IOC Radar
IPMediumSignal 0/100

16.16.7.68

Location
SwedenSweden
Stockholm, Stockholm
ASN
AS16509
AWS EC2 (eu-north-1)
First Seen
Jan 26, 2026
Last Seen
May 12, 2026
Jan 26
First Seen
138d ago
May 12
Last Seen
32d ago
9
Reports
source reports
0%
Confidence
medium
Found in 9 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
0%
Signal Score
0 / 100
IDS Rule
No
Threat Context
Tags

Network Information

CountrySESweden
RegionStockholm, Stockholm
ASNAS16509
OrganizationAWS EC2 (eu-north-1)

Feed Intelligence Summary

9 reports0% confidence
9
Source reports
0%
Confidence score
Category tags
indicatornetworkresearched

Activity Timeline

1 total obs
May 12May 12

Threat Activity Heatmap

· Peak: 2026-05-12
Less
More
Mon
Wed
Fri
Jun
·
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Intelligence SummaryAI Generated

This indicator of compromise (IOC), an IPv4 address `16.16.7.68`, has been explicitly whitelisted across multiple threat intelligence feeds and assigned a score of 0.0. This indicates a very low-risk posture, suggesting that the IP address is considered benign or has been remediated and no longer poses an active threat. Therefore, its presence in logs should not be immediately interpreted as malicious activity requiring urgent containment. Organizations can view this IOC with confidence that it …

Threat ScoreLow Risk
0
SIGNAL
Signal Score
0%
Confidence
9
Reports
First seenJan 26, 2026
Last seenMay 12, 2026
GeolocationSE
CountrySweden
LocationStockholm, Stockholm
ASNAS16509
OrgAWS EC2 (eu-north-1)
Coords59.3293, 18.0686

VirusTotal

Not checked

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 4 months ago · Last seen 1 month ago
Appeared in 9 threat reports