89.125.255.0

IP Address

Threat entity extracted from intelligence sources

Frequency

2

occurrences

First Seen

June 15, 2026

Last Seen

June 16, 2026

IOC Validation

ThreatCluster AI

Confirmed IOC — High confidence

Part of the subnet associated with cryptocurrency mining activity

This indicator was confirmed as a true IOC by AI analysis.

Pivot to external tools

Opens in new tab · no data sent to TC

Reputation · 4

Sandbox · 2

Infrastructure · 3

Malware trackers · 1

Web search · 2

Related Clusters (1)

Hola VPN Exploitation Leads to Malware and Cryptomining Activities

Jun 16·2 sources

Related Articles (2)

Hola VPN Abuse: From Proxy Traffic to Malware and Cryptomining

Darktrace·Jun 16

Hola VPN Abuse: From Proxy Traffic to Malware and Cryptomining

Darktrace·Jun 15

Related Entities

Malware Trojan Rhadamanthys StealC Vidar T1105 - Ingress Tool Transfer T1071.001 - Web Protocols T1071 - Application Layer Protocol Windows Minergate