IPHighVerifiedSignal 86/100
54.95.208.190
Location
JapanTokyo, Tokyo
ASN
AS16509
AWS EC2 (ap-northeast-1)
First Seen
Jun 17, 2026
Last Seen
Jun 19, 2026
Found in 40 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
95%
Signal Score
86 / 100
IDS Rule
Yes
Threat Context
Network Information
CountryJapan
JapanRegionTokyo, Tokyo
ASNAS16509
OrganizationAWS EC2 (ap-northeast-1)
IP Category
⬢
Hosting
Hosting provider
Feed Intelligence Summary
40 reports95% confidence
Activity Timeline
Jun 19Jun 17
Threat Activity Heatmap
LessMore
Mon
Wed
Fri
24h
13
Elevated
7d
40
Critical
30d
40
Critical
3mo
40
Critical
Threat ScoreHigh Risk
86
SIGNAL
Signal Score
95%
Confidence
40
Reports
First seenJun 17, 2026
Last seenJun 19, 2026
Verified IOC
GeolocationJP
CountryJapan
LocationTokyo, Tokyo
ASNAS16509
OrgAWS EC2 (ap-northeast-1)
Coords35.6895, 139.6920
Hosting
VirusTotal
Not checked
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
highFirst detected 1 day ago · Last seen today
Appeared in 40 threat reports from 10 sources
Associated with: Play
Used by malware: FormBook, Pegasus, NetWire, Nanocore, SocGholish, XMRig, Remcos, Rhysida, QakBot, NjRAT, WannaCry, Mirai, Vidar, XWorm, Havoc, AsyncRAT, Sliver, Play, Stealc