IPHighVerifiedSignal 86/100
193.143.1.216
Location
Moscow, Moscow
ASN
AS198953
Proton66 OOO
First Seen
Jun 2, 2026
Last Seen
Jun 27, 2026
Found in 543 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
95%
Signal Score
86 / 100
IDS Rule
Yes
Threat Context
Malware Families33
Tags
Network Information
Country
Russia
RegionMoscow, Moscow
ASNAS198953
OrganizationProton66 OOO
Feed Intelligence Summary
543 reports95% confidence
Activity Timeline
Jun 27Jun 2
Threat Activity Heatmap
· Peak: 2026-06-08LessMore
Mon
Wed
Fri
24h
19
Critical
7d
152
Critical
30d
543
Critical
3mo
543
Critical
Threat ScoreHigh Risk
86
SIGNAL
Signal Score
95%
Confidence
543
Reports
First seenJun 2, 2026
Last seenJun 27, 2026
Verified IOC
GeolocationRU
CountryRussia
LocationMoscow, Moscow
ASNAS198953
OrgProton66 OOO
Coords55.7487, 37.6187
VirusTotal
Not checked
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
highFirst detected 24 days ago · Last seen today
Appeared in 543 threat reports from 10 sources
Associated with: Kimsuky, Hive, Turla, Play
Used by malware: Rhadamanthys, FormBook, QakBot, Pegasus, Lumma, NetWire, META Stealer, Hive, Nanocore, Gh0st RAT, Dridex, Mozi, SocGholish, XMRig, PowerShell Empire, Remcos, Play, Rhysida, XorDDoS, Stealc, Mirai, Cobalt Strike, Vidar, Bumblebee, NjRAT, Metasploit, XWorm, RedLine, WannaCry, Havoc, AsyncRAT, Gootloader, Sliver