IOC Radar
IPMediumSignal 61/100

202.112.47.45

Location
ChinaChina
Haidian, Beijing
ASN
AS24348
China Education and Research Network
First Seen
Jul 10, 2024
Last Seen
Jun 5, 2026
Jul 10
First Seen
704d ago
Jun 5
Last Seen
10d ago
9
Reports
source reports
61%
Confidence
medium
Found in 9 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
61%
Signal Score
61 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

18 techniques

Network Information

CountryCNChina
RegionHaidian, Beijing
ASNAS24348
OrganizationChina Education and Research Network

Feed Intelligence Summary

9 reports61% confidence
9
Source reports
61%
Confidence score
Category tags
abuseactive scanactive scanningasiabad reputationbrute forcebrute-forcechinacisa kevcncobalt strikecommand and controlcredential harvestingdata theftddosddos attackdnsexfiltrationexploitexploit avaliableexploitation activityexploited hostfigurefqdnfqdnshackinghuntin the wildindicatorinfrastructure acquisitionreconnaissanceingress tool transfermalicious activitymalwaremanualnetworknetwork probingoilrigpalo altophishing attackprocess injectionreconnaissanceresearchedscannersocial engineeringt1041t1048.003t1055t1059.001t1071.001t1071.004t1095t1105t1566.001t1566.002t1566.003t1569.002t1572t1587.001t1590.001t1595.001t1595.002t1595.003threat actortrkcdn campaigntrojan malwareunit

Activity Timeline

1 total obs
Jun 5Jun 5

Threat Activity Heatmap

· Peak: 2026-06-05
Less
More
Mon
Wed
Fri
Jun
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Threat ScoreMedium Risk
61
SIGNAL
Signal Score
61%
Confidence
9
Reports
First seenJul 10, 2024
Last seenJun 5, 2026
GeolocationCN
CountryChina
LocationHaidian, Beijing
ASNAS24348
OrgChina Education and Research Network
Coords39.9075, 116.3971

VirusTotal

Not checked

WHOIS

raw
inetnum: 202.112.0.0 - 202.113.255.255 netname: BJR-CERNET descr: China Education and Research Network descr: Beijing Regional Network country: CN org: ORG-CEAR1-AP admin-c: CER-AP tech-c: CER-AP abuse-c: AC1685-AP status: ALLOCATED PORTABLE remarks: origin AS4538 mnt-by: APNIC-HM mnt-lower: MAINT-CERNET-AP mnt-routes: MAINT-CERNET-AP mnt-irt: IRT-CERNET-AP last-modified: 2020-05-28T02:35:51Z source: APNIC irt: IRT-CERNET-AP address: Network Research Center, address: Main Bldg, Tsinghua Univ address: Beijing 100084, China phone: +86-10-62784301 fax-no: +86-10-62785933 e-mail: [email protected] abuse-mailbox: [email protected] admin-c: CER-AP tech-c: CER-AP auth: # Filtered remarks: timezone GMT+8 remarks: http://www.ccert.edu.cn remarks: [email protected] was validated on 2025-01-22 mnt-by: MAINT-CERNET-AP last-modified: 2025-01-22T13:47:43Z source: APNIC organisation: ORG-CEAR1-AP org-name: China Education and Research Network (CERNET) country: CN address: FIT 3-220, address: Tsinghua University phone: +86-10-62785983 fax-no: +86-10-62785933 e-mail: [email protected] mnt-ref: APNIC-HM mnt-by: APNIC-HM last-modified: 2018-09-13T12:56:34Z source: APNIC role: ABUSE CERNETAP country: ZZ address: Network Research Center, address: Main Bldg, Tsinghua Univ address: Beijing 100084, China phone: +86-10-62784301 e-mail: [email protected] admin-c: CER-AP tech-c: CER-AP nic-hdl: AC1685-AP remarks: Generated from irt object IRT-CERNET-AP remarks: [email protected] was validated on 2025-01-22 abuse-mailbox: [email protected] mnt-by: APNIC-ABUSE last-modified: 2025-01-22T16:25:45Z source: APNIC role: CERNET Helpdesk address: CERNET Center address: Beijing 100084, China country: CN phone: +86-10-6278-4049 fax-no: +86-10-6278-5933 e-mail: [email protected] remarks: [email protected] admin-c: XL1-CN tech-c: SZ2-AP nic-hdl: CER-AP mnt-by: MAINT-CERNET-AP last-modified: 2020-09-03T09:14:12Z source: APNIC

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 1 year ago · Last seen 10 days ago
Appeared in 9 threat reports