IPMediumSignal 0/100
152.89.196.62
Location
SpainMoscow, Moscow
ASN
AS208677
Cloud.ru
First Seen
Aug 5, 2025
Last Seen
Aug 5, 2025
Found in 1 report. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
0%
Signal Score
0 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Network Information
CountrySpain
SpainRegionMoscow, Moscow
ASNAS208677
OrganizationCloud.ru
Feed Intelligence Summary
1 report0% confidence
1
Source reports
0%
Confidence score
Category tags
active scanningbrute forcecode executioncode injectioncommand executioncommand injectioncommon web exploitscommunication protocolcredential accesscredential stuffingdata exfiltrationdatabase securitydecoy systemdirectory traversaleuropeftp brute forcehttp brute forcehttp scannerhttpsidsindicatorinjection attacksipslfinetworknetwork reconnaissancenetwork scanningnetwork securityprotocol exploitationreconnaissanceresearchedrfispainssh attackt1040t1046t1053t1055t1059t1059.003t1068t1071t1071.001t1078t1110t1110.002t1133t1189t1190t1195t1199t1203t1486t1499.002t1588t1590t1595t1595.001t1595.002t1595.003t1600telnet threatthreat intelligencetsecwafwaf bypassweb trafficxss
Activity Timeline
Aug 5Aug 5
Threat Activity Heatmap
· Peak: 2025-08-05LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Threat ScoreLow Risk
0
SIGNAL
Signal Score
0%
Confidence
1
Reports
First seenAug 5, 2025
Last seenAug 5, 2025
GeolocationES
CountrySpain
LocationMoscow, Moscow
ASNAS208677
OrgCloud.ru
Coords55.7558, 37.6173
VirusTotal
Not checked
WHOIS
- description
- 9/9/2022 4:05:53 PM -> IP 152.89.196.62 tried a Web Attack on one of our servers: apache: Apache.HTTP.Server.cgi-bin.Path.Traversal, using /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
mediumFirst detected 10 months ago · Last seen 10 months ago
Appeared in 1 threat report