IOC Radar
IPMediumSignal 58/100

5.190.209.3

Location
Iran, Islamic Republic ofIran, Islamic Republic of
Fasa, Fars
ASN
AS58224
Fasa University of Medical Sciences (1009)
First Seen
Sep 14, 2020
Last Seen
Apr 26, 2026
Sep 14
First Seen
2107d ago
Apr 26
Last Seen
58d ago
17
Reports
source reports
58%
Confidence
medium
Found in 17 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
58%
Signal Score
58 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

3 techniques

Network Information

CountryIRIran, Islamic Republic of
RegionFasa, Fars
ASNAS58224
OrganizationFasa University of Medical Sciences (1009)

Feed Intelligence Summary

17 reports58% confidence
17
Source reports
58%
Confidence score
Category tags
active scanaptasiabrute forcebruteforcecredential harvestingcredential stuffingidentity & access exploitationindicatoririrannetworkphishingphishing attackresearchedscannersocial engineeringssht1566.001t1566.002t1566.003threat actortor node

Activity Timeline

1 total obs
Apr 26Apr 26

Threat Activity Heatmap

· Peak: 2026-04-26
Less
More
Mon
Wed
Fri
Jun
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Threat ScoreMedium Risk
58
SIGNAL
Signal Score
58%
Confidence
17
Reports
First seenSep 14, 2020
Last seenApr 26, 2026
GeolocationIR
CountryIran, Islamic Republic of
LocationFasa, Fars
ASNAS58224
OrgFasa University of Medical Sciences (1009)
Coords28.9298, 53.6325

VirusTotal

Not checked

WHOIS

raw
inetnum: 5.190.209.0 - 5.190.209.255 netname: ORG-FUOM5-RIPE descr: fasa university of medical sciences (1009) country: IR admin-c: PT8452-RIPE tech-c: EB10805-RIPE status: ASSIGNED PA mnt-by: TCI-RIPE-MNT created: 2025-03-04T11:51:28Z last-modified: 2025-03-04T11:51:28Z source: RIPE person: ehsan bahramali address: fasa university of medical sciences-fars-Iran phone: +987136274661 nic-hdl: EB10805-RIPE mnt-by: MNT-TCF created: 2015-09-26T05:23:49Z last-modified: 2015-09-26T05:23:49Z source: RIPE person: Parisa Tavakoli address: 7183893995,Ghasredasht, Shiraz, IR. phone: +987136112145 nic-hdl: PT8452-RIPE mnt-by: MNT-TCF created: 2018-06-26T08:12:11Z last-modified: 2018-06-26T08:12:11Z source: RIPE route: 5.190.209.0/24 origin: AS58224 mnt-by: TCI-RIPE-MNT created: 2025-03-04T07:07:43Z last-modified: 2025-03-04T09:07:58Z source: RIPE

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 5 years ago · Last seen 1 month ago
Appeared in 17 threat reports