IOC Radar
IPMediumSignal 75/100

180.125.123.149

Location
ChinaChina
Nanjing, JS
ASN
AS4134
Chinanet JS
First Seen
May 16, 2025
Last Seen
Oct 17, 2025
May 16
First Seen
391d ago
Oct 17
Last Seen
236d ago
7
Reports
source reports
75%
Confidence
medium
Found in 7 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
75%
Signal Score
75 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

29 techniques

Network Information

CountryCNChina
RegionNanjing, JS
ASNAS4134
OrganizationChinanet JS

Feed Intelligence Summary

7 reports75% confidence
7
Source reports
75%
Confidence score
Category tags
abuseactive scanningasiabotnetbrute forcebrute force attackchinacommand and controlcommunication technologiescredential accesscredential stuffingdata exfiltrationddosdenial of servicedistributed attacksexploit attemptsftp brute forcehttp brute forceindicatorlateral movementmalicious softwaremalwaremalware propagationmalware scanningmobile carriersmobile networksnetworknetwork probingnetwork scanningpassword attacksprocess injectionreconnaissanceremote accessremote servicesresearchedscannersmtp brute forcesql injection attemptsssh attackt1021t1021.001t1046t1055t1059t1071.001t1076t1078t1110t1110.001t1110.002t1110.003t1110.004t1133t1187t1190t1199t1210t1486t1496t1499.002t1499.003t1563t1565t1588t1595t1595.001t1595.002t1595.003telecom servicestelecommunications

Activity Timeline

1 total obs
Oct 17Oct 17

Threat Activity Heatmap

· Peak: 2025-10-17
Less
More
Mon
Wed
Fri
Jun
·
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Threat ScoreHigh Risk
75
SIGNAL
Signal Score
75%
Confidence
7
Reports
First seenMay 16, 2025
Last seenOct 17, 2025
GeolocationCN
CountryChina
LocationNanjing, JS
ASNAS4134
OrgChinanet JS
Coords33.5014, 119.1329

VirusTotal

Not checked

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 1 year ago · Last seen 7 months ago
Appeared in 7 threat reports