IPMediumSignal 49/100
36.134.126.74
Location
ChinaJinrongjie, Guangdong
ASN
AS56048
China Mobile Communications Corporation
First Seen
Mar 3, 2021
Last Seen
Jun 6, 2026
Found in 23 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
49%
Signal Score
49 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Network Information
CountryChina
ChinaRegionJinrongjie, Guangdong
ASNAS56048
OrganizationChina Mobile Communications Corporation
Feed Intelligence Summary
23 reports49% confidence
23
Source reports
49%
Confidence score
Category tags
abuseaccess attemptaccess controlaccount discoveryaccount profilingaccount takeoveraccount takeover attemptactive scanactive scanningapacheapache attackerapache attacksasiaattackattack patternattack sourceattack source: externalaustraliaauthenticationauthentication abuseauthentication attackauthentication brute forceauthentication bypassautomated attackautomated brute forcebad reputationbad web botblocklist_allblog spambotnetbotnet activitybrute forcebrute force attackbrute force attackerbrute force attemptbrute force attemptsbrute-forcebrute-force attackbruteforcebruteforce attackbruteforce ipsbruteforcingc2 communicationchinacncommand & controlcommand and controlcommunication protocolcompromise attemptcompromised credentialscompromised hostcredential accesscredential harvestingcredential stuffingcyberattackdata exfiltrationdata store exposureddosddos attackdecoy systemdenial of servicedictionary attackdistributed attacksenumerationeuropeexfiltrationexploitexploitationexploitation activityexploitation attemptexploited hostexternal attackexternal ipexternal ip addressexternal networkexternal remote servicesexternal threatfailed login attemptsfinlandfranceftp brute forceftp brute-forcegermanyhackinghoneynet connecthttp brute forceidentity & access exploitationindicatorindonesiainformation technologyinitial accessinjection activityintrusion detectioniocipv4it infrastructurejamesbrine.com.au ip listlateral movementloginlogin attacklogin attemptlogin brute forcelogin brute-forcemailmalicious activitymalicious softwaremalwaremalware distributionmod securitymodsecurity attacksnetworknetwork accessnetwork attacksnetwork boundarynetwork brute forcenetwork enumerationnetwork infrastructurenetwork intrusionnetwork probingnetwork protocolnetwork scannetwork scanningnetwork securitynetwork service scanningnetwork trafficnetwork traffic analysisnorth americaoceaniapassword attackpassword attackspassword crackingpassword sprayingphishingpolandprocess injectionprotocol exploitationrdp bruteforcereconnaissanceremote accessremote serviceremote service attackremote servicesresearchedscannerscanning activitysecurity operationssecurity policyservice exploitationservice scansmb brute forcesmtp brute forcesocial engineeringsoftware developmentspamsshssh attackssh brute-forcet1021t1021.001t1021.002t1021.003t1021.004t1021.005t1040t1046t1055t1059t1059.001t1059.003t1059.004t1068t1071t1071.001t1076t1078t1078.002t1078.003t1078.004t1105t1110t1110.001t1110.002t1110.003t1110.004t1133t1187t1190t1203t1486t1496t1497t1499.001t1499.002t1499.003t1550t1550.002t1555t1555.003t1563t1565t1566.001t1566.002t1566.003t1566.004t1567t1573t1573.001t1583t1583.001t1588t1588.002t1588.004t1589t1589.002t1592t1595t1595.001t1595.002t1595.003tcp protocoltcp scantelnet threatthreat actorthreat intelligencethreat preventiontor nodeudp scanunauthorized accessunauthorized access attemptunauthorized loginunited statesvalid accountsvnc bruteforcevulnerability scanweb app attackweb application attackweb brute forceweb exploitationweb spamwordpress brute force
