IOC Radar
IPMediumSignal 70/100

94.233.127.194

Location
Russian FederationRussian Federation
Ulan-Ude, Buryatiya Republic
ASN
AS33934
OJSC Rostelecom Macroregional Branch South
First Seen
Mar 8, 2026
Last Seen
Jun 2, 2026
Mar 8
First Seen
100d ago
Jun 2
Last Seen
13d ago
13
Reports
source reports
70%
Confidence
medium
Found in 13 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
70%
Signal Score
70 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

8 techniques

Network Information

CountryRURussian Federation
RegionUlan-Ude, Buryatiya Republic
ASNAS33934
OrganizationOJSC Rostelecom Macroregional Branch South

Feed Intelligence Summary

13 reports70% confidence
13
Source reports
70%
Confidence score
Category tags
active scanactive scanningactive-attackapacheapache attackeraptattacker-ipauthentication-failurebrute forcebrute force attackbrute-forcebruteforcecredential accesscredential stuffingcredential-dumpingddosddos attackeurope/asiaexploitation activityexploited hostfnt-secure-sentinelfnt-sentinelfraud voiphackingidentity & access exploitationimapimap attackindicatormalicious-ipnetworkpassword attacksphishingransomwarereconnaissanceresearchedrurussiascams & fraudscannersmtpsmtp attackersmtp-attackspamsshssh attackt1110t1110.001t1110.002t1110.003t1110.004t1595.001t1595.002t1595.003threat actortor nodeturkeyvoidtrapweb app attackweb spam

Activity Timeline

1 total obs
Jun 2Jun 2

Threat Activity Heatmap

· Peak: 2026-06-02
Less
More
Mon
Wed
Fri
Jun
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Threat ScoreMedium Risk
70
SIGNAL
Signal Score
70%
Confidence
13
Reports
First seenMar 8, 2026
Last seenJun 2, 2026
GeolocationRU
CountryRussian Federation
LocationUlan-Ude, Buryatiya Republic
ASNAS33934
OrgOJSC Rostelecom Macroregional Branch South
Coords51.8336, 107.5840

VirusTotal

Not checked

WHOIS

description
The following is the full list of names given to Vye32GsS2g38eKhmaKrLdDjgrnf2YBT4/FGx8SNCa4txePA
raw
inetnum: 94.233.0.0 - 94.233.127.255 netname: Macroregional_South descr: OJSC Rostelecom Macroregional Branch South descr: ELECTROSVYAZ, Volgograd, Russia country: RU admin-c: PRTT1-RIPE tech-c: RTNC-RIPE status: ASSIGNED PA mnt-by: ROSTELECOM-MNT created: 2009-04-08T15:52:42Z last-modified: 2025-03-06T07:37:03Z source: RIPE role: PJSC Rostelecom Technical Team address: PJSC Rostelecom Russian Federation nic-hdl: PRTT1-RIPE mnt-by: ROSTELECOM-MNT created: 2024-05-20T01:54:00Z last-modified: 2024-05-20T01:54:00Z source: RIPE # Filtered role: PJSC Rostelecom Technical Team address: PJSC Rostelecom address: Russian Federation abuse-mailbox: [email protected] admin-c: IE1277-RIPE tech-c: IE1277-RIPE remarks: trouble: --------------------------------------------------------------- remarks: trouble: Rostelecom NOC is available 24 x 7 remarks: trouble: e-mail [email protected] remarks: trouble: --------------------------------------------------------------- remarks: ------------------------------------------------------------------------ remarks: peering requests: [email protected] remarks: ------------------------------------------------------------------------ remarks: http://www.rostelecom.ru/, looking-glass http://lg.ip.rt.ru/ remarks: ------------------------------------------------------------------------ nic-hdl: RTNC-RIPE mnt-by: ROSTELECOM-MNT created: 2007-11-27T13:28:11Z last-modified: 2022-12-12T07:46:18Z source: RIPE # Filtered route: 94.233.126.0/23 origin: AS33934 mnt-by: ROSTELECOM-MNT created: 2024-11-05T11:48:39Z last-modified: 2024-11-05T11:48:39Z source: RIPE

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 3 months ago · Last seen 13 days ago
Appeared in 13 threat reports