IOC Radar
IPHighVerifiedSignal 86/100

198.167.212.165

Location
SwedenSweden
Malmö, Skåne County
ASN
AS39287
1337 Services LLC
First Seen
Jun 2, 2026
Last Seen
Jun 20, 2026
Jun 2
First Seen
18d ago
Jun 20
Last Seen
yesterday
162
Reports
source reports
95%
Confidence
high
Found in 162 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
95%
Signal Score
86 / 100
IDS Rule
Yes

Network Information

CountrySESweden
RegionMalmö, Skåne County
ASNAS39287
Organization1337 Services LLC

IP Category

Proxy
Proxy server

Feed Intelligence Summary

162 reports95% confidence
CO
CIRCL OSINT Feed
Yesterday
980 IOCs in report
CO
CIRCL OSINT Feed
Yesterday
923 IOCs in report
AT
Abuse.ch ThreatFox
Jun 10, 2026
3705 IOCs in report
AT
Abuse.ch ThreatFox
Jun 10, 2026
3715 IOCs in report
AT
Abuse.ch ThreatFox
Jun 10, 2026
3696 IOCs in report
AT
Abuse.ch ThreatFox
Jun 10, 2026
3696 IOCs in report
AT
Abuse.ch ThreatFox
Jun 10, 2026
3724 IOCs in report
AT
Abuse.ch ThreatFox
Jun 10, 2026
3725 IOCs in report
AT
Abuse.ch ThreatFox
Jun 10, 2026
3716 IOCs in report
AT
Abuse.ch ThreatFox
Jun 10, 2026
3091 IOCs in report

Activity Timeline

162 total obs
Jun 19Jun 2

Threat Activity Heatmap

· Peak: 2026-06-08
Less
More
Mon
Wed
Fri
Jun
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
24h
0
Dormant
7d
2
Minimal
30d
162
Critical
3mo
162
Critical
Threat ScoreHigh Risk
86
SIGNAL
Signal Score
95%
Confidence
162
Reports
First seenJun 2, 2026
Last seenJun 20, 2026
Verified IOC
GeolocationSE
CountrySweden
LocationMalmö, Skåne County
ASNAS39287
Org1337 Services LLC
Coords55.6050, 13.0038
Proxy

VirusTotal

Not checked

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

high
First detected 18 days ago · Last seen 1 day ago
Appeared in 162 threat reports from 10 sources
Associated with: LockBit, Sandworm
Used by malware: Nanocore, Mozi, SocGholish, XMRig, Remcos, DarkComet, Lumma, Rhysida, XorDDoS, Rhadamanthys, AsyncRAT, XWorm, Dridex, Pegasus, NetWire, Havoc, PowerShell Empire, RedLine, Stealc, Sliver, LockBit, Cobalt Strike, Mirai, Vidar, Metasploit