IPMediumSignal 70/100
137.175.92.58
Location
Beijing, Beijing
ASN
AS54600
Mei Wenquan
First Seen
Apr 29, 2024
Last Seen
Nov 11, 2025
Found in 6 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
70%
Signal Score
70 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Network Information
Country
United States
RegionBeijing, Beijing
ASNAS54600
OrganizationMei Wenquan
Feed Intelligence Summary
6 reports70% confidence
6
Source reports
70%
Confidence score
Category tags
active scanningasiaattackautomated attackbotnetbrute forcechinacommand and controlcredential accesscredential guessingcredential stuffingdata encryptiondata exfiltrationdistributed attacksexploit public-facing applicationfailed login attemptsftp brute forcehttp brute forcelateral movementmalicious activitymalicious softwaremalwaremysql brute forcenetworknetwork enumerationnetwork intrusionnetwork reconnaissancenetwork scanningnetwork securitynetwork service scanningnorth americapotential compromiseprocess injectionprotocol exploitationproxyreconnaissanceremote accessremote servicesresearchedscanning activityself-signedsmtp brute forcesoftware discoveryssh attacksystem discoverysystem information discoveryt1018t1021t1021.001t1040t1046t1055t1059t1068t1071.001t1076t1078t1083t1110t1110.002t1136t1187t1190t1486t1496t1499.002t1499.003t1563t1565t1588t1589t1592t1595t1595.001t1595.002t1595.003telnet threatthreat actorunited statesuser discoveryvalid accounts
Activity Timeline
Nov 11Nov 11
Threat Activity Heatmap
· Peak: 2025-11-11LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Threat ScoreMedium Risk
70
SIGNAL
Signal Score
70%
Confidence
6
Reports
First seenApr 29, 2024
Last seenNov 11, 2025
GeolocationUS
CountryUnited States
LocationBeijing, Beijing
ASNAS54600
OrgMei Wenquan
Coords37.7510, -97.8220
VirusTotal
Not checked
WHOIS
- description
- CC=US ASN=AS54600 peg tech inc
- raw
- PEG TECH INC PT-82-8 (NET-137-175-0-0-1) 137.175.0.0 - 137.175.127.255 Mei Wenquan 199-180-100-0-1 (NET-137-175-92-0-1) 137.175.92.0 - 137.175.92.63
- references
- https://www.virustotal.com/graph/gb04f3081a63f45ad943d1b5f7b4f102c290a0e3376444152b5ca8048a0d3a6b7, https://x.com/KulinskiArkadi/status/1896514212723327162
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
mediumFirst detected 2 years ago · Last seen 7 months ago
Appeared in 6 threat reports