IOC Radar
IPMediumSignal 42/100

87.225.105.217

Location
Russian FederationRussian Federation
Khabarovsk, St.-Petersburg
ASN
AS12389
PJSC Rostelecom
First Seen
Nov 5, 2024
Last Seen
May 26, 2026
Nov 5
First Seen
584d ago
May 26
Last Seen
16d ago
7
Reports
source reports
42%
Confidence
medium
Found in 7 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
42%
Signal Score
42 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

3 techniques

Network Information

CountryRURussian Federation
RegionKhabarovsk, St.-Petersburg
ASNAS12389
OrganizationPJSC Rostelecom

Feed Intelligence Summary

7 reports42% confidence
7
Source reports
42%
Confidence score
Category tags
abuseactive scanactive scanningalienvault_ransomwareamericaasiabad reputationeuropeeurope/asiafederationgermanyindicatormalwarenetworkransomwarereconnaissanceresearchedrurussiascannersingaporet1595.001t1595.002t1595.003united

Activity Timeline

1 total obs
May 26May 26

Threat Activity Heatmap

· Peak: 2026-05-26
Less
More
Mon
Wed
Fri
Jun
·
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Threat ScoreMedium Risk
42
SIGNAL
Signal Score
42%
Confidence
7
Reports
First seenNov 5, 2024
Last seenMay 26, 2026
GeolocationRU
CountryRussian Federation
LocationKhabarovsk, St.-Petersburg
ASNAS12389
OrgPJSC Rostelecom
Coords59.9284, 30.3873

VirusTotal

Not checked

WHOIS

description
CC=RU ASN=AS34584 pjsc rostelecom
raw
inetnum: 87.224.128.0 - 87.225.127.255 netname: RU-RTK-20050614 country: RU org: ORG-JR8-RIPE admin-c: PRTT1-RIPE tech-c: RTNC-RIPE status: ALLOCATED PA mnt-by: RIPE-NCC-HM-MNT mnt-by: ROSTELECOM-MNT mnt-lower: ROSTELECOM-MNT mnt-routes: ROSTELECOM-MNT created: 2013-11-18T13:15:23Z last-modified: 2024-06-05T10:31:48Z source: RIPE # Filtered organisation: ORG-JR8-RIPE org-name: PJSC Rostelecom country: RU reg-nr: 1027700198767 org-type: LIR address: 14 A, Sinopskaya nabereznaya address: 191167 address: S.Peterburg address: RUSSIAN FEDERATION phone: +7 499 999-82-83 fax-no: +74999953619 admin-c: PRTT1-RIPE admin-c: IE1277-RIPE admin-c: NM7547-RIPE admin-c: AA728-RIPE abuse-c: RTNC-RIPE mnt-ref: RIPE-NCC-HM-MNT mnt-ref: ROSTELECOM-MNT mnt-ref: ROSNIIROS-MNT mnt-by: RIPE-NCC-HM-MNT mnt-by: ROSTELECOM-MNT created: 2005-03-22T11:11:20Z last-modified: 2026-05-13T07:30:23Z source: RIPE # Filtered role: PJSC Rostelecom Technical Team address: PJSC Rostelecom Russian Federation nic-hdl: PRTT1-RIPE mnt-by: ROSTELECOM-MNT created: 2024-05-20T01:54:00Z last-modified: 2024-05-20T01:54:00Z source: RIPE # Filtered role: PJSC Rostelecom Technical Team address: PJSC Rostelecom address: Russian Federation abuse-mailbox: [email protected] admin-c: IE1277-RIPE tech-c: IE1277-RIPE remarks: trouble: --------------------------------------------------------------- remarks: trouble: Rostelecom NOC is available 24 x 7 remarks: trouble: e-mail [email protected] remarks: trouble: --------------------------------------------------------------- remarks: ------------------------------------------------------------------------ remarks: peering requests: [email protected] remarks: ------------------------------------------------------------------------ remarks: http://www.rostelecom.ru/, looking-glass http://lg.ip.rt.ru/ remarks: ------------------------------------------------------------------------ nic-hdl: RTNC-RIPE mnt-by: ROSTELECOM-MNT created: 2007-11-27T13:28:11Z last-modified: 2022-12-12T07:46:18Z source: RIPE # Filtered route: 87.225.104.0/22 origin: AS12389 mnt-by: ROSTELECOM-MNT created: 2024-04-09T04:13:33Z last-modified: 2024-04-09T04:13:33Z source: RIPE

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 1 year ago · Last seen 16 days ago
Appeared in 7 threat reports