IOC Radar
IPMediumSignal 97/100

125.228.134.31

Location
TaiwanTaiwan
Taipei, Taiwan
ASN
AS3462
Chunghwa Telecom Co. Ltd.
First Seen
Oct 8, 2024
Last Seen
Feb 4, 2026
Oct 8
First Seen
622d ago
Feb 4
Last Seen
138d ago
15
Reports
source reports
97%
Confidence
medium
Found in 15 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
97%
Signal Score
97 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

26 techniques

Network Information

CountryTWTaiwan
RegionTaipei, Taiwan
ASNAS3462
OrganizationChunghwa Telecom Co. Ltd.

Feed Intelligence Summary

15 reports97% confidence
15
Source reports
97%
Confidence score
Category tags
abuseaccess controlactive scanningasiaattackauto-generated securitybotnetbrute forcebrute force attackcisco devicecommand and controlcommunication protocolcowrie honeypotcredential accesscredential harvestingcredential stuffingdata exfiltrationddos attacksdecoy systemdevice managementdistributed attacksenterprise networkingindicatorinfrastructure acquisitionreconnaissanceinternet of thingsintrusion detectioniot botnetiot/ics attacklateral movementlogin attemptmalicious activitymalicious softwaremalwaremanualmirai botnetnetworknetwork attacksnetwork infrastructurenetwork probingnetwork scanningnetwork securitypassword attacksphishing attackprocess injectionprotocol exploitationreconnaissanceresearchedscanscannersecurity policysftp attacksocial engineeringssh attackssh monitoringt1021.004t1040t1041t1055t1071.001t1078t1110t1110.001t1110.002t1110.003t1110.004t1486t1496t1499.001t1499.002t1499.003t1565t1566.001t1566.002t1566.003t1587.001t1590.001t1595t1595.001t1595.002t1595.003taiwantaiwan, province of chinatcp protocoltcp/23telecommunicationstelnet threatthreat actorthreat intelligencethreat preventiontw

Activity Timeline

1 total obs
Feb 4Feb 4

Threat Activity Heatmap

· Peak: 2026-02-04
Less
More
Mon
Wed
Fri
Jun
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Threat ScoreHigh Risk
97
SIGNAL
Signal Score
97%
Confidence
15
Reports
First seenOct 8, 2024
Last seenFeb 4, 2026
GeolocationTW
CountryTaiwan
LocationTaipei, Taiwan
ASNAS3462
OrgChunghwa Telecom Co. Ltd.
Coords25.0334, 121.5660

VirusTotal

Not checked

WHOIS

description
2025-03-01T08:04:47.489Z Honeypot : Cowrie : Source: 125.228.134.31 Data: New connection: 125.228.134.31:48339 (172.27.0.2:23) [session: d75b34045902]
raw
inetnum: 125.224.0.0 - 125.231.255.255 netname: HINET-NET descr: Data Communication Business Group, descr: Chunghwa Telecom Co.,Ltd. descr: No.21, Sec.1, Xinyi Rd., Taipei City descr: 10048, Taiwan country: TW admin-c: HN27-AP tech-c: HN27-AP abuse-c: AT939-AP status: ALLOCATED PORTABLE mnt-by: MAINT-TW-TWNIC mnt-irt: IRT-TWNIC-AP last-modified: 2021-11-04T00:49:03Z source: APNIC irt: IRT-TWNIC-AP address: 3F., No. 123, Sec. 4, Bade Rd., Songshan Dist., Taipei 105, Taiwan e-mail: [email protected] abuse-mailbox: [email protected] admin-c: TWA2-AP tech-c: TWA2-AP auth: # Filtered remarks: Please note that TWNIC is not an ISP and is not empowered remarks: to investigate complaints of network abuse. remarks: [email protected] was validated on 2025-05-23 mnt-by: MAINT-TW-TWNIC last-modified: 2025-05-23T00:01:36Z source: APNIC role: ABUSE TWNICAP country: ZZ address: 3F., No. 123, Sec. 4, Bade Rd., Songshan Dist., Taipei 105, Taiwan phone: +000000000 e-mail: [email protected] admin-c: TWA2-AP tech-c: TWA2-AP nic-hdl: AT939-AP remarks: Generated from irt object IRT-TWNIC-AP remarks: [email protected] was validated on 2025-05-23 abuse-mailbox: [email protected] mnt-by: APNIC-ABUSE last-modified: 2025-05-23T00:02:10Z source: APNIC person: HINET Network-Adm address: CHTD, Chunghwa Telecom Co., Ltd. address: No. 21, Sec. 21, Hsin-Yi Rd., address: Taipei Taiwan 100 country: TW phone: +886 2 2322 3495 phone: +886 2 2322 3442 phone: +886 2 2344 3007 fax-no: +886 2 2344 2513 fax-no: +886 2 2395 5671 e-mail: [email protected] nic-hdl: HN27-AP remarks: same as TWNIC nic-handle HN184-TW mnt-by: MAINT-TW-TWNIC last-modified: 2011-08-22T06:04:01Z source: APNIC inetnum: 125.228.0.0 - 125.228.255.255 netname: HINET-NET descr: Chunghwa Telecom Co.,Ltd. descr: No.21-3, Sec. 1, Xinyi Rd., Taipei 10048, Taiwan, R.O.C. descr: Taipei Taiwan country: TW admin-c: HN184-TW tech-c: HN184-TW mnt-by: MAINT-TW-TWNIC changed: [email protected] 20051020 status: ASSIGNED NON-PORTABLE remarks: This information has been partially mirrored by APNIC from remarks: TWNIC. To obtain more specific information, please use the remarks: TWNIC whois server at whois.twnic.net. source: TWNIC person: HINET Network-Adm address: Changhua Telecom Co., Ltd. address: No. 21, Sec. 21, Hsin-Yi Rd. address: Taipei Taiwan country: TW phone: +886-2-2322-3495 fax-no: +886-2-2344-2513 e-mail: [email protected] nic-hdl: HN184-TW changed: [email protected] 20130307 remarks: This information has been partially mirrored by APNIC from remarks: TWNIC. To obtain more specific information, please use the remarks: TWNIC whois server at whois.twnic.net. source: TWNIC
references
https://raw.githubusercontent.com/ahamed-rizvan/IOCs/refs/heads/main/Malicous%20IP%20Address.txt, https://github.com/telekom-security/tpotce

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 1 year ago · Last seen 4 months ago
Appeared in 15 threat reports