ID RST:E7ACBAF4-C9FF-3AAB-BB2B-AC20D3B3CB33 Type rst Reporter RST Threat Feed Modified 2020-10-16T00:00:00
Description
Found 45[.]89.127.140 in RST Threat Feed with score 36.
First seen: 2020-10-16T03:00:00, Last seen: 2020-11-14T03:00:00.
IOC tags: c2.
We found that the IOC is used by: emotet.
ASN 30823: (First IP 45.89.124.0, Last IP 45.89.127.255).
ASN Name "COMBAHTON" and Organisation "combahton IT Services UG haftungsbeschraenkt".
ASN hosts 8367 domains.
GEO IP information: City "Frankfurt am Main", Country "Germany".
https://rstcloud.net/
{"id": "RST:E7ACBAF4-C9FF-3AAB-BB2B-AC20D3B3CB33", "bulletinFamily": "ioc", "title": "RST Threat feed. IOC: 45.89.127.140", "description": "Found **45[.]89.127.140** in [RST Threat Feed](https://www.rstcloud.net/profeed) with score **36**.\n First seen: 2020-10-16T03:00:00, Last seen: 2020-11-14T03:00:00.\n IOC tags: **c2**.\nWe found that the IOC is used by: **emotet**.\nASN 30823: (First IP 45.89.124.0, Last IP 45.89.127.255).\nASN Name \"COMBAHTON\" and Organisation \"combahton IT Services UG haftungsbeschraenkt\".\nASN hosts 8367 domains.\nGEO IP information: City \"Frankfurt am Main\", Country \"Germany\".\n[https://rstcloud.net/](https://rstcloud.net/)", "published": "2020-11-15T00:00:00", "modified": "2020-10-16T00:00:00", "cvss": {}, "href": "", "reporter": "RST Threat Feed", "references": [], "cvelist": [], "type": "rst", "lastseen": "2020-11-14T00:00:00", "edition": 1, "viewCount": 0, "enchantments": {"vulnersScore": "PENDING"}, "iocType": "ip", "ip": ["45.89.127.140"], "domain": [], "url": [], "iocScore": {"ioc_frequency": 0.63, "ioc_src": 64.84, "ioc_tags": 0.89, "ioc_total": 36.0}, "tags": ["c2"], "fp": {"alarm": "false", "descr": ""}, "whois": {}, "geodata": {"city": "Frankfurt am Main", "country": "Germany", "region": "Hesse"}, "asn": {"cloud": "", "domains": 8367, "firstip": {"netv4": "45.89.124.0", "num": "760839168"}, "isp": "COMBAHTON", "lastip": {"netv4": "45.89.127.255", "num": "760840191"}, "num": 30823, "org": "combahton IT Services UG haftungsbeschraenkt"}, "threat": ["emotet"]}