ID RST:ADDCEA56-79D1-3DBB-8544-CE25F88F97BE Type rst Reporter RST Threat Feed Modified 2020-07-07T00:00:00
Description
Found 190[.]194.242.254 in RST Threat Feed with score 8.
First seen: 2020-07-07T03:00:00, Last seen: 2021-01-25T03:00:00.
IOC tags: c2, generic.
We found that the IOC is used by: emotet.
ASN 10481: (First IP 190.194.0.0, Last IP 190.195.255.255).
ASN Name "" and Organisation "Prima SA".
ASN hosts 1354 domains.
GEO IP information: City "Buenos Aires", Country "Argentina".
https://rstcloud.net/
{"id": "RST:ADDCEA56-79D1-3DBB-8544-CE25F88F97BE", "bulletinFamily": "ioc", "title": "RST Threat feed. IOC: 190.194.242.254", "description": "Found **190[.]194.242.254** in [RST Threat Feed](https://www.rstcloud.net/profeed) with score **8**.\n First seen: 2020-07-07T03:00:00, Last seen: 2021-01-25T03:00:00.\n IOC tags: **c2, generic**.\nWe found that the IOC is used by: **emotet**.\nASN 10481: (First IP 190.194.0.0, Last IP 190.195.255.255).\nASN Name \"\" and Organisation \"Prima SA\".\nASN hosts 1354 domains.\nGEO IP information: City \"Buenos Aires\", Country \"Argentina\".\n[https://rstcloud.net/](https://rstcloud.net/)", "published": "2021-01-26T00:00:00", "modified": "2020-07-07T00:00:00", "cvss": {}, "href": "", "reporter": "RST Threat Feed", "references": [], "cvelist": [], "type": "rst", "lastseen": "2021-01-25T00:00:00", "edition": 1, "viewCount": 0, "enchantments": {"vulnersScore": "PENDING"}, "iocType": "ip", "ip": ["190.194.242.254"], "domain": [], "url": [], "iocScore": {"ioc_frequency": 0.14, "ioc_src": 70.71, "ioc_tags": 0.89, "ioc_total": 8.0}, "tags": ["generic", "c2"], "fp": {"alarm": "false", "descr": ""}, "whois": {}, "geodata": {"city": "Buenos Aires", "country": "Argentina", "region": "Buenos Aires FD"}, "asn": {"cloud": "", "domains": 1354, "firstip": {"netv4": "190.194.0.0", "num": "3200385024"}, "isp": "", "lastip": {"netv4": "190.195.255.255", "num": "3200516095"}, "num": 10481, "org": "Prima SA"}, "threat": ["emotet"]}