IOC Radar
IPHighVerifiedSignal 86/100

213.152.161.157

Location
The NetherlandsThe Netherlands
Haarlem, North Holland
ASN
AS49453
Global Layer network
First Seen
Jun 14, 2026
Last Seen
Jun 19, 2026
Jun 14
First Seen
4d ago
Jun 19
Last Seen
today
107
Reports
source reports
95%
Confidence
high
Found in 107 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
95%
Signal Score
86 / 100
IDS Rule
Yes
Threat Context
Threat Actors2
KKimsukyPPlay
Tags

Network Information

CountryNLThe Netherlands
RegionHaarlem, North Holland
ASNAS49453
OrganizationGlobal Layer network

IP Category

⟲
Proxy
Proxy server
⬢
Hosting
Hosting provider

Feed Intelligence Summary

107 reports95% confidence
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (3553 indicators)
2997 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (3546 indicators)
2990 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (3540 indicators)
2986 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (3542 indicators)
2986 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (3533 indicators)
2980 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (3524 indicators)
2975 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (3528 indicators)
2980 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (3447 indicators)
2900 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (3423 indicators)
2862 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (3485 indicators)
2921 IOCs in report

Activity Timeline

107 total obs
Jun 19Jun 14

Threat Activity Heatmap

· Peak: 2026-06-14
Less
More
Mon
Wed
Fri
Jun
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
24h
14
Elevated
7d
107
Critical
30d
107
Critical
3mo
107
Critical
Threat ScoreHigh Risk
86
SIGNAL
Signal Score
95%
Confidence
107
Reports
First seenJun 14, 2026
Last seenJun 19, 2026
Verified IOC
GeolocationNL
CountryThe Netherlands
LocationHaarlem, North Holland
ASNAS49453
OrgGlobal Layer network
Coords52.3891, 4.6563
ProxyHosting

VirusTotal

Not checked

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

high
First detected 4 days ago · Last seen today
Appeared in 107 threat reports from 10 sources
Associated with: Kimsuky, Play
Used by malware: FormBook, Nanocore, Pegasus, NetWire, NjRAT, WannaCry, SocGholish, XMRig, Remcos, Rhysida, QakBot, Havoc, Gh0st RAT, Sliver, Play, Mirai, META Stealer, Vidar, Metasploit, XWorm, Stealc, AsyncRAT