IPMediumSignal 47/100
95.66.153.194
Location
Russian FederationVladimir, VLA
ASN
AS35645
Limited Liability Company
First Seen
Nov 26, 2024
Last Seen
Jun 6, 2026
Found in 20 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
47%
Signal Score
47 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Network Information
CountryRussian Federation
Russian FederationRegionVladimir, VLA
ASNAS35645
OrganizationLimited Liability Company
Feed Intelligence Summary
20 reports47% confidence
20
Source reports
47%
Confidence score
Category tags
abuseactive scanactive scanningatif feedattackauthentication attackauthentication failureauto-generated securityautomated threat responsebad reputationbankingbanlist feedbinary defensebotnetbotnet activitybrute forcebrute force attackcommand and controlcowrie honeypotcredential accesscredential harvestingcredential stuffingcredit card servicesctadata exfiltrationdata store exposuredecoy systemdistributed attackseuropeeurope/asiaexploitation activityfail2ban triggeredfinancefinance and insurancefinancial servicesfinancial technologyftp brute forcehackingidentity & access exploitationimapimap attackindicatorinfrastructure acquisitionreconnaissanceinjection activitymalicious activitymalicious softwaremalwaremanualnetworknetwork probingnetwork scanningpassword attackpassword attackspayment processingphishingphishing attackprocess injectionreconnaissanceresearchedrurussiarussian federationscannersecurity operationssftp attacksmtpsmtp attackersocial engineeringssh attackssh monitoringt1041t1046t1055t1071.001t1078t1110t1110.001t1110.002t1110.003t1110.004t1133t1190t1486t1496t1499.002t1499.003t1565t1566.001t1566.002t1566.003t1587.001t1590.001t1595t1595.001t1595.002t1595.003telecommunicationsthreat actorthreat intelligencetor nodeunauthorized access attemptunited kingdomwealth managementweb brute force
Activity Timeline
Jun 6Jun 6
Threat Activity Heatmap
· Peak: 2026-06-06LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Threat ScoreMedium Risk
47
SIGNAL
Signal Score
47%
Confidence
20
Reports
First seenNov 26, 2024
Last seenJun 6, 2026
GeolocationRU
CountryRussian Federation
LocationVladimir, VLA
ASNAS35645
OrgLimited Liability Company
Coords56.1865, 40.3463
VirusTotal
Not checked
WHOIS
- description
- Banned by Fail2Ban [sshd]
- raw
- inetnum: 95.66.128.0 - 95.66.187.255 netname: INFOCENTRE-NET descr: Limited Liability Company "Vladinfo" country: RU admin-c: DA3080-RIPE tech-c: KM1486-RIPE status: ASSIGNED PA mnt-by: INFOCENTRE-MNT mnt-domains: INFOCENTRE-MNT created: 2008-11-05T07:45:27Z last-modified: 2016-08-16T14:00:14Z source: RIPE person: Dementyev Alexey address: Limited Liability Company "Infocentre" Gorohovaya str, 20 600017, Vladimir RUSSIAN FEDERATION fax-no: +74922470444 phone: +74922470444 nic-hdl: DA3080-RIPE mnt-by: alexeydem-mnt created: 2008-09-16T06:49:52Z last-modified: 2009-12-03T10:49:32Z source: RIPE # Filtered person: Khatuntsev Maxim address: Limited Liability Company "Infocentre" Gorohovaya str, 20 600017 Vladimir RUSSIAN FEDERATION phone: +74922410444 fax-no: +74922410444 mnt-by: maximkhat-mnt nic-hdl: KM1486-RIPE created: 2008-09-16T07:06:30Z last-modified: 2010-06-03T07:42:38Z source: RIPE # Filtered route: 95.66.128.0/19 descr: Limited Liability Company "Infocentre" origin: AS35645 mnt-by: INFOCENTRE-MNT created: 2011-10-28T07:38:00Z last-modified: 2011-10-28T07:38:00Z source: RIPE
- references
- https://raw.githubusercontent.com/ahamed-rizvan/IOCs/refs/heads/main/Malicous%20IP%20Address.txt, https://github.com/telekom-security/tpotce, https://blocklist.greensnow.co/greensnow.txt, https://www.binarydefense.com/banlist.txt, https://lists.blocklist.de/lists/all.txt, https://rules.emergingthreats.net/blockrules/compromised-ips.txt
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
mediumFirst detected 1 year ago · Last seen 8 days ago
Appeared in 20 threat reports