Search...

RST Threat feed. IOC: 123.109.172.152

2020-11-21T00:00:00

ID RST:F2F9262B-4515-3D25-A7F4-94660817D6A7
Type rst
Reporter RST Threat Feed
Modified 2020-10-31T00:00:00

Description

Found 123[.]109.172.152 in RST Threat Feed with score 35. First seen: 2020-10-31T03:00:00, Last seen: 2020-11-20T03:00:00. IOC tags: shellprobe. ASN 38103: (First IP 123.109.155.0, Last IP 123.109.191.255). ASN Name "QRIXNETKSASKR" and Organisation "T Broad". ASN hosts 10 domains. GEO IP information: City "Seoul", Country "South Korea". https://rstcloud.net/

JSON Vulners Source

Initial Source

{"id": "RST:F2F9262B-4515-3D25-A7F4-94660817D6A7", "bulletinFamily": "ioc", "title": "RST Threat feed. IOC: 123.109.172.152", "description": "Found **123[.]109.172.152** in [RST Threat Feed](https://www.rstcloud.net/profeed) with score **35**.\n First seen: 2020-10-31T03:00:00, Last seen: 2020-11-20T03:00:00.\n IOC tags: **shellprobe**.\nASN 38103: (First IP 123.109.155.0, Last IP 123.109.191.255).\nASN Name \"QRIXNETKSASKR\" and Organisation \"T Broad\".\nASN hosts 10 domains.\nGEO IP information: City \"Seoul\", Country \"South Korea\".\n[https://rstcloud.net/](https://rstcloud.net/)", "published": "2020-11-21T00:00:00", "modified": "2020-10-31T00:00:00", "cvss": {}, "href": "", "reporter": "RST Threat Feed", "references": [], "cvelist": [], "type": "rst", "lastseen": "2020-11-20T00:00:00", "edition": 1, "viewCount": 0, "enchantments": {"vulnersScore": "PENDING"}, "iocType": "ip", "ip": ["123.109.172.152"], "domain": [], "url": [], "iocScore": {"ioc_frequency": 0.72, "ioc_src": 64.84, "ioc_tags": 0.75, "ioc_total": 35.0}, "tags": ["shellprobe"], "fp": {"alarm": "false", "descr": ""}, "whois": {}, "geodata": {"city": "Seoul", "country": "South Korea", "region": "Seoul"}, "asn": {"cloud": "", "domains": 10, "firstip": {"netv4": "123.109.155.0", "num": "2070780672"}, "isp": "QRIXNETKSASKR", "lastip": {"netv4": "123.109.191.255", "num": "2070790143"}, "num": 38103, "org": "T Broad"}, "threat": []}