Holland
ASNAS60781
OrgLeaseWeb Netherlands B.V.
Coords52.3907, 4.6655
Hosting

VirusTotal

Not checked

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

high
First detected 15 days ago · Last seen today
Appeared in 340 threat reports from 10 sources
Associated with: Akira, Turla, Kimsuky, Hive, Play
Used by malware: Rhysida, Lumma, Pegasus, NetWire, Mozi, Rhadamanthys, Akira, XorDDoS, Nanocore, NjRAT, FormBook, XWorm, SocGholish, WannaCry, AsyncRAT, Dridex, XMRig, Remcos, QakBot, Stealc, Mirai, Vidar, Metasploit, PowerShell Empire, Sliver, Gh0st RAT, Bumblebee, RedLine, Gootloader, META Stealer, Hive, Play, Cobalt Strike, Havoc