IPMediumSignal 67/100
45.84.107.222
Location
SwedenSundbyberg, Stockholm County
ASN
AS214503
R0CKET-CLOUD
First Seen
Jan 19, 2025
Last Seen
Jun 5, 2026
Found in 45 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
67%
Signal Score
67 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Network Information
CountrySweden
SwedenRegionSundbyberg, Stockholm County
ASNAS214503
OrganizationR0CKET-CLOUD
IP Category
⟲
Proxy
Proxy server
⊕
VPN
VPN exit node
Feed Intelligence Summary
45 reports67% confidence
45
Source reports
67%
Confidence score
Category tags
#supportsitewebsiteabuse #rootcertificatefailure #cryptographicf50 ip addresses50_iocs80+ bde scoreabnormal network behaviorabuseabuseipdbaccessaccess attemptaccess attemptsaccess controlaccount discoveryaccount profilingaccount takeoveractive scanactive scanningadb attackadbhoney activityadbhoney honeypotadversary infrastructureafricaalibabaalibaba cloudalibaba cloud attacksalibaba infrastructureand brazilandorraandroid device attacksanomalous activityanomalous behavioranomalous network activityanomalous network behavioranomalous network behaviouranomaly detectionanonymity network abuseanonymization networkanonymization network trafficanonymization_network_originanonymization_service_trafficanonymous proxiesantarcticaapacheapache attackerapi servicesapple security bypassapplication layer attackapplication layer protocolapplication layer protocolsaptapt activityapt indicatorsaqargentinaas path poisoningasaasiaasp.net reflective loaderattachment phishingattackattack campaignattack originattack originating ipsattack sourceattack vectorattack-vectorattack_patternattacker ipsattacker-ipaustraliaauthenticationauthentication abuseauthentication attackauthentication attacksauthentication attemptsauthentication brute forceauthentication failureauthentication-attemptsauto blockedauto blocked ipauto-blockedauto-blocked ipauto-blocked ipsauto-generatedauto-updatedauto_blockedautomated activityautomated analysisautomated attackautomated attack attemptsautomated attacksautomated blockingautomated collectionautomated emailautomated feedautomated scanautomated scanningautomated threatautomated threat blockingautomated threat responseautomated threatsautomated-attackautomated-blockingautomated_attackautomated_attacksbad actor scorebad data exposurebad reputationbad web botbangladeshbangladesh ipsbase64base64 encodingbde 80bde 80+bde analysisbde scorebde score 80bde score 80+bde score analysisbde score highbde score thresholdbde score: 80bde score: highbde: 80bde:80bde_80bde_score_80becbehavioral anomalybehavioral detectionbehavioral detection energybelgiumbgpbig data analysisblacklisted ipblacklisted ipsbloat-ablock listblocked ipblocked-ipsblocklist_allblog spambotnetbotnet activitybotnet c2botnet communicationbotnet indicatorsbr ip addressesbr_ip_activitybrand weaponizationbrazilbrazil ipbrazil ip addressesbrazil ipsbrazil originbrazil origin ipsbrazil originating trafficbrazilian ipsbrazilian originbroad-spectrum malicious activitybrute forcebrute force attackbrute force attackerbrute force attacksbrute force attemptbrute force attemptsbrute force detectionbrute-forcebrute-force attackbrute-force-attackbrute_forcebrute_force_attackbruteforcebulgariabulk emailc&cc2c2 activityc2 addressesc2 channelc2 communicationc2 frameworkc2 indicatorsc2 infrastructurec2 servercambodiacanadacentoschinachina aptchina based attackschina ip addresseschina ipschina mobilechina originchina origin ipschina originating ipchina originating ipschina originating trafficchina related activitychina-based activitychina-based infrastructurechina-based threat actorschina-linked activitychina-related activitychinese threat actorscisco asacisco asa targetedcisco asa targetingcisco devicecisco device targetingcisco exploitationcisco exploitation