{ "type": "IPv4", "indicator": "5.53.22.74", "general": { "whois": "http://whois.domaintools.com/5.53.22.74", "reputation": 0, "indicator": "5.53.22.74", "type": "IPv4", "type_title": "IPv4", "base_indicator": { "id": 3766902544, "indicator": "5.53.22.74", "type": "IPv4", "title": "", "description": "", "content": "", "access_type": "public", "access_reason": "" }, "pulse_info": { "count": 3, "pulses": [ { "id": "69eaadceefac7b7d30269b87", "name": "yfyfytfytfyjhghgiuygytfyttrdtrdtrduygguy", "description": "", "modified": "2026-04-23T23:39:58.207000", "created": "2026-04-23T23:39:58.207000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "MohammedRizwan2001", "id": "361933", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 669, "FileHash-MD5": 13, "FileHash-SHA1": 11, "FileHash-SHA256": 13, "IPv4": 2911, "domain": 5, "hostname": 180 }, "indicator_count": 3802, "is_author": false, "is_subscribing": null, "subscriber_count": 18, "modified_text": "2 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "IPv4", "related_indicator_is_active": 1 }, { "id": "65255162eea4520bbc3f0e27", "name": "Russia 2023-10-10", "description": "", "modified": "2026-02-22T07:49:25.887000", "created": "2023-10-10T13:28:02.753000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "Ukraine" ], "malware_families": [], "attack_ids": [ { "id": "T1046", "name": "Network Service Scanning", "display_name": "T1046 - Network Service Scanning" } ], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "skocherhan", "id": "249290", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_249290/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 2248, "FileHash-SHA256": 571, "hostname": 1412, "domain": 546, "CVE": 2 }, "indicator_count": 4779, "is_author": false, "is_subscribing": null, "subscriber_count": 178, "modified_text": "63 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "IPv4", "related_indicator_is_active": 0 }, { "id": "652ed2880955c493abdc831d", "name": "30d Russia", "description": "", "modified": "2026-02-22T07:48:13.426000", "created": "2023-10-17T18:29:28.724000", "tags": [ "mirai" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [ { "id": "Mirai", "display_name": "Mirai", "target": null } ], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "skocherhan", "id": "249290", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_249290/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 1867, "hostname": 678, "FileHash-SHA256": 1043, "domain": 154, "CVE": 3 }, "indicator_count": 3745, "is_author": false, "is_subscribing": null, "subscriber_count": 178, "modified_text": "63 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "IPv4", "related_indicator_is_active": 0 } ], "references": [], "related": { "alienvault": { "adversary": [], "malware_families": [], "industries": [] }, "other": { "adversary": [], "malware_families": [ "Mirai" ], "industries": [] } } }, "false_positive": [], "validation": [], "asn": "AS50923 metroset ltd.", "city_data": true, "city": "Surgut", "region": "KHM", "continent_code": "EU", "country_code3": "RUS", "country_code2": "RU", "subdivision": "KHM", "latitude": 61.2431, "postal_code": "628400", "longitude": 73.4139, "accuracy_radius": 1, "country_code": "RU", "country_name": "Russian Federation", "dma_code": 0, "charset": 0, "area_code": 0, "flag_url": "/assets/images/flags/ru.png", "flag_title": "Russian Federation", "sections": [ "general", "geo", "reputation", "url_list", "passive_dns", "malware", "nids_list", "http_scans" ] }, "geo": { "asn": "AS50923 metroset ltd.", "city_data": true, "city": "Surgut", "region": "KHM", "continent_code": "EU", "country_code3": "RUS", "country_code2": "RU", "subdivision": "KHM", "latitude": 61.2431, "postal_code": "628400", "longitude": 73.4139, "accuracy_radius": 1, "country_code": "RU", "country_name": "Russian Federation", "dma_code": 0, "charset": 0, "area_code": 0, "flag_url": "/assets/images/flags/ru.png", "flag_title": "Russian Federation" }, "geo_ipapicom": { "country": "Russia", "country_code": "RU", "region": "Khanty-Mansia", "city": "Nizhnevartovsk", "zip": "628600", "latitude": 60.9264, "longitude": 76.5628, "timezone": "Asia/Yekaterinburg", "isp": "Metroset Ltd", "org": "Metroset