IOC Radar
IPHighVerifiedSignal 79/100

149.248.11.71

Location
United StatesUnited States
Los Angeles, California
ASN
AS20473
Vultr Holdings, LLC
First Seen
Feb 11, 2026
Last Seen
Jun 6, 2026
Feb 11
First Seen
115d ago
Jun 6
Last Seen
today
8
Reports
source reports
90%
Confidence
high
Found in 8 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
90%
Signal Score
79 / 100
IDS Rule
Yes
Threat Context
Threat Actors1
PPlay
Malware Families3
LLummaVVidarPPlay
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

29 techniques

Network Information

CountryUSUnited States
RegionLos Angeles, California
ASNAS20473
OrganizationVultr Holdings, LLC

IP Category

⊕
VPN
VPN exit node

Feed Intelligence Summary

8 reports90% confidence
CO
CIRCL OSINT Feed
Today
Maltrail IOC for 2026-06-06
3841 IOCs in report
CO
CIRCL OSINT Feed
Today
Maltrail IOC for 2026-06-06
324 IOCs in report
CO
CIRCL OSINT Feed
Yesterday
Maltrail IOC for 2026-06-06
93 IOCs in report

Activity Timeline

3 total obs
Jun 6Jun 5

Threat Activity Heatmap

Less
More
Mon
Wed
Fri
Jun
·
·
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
24h
0
Dormant
7d
3
Moderate
30d
3
Moderate
3mo
3
Moderate
Threat ScoreHigh Risk
79
SIGNAL
Signal Score
90%
Confidence
8
Reports
First seenFeb 11, 2026
Last seenJun 6, 2026
Verified IOC
GeolocationUS
CountryUnited States
LocationLos Angeles, California
ASNAS20473
OrgVultr Holdings, LLC
Coords34.0609, -118.2414
VPN

VirusTotal

Not checked

WHOIS

description
CC=US ASN=AS20473 the constant company llc

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

high
First detected 3 months ago · Last seen today
Appeared in 8 threat reports from 3 sources
Associated with: Play
Used by malware: Lumma, Vidar, Play