attemptcisco exploitation attemptscisco_devicescloud infrastructurecloud services abusecn ipcn ip addressescn ipscn origincnc communicationcode executioncolumnscommand & controlcommand and controlcommand executioncommand injectioncommunication channelcommunication obfuscationcommunication possible c2communication protocolcommunication protocol analysiscommunication protocolscommunication technologiescompany limitedcompromise assessmentcompromise attemptcompromise indicatorcompromise indicatorscompromise-indicatorcompromised credentialscompromised credentials attemptcompromised endpointcompromised hostcompromised host attemptcompromised host communicationcompromised host detectioncompromised host indicatorscompromised hostscompromised hosts potentialcompromised infrastructurecompromised infrastructure indicatorscompromised ipscompromised systemcompromised system detectioncompromised systemscompromised_infrastructureconnectconnected devicesconnection attemptsconpot activityconpot honeypotconpot ics probingcontent deliverycoordinated attackcoordinated attack campaigncore network compromisecowriecowrie activitycowrie attackscowrie datacowrie honeypotcowrie honeypot detectioncowrie interactionscowrie logscowrie ssh attackscowrie ssh honeypotcredential accesscredential attackcredential attackscredential brute forcecredential dumpingcredential guessingcredential harvestingcredential phishingcredential stealercredential stuffingcredential theftcredential-stuffingcredential_accesscredential_access_attemptscredential_guessingcredential_stuffingcredentialscross-border activitycryptocurrencycryptocurrency threatscryptojackingctacyber threat intelligencecyber threatscymtdarkforumsdata collectiondata encryptiondata encryption standarddata exfiltrationdata exfiltration attemptdata exfiltration attemptsdata exploitationdata harvestingdata interceptiondata obfuscationdata serializationdata store exposuredata theftdatabase attackdatabase attacksdatabase brute forcedatabase probingdatabase scanningdatabase securityddosddos activityddos attackddos attack activityddos attacksddos attemptddos preparationddos reflectionde ipde ip addressde ip addressesde ipsde originde_ip_activitydecoy systemdenial of servicedenmarkdetection timestampdevice managementdictionary attackdigital oceandionaeadionaea activitydionaea attacksdionaea capturedionaea honeypotdionaea interactionsdionaea logsdionaea malware samplesdistributed attackdistributed attacksdll injectiondnsdns attackdominican republicdosdrive-by compromisedugganusa threat inteldugganusa threat intelligenceedge communicationedge infrastructure exploitegress trafficelasticpot activityelasticpot honeypotelasticsearch monitoringelectronic health recordsemailemerging attack patternsemerging threatemerging threatsencoded command stringsencrypted channelencryptionendpoint detectionenergyenterprise networkingenumerationeu cyber policieseuropeeurope/asiaeuropean ipeuropean ip addresseseuropean ipseuropean nationseuropean origineuropean origin ipseuropean originating ipevasion tacticsevasion techniquesevasive tacticsexecutable fileexfiltrationexit nodeexit node threatexploitexploit activityexploit attemptexploit attemptsexploit kit activityexploit probingexploit public-facing applicationexploit_attemptsexploitationexploitation activityexploitation attemptexploitation attemptsexploitation strategiesexploited hostexternal access attemptsexternal attackexternal communicationexternal ipexternal network scansexternal remote servicesexternal scanningexternal threatfailedfailed authenticationfailed loginfattfatt signaturesfeedfeed-harvestfeodofeodo trackerfeodo-trackerfilefinancefinancial servicesfinlandfireholfirewall eventfirmware attackfr activityfr ipfr ip addressfr ip addressesfr ipsfr originfr_ip_activityfrancefraud ordersftpftp attacksftp