IOC Radar
IPMediumSignal 39/100

175.19.75.107

Location
ChinaChina
Jilin, Jilin
ASN
AS4837
China Unicom Jilin Province Network
First Seen
Jan 6, 2024
Last Seen
May 30, 2026
Jan 6
First Seen
905d ago
May 30
Last Seen
30d ago
8
Reports
source reports
39%
Confidence
medium
Found in 8 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
39%
Signal Score
39 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

35 techniques

Network Information

CountryCNChina
RegionJilin, Jilin
ASNAS4837
OrganizationChina Unicom Jilin Province Network

Feed Intelligence Summary

8 reports39% confidence
8
Source reports
39%
Confidence score
Category tags
accessactive scanactive scanningadbhoney honeypotasiaattackbad web botbotnetbotnet activitybrute forcebrute force attackbrute force attemptschinacivil servicescncommand and controlcommunication protocolcowriecowrie honeypotcredential accesscredential harvestingcredential stuffingdata exfiltrationdata store exposuredatabase securitydecoy systemdionaeadionaea honeypotdistributed attackselasticpot honeypotelasticsearch monitoringemailexploitexploitation activityexploited hostftp brute forcegithubgovernment technologygroupshackinghoneytrap honeypotidentity & access exploitationindicatorinformation technologyinitial accessinjection activityiot securityit infrastructurelamplamp exploitation attemptslamp stack targetingmailoney honeypotmalicious activitymalicious softwaremalwaremalware behaviourmalware capturemalware hostingnetworknetwork intrusion attemptsnetwork scanningnetwork securitypassword attacksphishingphishing attackphishing trapprocess injectionpublic administrationpublic infrastructurepublic policypythonreconnaissanceregulatory agenciesresearchedresource hijackingscannerscanning activityscriptsentrypeer botnetsftpsftp attacksipsip enumerationsip vulnerability scanningslugsocial engineeringsoftware developmentsshssh attackssh monitoringsurface webt1021.002t1040t1041t1046t1053.005t1055t1059t1059.001t1059.004t1068t1071.001t1078t1110t1110.001t1110.002t1110.003t1110.004t1133t1190t1204.002t1486t1496t1499.001t1499.002t1499.003t1555t1565t1566.001t1566.002t1566.003t1566.004t1595t1595.001t1595.002t1595.003tannertargeting databasetelecommunicationsthreat actorthreat detectionthreat intelligencetor nodetpotvoipvoip attackvulnerability scanvulnerability-exploitation

Activity Timeline

1 total obs
May 30May 30

Threat Activity Heatmap

· Peak: 2026-05-30
Less
More
Mon
Wed
Fri
Jun
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
·
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Threat ScoreLow Risk
39
SIGNAL
Signal Score
39%
Confidence
8
Reports
First seenJan 6, 2024
Last seenMay 30, 2026
GeolocationCN
CountryChina
LocationJilin, Jilin
ASNAS4837
OrgChina Unicom Jilin Province Network
Coords43.8800, 125.3228

VirusTotal

Not checked

WHOIS

description
2025-02-14T16:40:19.547Z Honeypot : ElasticPot : Source: 175.19.75.107 : Port: 9200 Event Type: Scan
raw
inetnum: 175.16.0.0 - 175.23.255.255 netname: UNICOM-JL descr: China Unicom Jilin province network descr: China Unicom country: CN admin-c: CH1302-AP tech-c: WT92-AP abuse-c: AC1718-AP status: ALLOCATED PORTABLE remarks: -------------------------------------------------------- remarks: To report network abuse, please contact mnt-irt remarks: For troubleshooting, please contact tech-c and admin-c remarks: Report invalid contact via www.apnic.net/invalidcontact remarks: -------------------------------------------------------- mnt-by: APNIC-HM mnt-lower: MAINT-CNCGROUP-JL mnt-routes: MAINT-CNCGROUP-RR mnt-irt: IRT-CU-CN last-modified: 2025-01-22T13:16:31Z source: APNIC irt: IRT-CU-CN address: No.21,Financial Street address: Beijing,100033 address: P.R.China e-mail: [email protected] abuse-mailbox: [email protected] admin-c: CH1302-AP tech-c: CH1302-AP auth: # Filtered remarks: [email protected] was validated on 2025-02-24 mnt-by: MAINT-CNCGROUP last-modified: 2025-02-24T06:16:57Z source: APNIC role: ABUSE CUCN country: ZZ address: No.21,Financial Street address: Beijing,100033 address: P.R.China phone: +000000000 e-mail: [email protected] admin-c: CH1302-AP tech-c: CH1302-AP nic-hdl: AC1718-AP remarks: Generated from irt object IRT-CU-CN remarks: [email protected] was validated on 2025-02-24 abuse-mailbox: [email protected] mnt-by: APNIC-ABUSE last-modified: 2025-02-24T06:17:45Z source: APNIC person: ChinaUnicom Hostmaster nic-hdl: CH1302-AP e-mail: [email protected] address: No.21,Jin-Rong Street address: Beijing,100033 address: P.R.China phone: +86-10-66259764 fax-no: +86-10-66259764 country: CN mnt-by: MAINT-CNCGROUP last-modified: 2017-08-17T06:13:16Z source: APNIC person: Wang Tiegang nic-hdl: WT92-AP e-mail: [email protected] address: NO.3535,Renmin Street, ChangChun , address: Jilin province , 130021 , P.R. China phone: +86-0431-87022560 fax-no: +86-0431-87022420 country: CN mnt-by: MAINT-CNCGROUP-JL last-modified: 2020-07-03T00:43:16Z source: APNIC route: 175.16.0.0/13 descr: China Unicom Jilin Province Network country: CN origin: AS4837 mnt-by: MAINT-CNCGROUP-RR last-modified: 2009-12-04T03:22:40Z source: APNIC

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 2 years ago · Last seen 1 month ago
Appeared in 8 threat reports