IOC Radar
IPHighVerifiedSignal 86/100

213.152.161.157

Location
The NetherlandsThe Netherlands
Haarlem, North Holland
ASN
AS49453
Global Layer network
First Seen
Jun 14, 2026
Last Seen
Jun 26, 2026
Jun 14
First Seen
11d ago
Jun 26
Last Seen
today
260
Reports
source reports
95%
Confidence
high
Found in 260 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
95%
Signal Score
86 / 100
IDS Rule
Yes
Threat Context
Threat Actors3
KKimsukyLLockBitPPlay
Tags

Network Information

CountryNLThe Netherlands
RegionHaarlem, North Holland
ASNAS49453
OrganizationGlobal Layer network

IP Category

⟲
Proxy
Proxy server
⬢
Hosting
Hosting provider

Feed Intelligence Summary

260 reports95% confidence
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (4332 indicators)
3582 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (4329 indicators)
3577 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (4403 indicators)
3649 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (4410 indicators)
3658 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (4456 indicators)
3698 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (4455 indicators)
3697 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (4466 indicators)
3707 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (4464 indicators)
3707 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (4464 indicators)
3710 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (4473 indicators)
3717 IOCs in report

Activity Timeline

260 total obs
Jun 26Jun 14

Threat Activity Heatmap

· Peak: 2026-06-16
Less
More
Mon
Wed
Fri
Jun
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
24h
11
Elevated
7d
144
Critical
30d
260
Critical
3mo
260
Critical
Threat ScoreHigh Risk
86
SIGNAL
Signal Score
95%
Confidence
260
Reports
First seenJun 14, 2026
Last seenJun 26, 2026
Verified IOC
GeolocationNL
CountryThe Netherlands
LocationHaarlem, North Holland
ASNAS49453
OrgGlobal Layer network
Coords52.3891, 4.6563
ProxyHosting

VirusTotal

Not checked

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

high
First detected 11 days ago · Last seen today
Appeared in 260 threat reports from 10 sources
Associated with: Kimsuky, LockBit, Play
Used by malware: Mozi, XWorm, Pegasus, SocGholish, XMRig, Nanocore, WannaCry, AsyncRAT, NetWire, FormBook, Remcos, Rhysida, XorDDoS, NjRAT, QakBot, Sliver, Mirai, Vidar, Metasploit, META Stealer, Gh0st RAT, LockBit, Play, Stealc, Havoc