IOC Radar
IPMediumSignal 69/100

123.139.159.106

Location
ChinaChina
Xi'an, SN
ASN
AS4837
CNC Group CHINA169 Shanni Province Network
First Seen
Apr 12, 2026
Last Seen
Apr 22, 2026
Apr 12
First Seen
65d ago
Apr 22
Last Seen
55d ago
5
Reports
source reports
69%
Confidence
medium
10/91
VirusTotal
detections
Found in 5 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
69%
Signal Score
69 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

8 techniques

Network Information

CountryCNChina
RegionXi'an, SN
ASNAS4837
OrganizationCNC Group CHINA169 Shanni Province Network

Feed Intelligence Summary

5 reports69% confidence
5
Source reports
69%
Confidence score
Category tags
active scanactive scanningasiaaustraliabrute forcebrute force attackbrute-forcebruteforcechinacredential accesscredential stuffingexploitation activityexploited hosthackingidentity & access exploitationindicatornetworkoceaniapassword attacksreconnaissanceresearchedscannersshssh attackt1110t1110.001t1110.002t1110.003t1110.004t1595.001t1595.002t1595.003

Activity Timeline

1 total obs
Apr 22Apr 22

Threat Activity Heatmap

· Peak: 2026-04-22
Less
More
Mon
Wed
Fri
Jun
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Threat ScoreMedium Risk
69
SIGNAL
Signal Score
69%
Confidence
5
Reports
First seenApr 12, 2026
Last seenApr 22, 2026
GeolocationCN
CountryChina
LocationXi'an, SN
ASNAS4837
OrgCNC Group CHINA169 Shanni Province Network
Coords34.2635, 108.9246

VirusTotal

10/ 91vendors flagged
11% detection rateJun 5, 2026

WHOIS

description
Host bruteforcing SSH
raw
inetnum: 123.139.159.0 - 123.139.159.255 netname: PPPoe country: CN descr: XiAnCity-IpAddressPool-377 admin-c: CH679-AP tech-c: CH679-AP status: ASSIGNED NON-PORTABLE mnt-by: MAINT-CNCGROUP-SN last-modified: 2008-11-12T02:50:29Z source: APNIC person: CNCGroup-SN Hostmaster nic-hdl: CH679-AP e-mail: [email protected] address: China Network Communication ,SVT address: NO.2 GuangDe Road, High Tec Zone address: Xi'an, Shannxi, China phone: +86-29-88192060 fax-no: +86-29-88192037 country: CN mnt-by: MAINT-CNCGROUP-SN last-modified: 2008-09-04T07:35:34Z source: APNIC route: 123.138.0.0/15 descr: CNC Group CHINA169 Shanni Province Network country: CN origin: AS4837 mnt-by: MAINT-CNCGROUP-RR last-modified: 2008-09-04T07:54:55Z source: APNIC
references
https://redpiranha.net

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 2 months ago · Last seen 1 month ago
Appeared in 5 threat reports