IOC Radar
IPHighVerifiedSignal 86/100

185.141.61.187

Location
BulgariaBulgaria
Sofia, Sofia-Capital
ASN
AS44901
Redcluster LTD
First Seen
Jun 16, 2026
Last Seen
Jun 26, 2026
Jun 16
First Seen
9d ago
Jun 26
Last Seen
today
207
Reports
source reports
95%
Confidence
high
Found in 207 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
95%
Signal Score
86 / 100
IDS Rule
Yes
Threat Context
Tags

Network Information

CountryBGBulgaria
RegionSofia, Sofia-Capital
ASNAS44901
OrganizationRedcluster LTD

IP Category

⬢
Hosting
Hosting provider

Feed Intelligence Summary

207 reports95% confidence
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (4466 indicators)
3707 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (4464 indicators)
3707 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (4464 indicators)
3710 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (4473 indicators)
3717 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (4472 indicators)
3718 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (4470 indicators)
3717 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (4467 indicators)
3716 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (4462 indicators)
3711 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (4461 indicators)
3710 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (4695 indicators)
3949 IOCs in report

Activity Timeline

207 total obs
Jun 26Jun 16

Threat Activity Heatmap

· Peak: 2026-06-20
Less
More
Mon
Wed
Fri
Jun
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
24h
5
Moderate
7d
138
Critical
30d
207
Critical
3mo
207
Critical
Threat ScoreHigh Risk
86
SIGNAL
Signal Score
95%
Confidence
207
Reports
First seenJun 16, 2026
Last seenJun 26, 2026
Verified IOC
GeolocationBG
CountryBulgaria
LocationSofia, Sofia-Capital
ASNAS44901
OrgRedcluster LTD
Coords42.6977, 23.3219
Hosting

VirusTotal

Not checked

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

high
First detected 9 days ago · Last seen today
Appeared in 207 threat reports from 10 sources
Associated with: Akira, Kimsuky, LockBit, Play
Used by malware: Pegasus, FormBook, SocGholish, XMRig, Remcos, Rhysida, NetWire, Akira, Mozi, XorDDoS, Nanocore, NjRAT, WannaCry, AsyncRAT, XWorm, QakBot, Havoc, Play, Sliver, Stealc, LockBit, Mirai, Vidar, Metasploit