IOC Radar
IPHighVerifiedSignal 72/100

122.243.75.14

Location
ChinaChina
Jinhua, ZJ
ASN
AS4134
Chinanet
First Seen
Mar 3, 2026
Last Seen
Apr 19, 2026
Mar 3
First Seen
103d ago
Apr 19
Last Seen
57d ago
5
Reports
source reports
72%
Confidence
high
1/91
VirusTotal
detections
Found in 5 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
72%
Signal Score
72 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

3 techniques

Network Information

CountryCNChina
RegionJinhua, ZJ
ASNAS4134
OrganizationChinanet

Feed Intelligence Summary

5 reports72% confidence
5
Source reports
72%
Confidence score
Category tags
active scanactive scanningasiabrute forcebrute force attackerchinadigital oceanexploitation activityexploited hosthackingindicatornetworkportscanreconnaissanceresearchedscannerscannersservice scant1595.001t1595.002t1595.003

Activity Timeline

1 total obs
Apr 19Apr 19

Threat Activity Heatmap

· Peak: 2026-04-19
Less
More
Mon
Wed
Fri
Jun
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Threat ScoreHigh Risk
72
SIGNAL
Signal Score
72%
Confidence
5
Reports
First seenMar 3, 2026
Last seenApr 19, 2026
Verified IOC
GeolocationCN
CountryChina
LocationJinhua, ZJ
ASNAS4134
OrgChinanet
Coords29.1003, 119.6451

VirusTotal

1/ 91vendors flagged
1% detection rateJun 5, 2026

WHOIS

description
IPv4 hosts detected port scanning DigitalOcean London (UK) honeypot
raw
inetnum: 122.243.0.0 - 122.243.127.255 netname: CHINANET-ZJ-JH country: CN descr: CHINANET-ZJ Jinhua node network descr: Zhejiang Telecom admin-c: CZ4-AP tech-c: CJ54-AP status: ALLOCATED NON-PORTABLE mnt-by: MAINT-CHINANET-ZJ mnt-lower: MAINT-CN-CHINANET-ZJ-JH last-modified: 2008-09-04T07:23:19Z source: APNIC role: CHINANET-ZJ Jinhua address: No.155 Xishi street,Jinhua,Zhejiang.321000 country: CN phone: +86-579-2300779 fax-no: +86-579-2330035 e-mail: [email protected] remarks: send spam reports to [email protected] remarks: and abuse reports to [email protected] remarks: Please include detailed information and times in UTC admin-c: CH55-AP tech-c: CH55-AP nic-hdl: CJ54-AP mnt-by: MAINT-CHINANET-ZJ last-modified: 2020-06-03T08:38:41Z source: APNIC role: CHINANET ZHEJIANG address: No. 257 Qingjiang Road, Hangzhou, Zhejiang.310066 country: CN phone: +86-571-86821752 fax-no: +86-571-86988329 e-mail: [email protected] remarks: send spam reports to [email protected] remarks: and abuse reports to [email protected] remarks: Please include detailed information and times in UTC admin-c: CZ61-AP tech-c: CZ61-AP nic-hdl: CZ4-AP mnt-by: MAINT-CHINANET-ZJ last-modified: 2023-08-11T08:33:28Z source: APNIC
references
https://jamesbrine.com.au/digitaloceanlondon-portscan-bruteforce-ip-list-2026-04-16/, https://jamesbrine.com.au

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

high
First detected 3 months ago · Last seen 1 month ago
Appeared in 5 threat reports