IOC Radar
IPMediumSignal 65/100

182.99.3.130

Location
ChinaChina
Taohua, JX
ASN
AS4134
Chinanet JX
First Seen
May 31, 2025
Last Seen
Feb 14, 2026
May 31
First Seen
375d ago
Feb 14
Last Seen
116d ago
8
Reports
source reports
65%
Confidence
medium
Found in 8 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
65%
Signal Score
65 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

29 techniques

Network Information

CountryCNChina
RegionTaohua, JX
ASNAS4134
OrganizationChinanet JX

Feed Intelligence Summary

8 reports65% confidence
8
Source reports
65%
Confidence score
Category tags
abuseactive scanningasiabotnetbrute forcebrute force attackchinacommand and controlcommunication technologiescredential accesscredential stuffingdata exfiltrationddosdenial of servicedistributed attacksexploit attemptsftp brute forcehttp brute forceindicatorlateral movementmalicious softwaremalwaremalware propagationmalware scanningmobile carriersmobile networksnetworknetwork probingnetwork scanningpassword attacksprocess injectionreconnaissanceremote accessremote servicesresearchedscannersmtp brute forcesql injection attemptsssh attackt1021t1021.001t1046t1055t1059t1071.001t1076t1078t1110t1110.001t1110.002t1110.003t1110.004t1133t1187t1190t1199t1210t1486t1496t1499.002t1499.003t1563t1565t1588t1595t1595.001t1595.002t1595.003telecom servicestelecommunications

Activity Timeline

1 total obs
Feb 14Feb 14

Threat Activity Heatmap

· Peak: 2026-02-14
Less
More
Mon
Wed
Fri
Jun
·
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Threat ScoreMedium Risk
65
SIGNAL
Signal Score
65%
Confidence
8
Reports
First seenMay 31, 2025
Last seenFeb 14, 2026
GeolocationCN
CountryChina
LocationTaohua, JX
ASNAS4134
OrgChinanet JX
Coords27.9544, 116.3282

VirusTotal

Not checked

WHOIS

raw
inetnum: 182.96.0.0 - 182.111.255.255 netname: CHINANET-JX descr: CHINANET JIANGXI PROVINCE NETWORK descr: China Telecom descr: No.31,jingrong street descr: Beijing 100032 country: CN admin-c: XY1-AP tech-c: WZ1-CN abuse-c: AC1573-AP status: ALLOCATED PORTABLE remarks: service provider remarks: -------------------------------------------------------- remarks: To report network abuse, please contact mnt-irt remarks: For troubleshooting, please contact tech-c and admin-c remarks: Report invalid contact via www.apnic.net/invalidcontact remarks: -------------------------------------------------------- notify: [email protected] mnt-by: APNIC-HM mnt-lower: MAINT-IP-WWF mnt-routes: MAINT-IP-WWF mnt-irt: IRT-CHINANET-CN last-modified: 2021-06-15T08:05:21Z source: APNIC irt: IRT-CHINANET-CN address: No.31 ,jingrong street,beijing address: 100032 e-mail: [email protected] abuse-mailbox: [email protected] admin-c: CH93-AP tech-c: CH93-AP auth: # Filtered remarks: [email protected] was validated on 2025-04-24 mnt-by: MAINT-CHINANET last-modified: 2025-04-24T03:21:26Z source: APNIC role: ABUSE CHINANETCN country: ZZ address: No.31 ,jingrong street,beijing address: 100032 phone: +000000000 e-mail: [email protected] admin-c: CH93-AP tech-c: CH93-AP nic-hdl: AC1573-AP remarks: Generated from irt object IRT-CHINANET-CN remarks: [email protected] was validated on 2025-04-24 abuse-mailbox: [email protected] mnt-by: APNIC-ABUSE last-modified: 2025-04-24T03:21:54Z source: APNIC person: Wanshu Zhou address: Data Communication Bureau MPT address: 40 Xueyuan Rd. address: Beijing China 100083 country: CN phone: +86-10-205-3992 fax-no: +86-10-205-3994 e-mail: [email protected] nic-hdl: WZ1-CN notify: [email protected] notify: [email protected] mnt-by: MAINT-NULL last-modified: 2011-12-22T05:14:24Z source: APNIC person: Xu Yongzhong address: Data Communication Bireau address: Ministry of Posts and Telecommunications address: A12 Xin-jie-kou-wai Street address: Beijing 100088 country: CN phone: +86-10-62053991 fax-no: +86-10-62053995 e-mail: [email protected] nic-hdl: XY1-AP mnt-by: MAINT-IP-WWF last-modified: 2021-01-05T00:59:14Z source: APNIC

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 1 year ago · Last seen 3 months ago
Appeared in 8 threat reports