IP address
Shodan(more info)

Passive DNS

- MISP events
-
[7852] 2026-06-08 00:00:00 | APVA phishing/scam indicators 2026-06-08 14:44 (42 indicators)
Reporting org.: APVA TLP: clear Tags: ecsirt:fraud="phishing"enisa:nefarious-activity-abuse="phishing-attacks"veris:action:social:variety="Phishing"osint:source-type="technical-report"admiralty-scale:source-reliability="b"misp:automation-level="reviewed"admiralty-scale:information-credibility="2"Phishingcircl:incident-classification="phishing"kill-chain:Deliverymisp-galaxy:sector="Finance"cryptocurrencymisp-galaxy:country="united states"misp-galaxy:country="the netherlands"misp-galaxy:mitre-attack-pattern="Phishing - T1566"misp-galaxy:mitre-attack-pattern="Domains - T1583.001"misp-galaxy:mitre-attack-pattern="Masquerading - T1036"misp-galaxy:mitre-attack-pattern="Web Portal Capture - T1056.003"misp-galaxy:mitre-attack-pattern="Phishing for Information - T1598" Sightings: positive: 0 | false positive: 0 | expired attribute: 0 Last change: 2026-06-08 14:45:22 Threat level: Medium Role of this IP: dst
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| No threat category tags assigned | |||
- Origin AS
- AS55286 - SERVER-MANIA
- BGP Prefix
- 192.241.120.0/24
- geo
- Netherlands, Halfweg
- 🕑 Europe/Amsterdam
- hostname
- ns2.vcraftz.com
- Address block ('inetnum' or 'NetRange' in whois database)
- 192.241.64.0 - 192.241.127.255
- last_activity
- 2026-06-08 00:00:00
- rep
- 0.0
- reserved_range
- 0
- ts_added
- 2026-08-28 08:32:49.455000
- ts_last_update
- 2026-11-04 08:32:50.146000
Warden event timeline
DShield event timeline