brute forceftp brute-forceftp protocolftp scanningftp_attemptsftp_brute_forcegeo-distributedgeo-distributed activitygeo-distributed attackgeo-distributed attacksgeo-distributed threatgeo-distributiongeo-diverse attackgeo-diverse ipsgeo-ip analysisgeo-ip attackgeo-located threatgeo-located threatsgeo-locationgeofencing malwaregeographic anomalygeographic anomaly detectiongeographic attributiongeographic distributiongeographic diversitygeographic locationgeographic origingeographic sourcegeographic source analysisgeographic source: brgeographic source: brazilgeographic source: chinageographic source: cngeographic source: degeographic source: germanygeographic source: japangeographic source: mexicogeographic source: netherlandsgeographic source: polandgeographic source: sggeographic source: singaporegeographic source: swedengeographic source: usgeographic spreadgeographic threat sourcegeographical distributiongeographical diversitygeographical spreadgeographically distributedgeographically distributed ipsgeographically diversegeographically diverse attackgeographically diverse attackersgeographically diverse attacksgeographically diverse ipsgeographically diverse originsgeographically diverse sourcesgeoipgeolocated attackgeolocated attack sourcegeolocated ipsgeolocated threatgeolocated threatsgermanygermany-based activitygithubglobal activityglobal attackglobal attack campaignglobal attack originglobal attack sourcesglobal distributionglobal ipsglobal threatglobal threat activityglobal threat landscapeglobal threat vectorsgreat britaingroupshackinghashhealth care and social assistancehealth information technologyhealthcare information systemsheralding activityhigh abuse scorehigh bdehigh bde scorehigh behavioral scorehigh confidencehigh confidence indicatorhigh confidence indicatorshigh confidence iochigh confidence iocshigh confidence threathigh riskhigh risk iphigh risk ipshigh risk scorehigh severityhigh suspicion levelhigh threat levelhigh threat potentialhigh threat scorehigh volume traffichigh-risk ip activityhigh-risk ipshigh_bdehk abusehandlerhoneynet connecthoneytrap datahoneytrap honeypothoneytrap interactionshong konghospital managementhttp brute forcehttp exploitationhttp probinghttp scannerhttp scanninghttp/shttpshttps scanninghttps-servicehwrn nameservericelandiceland ip addressesiceland ipsiceland originating trafficicmpicsics securityics/scada attacksidentity & access exploitationidmsa abuseimapimap attackindiaindicatorindicator-of-compromiseindicatorsindicators of compromiseindicators_of_compromiseindonesiaindonesia ip addressesindonesia ipsindonesia originindonesia originating trafficindonesian ipsindustrial control systemsindustrial iotinformation gatheringinformation technologyinfostealerinfostealer malwareinfrastructure acquisitionreconnaissanceingress tool transferinitial accessinitial access attemptsinitial-access-attemptinitial_accessinitial_access_attemptinjection activityinjection attacksinter-as route manipulationinternational activityinternational ipsinternational origininternational trafficinternet of thingsinternet-facingintrusion attemptintrusion detectioniociocsiocs: 50iocs: 50 ipsiocs: ip addressesiocs:ip addressiocs:ip addressesiot analyticsiot applicationsiot botnetiot platformsiot securityiot targetediot/ics attackip-blocklistipphoney activityipphoney honeypotipphoney print exploitsips: 3ipv4ipv4 addressipv4 attacksipv6iraqirelandis ipis ip addressesis ipsisp hosting threatsisp-reputationisraelit infrastructureitalyja3ja3 fingerprintja3 fingerprintsja3 hashja3 hash iocja3 hashesja3 hashingjapanjapan ipjapan ip addressesjapan ipsjapan originjapan origin ipsjapan originating ipjapan originating trafficjapanese ipsjordanjp ipjp ip addressesjp ipsjtag exploitationkenyakill-chain exploitationkill-chain reconnaissanceknown threat