Activity Timeline
Jun 6Jun 6
Threat Activity Heatmap
· Peak: 2026-06-06LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
1
Minimal
30d
1
Minimal
3mo
1
Minimal
Threat ScoreMedium Risk
49
SIGNAL
Signal Score
49%
Confidence
23
Reports
First seenMar 3, 2021
Last seenJun 6, 2026
GeolocationCN
CountryChina
LocationJinrongjie, Guangdong
ASNAS56048
OrgChina Mobile Communications Corporation
Coords23.1317, 113.2660
VirusTotal
Not checked
WHOIS
- description
- IPv4 hosts detected attempting to brute force SSH on Perth (Australia) honeypot
- raw
- inetnum: 36.128.0.0 - 36.191.255.255 netname: CMNET descr: China Mobile Communications Corporation descr: Mobile Communications Network Operator in China descr: Internet Service Provider in China country: CN org: ORG-CMCC1-AP admin-c: ct74-AP tech-c: HL1318-AP abuse-c: AC1895-AP status: ALLOCATED PORTABLE remarks: service provider remarks: -------------------------------------------------------- remarks: To report network abuse, please contact mnt-irt remarks: For troubleshooting, please contact tech-c and admin-c remarks: Report invalid contact via www.apnic.net/invalidcontact remarks: -------------------------------------------------------- mnt-by: APNIC-HM mnt-lower: MAINT-CN-CMCC mnt-routes: MAINT-CN-CMCC mnt-irt: IRT-CHINAMOBILE2-CN last-modified: 2020-12-15T02:49:29Z source: APNIC irt: IRT-CHINAMOBILE2-CN address: China Mobile Communications Corporation address: 29, Jinrong Ave., Xicheng District, Beijing, 100032 e-mail: [email protected] abuse-mailbox: [email protected] admin-c: ct74-AP tech-c: CT74-AP auth: # Filtered remarks: [email protected] was validated on 2025-03-07 mnt-by: MAINT-CN-CMCC last-modified: 2025-03-07T06:38:53Z source: APNIC organisation: ORG-CMCC1-AP org-name: China Mobile Communications Corporation org-type: LIR country: CN address: 29,Jinrong Ave., address: Xicheng District, phone: +861052686688 fax-no: +861052616187 e-mail: [email protected] mnt-ref: APNIC-HM mnt-by: APNIC-HM last-modified: 2023-09-05T02:14:58Z source: APNIC role: ABUSE CHINAMOBILE2CN country: ZZ address: China Mobile Communications Corporation address: 29, Jinrong Ave., Xicheng District, Beijing, 100032 phone: +000000000 e-mail: [email protected] admin-c: ct74-AP tech-c: CT74-AP nic-hdl: AC1895-AP remarks: Generated from irt object IRT-CHINAMOBILE2-CN remarks: [email protected] was validated on 2025-03-07 abuse-mailbox: [email protected] mnt-by: APNIC-ABUSE last-modified: 2025-03-07T06:39:28Z source: APNIC role: chinamobile tech address: 29, Jinrong Ave.,Xicheng district address: Beijing country: CN phone: +86 5268 6688 fax-no: +86 5261 6187 e-mail: [email protected] admin-c: HL1318-AP tech-c: HL1318-AP nic-hdl: ct74-AP notify: [email protected] mnt-by: MAINT-cn-cmcc abuse-mailbox: [email protected] last-modified: 2016-11-29T09:37:27Z source: APNIC person: haijun li nic-hdl: HL1318-AP e-mail: [email protected] address: 29,Jinrong Ave, Xicheng district,beijing,100032 phone: +86 1052686688 fax-no: +86 10 52616187 country: CN mnt-by: MAINT-CN-CMCC abuse-mailbox: [email protected] last-modified: 2016-11-29T09:38:38Z source: APNIC route: 36.128.0.0/11 descr: China Mobile Communications Corporation origin: AS9808 mnt-by: MAINT-CN-CMCC last-modified: 2012-09-12T08:10:50Z source: APNIC
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
mediumFirst detected 5 years ago · Last seen 4 days ago
Appeared in 23 threat reports