IOC Radar
IPMediumSignal 97/100

124.248.191.50

Location
CambodiaCambodia
Phnom Penh, Phnom Penh
ASN
AS23673
Cogetel Ltd
First Seen
Jul 23, 2024
Last Seen
Apr 25, 2026
Jul 23
First Seen
691d ago
Apr 25
Last Seen
50d ago
9
Reports
source reports
97%
Confidence
medium
3/91
VirusTotal
detections
Found in 9 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
97%
Signal Score
97 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

36 techniques

Network Information

CountryKHCambodia
RegionPhnom Penh, Phnom Penh
ASNAS23673
OrganizationCogetel Ltd

Feed Intelligence Summary

9 reports97% confidence
9
Source reports
97%
Confidence score
Category tags
active scanactive scanningadbhoney honeypotantispamattackaustraliaauthentication attemptsbotnetbotnet activitybrute forcebrute force attackbrute_forcecambodiacisco brute forcecisco devicecisco exploit attemptcommand and controlcommunication protocolcompromised credentialscowrie honeypotcredential accesscredential harvestingcredential stuffingdata exfiltrationdata store exposuredatabase attackdatabase securityddosdecoy systemdenial of servicedevice managementdionaea honeypotdionaea malware analysisdistributed attackselasticpot honeypotelasticsearch monitoringenterprise networkingexploitexploitation activityexploited hostexternal threatfattftpftp brute forceftp_bruteforceheralding attack patternhoneytrap honeypothttp brute forcehttp scannerhttp_scanhttpshttps_scanidentity & access exploitationindicatorinjection activityinjection attacksintrusion detectioniociot securitylamplamp vulnerability scanlateral movementlog4jmailoney honeypotmalicious activitymalicious softwaremalwaremalware behaviourmalware capturemalware detectionnetworknetwork attack attemptsnetwork infrastructurenetwork intrusionnetwork intrusion attemptnetwork intrusion attemptsnetwork scanningnetwork securitynetwork service scanningnorth americaoceaniap0fpassword attacksphishingphishing attackphishing trappossible botnet activityprocess injectionprotocol exploitationpython script activityreconnaissanceremote accessremote loginremote servicesresearchedresource hijackingscannerscripting attackssensor-taggedsentrypeer botnetservice scansftp attacksftp exploit attemptshell access attemptssip brute forcesip scanningsmtp brute forcesocial engineeringspamsql injection attemptssh attackssh monitoringssh_bruteforcet1021t1021.001t1040t1041t1046t1055t1059t1059.003t1059.007t1071.001t1076t1078t1110t1110.001t1110.002t1110.003t1110.004t1133t1190t1203t1204.002t1486t1496t1499.001t1499.002t1499.003t1563t1565t1566.001t1566.002t1566.003t1566.004t1595t1595.001t1595.002t1595.003tannertargeting databasetelecommunicationstelnet threattelnet_bruteforcethreat actorthreat detectionthreat intelligencetor nodetpotunauthorized accessunauthorized access attemptunited statesvoipvoip attackvulnerability scanweb application attackweb attackweb exploitationweb traffic

Activity Timeline

1 total obs
Apr 25Apr 25

Threat Activity Heatmap

· Peak: 2026-04-25
Less
More
Mon
Wed
Fri
Jun
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Threat ScoreHigh Risk
97
SIGNAL
Signal Score
97%
Confidence
9
Reports
First seenJul 23, 2024
Last seenApr 25, 2026
GeolocationKH
CountryCambodia
LocationPhnom Penh, Phnom Penh
ASNAS23673
OrgCogetel Ltd
Coords11.5583, 104.9121

VirusTotal

3/ 91vendors flagged
3% detection rateJun 8, 2026

WHOIS

description
2025-07-05T10:01:26.530Z Honeypot : Heralding : Source: 124.248.191.50 : Username/Password: admIN/password Port: 1080 Message: 2025-07-05 10:01:26.530635,97330aef-2e7a-439f-9a5d-7165c3cdbf28,80a34eae-4cdd-428a-bc42-687f55f6f433,124.248.191.50,53837,99.18.26.19,1080,socks5,admIN,password,
raw
inetnum: 124.248.191.0 - 124.248.191.255 netname: Cogetel descr: Cogetel Ltd, Online ISP, Cambodia country: KH admin-c: BB195-AP tech-c: BB195-AP abuse-c: AC1855-AP status: ALLOCATED NON-PORTABLE mnt-by: MAINT-KH-BPC mnt-irt: IRT-COGETEL-KH last-modified: 2023-01-03T08:20:40Z source: APNIC irt: IRT-COGETEL-KH address: No. 44, Samdech Decho Hun Sen Blvd, Tuol Roka 3 Village, Chakangre Krom Commune, Mean Chey District, Phnom Penh e-mail: [email protected] abuse-mailbox: [email protected] admin-c: BB195-AP tech-c: BB195-AP auth: # Filtered remarks: [email protected] was validated on 2025-06-04 mnt-by: MAINT-KH-BPC last-modified: 2025-06-04T01:33:06Z source: APNIC role: ABUSE COGETELKH country: ZZ address: No. 44, Samdech Decho Hun Sen Blvd, Tuol Roka 3 Village, Chakangre Krom Commune, Mean Chey District, Phnom Penh phone: +000000000 e-mail: [email protected] admin-c: BB195-AP tech-c: BB195-AP nic-hdl: AC1855-AP remarks: Generated from irt object IRT-COGETEL-KH remarks: [email protected] was validated on 2025-06-04 abuse-mailbox: [email protected] mnt-by: APNIC-ABUSE last-modified: 2025-06-04T01:33:37Z source: APNIC person: Borak Ban nic-hdl: BB195-AP e-mail: [email protected] e-mail: [email protected] address: No. 44, Samdech Decho Hun Sen Blvd, Tuol Roka 3 Village, Chakangre Krom Commune, Mean Chey District, Phnom Penh phone: +85523727272 fax-no: +85523727777 country: KH mnt-by: MAINT-KH-BPC last-modified: 2024-04-29T04:18:48Z source: APNIC route: 124.248.191.0/24 origin: AS23673 descr: COGETEL Co., Ltd 60 Monivong Boulevard mnt-by: MAINT-KH-BPC last-modified: 2020-04-25T16:51:20Z source: APNIC
references
https://github.com/telekom-security/tpotce

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 1 year ago · Last seen 1 month ago
Appeared in 9 threat reports