ID RST:EADB1ED1-121E-3212-8DA2-4D9E5D7B9858 Type rst Reporter RST Threat Feed Modified 2020-12-02T00:00:00
Description
Found 119[.]8.238.103 in RST Threat Feed with score 34.
First seen: 2020-12-02T03:00:00, Last seen: 2020-12-30T03:00:00.
IOC tags: generic.
We found that the IOC is used by: virut.
ASN 136907: (First IP 119.8.208.0, Last IP 119.8.243.255).
ASN Name "HWCLOUDSASAP" and Organisation "HUAWEI CLOUDS".
ASN hosts 399481 domains.
GEO IP information: City "", Country "Singapore".
In according to RST Threat Feed the IP is related to shuos.com.cn malicious domains.
https://rstcloud.net/
{"id": "RST:EADB1ED1-121E-3212-8DA2-4D9E5D7B9858", "bulletinFamily": "ioc", "title": "RST Threat feed. IOC: 119.8.238.103", "description": "Found **119[.]8.238.103** in [RST Threat Feed](https://www.rstcloud.net/profeed) with score **34**.\n First seen: 2020-12-02T03:00:00, Last seen: 2020-12-30T03:00:00.\n IOC tags: **generic**.\nWe found that the IOC is used by: **virut**.\nASN 136907: (First IP 119.8.208.0, Last IP 119.8.243.255).\nASN Name \"HWCLOUDSASAP\" and Organisation \"HUAWEI CLOUDS\".\nASN hosts 399481 domains.\nGEO IP information: City \"\", Country \"Singapore\".\nIn according to RST Threat Feed the IP is related to **shuos.com.cn** malicious domains.\n[https://rstcloud.net/](https://rstcloud.net/)", "published": "2020-12-31T00:00:00", "modified": "2020-12-02T00:00:00", "cvss": {}, "href": "", "reporter": "RST Threat Feed", "references": [], "cvelist": [], "type": "rst", "lastseen": "2020-12-30T00:00:00", "edition": 1, "viewCount": 0, "enchantments": {"vulnersScore": "PENDING"}, "iocType": "ip", "ip": ["119.8.238.103"], "domain": [], "url": [], "iocScore": {"ioc_frequency": 0.64, "ioc_src": 68.04, "ioc_tags": 0.8, "ioc_total": 34.0}, "tags": ["generic"], "fp": {"alarm": "false", "descr": ""}, "whois": {}, "geodata": {"city": "", "country": "Singapore", "region": ""}, "asn": {"cloud": "", "domains": 399481, "firstip": {"netv4": "119.8.208.0", "num": "1997066240"}, "isp": "HWCLOUDSASAP", "lastip": {"netv4": "119.8.243.255", "num": "1997075455"}, "num": 136907, "org": "HUAWEI CLOUDS"}, "threat": ["virut"]}