IPMediumSignal 73/100
115.126.98.204
Location
Fo Tan, Sha Tin
ASN
AS38186
Forewin Telecom Group Limited
First Seen
Oct 5, 2023
Last Seen
Feb 19, 2026
Found in 10 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
73%
Signal Score
73 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Network Information
Country
Hong Kong
RegionFo Tan, Sha Tin
ASNAS38186
OrganizationForewin Telecom Group Limited
Feed Intelligence Summary
10 reports73% confidence
10
Source reports
73%
Confidence score
Category tags
abuseasiaattachment phishingautomated emailbase64base64 encodingbecbotnetbrute forcebrute_forcebulk emailcertcommand and controlcredential accesscredential harvestingcredential phishingcredential stuffingcredential_accessdata exfiltrationdistributed attacksftphong kongindicatorinfrastructure acquisitionreconnaissancemalicious softwaremalwaremanualnetworknetwork securitynetwork_reconnaissancepasswordpassword theftpayment fraudphishing attackphishing campaignprice requestprice request scamprocess injectionprotocol exploitationremote accessremote servicesresearchedschedule themescheduled task abusesocial engineeringssh attackt1003t1003.001t1021t1021.001t1040t1055t1059t1071.001t1076t1078t1078.001t1078.002t1078.004t1110t1110.002t1190t1192t1486t1496t1499.002t1499.003t1563t1565t1566t1566.001t1566.002t1566.003t1587.001t1590.001t1595t1598t1598.003tariff server compromisetariff server themetariffs servertelnet threatturkeywetransfer abuse
Activity Timeline
Feb 19Feb 19
Threat Activity Heatmap
· Peak: 2026-02-19LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Threat ScoreHigh Risk
73
SIGNAL
Signal Score
73%
Confidence
10
Reports
First seenOct 5, 2023
Last seenFeb 19, 2026
GeolocationHK
CountryHong Kong
LocationFo Tan, Sha Tin
ASNAS38186
OrgForewin Telecom Group Limited
Coords22.3979, 114.1900
VirusTotal
Not checked
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
mediumFirst detected 2 years ago · Last seen 4 months ago
Appeared in 10 threat reports