IOC Radar
IPMediumSignal 72/100

116.38.55.241

Location
Korea, Republic ofKorea, Republic of
Jongno-gu, Seoul
ASN
AS17858
Xpeed
First Seen
Dec 5, 2024
Last Seen
Feb 15, 2026
Dec 5
First Seen
553d ago
Feb 15
Last Seen
115d ago
8
Reports
source reports
72%
Confidence
medium
1/91
VirusTotal
detections
Found in 8 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
72%
Signal Score
72 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

27 techniques

Network Information

CountryKRKorea, Republic of
RegionJongno-gu, Seoul
ASNAS17858
OrganizationXpeed

Feed Intelligence Summary

8 reports72% confidence
8
Source reports
72%
Confidence score
Category tags
abuseaccess controlactive scanningasiaauthenticationbotnetbrute forcebrute force attackcommand and controlcredential accesscredential stuffingdata exfiltrationdistributed attacksindicatorkorea, republic oflateral movementlogin attemptslogin brute forcemalicious softwaremalwarenetworknetwork enumerationnetwork reconnaissancenetwork scanningpassword attacksprocess injectionreconnaissanceresearchedscannersecurity operationssecurity policysouth koreassh attackt1016t1018t1021t1021.004t1046t1055t1059t1071.001t1078t1078.004t1110t1110.001t1110.002t1110.003t1110.004t1190t1486t1496t1499.002t1499.003t1565t1583t1589t1595t1595.001t1595.002t1595.003threat intelligencethreat prevention

Activity Timeline

1 total obs
Feb 15Feb 15

Threat Activity Heatmap

· Peak: 2026-02-15
Less
More
Mon
Wed
Fri
Jun
·
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Threat ScoreHigh Risk
72
SIGNAL
Signal Score
72%
Confidence
8
Reports
First seenDec 5, 2024
Last seenFeb 15, 2026
GeolocationKR
CountryKorea, Republic of
LocationJongno-gu, Seoul
ASNAS17858
OrgXpeed
Coords37.5112, 126.9741

VirusTotal

1/ 91vendors flagged
1% detection rateJun 8, 2026

WHOIS

description
Bruteforce, scanning, details in pulse

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 1 year ago · Last seen 3 months ago
Appeared in 8 threat reports