IOC Radar
IPHighVerifiedSignal 68/100

213.218.160.89

Location
RomaniaRomania
Bucharest, Bucharest
ASN
AS200651
FlokiNET ehf
First Seen
Jun 14, 2026
Last Seen
Jun 14, 2026
Jun 14
First Seen
8d ago
Jun 14
Last Seen
8d ago
1
Reports
source reports
95%
Confidence
high
Found in 1 report. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
95%
Signal Score
68 / 100
IDS Rule
Yes
Threat Context
Malware Families3
LLummaRRemcosHHavoc
Tags

Network Information

CountryRORomania
RegionBucharest, Bucharest
ASNAS200651
OrganizationFlokiNET ehf

IP Category

⬢
Hosting
Hosting provider

Feed Intelligence Summary

1 report95% confidence
CO
CIRCL OSINT Feed
Jun 13, 2026
Maltrail IOC for 2026-06-13
896 IOCs in report

Activity Timeline

1 total obs
Jun 13Jun 13

Threat Activity Heatmap

· Peak: 2026-06-13
Less
More
Mon
Wed
Fri
Jun
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Threat ScoreMedium Risk
68
SIGNAL
Signal Score
95%
Confidence
1
Reports
First seenJun 14, 2026
Last seenJun 14, 2026
Verified IOC
GeolocationRO
CountryRomania
LocationBucharest, Bucharest
ASNAS200651
OrgFlokiNET ehf
Coords44.4268, 26.1025
Hosting

VirusTotal

Not checked

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

high
First detected 8 days ago · Last seen 8 days ago
Appeared in 1 threat report from 1 source
Used by malware: Lumma, Remcos, Havoc