IOC Radar
IPMediumSignal 88/100

185.200.116.131

Location
SingaporeSingapore
Singapore, Singapore
ASN
AS9009
AirVPN.org exit server (Triangulum)
First Seen
Aug 26, 2020
Last Seen
May 28, 2026
Aug 26
First Seen
2122d ago
May 28
Last Seen
22d ago
19
Reports
source reports
88%
Confidence
medium
Found in 19 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
88%
Signal Score
88 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

21 techniques

Network Information

CountrySGSingapore
RegionSingapore, Singapore
ASNAS9009
OrganizationAirVPN.org exit server (Triangulum)

IP Category

⊕
VPN
VPN exit node

Feed Intelligence Summary

19 reports88% confidence
19
Source reports
88%
Confidence score
Category tags
abuseactive scanactive scanningasiabad reputationbad web botbotnetbotnet activitybrute forcebrute force attackcommand and controlcredential accesscredential harvestingcredential stuffingdata exfiltrationdata store exposuredatabase securityddosddos attackdenial of servicedistributed attacksexploitation activityexploited hosthackingidentity & access exploitationinformation technologyinjection activityinjection attacksit infrastructuremalicious softwaremalwarenetworkpassword attacksphishingphishing attackping of deathprocess injectionproxyreconnaissanceresearchedscannersgsingaporesocial engineeringsoftware developmentssh attacksuspicious-udpt1055t1059.003t1071.001t1110.001t1110.002t1110.003t1110.004t1190t1203t1486t1496t1499.001t1499.002t1499.003t1565t1566.001t1566.002t1566.003t1595.001t1595.002t1595.003vpnweb application attackweb exploitation

Activity Timeline

1 total obs
May 28May 28

Threat Activity Heatmap

· Peak: 2026-05-28
Less
More
Mon
Wed
Fri
Jun
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Threat ScoreHigh Risk
88
SIGNAL
Signal Score
88%
Confidence
19
Reports
First seenAug 26, 2020
Last seenMay 28, 2026
GeolocationSG
CountrySingapore
LocationSingapore, Singapore
ASNAS9009
OrgAirVPN.org exit server (Triangulum)
Coords1.2900, 103.8503
VPN

VirusTotal

Not checked

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 5 years ago · Last seen 22 days ago
Appeared in 19 threat reports