IOC Radar
IPMediumSignal 81/100

223.85.251.61

Location
ChinaChina
Luocheng, Guangdong
ASN
AS9808
China Mobile
First Seen
May 28, 2026
Last Seen
Jun 9, 2026
May 28
First Seen
14d ago
Jun 9
Last Seen
yesterday
15
Reports
source reports
81%
Confidence
medium
Found in 15 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
81%
Signal Score
81 / 100
IDS Rule
No
Threat Context
Tags

Network Information

CountryCNChina
RegionLuocheng, Guangdong
ASNAS9808
OrganizationChina Mobile

Feed Intelligence Summary

15 reports81% confidence
15
Source reports
81%
Confidence score
Category tags
abuseactive scanactive-attackaptasiabad reputationbad web botbothammerbotnetbotnet activitybrute forcebrute-forcebruteforcechinacncyberattackdaily-threat-feeddenial-of-servicedhcpelasticsearchexploitexploitation activityexploited hostftpftp brute-forcehackingimapindicatorinjection activityiot securityiot targetedldapmalwaremssqlnetworkntporacleportscanpostgresransomwarerealtime-wafredisresearchedscanscannerscannersservice scansiemsmbsnmpsocks5socradar honeypotsql injectionsshssh attacktargeting databasetelnetthreat actortpotvncvulnerability scanvulnerability-exploitationvultrweb app attack

Activity Timeline

1 total obs
Jun 9Jun 9

Threat Activity Heatmap

Less
More
Mon
Wed
Fri
Jun
·
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
24h
0
Dormant
7d
1
Minimal
30d
1
Minimal
3mo
1
Minimal
Threat ScoreHigh Risk
81
SIGNAL
Signal Score
81%
Confidence
15
Reports
First seenMay 28, 2026
Last seenJun 9, 2026
GeolocationCN
CountryChina
LocationLuocheng, Guangdong
ASNAS9808
OrgChina Mobile
Coords23.1317, 113.2660

VirusTotal

Not checked

WHOIS

description
Score: 100/100. Labels: abuseipdb:brute-force, abuseipdb:critical, abuseipdb:exploited-host, abuseipdb:hacking, abuseipdb:iot-targeted, abuseipdb:port-scan. Attacker IP from Chengdu, China (AS9808, China Mobile Communications Group Co., Ltd.). Observed targeting energy sector honeypot petroleum-hp-01 via cowrie. 1 events.
raw
inetnum: 223.64.0.0 - 223.117.255.255 netname: CMNET descr: China Mobile Communications Corporation descr: Mobile Communications Network Operator in China descr: Internet Service Provider in China country: CN org: ORG-CM1-AP admin-c: HL1318-AP tech-c: HL1318-AP abuse-c: AC2006-AP status: ALLOCATED PORTABLE remarks: service provider remarks: -------------------------------------------------------- remarks: To report network abuse, please contact mnt-irt remarks: For troubleshooting, please contact tech-c and admin-c remarks: Report invalid contact via www.apnic.net/invalidcontact remarks: -------------------------------------------------------- mnt-by: APNIC-HM mnt-lower: MAINT-CN-CMCC mnt-routes: MAINT-CN-CMCC mnt-irt: IRT-CHINAMOBILE-CN last-modified: 2020-10-20T00:58:37Z source: APNIC irt: IRT-CHINAMOBILE-CN address: China Mobile Communications Corporation address: 29, Jinrong Ave., Xicheng District, Beijing, 100032 e-mail: [email protected] abuse-mailbox: [email protected] admin-c: CT74-AP tech-c: CT74-AP auth: # Filtered remarks: [email protected] was validated on 2026-03-23 mnt-by: MAINT-CN-CMCC last-modified: 2026-03-23T00:47:53Z source: APNIC organisation: ORG-CM1-AP org-name: China Mobile org-type: LIR country: CN address: 29, Jinrong Ave. phone: +86-10-5268-6688 fax-no: +86-10-5261-6187 e-mail: [email protected] mnt-ref: APNIC-HM mnt-by: APNIC-HM last-modified: 2023-09-05T02:14:48Z source: APNIC role: ABUSE CHINAMOBILECN country: ZZ address: China Mobile Communications Corporation address: 29, Jinrong Ave., Xicheng District, Beijing, 100032 phone: +000000000 e-mail: [email protected] admin-c: CT74-AP tech-c: CT74-AP nic-hdl: AC2006-AP remarks: Generated from irt object IRT-CHINAMOBILE-CN remarks: [email protected] was validated on 2026-03-23 abuse-mailbox: [email protected] mnt-by: APNIC-ABUSE last-modified: 2026-03-23T00:48:02Z source: APNIC person: haijun li nic-hdl: HL1318-AP e-mail: [email protected] address: 29,Jinrong Ave, Xicheng district,beijing,100032 phone: +86 1052686688 fax-no: +86 10 52616187 country: CN mnt-by: MAINT-CN-CMCC abuse-mailbox: [email protected] last-modified: 2016-11-29T09:38:38Z source: APNIC route: 223.64.0.0/11 descr: China Mobile communications corporation origin: AS9808 mnt-by: MAINT-CN-CMCC last-modified: 2012-02-15T08:54:23Z source: APNIC

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 14 days ago · Last seen 1 day ago
Appeared in 15 threat reports