159[.]198[.]32[.]222

Posts referencing this indicator

• Armored Likho digging a snake pit: inside the covert BusySnake Stealer campaign

  KKaspersky

  SOCKS proxy host for reverse SSH tunneling — receives SSH connections from compromised hosts on port 2222

  2026-07-03