IOC Radar
IPMediumSignal 27/100

112.103.128.122

Location
ChinaChina
Harbin, HL
ASN
AS4134
Chinanet HL
First Seen
Oct 12, 2023
Last Seen
Apr 8, 2026
Oct 12
First Seen
983d ago
Apr 8
Last Seen
74d ago
8
Reports
source reports
27%
Confidence
medium
Found in 8 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
27%
Signal Score
27 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

30 techniques

Network Information

CountryCNChina
RegionHarbin, HL
ASNAS4134
OrganizationChinanet HL

Feed Intelligence Summary

8 reports27% confidence
8
Source reports
27%
Confidence score
Category tags
active scanactive scanningasiabotnetbotnet activitybrute forcebrute force attackchinacommand and controlcommunication technologiescredential accesscredential stuffingdata exfiltrationdata store exposureddosdenial of servicedistributed attacksexploit attemptsexploitation activityftp brute forcehttp brute forceidentity & access exploitationindicatorinjection activitylateral movementloginmalicious activitymalicious softwaremalwaremalware propagationmalware scanningmobile carriersmobile networksnetworknetwork probingnetwork scanningnetwork securitypassword attacksprocess injectionprotocol exploitationreconnaissanceremote accessremote servicesresearchedscannersmtp brute forcesql injection attemptsssh attackt1021t1021.001t1040t1046t1055t1059t1071.001t1076t1078t1110t1110.001t1110.002t1110.003t1110.004t1133t1187t1190t1199t1210t1486t1496t1499.002t1499.003t1563t1565t1588t1595t1595.001t1595.002t1595.003targeting databasetelecom servicestelecommunicationstelnet threatthreat actortor node

Activity Timeline

1 total obs
Apr 8Apr 8

Threat Activity Heatmap

· Peak: 2026-04-08
Less
More
Mon
Wed
Fri
Jun
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Threat ScoreLow Risk
27
SIGNAL
Signal Score
27%
Confidence
8
Reports
First seenOct 12, 2023
Last seenApr 8, 2026
GeolocationCN
CountryChina
LocationHarbin, HL
ASNAS4134
OrgChinanet HL
Coords47.2665, 124.5418

VirusTotal

Not checked

WHOIS

raw
inetnum: 112.100.0.0 - 112.103.255.255 netname: CHINANET-HL descr: CHINANET HEILONGJIANG PROVINCE NETWORK descr: Heilongjiang Telecom Corporation descr: NO.178 Zhongshan Road,Haerbin,Heilongjiang 150040 country: CN admin-c: XW806-AP tech-c: XW806-AP abuse-c: AC1573-AP status: ALLOCATED PORTABLE remarks: service provider mnt-by: APNIC-HM mnt-lower: MAINT-CHINANET-HL mnt-routes: MAINT-CHINANET-HL mnt-irt: IRT-CHINANET-CN last-modified: 2021-06-15T08:04:56Z source: APNIC irt: IRT-CHINANET-CN address: No.31 ,jingrong street,beijing address: 100032 e-mail: [email protected] abuse-mailbox: [email protected] admin-c: CH93-AP tech-c: CH93-AP auth: # Filtered remarks: [email protected] was validated on 2025-04-24 mnt-by: MAINT-CHINANET last-modified: 2025-04-24T03:21:26Z source: APNIC role: ABUSE CHINANETCN country: ZZ address: No.31 ,jingrong street,beijing address: 100032 phone: +000000000 e-mail: [email protected] admin-c: CH93-AP tech-c: CH93-AP nic-hdl: AC1573-AP remarks: Generated from irt object IRT-CHINANET-CN remarks: [email protected] was validated on 2025-04-24 abuse-mailbox: [email protected] mnt-by: APNIC-ABUSE last-modified: 2025-04-24T03:21:54Z source: APNIC person: xiang Wu nic-hdl: XW806-AP e-mail: [email protected] address: heilongjiang telecom phone: +86-45153902001 country: CN mnt-by: MAINT-CHINANET-HL last-modified: 2008-09-04T07:46:06Z source: APNIC

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 2 years ago · Last seen 2 months ago
Appeared in 8 threat reports