IOC Radar
IPMediumSignal 100/100

121.160.98.169

Location
South KoreaSouth Korea
Seoul, Seoul
ASN
AS4766
KT Corporation
First Seen
Dec 20, 2024
Last Seen
Mar 11, 2026
Dec 20
First Seen
541d ago
Mar 11
Last Seen
95d ago
15
Reports
source reports
99%
Confidence
medium
Found in 15 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
99%
Signal Score
100 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

25 techniques

Network Information

CountryKRSouth Korea
RegionSeoul, Seoul
ASNAS4766
OrganizationKT Corporation

Feed Intelligence Summary

15 reports99% confidence
15
Source reports
99%
Confidence score
Category tags
abuseaccess controlactive scanningasiaattackaustraliaauthenticationauto-generated securitybotnetbrute forcebrute force attackbrute force attemptcisco devicecommand and controlcowrie honeypotcredential accesscredential stuffingctadata exfiltrationdecoy systemdevice managementdistributed attacksenterprise networkingindicatorkorea, republic ofmalicious activitymalicious softwaremalwarenetworknetwork infrastructurenetwork intrusionnetwork scanningnetwork securityoceaniapassword attackpassword attacksprocess injectionreconnaissanceremote accessremote servicesresearchedscannersecurity policysftp attacksouth koreassh attackssh monitoringt1021.004t1041t1055t1071.001t1078t1078.002t1078.004t1110t1110.001t1110.002t1110.003t1110.004t1486t1496t1499.001t1499.002t1499.003t1555t1565t1588.004t1589t1589.002t1595.001t1595.002t1595.003telecommunicationsthreat actorthreat intelligencethreat prevention

Activity Timeline

1 total obs
Mar 11Mar 11

Threat Activity Heatmap

· Peak: 2026-03-11
Less
More
Mon
Wed
Fri
Jun
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Threat ScoreHigh Risk
100
SIGNAL
Signal Score
99%
Confidence
15
Reports
First seenDec 20, 2024
Last seenMar 11, 2026
GeolocationKR
CountrySouth Korea
LocationSeoul, Seoul
ASNAS4766
OrgKT Corporation
Coords37.5656, 126.9780

VirusTotal

Not checked

WHOIS

description
Host bruteforcing SSH

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 1 year ago · Last seen 3 months ago
Appeared in 15 threat reports