IOC Radar
IPHighVerifiedSignal 70/100

45.133.180.130

Location
BrazilBrazil
Botafogo, Rio de Janeiro
ASN
AS9009
M247 LTD
First Seen
Jun 19, 2026
Last Seen
Jun 20, 2026
Jun 19
First Seen
3d ago
Jun 20
Last Seen
2d ago
2
Reports
source reports
95%
Confidence
high
Found in 2 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
95%
Signal Score
70 / 100
IDS Rule
Yes
Threat Context
Tags

Network Information

CountryBRBrazil
RegionBotafogo, Rio de Janeiro
ASNAS9009
OrganizationM247 LTD

IP Category

⟲
Proxy
Proxy server
⬢
Hosting
Hosting provider

Feed Intelligence Summary

2 reports95% confidence
CO
CIRCL OSINT Feed
3d ago
Maltrail IOC for 2026-06-19
980 IOCs in report
CO
CIRCL OSINT Feed
3d ago
Maltrail IOC for 2026-06-19
923 IOCs in report

Activity Timeline

2 total obs
Jun 19Jun 19

Threat Activity Heatmap

· Peak: 2026-06-19
Less
More
Mon
Wed
Fri
Jun
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
24h
0
Dormant
7d
2
Minimal
30d
2
Minimal
3mo
2
Minimal
Threat ScoreHigh Risk
70
SIGNAL
Signal Score
95%
Confidence
2
Reports
First seenJun 19, 2026
Last seenJun 20, 2026
Verified IOC
GeolocationBR
CountryBrazil
LocationBotafogo, Rio de Janeiro
ASNAS9009
OrgM247 LTD
Coords-22.9536, -43.1907
ProxyHosting

VirusTotal

Not checked

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

high
First detected 3 days ago · Last seen 2 days ago
Appeared in 2 threat reports from 2 sources
Associated with: REvil, Cl0p, Conti, DarkSide
Used by malware: SocGholish, Remcos, Lumma, WannaCry, AsyncRAT, Stuxnet, FormBook, Dridex, AgentTesla, Emotet, Ryuk, QakBot, Nanocore, REvil, Ursnif, Conti, NotPetya, DarkSide, Gootloader, Cl0p, HermeticWiper, Gh0st RAT