IPMediumSignal 39/100
192.72.6.234
Location
Taiwan, Province of ChinaTaipei, Taiwan
ASN
AS4780
Seed
First Seen
Oct 9, 2024
Last Seen
Apr 1, 2026
Found in 13 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
39%
Signal Score
39 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Network Information
CountryTaiwan, Province of China
Taiwan, Province of ChinaRegionTaipei, Taiwan
ASNAS4780
OrganizationSeed
IP Category
⟲
Proxy
Proxy server
Feed Intelligence Summary
13 reports39% confidence
13
Source reports
39%
Confidence score
Category tags
abuseaccess controlactive scanactive scanningasiabad reputationbotnetbotnet activitybotnet activity detectedbrute forcebrute force attackbrute force attacksc2c2 communicationcommand & controlcommand and controlcompromised hostscredential accesscredential harvestingcredential stuffingdata exfiltrationdata store exposureddosddos attacksddos preparationdistributed attacksexploit attemptsexploitation activityftp brute forcehttp scanninghttps scanningidentity & access exploitationindicatorinformation gatheringinfrastructure acquisitionreconnaissanceinitial accessinjection activityinternet of thingsiot botnetiot securityiot/ics attacklateral movementmalicious softwaremalwaremalware distributionmanualmirai botnetmysql brute forcenetworknetwork enumerationnetwork intrusionnetwork monitoringnetwork scanningnetwork securitynorth americapassword attacksphishingphishing attackprocess injectionprotocol exploitationproxyproxy activityransomwarereconnaissanceremote accessremote servicesresearchedscannerscanning activitysecurity policysmtp scanningsocial engineeringsocradar honeypotssh attackt1003t1005t1016t1018t1021t1021.001t1040t1043t1047t1053t1053.005t1055t1056t1059t1071t1071.001t1071.002t1071.004t1078t1083t1090t1090.001t1090.002t1090.003t1110t1110.001t1110.002t1110.003t1110.004t1133t1190t1486t1496t1497t1499.002t1499.003t1550t1552t1555t1556t1565t1566.001t1566.002t1566.003t1573t1587.001t1590.001t1595t1595.001t1595.002t1595.003taiwantcp/23telnet threatthreat preventiontor nodetwunited statesvnc protocol
Activity Timeline
Apr 1Apr 1
Threat Activity Heatmap
· Peak: 2026-04-01LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Threat ScoreLow Risk
39
SIGNAL
Signal Score
39%
Confidence
13
Reports
First seenOct 9, 2024
Last seenApr 1, 2026
GeolocationTW
CountryTaiwan, Province of China
LocationTaipei, Taiwan
ASNAS4780
OrgSeed
Coords23.5000, 121.0000
Proxy
VirusTotal
Not checked
WHOIS
- raw
- inetnum: 192.72.6.0 - 192.72.6.255 netname: SEED-NET6 descr: imported inetnum object for III country: TW admin-c: IfII1-AP tech-c: IfII1-AP abuse-c: AT939-AP status: ASSIGNED PORTABLE remarks: ---------- remarks: imported from ARIN object: remarks: remarks: inetnum: 192.72.6.0 - 192.72.6.255 remarks: netname: SEED-NET6 remarks: org-id: III remarks: status: reassignment remarks: tech-c: CKF-ARIN remarks: reg-date: 1992-12-09 remarks: changed: [email protected] 19921209 remarks: source: ARIN remarks: remarks: ---------- notify: [email protected] mnt-by: APNIC-HM mnt-irt: IRT-TWNIC-AP last-modified: 2021-11-04T00:48:53Z source: APNIC irt: IRT-TWNIC-AP address: 3F., No. 123, Sec. 4, Bade Rd., Songshan Dist., Taipei 105, Taiwan e-mail: [email protected] abuse-mailbox: [email protected] admin-c: TWA2-AP tech-c: TWA2-AP auth: # Filtered remarks: Please note that TWNIC is not an ISP and is not empowered remarks: to investigate complaints of network abuse. remarks: [email protected] was validated on 2025-05-23 mnt-by: MAINT-TW-TWNIC last-modified: 2025-05-23T00:01:36Z source: APNIC role: ABUSE TWNICAP country: ZZ address: 3F., No. 123, Sec. 4, Bade Rd., Songshan Dist., Taipei 105, Taiwan phone: +000000000 e-mail: [email protected] admin-c: TWA2-AP tech-c: TWA2-AP nic-hdl: AT939-AP remarks: Generated from irt object IRT-TWNIC-AP remarks: [email protected] was validated on 2025-05-23 abuse-mailbox: [email protected] mnt-by: APNIC-ABUSE last-modified: 2025-05-23T00:02:10Z source: APNIC person: Institute for Information Industry Maintainer For ERX Transfers address: 10F Formosa Plastics rear building 201-34 Tung Hwa N. Road Taipei Taiwan country: TW phone: +00 00 0000 0000 e-mail: [email protected] nic-hdl: IfII1-AP remarks: ---------- remarks: remarks: This record made from details in ARIN org: [III]. remarks: Because no poc-contact was listed at ARIN. remarks: remarks: ---------- notify: [email protected] mnt-by: MNT-ERX-INSTIFORINFORINDUS-NON-TW last-modified: 2008-09-04T07:29:38Z source: APNIC inetnum: 192.72.6.0 - 192.72.6.255 netname: SEEDNET-NET descr: New Century InfoComm Tech. Co., Ltd. descr: 1F~11F, No. 218, Rueiguang Road descr: Taipei Taiwan country: TW admin-c: IO1-TW tech-c: IO1-TW mnt-by: MAINT-TW-TWNIC changed: [email protected] 20080827 status: ASSIGNED NON-PORTABLE remarks: This information has been partially mirrored by APNIC from remarks: TWNIC. To obtain more specific information, please use the remarks: TWNIC whois server at whois.twnic.net. source: TWNIC person: Anti-Spammer NCIC address: New Century InfoComm Tech Co., Ltd address: No.218, Rueiguang Road,Nei-Hu, Taipei City address: TW Taiwan country: TW phone: +886-2-7700-8888 fax-no: +886-2-7700-8888 e-mail: [email protected] nic-hdl: IO1-TW changed: [email protected] 20170320 remarks: This information has been partially mirrored by APNIC from remarks: TWNIC. To obtain more specific information, please use the remarks: TWNIC whois server at whois.twnic.net. source: TWNIC
- references
- https://malware-filter.gitlab.io/malware-filter/botnet-filter.txt
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
mediumFirst detected 1 year ago · Last seen 2 months ago
Appeared in 13 threat reports