IOC Radar
IPMediumSignal 80/100

195.2.70.38

Location
Russian FederationRussian Federation
Moscow, Moscow
ASN
AS48282
VDSINA
First Seen
Dec 10, 2023
Last Seen
Jun 6, 2026
Dec 10
First Seen
916d ago
Jun 6
Last Seen
7d ago
8
Reports
source reports
80%
Confidence
medium
8/91
VirusTotal
detections
Found in 8 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
80%
Signal Score
80 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

82 techniques

Network Information

CountryRURussian Federation
RegionMoscow, Moscow
ASNAS48282
OrganizationVDSINA

IP Category

⟲
Proxy
Proxy server

Feed Intelligence Summary

8 reports80% confidence
8
Source reports
80%
Confidence score
Category tags
abusebitcoinblockchainbotnetc2cobalt strikecommand and controlcommand executioncommodity contracts intermediationcredential accesscredential harvestingcredential stealingcredential theftcredential_accesscrypto cybercrypto exchangecrypto miningcrypto walletcryptocurrencycyber threatdata encryptiondata exfiltrationdecentralized financedefencedigital currencydistributed attacksdlleurope/asiaevasionextortionfigurefinancefinancial institutions targetedfraudghostsockshasheshttpsindicatorinfrastructure acquisitionreconnaissanceingress tool transferinitial accesslateral movementlateral_movementlockbitlummalummac2maasmalicious downloadmalicious powershell activitymalicious softwaremalwaremalware distributionmalware-as-a-servicemanualnetworknetwork trafficoperating systemphishingphishing attackprivilege escalationprocess injectionproxyproxy chainingproxyingransomwareremote_accessresearchedrurussiascripting attackssocial engineeringsocks5strongsystem disruptiont1003t1003.001t1003.005t1005t1016t1016.001t1016.002t1021.001t1021.002t1021.004t1027t1027.002t1027.003t1027.006t1033t1036t1036.005t1041t1047t1053t1053.005t1055t1055.001t1055.002t1055.004t1056.001t1057t1059t1059.001t1059.003t1059.005t1068t1069.001t1071t1071.001t1071.004t1078t1078.002t1078.003t1078.004t1082t1086t1090t1105t1134t1134.001t1134.002t1134.004t1140t1189t1190t1199t1202t1204.002t1218t1218.011t1219t1486t1490t1496t1499.002t1499.003t1547.001t1550t1550.002t1555t1555.003t1565t1566t1566.001t1566.002t1566.003t1567t1567.001t1567.002t1569.002t1571t1572t1587.001t1588t1588.002t1590.001tiertimeurlsvpns

Activity Timeline

1 total obs
Jun 6Jun 6

Threat Activity Heatmap

· Peak: 2026-06-06
Less
More
Mon
Wed
Fri
Jun
·
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Threat ScoreHigh Risk
80
SIGNAL
Signal Score
80%
Confidence
8
Reports
First seenDec 10, 2023
Last seenJun 6, 2026
GeolocationRU
CountryRussian Federation
LocationMoscow, Moscow
ASNAS48282
OrgVDSINA
Coords55.7487, 37.6187
Proxy

VirusTotal

8/ 91vendors flagged
9% detection rateJun 7, 2026

WHOIS

description
CC=RU ASN=AS48282 hosting technology ltd

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 2 years ago · Last seen 7 days ago
Appeared in 8 threat reports