actorsknown threat regionskoreakorea, republic ofkyrgyzstanlamplamp attacklamp exploitationlamp exploitation attemptlamp exploitation attemptslamp server attacklamp server targetinglamp stack exploitationlamp stack targetedlamp stack targetinglamp vulnerability scanlarge-scale scanninglateral movementlateral movement attemptslateral movement detectionlateral movement investigationlateral movement potentiallateral network movementlatvialcialiechtensteinlinuxlinux serverslinux systemslinux-server-attacklinux-server-attackslinux_serverslithuanialoaderlog analysislogin attacklogin attemptlogin attemptslouisiana honeypot datalow-risklte trialluxembourgmailmailoney activitymailoney attackmailoney email harvestingmailoney honeypotmailoney interactionmailoney interactionsmalaysiamalicious activitymalicious activity detectedmalicious activity detectionmalicious code detectionmalicious communicationmalicious domainmalicious domainsmalicious emailmalicious email trafficmalicious filemalicious hashesmalicious indicatorsmalicious infrastructuremalicious ip activitymalicious ip addressesmalicious ip communicationmalicious ipsmalicious linksmalicious loginmalicious network activitymalicious network communicationmalicious network trafficmalicious payloadmalicious payload attemptmalicious powershell activitymalicious script executionmalicious sftp activitymalicious sftp trafficmalicious softwaremalicious sourcemalicious ssh activitymalicious ssh trafficmalicious trafficmalicious urlsmalicious-activitymalicious-ip-addressmalicious-login-attemptsmalicious-trafficmalmomalspammalwaremalware activitymalware analysismalware beaconingmalware behaviourmalware c2malware campaign activitymalware capturemalware cncmalware communicationmalware deliverymalware delivery attemptmalware delivery attemptsmalware detectionmalware distributionmalware distribution attemptsmalware domainmalware domainsmalware downloadmalware indicatorsmalware infectionmalware propagationmalware scanningmalware trafficmalware urlsmedical servicesmexicomexico ipmexico ip addressesmexico ipsmirai botnetmitre att&ck mappingmitre-attackmixed-ip-domainmobile carriersmobile networksmobile threatmod securitymodbus attacksmonthlymoroccomsi installermssqlmssql brute forcemulti-country activitymulti-country attackmulti-country originmulti-country originating trafficmulti-nationalmulti-national attackmulti-national originmulti-originmulti-origin attackmulti-regionmulti-regional activitymulti-regional attackmulti-source correlationmulti-vector attackmultiple attack originsmultiple countriesmultiple countries originmultiple geographic locationsmultiple geographic originsmultiple geolocationmultiple geolocation originsmultiple origin countriesmultiple origin ipsmultiple origin pointsmultiple originsmultiple regionsmultiple source countriesmultiple source ipsmultiple_countriesmysql brute forcenation-state activitynemucodnetherlandsnetherlands ipnetherlands ip addressesnetherlands ipsnetherlands originating trafficnetworknetwork accessnetwork activitynetwork activity analysisnetwork activity monitoringnetwork analysisnetwork anomaliesnetwork anomalynetwork anomaly detectionnetwork attack indicatorsnetwork attacksnetwork behaviornetwork behavior analysisnetwork behavior anomalynetwork communicationnetwork communication anomalynetwork device attacksnetwork device probingnetwork devicesnetwork discoverynetwork enumerationnetwork exploitationnetwork infrastructurenetwork infrastructure attacknetwork intrusionnetwork intrusion activitynetwork intrusion attemptnetwork intrusion attemptsnetwork intrusion detectionnetwork intrusionsnetwork layer attacknetwork probenetwork probingnetwork protocolnetwork protocolsnetwork reconnaissancenetwork reconnaissance activitynetwork scannetwork scanningnetwork securitynetwork security