IOC Radar
IPMediumSignal 76/100

87.99.128.27

Location
United StatesUnited States
Ashburn, Virginia
ASN
AS213230
HETZNER-DC
First Seen
Apr 15, 2026
Last Seen
Apr 23, 2026
Apr 15
First Seen
58d ago
Apr 23
Last Seen
51d ago
11
Reports
source reports
76%
Confidence
medium
Found in 11 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
76%
Signal Score
76 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

4 techniques

Network Information

CountryUSUnited States
RegionAshburn, Virginia
ASNAS213230
OrganizationHETZNER-DC

Feed Intelligence Summary

11 reports76% confidence
11
Source reports
76%
Confidence score
Category tags
abuseactive scanactive scanningaptbad reputationbrute forcebrute-forcecredential accesscredential stuffingeuropeexploitation activityidentity & access exploitationindicatornetherlandsnetworknorth americareconnaissanceresearchedscannerssh attackt1110.002t1595.001t1595.002t1595.003threat actortor nodeunited states

Activity Timeline

1 total obs
Apr 23Apr 23

Threat Activity Heatmap

· Peak: 2026-04-23
Less
More
Mon
Wed
Fri
Jun
·
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Intelligence SummaryAI Generated

This Indicator of Compromise (IOC), an IPv4 address identified as 87.99.128.27, presents a significant and immediate threat to organizational security, evidenced by its high-risk score of 75.73 and unwhitelisted status. Its inclusion across numerous reputable threat intelligence feeds, such as AbuseIPDB, Blocklist.de, and AlienVault OTX Feeds, underscores its consistent identification with hostile and suspicious network activities. The IOC is directly linked to critical reconnaissance tactics an…

Threat ScoreHigh Risk
76
SIGNAL
Signal Score
76%
Confidence
11
Reports
First seenApr 15, 2026
Last seenApr 23, 2026
GeolocationUS
CountryUnited States
LocationAshburn, Virginia
ASNAS213230
OrgHETZNER-DC
Coords39.0438, -77.4874

VirusTotal

Not checked

WHOIS

description
The following is the full list of names given to Vye32GsS2g38eKhmaKrLdDjgrnf2YBT4/FGx8SNCa4txePA
raw
inetnum: 87.99.128.0 - 87.99.255.255 netname: DE-HETZNER-20050822 country: US org: ORG-HOA1-RIPE admin-c: HOAC1-RIPE tech-c: HOAC1-RIPE status: ALLOCATED PA mnt-by: HOS-GUN mnt-by: RIPE-NCC-HM-MNT created: 2024-12-02T11:39:50Z last-modified: 2026-01-30T07:42:07Z source: RIPE organisation: ORG-HOA1-RIPE org-name: Hetzner Online GmbH country: DE org-type: LIR address: Industriestrasse 25 address: D-91710 address: Gunzenhausen address: GERMANY phone: +49 9831 5050 fax-no: +49 9831 5053 admin-c: MF1400-RIPE admin-c: GM834-RIPE admin-c: HOAC1-RIPE admin-c: MH375-RIPE admin-c: SK2374-RIPE admin-c: SK8441-RIPE abuse-c: HOAC1-RIPE mnt-ref: RIPE-NCC-HM-MNT mnt-ref: HOS-GUN mnt-by: RIPE-NCC-HM-MNT mnt-by: HOS-GUN created: 2004-04-17T11:07:58Z last-modified: 2022-11-22T18:32:44Z source: RIPE # Filtered role: Hetzner Online GmbH - Contact Role address: Hetzner Online GmbH address: Industriestrasse 25 address: D-91710 Gunzenhausen address: Germany phone: +49 9831 505-0 fax-no: +49 9831 505-3 abuse-mailbox: [email protected] remarks: ************************************************* remarks: * For spam/abuse/security issues please contact * remarks: * [email protected], or fill out the form at * remarks: * abuse.hetzner.com, thank you. * remarks: ************************************************* remarks: remarks: ************************************************* remarks: * Any questions on Peering please send to * remarks: * [email protected] * remarks: ************************************************* org: ORG-HOA1-RIPE admin-c: MH375-RIPE tech-c: GM834-RIPE tech-c: SK2374-RIPE tech-c: MF1400-RIPE tech-c: SK8441-RIPE tech-c: DD15478-RIPE nic-hdl: HOAC1-RIPE mnt-by: HOS-GUN created: 2004-08-12T09:40:20Z last-modified: 2022-11-22T18:33:55Z source: RIPE # Filtered route: 87.99.128.0/17 org: ORG-HOA1-RIPE descr: HETZNER-DC origin: AS213230 mnt-by: HOS-GUN created: 2026-01-30T07:45:07Z last-modified: 2026-01-30T07:45:07Z source: RIPE organisation: ORG-HOA1-RIPE org-name: Hetzner Online GmbH country: DE org-type: LIR address: Industriestrasse 25 address: D-91710 address: Gunzenhausen address: GERMANY phone: +49 9831 5050 fax-no: +49 9831 5053 admin-c: MF1400-RIPE admin-c: GM834-RIPE admin-c: HOAC1-RIPE admin-c: MH375-RIPE admin-c: SK2374-RIPE admin-c: SK8441-RIPE abuse-c: HOAC1-RIPE mnt-ref: RIPE-NCC-HM-MNT mnt-ref: HOS-GUN mnt-by: RIPE-NCC-HM-MNT mnt-by: HOS-GUN created: 2004-04-17T11:07:58Z last-modified: 2022-11-22T18:32:44Z source: RIPE # Filtered

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 1 month ago · Last seen 1 month ago
Appeared in 11 threat reports