IPMediumSignal 45/100
59.52.103.205
Location
ChinaTaohua, Jiangxi
ASN
AS4134
Chinanet JX
First Seen
Aug 9, 2025
Last Seen
Jun 7, 2026
Found in 9 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
45%
Signal Score
45 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Network Information
CountryChina
ChinaRegionTaohua, Jiangxi
ASNAS4134
OrganizationChinanet JX
Feed Intelligence Summary
9 reports45% confidence
9
Source reports
45%
Confidence score
Category tags
abuseactive scanactive scanningasiaaustraliabad reputationbotnetbotnet activitybrute forcebrute force attackbrute force attemptsc2chinacncommand & controlcommand and controlcommand injectioncommunication protocolcowrie honeypotcredential accesscredential stuffingdata exfiltrationdata store exposureddosddos attackdecoy systemdenial of servicedionaea honeypotdistributed attacksdnsdns attackexploitexploitationexploitation activityexploited hostfattftphackinghoneytrap honeypothttp scanneridentity & access exploitationindicatorinitial accessinjection activityiot securityiot targetedmailoney honeypotmalicious activitymalicious softwaremalwaremalware behaviourmalware capturenetworknetwork attacksnetwork intrusion attemptsnetwork protocolnetwork reconnaissancenetwork scanningnetwork securityoceaniap0fpassword attacksphishingphishing attackphishing trapprocess injectionprotocol exploitationreconnaissanceresearchedresource hijackingscannersensor-taggedsentrypeer botnetsmtpssh attackssh monitoringt1018t1040t1046t1055t1059t1071t1071.001t1078t1110t1110.001t1110.002t1110.003t1110.004t1190t1486t1496t1499.001t1499.002t1499.003t1565t1595t1595.001t1595.002t1595.003tannertcp protocoltelecommunicationstelnet threatthreat actorthreat detectionthreat intelligencethreat-intelligencetor nodetpotvoipvoip attackweb traffic
Activity Timeline
Jun 7Jun 7
Threat Activity Heatmap
· Peak: 2026-06-07LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Threat ScoreMedium Risk
45
SIGNAL
Signal Score
45%
Confidence
9
Reports
First seenAug 9, 2025
Last seenJun 7, 2026
GeolocationCN
CountryChina
LocationTaohua, Jiangxi
ASNAS4134
OrgChinanet JX
Coords28.6742, 115.9100
VirusTotal
Not checked
WHOIS
- description
- Score: 50/100. Labels: abuseipdb:minimal, abuseipdb:reported, cowrie, firehol:unlisted, gti:suspicious, sector:healthcare. 59.52.103.205 classified as attacker with unclear intent (medium confidence). Origin: enriched. Listed on: AbuseIPDB (minimal, reported).
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
mediumFirst detected 10 months ago · Last seen 16 days ago
Appeared in 9 threat reports