monitoringnetwork service scanningnetwork servicesnetwork threatnetwork threat detectionnetwork trafficnetwork traffic analysisnetwork traffic monitoringnetwork vulnerabilitynetwork vulnerability exploitationnetwork-based attack attemptsnetwork-intrusionnetwork-reconnaissancenetwork-scannetwork_attacknetwork_devicenetwork_enumerationnetwork_indicatorsnetwork_reconnaissancenetwork_trafficnetwork_traffic_analysisnew zealandnl activitynl ip addressnl ip addressesnl originnl_ip_activityno known c2non-standard portnorth americanorwayobserved communicationoceaniaopen proxyopenctiopenphish feedopenphish iocopensshopportunistic attackopportunistic exploitationoriginating countries: broriginating iporiginating ipsos command injectionosintoutbound trafficp0fp0f signaturespass the hashpasswordpassword attackpassword attackspassword sprayingpassword theftpassword-guessingpatient carepattern-32pattern-38payment fraudpdfperimeter devicespersistence mechanismpgp signphishingphishing attackphishing campaignphishing campaignsphishing domainphishing domainsphishing trapphishing urlsping of deathpl ip addressespl_ip_activitypmic manipulationpolandpoland ippoland ip addressespoland ipspoland originating trafficpolish originport-scanningportscanpossible aptpossible apt activitypossible botnetpossible botnet activitypossible brute forcepossible c2possible c2 activitypossible c2 communicationpossible c2 infrastructurepossible compromisepossible credential accesspossible credential reusepossible credential stuffingpossible data exfiltrationpossible exploit activitypossible exploit attemptspossible initial accesspossible intrusionpossible lateral movementpossible malicious activitypossible malwarepossible malware activitypossible malware beaconingpossible malware distributionpossible malware infectionpossible malware propagationpossible port scanningpossible reconnaissancepossible scanningpossible threat infrastructurepossible vulnerability exploitationpotential aptpotential apt activitypotential attackpotential attack originpotential backdoorpotential botnetpotential botnet activitypotential brute forcepotential c2potential c2 activitypotential c2 communicationpotential compromisepotential coordinationpotential credential accesspotential credential compromisepotential data breachpotential data collectionpotential data exfiltrationpotential evasionpotential exploitpotential exploit activitypotential exploit attemptspotential exploitationpotential initial accesspotential intrusionpotential intrusion attemptpotential intrusion attemptspotential lateral movementpotential malicious activitypotential malicious communicationpotential malwarepotential malware activitypotential malware communicationpotential malware distributionpotential malware infectionpotential malware uploadpotential network attackpotential network intrusionpotential network reconnaissancepotential reconnaissancepotential reconnaissance activitypotential scanningpotential targeted attackpotential threatpotential threat activitypotential threat actorpotential threat actorspotential vulnerability exploitationpotential-threatpreparatory activitiesprice requestprice request scamproactive monitoringprocess id 2356process id 2812process injectionprotocol analysisprotocol anomalyprotocol exploitationprotocol scanningprotocol-abuseprotocol-deviprotocol: emailprotocol: sftpprotocol: sshprotocol_scanningproxyproxy detectionproxy ipspublic-facing applicationpublicly accessible infrastructurepythonransomwarerdp attacksrdp protocolrdp-protocolrdp_attemptsrdp_brute_forcereconnaissancereconnaissance activityredis exploitationredis honeypotredishoneypotregional securityremote accessremote access abuseremote access attacksremote access attemptsremote access toolsremote service exploitationremote servicesrepublic ofreputation