IPHighVerifiedSignal 31/100
139.196.201.238
Location
ChinaShanghai, Shanghai
ASN
AS37963
Aliyun Computing Co., LTD
First Seen
Sep 29, 2024
Last Seen
Apr 5, 2025
Found in 5 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
31%
Signal Score
31 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Network Information
CountryChina
ChinaRegionShanghai, Shanghai
ASNAS37963
OrganizationAliyun Computing Co., LTD
Feed Intelligence Summary
5 reports31% confidence
5
Source reports
31%
Confidence score
Category tags
abuseack scanactive scanningadbadbhoney honeypotattackbotnetbrute forcecommand and controlcommand executioncommunication protocolcowrie honeypotcredential accesscredential harvestingcredential stuffingdata exfiltrationdatabase securitydecoy systemdenial of servicedionaea honeypotdistributed attacksenumerationexploitfin scanftp brute forcehoneytrap honeypotindicatorlampmailoney honeypotmalicious activitymalicious softwaremalwaremalware behaviourmalware capturemasscan activitynetworknetwork attacksnetwork mappingnetwork probingnetwork protocolnetwork reconnaissancenetwork scanningnetwork securitynmap scan detectednull scanphishingphishing attackphishing trappossible vulnerability probingpossible vulnerability scanpotential exploit targetingpotential reconnaissance activityprocess injectionreconnaissancereconnaissance activityredis honeypotresearchedresource hijackingscannersentrypeer botnetserver exploitationservice discoveryservice enumerationservice exploitationsftp attacksip brute forcesocial engineeringssh attackssh monitoringstealth scansyn scant1016t1016.001t1018t1040t1041t1046t1055t1059t1059.004t1059.005t1068t1071.001t1078t1110t1110.001t1110.002t1133t1190t1203t1204.002t1486t1496t1499.001t1499.002t1499.003t1505.004t1565t1566.001t1566.002t1566.003t1566.004t1595t1595.001t1595.002t1595.003tannertcp protocoltelecommunicationsthreat actorthreat detectionthreat intelligenceudp port scanvoipvoip attackxmas scan
Activity Timeline
Apr 5Apr 5
Threat Activity Heatmap
LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Threat ScoreLow Risk
31
SIGNAL
Signal Score
31%
Confidence
5
Reports
First seenSep 29, 2024
Last seenApr 5, 2025
Verified IOC
GeolocationCN
CountryChina
LocationShanghai, Shanghai
ASNAS37963
OrgAliyun Computing Co., LTD
Coords31.2222, 121.4581
VirusTotal
Not checked
WHOIS
- description
- Port Scan 2024-10-18T23:04:33.000Z -> 139.196.201.238 scanned port 6379 on one of our servers
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
highFirst detected 1 year ago · Last seen 1 year ago
Appeared in 5 threat reports