Ltd.", "asn": "AS50923 Metroset Ltd.", "asn_name": "METRO-SET-AS", "is_proxy": false, "is_hosting": false, "source": "ip-api.com" }, "pulse_count": 3, "pulses": [ { "id": "69eaadceefac7b7d30269b87", "name": "yfyfytfytfyjhghgiuygytfyttrdtrdtrduygguy", "description": "", "modified": "2026-04-23T23:39:58.207000", "created": "2026-04-23T23:39:58.207000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "MohammedRizwan2001", "id": "361933", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 669, "FileHash-MD5": 13, "FileHash-SHA1": 11, "FileHash-SHA256": 13, "IPv4": 2911, "domain": 5, "hostname": 180 }, "indicator_count": 3802, "is_author": false, "is_subscribing": null, "subscriber_count": 18, "modified_text": "2 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "IPv4", "related_indicator_is_active": 1 }, { "id": "65255162eea4520bbc3f0e27", "name": "Russia 2023-10-10", "description": "", "modified": "2026-02-22T07:49:25.887000", "created": "2023-10-10T13:28:02.753000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "Ukraine" ], "malware_families": [], "attack_ids": [ { "id": "T1046", "name": "Network Service Scanning", "display_name": "T1046 - Network Service Scanning" } ], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "skocherhan", "id": "249290", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_249290/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 2248, "FileHash-SHA256": 571, "hostname": 1412, "domain": 546, "CVE": 2 }, "indicator_count": 4779, "is_author": false, "is_subscribing": null, "subscriber_count": 178, "modified_text": "63 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "IPv4", "related_indicator_is_active": 0 }, { "id": "652ed2880955c493abdc831d", "name": "30d Russia", "description": "", "modified": "2026-02-22T07:48:13.426000", "created": "2023-10-17T18:29:28.724000", "tags": [ "mirai" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [ { "id": "Mirai", "display_name": "Mirai", "target": null } ], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "skocherhan", "id": "249290", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_249290/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 1867, "hostname": 678, "FileHash-SHA256": 1043, "domain": 154, "CVE": 3 }, "indicator_count": 3745, "is_author": false, "is_subscribing": null, "subscriber_count": 178, "modified_text": "63 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "IPv4", "related_indicator_is_active": 0 } ], "error": null, "vt": { "error": "VirusTotal rate limit reached. Try again shortly.", "indicator": "5.53.22.74", "type": "IPv4" }, "abuseipdb": { "indicator": "5.53.22.74", "abuse_score": 57, "verdict": "suspicious", "total_reports": 23, "distinct_users": 9, "last_reported": "2026-04-24T05:59:13+00:00", "country_code": "RU", "country_name": "Russian Federation", "isp": "Metroset Ltd.", "domain": "metro-set.ru", "is_tor": false, "is_public": true, "is_whitelisted": false, "usage_type": "Fixed Line ISP", "recent_reports": [ { "date": "2026-04-24", "categories": [ "Email Spam" ], "comment": "Blocked 18 connection attempts due to Spamhaus RBL (RJCT05) in the past 4 hours. To request delisting, visit https://www", "reporter": "" }, { "date": "2026-04-23", "categories": [ "Email Spam" ], "comment": "Blocked 13 connection attempts due to Spamhaus RBL (RJCT05) in the past 4 hours. To request delisting, visit https://www", "reporter": "" }, { "date": "2026-04-23", "categories": [ "Email Spam" ], "comment": "Blocked 17 connection attempts due to Spamhaus RBL (RJCT05) in the past 4 hours. To request delisting, visit https://www", "reporter": "" }, { "date": "2026-04-22", "categories": [ "Email Spam" ], "comment": "2026-04-22T20:33:52.086107+02:00 server postfix/smtpd[1736791]: connect from unknown[5.53.22.74]\n2026-04-22T20:33:52.634", "reporter": "" }, { "date": "2026-04-22", "categories": [ "Email Spam" ], "comment": "Blocked 13 connection attempts due to Spamhaus RBL (RJCT05) in the past 4 hours. To request delisting, visit https://www", "reporter": "" } ], "error": null }, "urlhaus": { "indicator": "5.53.22.74", "found": false, "verdict": "clean", "urls": [], "error": null }, "from_cache": true, "_cached_at": 1777221113.4924479 }