parasitismreputation-based blockingresearchedresidential proxyresource developmentresource hijackingreverse sshromaniarouting protocolru ip addressru originrussiarussia ipsrussia-linked activityrussian federationrussian ipsrussian threat actorss7comm attackssaudi arabiascams & fraudscannerscannersscanning activityschedule themescheduled task abusescriptscripting attacksscripting languagesese ip addressesse_ip_activitysecurity incidentsecurity monitoringsecurity operationssecurity policysensor-taggedsentrypeer activitysentrypeer botnetsentrypeer communicationsentrypeer detectionsentrypeer exploitationsentrypeer honeypotsentrypeer interactionsserbiaserverserver exploitationservice discoveryservice enumerationservice scanservice scanningservice: lampsftpsftp access attemptsftp access attemptssftp attacksftp attackssftp attemptsftp enumerationsftp exploit attemptsftp exploitation attemptssftp probingsftp-attacksg_ip_activityshell accesssingaporesingapore ipsingapore ip addressessingapore ipssingapore origin ipssingapore originating trafficsingapore-based activitysip attackssip brute forcesip scansip scanningsloveniaslugsmart devicessmb attackssmb brute forcesmb enumerationsmb exploitationsmtpsmtp attackersmtp attackssmtp brute forcesmtp probingsmtp scanningsocial engineeringsocradar honeypotsoftware developmentsoftware exploitationsomaliasophisticated firmware persistencesouth africasouth americasouth koreaspainspamspam campaignsspam domainsspam sourcespamhausspamhaus dropspamhaus drop feedspamhaus drop iocspamhausdropspynoonsql injectionsql injection attemptsql injection attemptssshssh attackssh attacksssh monitoringssh protocolssh-brute-forcessh-protocolssh_attemptsssh_brute_forcesslssl blacklistssl certificatessl certificate analysisssl certificate enrichmentssl certificatesssl enrichmentssl-certificate-analysisssl-enrichmentssl-tls-analysisssl/tlsssl/tls enrichmentssl_certificate_iocssl_enrichmentsslblsslblackliststate-sponsored activitystealcstixstix 2.1stix feedstix formatstix-2.1supply chain attacksupply chain compromisesupply-chainsurface websuricata alertssuspected botnet activitysuspected compromisesuspected malicious activitysuspected malwaresuspected scanning activitysuspected threat actorssuspicious-udpswedensweden-based activitysymmetric cryptographysyn scansyrian arab republicsystem discoveryt-pott1001t1003t1003 credential dumpingt1003.001t1005t1016t1016.001t1018t1020t1021t1021.001t1021.002t1021.003t1021.004t1021.005t1024t1027t1036t1036.006t1040t1041t1043t1046t1047t1048t1049t1053t1053.005t1055t1056t1057t1059t1059.001t1059.003t1059.004t1059.007t1060t1068t1071t1071 indicatorst1071.001t1071.002t1071.004t1071.005t1075t1076t1077t1078t1078.001t1078.002t1078.003t1078.004t1082t1083t1086t1087t1090t1090 proxyt1090.001t1090.002t1095t1102t1105t1110t1110 brute forcet1110.001t1110.002t1110.003t1110.004t1113t1133t1140t1187t1189t1190t1192t1195t1195.001t1195.002t1199t1203t1204t1204.001t1204.002t1210t1219t1486t1496t1499t1499.001t1499.002t1499.003t1505.002t1542.001t1542.005t1547t1547.001t1550t1550.002t1552.001t1555t1555.003t1563t1564.001t1564.003t1565t1566t1566.001t1566.002t1566.003t1566.004t1567t1568t1569t1570t1571t1572t1573t1573.001t1573.002t1580t1583t1583.001t1583.006t1584t1585t1586t1587.001t1588t1588.002t1588.004t1588.006t1589t1589.001t1589.002t1590t1590.001t1590.005t1590.006t1592t1592.002t1592.004t1595t1595 active scanningt1595.001t1595.002t1595.003t1598t1598.003taiwantannertanner activitytanner detectiontanner honeypottanner interactionstargeting databasetariff server compromisetariff server themetariffs servertcp protocoltcp scantcp scanningteam cymrutelecom servicestelecommunicationstelnet attackstelnet threattelnet-brute-forcetelnet_attemptstencenttencent attacksthreat actorthreat actor activitythreat actor indicatorsthreat actor infrastructurethreat actor zonethreat