{"id": "RST:D384CBCD-8399-3273-B20E-C6ADEB263A97", "bulletinFamily": "ioc", "title": "RST Threat feed. IOC: 109.121.235.154", "description": "Found **109[.]121.235.154** in [RST Threat Feed](https://www.rstcloud.net/profeed) with score **3**.\n First seen: 2020-05-08T03:00:00, Last seen: 2021-04-11T03:00:00.\n IOC tags: **malware**.\nASN 43205: (First IP 109.121.204.0, Last IP 109.121.253.255).\nASN Name \"BULSATCOMBGAS\" and Organisation \"Sofia\".\nASN hosts 552 domains.\nGEO IP information: City \"Harmanli\", Country \"Bulgaria\".\nIn according to RST Threat Feed the IP is related to **bananinze.com** malicious domains.\n[https://rstcloud.net/](https://rstcloud.net/)", "published": "2021-04-12T00:00:00", "modified": "2020-05-08T00:00:00", "cvss": {}, "href": "", "reporter": "RST Threat Feed", "references": [], "cvelist": [], "immutableFields": [], "type": "rst", "lastseen": "2021-04-11T00:00:00", "edition": 1, "viewCount": 0, "enchantments": {"vulnersScore": "PENDING"}, "iocType": "ip", "ip": ["109.121.235.154"], "domain": [], "url": [], "iocScore": {"ioc_frequency": 0.07, "ioc_src": 56.12, "ioc_tags": 0.89, "ioc_total": 3.0}, "tags": ["malware"], "fp": {"alarm": "false", "descr": ""}, "whois": {}, "geodata": {"city": "Harmanli", "country": "Bulgaria", "region": "Haskovo"}, "asn": {"cloud": "", "domains": 552, "firstip": {"netv4": "109.121.204.0", "num": "1836698624"}, "isp": "BULSATCOMBGAS", "lastip": {"netv4": "109.121.253.255", "num": "1836711423"}, "num": 43205, "org": "Sofia"}, "threat": []}

{}