IOC Radar
IPMediumSignal 15/100

87.241.159.201

Location
ArmeniaArmenia
Yerevan, Yerevan
ASN
AS12297
ArmenTel
First Seen
Nov 4, 2025
Last Seen
Nov 4, 2025
Nov 4
First Seen
230d ago
Nov 4
Last Seen
230d ago
1
Reports
source reports
15%
Confidence
medium
Found in 1 report. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
15%
Signal Score
15 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

3 techniques

Network Information

CountryAMArmenia
RegionYerevan, Yerevan
ASNAS12297
OrganizationArmenTel

Feed Intelligence Summary

1 report15% confidence
1
Source reports
15%
Confidence score
Category tags
abuseaccess controlactive scanningindicatornetworkreconnaissanceresearchedscannersecurity policyt1595.001t1595.002t1595.003threat prevention

Activity Timeline

1 total obs
Nov 4Nov 4

Threat Activity Heatmap

· Peak: 2025-11-04
Less
More
Mon
Wed
Fri
Jun
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Intelligence SummaryAI Generated

This Indicator of Compromise (IOC), an IPv4 address, currently presents a low-risk profile to organizational security, as indicated by its moderate score of 15.3. Its inclusion in threat intelligence feeds, specifically `blocklist.net.ua-Firehol`, primarily suggests involvement in broad scanning or reconnaissance activities rather than targeted malicious operations. At this time, there is no corroborating evidence to suggest hostile behavior directly impacting our environment. Therefore, this IO…

Threat ScoreLow Risk
15
SIGNAL
Signal Score
15%
Confidence
1
Reports
First seenNov 4, 2025
Last seenNov 4, 2025
GeolocationAM
CountryArmenia
LocationYerevan, Yerevan
ASNAS12297
OrgArmenTel
Coords40.1557, 44.4779

VirusTotal

Not checked

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 7 months ago · Last seen 7 months ago
Appeared in 1 threat report