IOC Radar
IPMediumSignal 59/100

81.16.14.2

Location
ArmeniaArmenia
Yerevan, Yerevan
ASN
AS44395
Ucom
First Seen
Apr 27, 2024
Last Seen
Jun 11, 2026
Apr 27
First Seen
789d ago
Jun 11
Last Seen
14d ago
15
Reports
source reports
59%
Confidence
medium
Found in 15 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
59%
Signal Score
59 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

45 techniques

Network Information

CountryAMArmenia
RegionYerevan, Yerevan
ASNAS44395
OrganizationUcom

IP Category

⊕
VPN
VPN exit node

Feed Intelligence Summary

15 reports59% confidence
15
Source reports
59%
Confidence score
Category tags
abuseaccess controlactive scanactive scanningamarmeniaattackattack preparatoryattacker ipattacker ipsaustraliabad reputationbad web botblacklist candidatebotnetbotnet activitybrute forcebrute force attackbrute force attackerbrute force attacksbrute force attemptsbrute-forcecommand and controlcommand executioncommunication protocolcompromised hostcowrie honeypotcowrie interactionscredential accesscredential stuffingdata encryptiondata exfiltrationdata store exposuredatabase attackdatabase securityddosddos attackddos attacksdecoy systemdenial of servicedhcpdhcp attackdigital oceandionaea honeypotdionaea interactionsdistributed attackselastic search attackelasticsearchencryptionexploitexploit attemptsexploitation activityexploited hostfattfatt signaturesftpftp brute forcehackinghoneytrap honeypothoneytrap interactionshttp brute forcehttp probinghttp scanneridentity & access exploitationimapimap attackindicatorinformation gatheringinformation technologyinjection activityinjection attacksinternet of thingsinternet-wide scanintrusion detectioniociot botnetiot securityiot/ics attackipv4it infrastructurelateral movementldapldap attackmailoney honeypotmailoney interactionsmalicious activitymalicious softwaremalwaremalware behaviourmalware capturemalware distributionmemcache attackmirai botnetmssqlmssql attacknetworknetwork attacksnetwork discoverynetwork intrusionnetwork intrusion attemptsnetwork intrusion detectionnetwork monitoringnetwork probenetwork probingnetwork protocolnetwork scannetwork scanningnetwork securityntpntp attackoceaniaoracleoracle attackp0fp0f signaturespassword attacksphishingphishing attackphishing trapping of deathpostgresprocess injectionprotocol exploitationreconnaissanceredisremote accessremote servicesresearchedresource hijackingscanscannerscannersscanning activityscripting attackssecurity policysensor-taggedsentrypeer botnetsentrypeer interactionsserver exploitationsmbsmb brute forcesmtpsmtp brute forcesmtp probingsnmpsocks5software developmentsql injectionsshssh attackssh monitoringsuricata alertst-pott1005t1018t1021t1021.001t1021.002t1033t1040t1046t1053t1055t1059t1059.003t1059.005t1059.007t1068t1071t1071.001t1077t1078t1105t1110t1110.001t1110.002t1110.003t1110.004t1133t1189t1190t1203t1210t1486t1496t1499.001t1499.002t1499.003t1505.002t1505.004t1550.003t1562t1565t1590t1595t1595.001t1595.002t1595.003tannertanner interactionstargeting databasetcp protocoltelnettelnet threatthreat actorthreat detectionthreat intelligencethreat preventiontor nodetpotvncvnc protocolvoip attackvpnweb application attackweb attackweb exploitationweb traffic

Activity Timeline

1 total obs
Jun 11Jun 11

Threat Activity Heatmap

· Peak: 2026-06-11
Less
More
Mon
Wed
Fri
Jun
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Threat ScoreMedium Risk
59
SIGNAL
Signal Score
59%
Confidence
15
Reports
First seenApr 27, 2024
Last seenJun 11, 2026
GeolocationAM
CountryArmenia
LocationYerevan, Yerevan
ASNAS44395
OrgUcom
Coords40.1814, 44.5102
VPN

VirusTotal

Not checked

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 2 years ago · Last seen 14 days ago
Appeared in 15 threat reports