IOC Radar
IPMediumSignal 36/100

5.189.159.180

Location
FranceFrance
Lauterbourg, England
ASN
AS51167
Contabo GmbH
First Seen
Jun 6, 2026
Last Seen
Jun 18, 2026
Jun 6
First Seen
15d ago
Jun 18
Last Seen
4d ago
7
Reports
source reports
36%
Confidence
medium
Found in 7 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
36%
Signal Score
36 / 100
IDS Rule
No
Threat Context
Tags

Network Information

CountryFRFrance
RegionLauterbourg, England
ASNAS51167
OrganizationContabo GmbH

IP Category

⟲
Proxy
Proxy server

Feed Intelligence Summary

7 reports36% confidence
7
Source reports
36%
Confidence score
Category tags
active scanasiablocklistchinaencryptioneuropeeurope/asiafrfrancegbgermanyhttps proxyindicatormalicious-ipnetworknorth americaproxyresearchedrussiarussian federationscannersslthreat-intelunited kingdomunited states

Activity Timeline

1 total obs
Jun 18Jun 18

Threat Activity Heatmap

· Peak: 2026-06-18
Less
More
Mon
Wed
Fri
Jun
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
24h
0
Dormant
7d
1
Minimal
30d
1
Minimal
3mo
1
Minimal
Intelligence SummaryAI Generated

This Internet Protocol (IP) address, 5.189.159.180, has been identified across multiple threat intelligence feeds, suggesting its potential involvement in malicious or suspicious activities. Its presence is indicative of a heightened risk, as it has been flagged by various security intelligence sources. If this IOC is observed within the organizational network, it could signal unauthorized access attempts, participation in a botnet, or the compromise of internal assets. The associated risk score…

Threat ScoreLow Risk
36
SIGNAL
Signal Score
36%
Confidence
7
Reports
First seenJun 6, 2026
Last seenJun 18, 2026
GeolocationFR
CountryFrance
LocationLauterbourg, England
ASNAS51167
OrgContabo GmbH
Coords51.4998, -0.0111
Proxy

VirusTotal

Not checked

WHOIS

description
Global Threat Feed. 250,000+ Active Network Scanners.

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 15 days ago · Last seen 4 days ago
Appeared in 7 threat reports