IOC Radar
IPHighVerifiedSignal 86/100

27.102.138.15

Location
South KoreaSouth Korea
Seongnam-si, Gyeonggi-do
ASN
AS45996
Daou
First Seen
Jun 2, 2026
Last Seen
Jun 29, 2026
Jun 2
First Seen
26d ago
Jun 29
Last Seen
today
583
Reports
source reports
95%
Confidence
high
Found in 583 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
95%
Signal Score
86 / 100
IDS Rule
Yes
Threat Context
Tags

Network Information

CountryKRSouth Korea
RegionSeongnam-si, Gyeonggi-do
ASNAS45996
OrganizationDaou

IP Category

⟲
Proxy
Proxy server

Feed Intelligence Summary

583 reports95% confidence
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (3442 indicators)
2872 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (3399 indicators)
2847 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (3447 indicators)
2887 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (3366 indicators)
2806 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (3404 indicators)
2836 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (3313 indicators)
2753 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (3315 indicators)
2753 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (3321 indicators)
2757 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (3325 indicators)
2760 IOCs in report
AT
Abuse.ch ThreatFox
Today
Abuse.ch ThreatFox (3170 indicators)
2605 IOCs in report

Activity Timeline

583 total obs
Jun 29Jun 2

Threat Activity Heatmap

· Peak: 2026-06-08
Less
More
Mon
Wed
Fri
Jun
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
·
24h
11
Elevated
7d
144
Critical
30d
583
Critical
3mo
583
Critical
Threat ScoreHigh Risk
86
SIGNAL
Signal Score
95%
Confidence
583
Reports
First seenJun 2, 2026
Last seenJun 29, 2026
Verified IOC
GeolocationKR
CountrySouth Korea
LocationSeongnam-si, Gyeonggi-do
ASNAS45996
OrgDaou
Coords37.4078, 127.0790
Proxy

VirusTotal

Not checked

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

high
First detected 26 days ago · Last seen today
Appeared in 583 threat reports from 10 sources
Associated with: Akira, Kimsuky, LockBit, Hive, Turla, Play
Used by malware: XMRig, Remcos, Rhysida, DarkComet, WannaCry, Akira, AsyncRAT, Lumma, FormBook, Rhadamanthys, Mozi, NjRAT, XWorm, Pegasus, Dridex, NetWire, Nanocore, XorDDoS, SocGholish, QakBot, Cobalt Strike, Sliver, PowerShell Empire, RedLine, META Stealer, Gh0st RAT, Play, Stealc, Mirai, Vidar, Hive, Bumblebee, Metasploit, Gootloader, LockBit, Havoc