actorsthreat detectionthreat feedthreat hostingthreat hosting ispsthreat indicatorthreat indicatorsthreat infrastructurethreat intelligencethreat intelligence aggregationthreat intelligence feedthreat monitoringthreat preventionthreat-intelthreat-intelligencethreat-intelligence-feedthreat_activitythreat_actor_activitythreat_intelthreat_intelligencethreat_intelligence_feedtier-1 network vulnerabilitytls fingerprinttortor activitytor exit nodetor exit nodestor networktor network activitytor nodetor_exit_nodetorexittorexitnodestpottraffic analysistraffic anomaliestraffic anomalytraffic monitoringttpturkeyubuntuudp scanukraineunattributed threat actorunattributed_threat_activityunauthenticated access attemptsunauthorized accessunauthorized access attemptunauthorized access attemptsunauthorized activityunauthorized loginunauthorized login attemptunauthorized login attemptsunauthorized-access-attemptunidentified c2 frameworksunidentified threat actorunited arab emiratesunited kingdomunited statesunited states ipsunited states originunknown c2unknown threat actorunusual network activityunusual network trafficunusual traffic patternsuploadurlhausus abuseus activityus ip addressus ip addressesus noneus originus origin ipsus originating ipus-based activityus_ip_activityuzbekistanvalid accountsvenezuela, bolivarian republic ofverizon basebandverizon ltevigilance recommendedvnc protocolvoidtrapvoipvoip attackvpnvpn ipvpn trafficvulnerabilityvulnerability scanvulnerability-exploitationw32.bloat-aweb apisweb app attackweb application attackweb application attacksweb application exploitationweb application scanweb application scanningweb applicationsweb attackweb attacksweb brute forceweb developmentweb exploit attemptweb exploitationweb hostingweb infrastructureweb protocolsweb securityweb serverweb server attacksweb service scanningweb servicesweb shellweb shell uploadsweb spamweb technologiesweb trafficweb-application-attackweb_applicationweb_attackswetransfer abusewixzabbixzimbabwe
Activity Timeline
Jun 5Jun 5
Threat Activity Heatmap
LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
1
Minimal
30d
1
Minimal
3mo
1
Minimal
Threat ScoreMedium Risk
67
SIGNAL
Signal Score
67%
Confidence
45
Reports
First seenJan 19, 2025
Last seenJun 5, 2026
GeolocationSE
CountrySweden
LocationSundbyberg, Stockholm County
ASNAS214503
OrgR0CKET-CLOUD
Coords51.2993, 9.4910
ProxyVPN
VirusTotal
Not checked
WHOIS
- description
- Anonymization_Network indicators. Date: Apr 8, 2026. Part 1/5. For more threat intelligence visit https://ltna.com.au/cyber
- raw
- inetnum: 45.84.107.0 - 45.84.107.255 netname: R0CKET-CLOUD-2 country: EU admin-c: NA8786-RIPE tech-c: NA8786-RIPE status: ASSIGNED PA mnt-by: MNT-QUXLABS created: 2024-08-08T08:19:19Z last-modified: 2024-08-08T08:19:19Z source: RIPE geofeed: https://as203038.net/geofeed.csv role: QuxLabs AB NOC address: QuxLabs AB address: c/o Helioworks address: Sundbybergs Torg 1 address: 172 67 Sundbyberg address: Sweden nic-hdl: NA8786-RIPE mnt-by: MNT-QUXLABS created: 2024-04-29T07:40:19Z last-modified: 2024-08-08T15:47:49Z source: RIPE # Filtered route: 45.84.107.0/24 origin: AS214503 mnt-by: MNT-QUXLABS created: 2024-08-08T08:25:10Z last-modified: 2024-08-08T08:25:10Z source: RIPE
- references
- https://github.com/telekom-security/tpotce, https://redpiranha.net, https://feeds.dshield.org/feeds/topips.txt, https://feeds.dshield.org/feeds/top10.txt, https://feeds.dshield.org/feeds/block.txt, https://jamesbrine.com.au/bruteforce-ip-list-2025-07-22/, https://jamesbrine.com.au, https://blog.edie.io/2020/04/30/diy-ip-threat-feed/, https://github.com/tankmek/threatfeed, https://check.torproject.org/torbulkexitlist
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
mediumFirst detected 1 year ago · Last seen today
Appeared in 45 threat reports