IPMediumSignal 37/100
182.88.191.39
Location
ChinaLiuchow, GX
ASN
AS4837
China Unicom Guangxi Province Network
First Seen
Mar 19, 2024
Last Seen
May 7, 2026
Mar 19
First Seen
816d ago
May 7
Last Seen
37d ago
6
Reports
source reports
37%
Confidence
medium
2/91
VirusTotal
detections
Found in 6 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
37%
Signal Score
37 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Network Information
CountryChina
ChinaRegionLiuchow, GX
ASNAS4837
OrganizationChina Unicom Guangxi Province Network
Feed Intelligence Summary
6 reports37% confidence
6
Source reports
37%
Confidence score
Category tags
active scanactive scanningasiaattackauthentication attemptsautomated-attackbad reputationbotnetbotnet activitybrute forcebrute force attackbrute-forcebrute-force attackchinacncommand and controlcommunication protocolcowrie activitycowrie honeypotcowrie interactionscowrie ssh attackscredential accesscredential stuffingcredential-stuffingdata exfiltrationdata store exposuredatabase attacksdecoy systemdionaea activitydionaea honeypotdionaea malware collectiondistributed attacksexploitexploitationexploitation activityexploited hosthackinghoneytrap honeypotidentity & access exploitationindicatorinjection activitylamplamp stack targetinglinux-server-attackmalicious activitymalicious login attemptsmalicious sip activitymalicious softwaremalicious trafficmalicious-login-attemptsmalwaremalware behaviourmalware capturemalware delivery attemptnetworknetwork discoverynetwork probingnetwork scanningnetwork securitypassword attackpassword attacksport-scanningprocess injectionprotocol exploitationprotocol-abusereconnaissanceresearchedresource hijackingscannerscanning activitysentrypeer botnetservice scansftp access attemptssftp attacksftp-attacksip brute forcesip scanningsshssh attackssh monitoringssh-brute-forcet-pott1021t1021.004t1040t1041t1046t1055t1059t1059.004t1071.001t1078t1078.001t1078.002t1078.003t1078.004t1110t1110.001t1110.002t1110.003t1110.004t1190t1486t1496t1499.001t1499.002t1499.003t1555t1565t1595t1595.001t1595.002t1595.003targeting databasetelecommunicationstelnet threattelnet-brute-forcethreat actorthreat detectionthreat intelligencetor nodetpotunauthorized accessunauthorized-access-attemptvoipvoip attackvulnerability scanvulnerability-exploitationweb app attackweb attacksweb-application-attack
Activity Timeline
May 7May 7
Threat Activity Heatmap
· Peak: 2026-05-07LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Intelligence SummaryAI Generated
This Indicator of Compromise (IOC), an IPv4 address with a score of 37.15, is highly significant as it has been consistently associated with malicious activities observed across various threat intelligence feeds. The presence of this IP address in an organizational environment suggests potential engagement in reconnaissance, brute force attempts, and potentially command and control (C2) communication. If left unaddressed, connections to this IP could indicate ongoing attempts at unauthorized acc…
Threat ScoreLow Risk
37
SIGNAL
Signal Score
37%
Confidence
6
Reports
First seenMar 19, 2024
Last seenMay 7, 2026
GeolocationCN
CountryChina
LocationLiuchow, GX
ASNAS4837
OrgChina Unicom Guangxi Province Network
Coords22.8108, 108.3165
WHOIS
- description
- Score: 70/100. Labels: abuseipdb:brute-force, abuseipdb:exploited-host, abuseipdb:hacking, abuseipdb:low, abuseipdb:port-scan, abuseipdb:reported. 182.88.191.39 classified as automated brute-force attacker targeting SSH/Telnet credentials (medium confidence). Origin: enriched. Listed on: AbuseIPDB (brute-force, exploited-host, hacking).
- raw
- inetnum: 182.88.0.0 - 182.91.255.255 netname: UNICOM-GX descr: China Unicom GuangXi province network descr: China Unicom descr: No.21,Ji-Rong Street, descr: Beijing 100033 country: CN admin-c: CH455-AP tech-c: LH602-AP abuse-c: AC1718-AP status: ALLOCATED PORTABLE remarks: service provider remarks: -------------------------------------------------------- remarks: To report network abuse, please contact mnt-irt remarks: For troubleshooting, please contact tech-c and admin-c remarks: Report invalid contact via www.apnic.net/invalidcontact remarks: -------------------------------------------------------- mnt-by: APNIC-HM mnt-lower: MAINT-CNCGROUP-GX mnt-routes: MAINT-CNCGROUP-RR mnt-irt: IRT-CU-CN last-modified: 2025-01-22T13:16:50Z source: APNIC irt: IRT-CU-CN address: No.21,Financial Street address: Beijing,100033 address: P.R.China e-mail: [email protected] abuse-mailbox: [email protected] admin-c: CH1302-AP tech-c: CH1302-AP auth: # Filtered remarks: [email protected] was validated on 2025-02-24 mnt-by: MAINT-CNCGROUP last-modified: 2025-02-24T06:16:57Z source: APNIC role: ABUSE CUCN country: ZZ address: No.21,Financial Street address: Beijing,100033 address: P.R.China phone: +000000000 e-mail: [email protected] admin-c: CH1302-AP tech-c: CH1302-AP nic-hdl: AC1718-AP remarks: Generated from irt object IRT-CU-CN remarks: [email protected] was validated on 2025-02-24 abuse-mailbox: [email protected] mnt-by: APNIC-ABUSE last-modified: 2025-02-24T06:17:45Z source: APNIC role: CNCGroup Hostmaster e-mail: [email protected] address: No.156,Fu-Xing-Men-Nei Street, address: Beijing,100031,P.R.China nic-hdl: CH455-AP phone: +86-10-82993155 fax-no: +86-10-82993102 country: CN admin-c: CH444-AP tech-c: CH444-AP mnt-by: MAINT-CNCGROUP last-modified: 2017-08-17T06:13:15Z source: APNIC person: liu huanyi nic-hdl: LH602-AP e-mail: [email protected] address: 44,Xinghu Road,Xingcheng District,Nanning,CHINA phone: +86-771-2597426 fax-no: +86-771-2522019 country: CN mnt-by: MAINT-CNCGROUP-GX last-modified: 2008-09-04T07:34:50Z source: APNIC route: 182.88.0.0/14 descr: China Unicom Guangxi Province Network country: CN origin: AS4837 mnt-by: MAINT-CNCGROUP-RR last-modified: 2010-03-02T01:06:01Z source: APNIC
- references
- https://github.com/telekom-security/tpotce
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
mediumFirst detected 2 years ago · Last seen 1 month ago
Appeared in 6 threat reports