IOC Radar
IPMediumSignal 37/100

121.177.128.206

Location
Korea, Republic ofKorea, Republic of
Tongyeong, Gyeongsangnam-do
ASN
AS4766
Korea Telecom
First Seen
Feb 14, 2025
Last Seen
Jun 6, 2026
Feb 14
First Seen
485d ago
Jun 6
Last Seen
8d ago
8
Reports
source reports
37%
Confidence
medium
Found in 8 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
37%
Signal Score
37 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

26 techniques

Network Information

CountryKRKorea, Republic of
RegionTongyeong, Gyeongsangnam-do
ASNAS4766
OrganizationKorea Telecom

IP Category

⟲
Proxy
Proxy server

Feed Intelligence Summary

8 reports37% confidence
8
Source reports
37%
Confidence score
Category tags
active scanactive scanningasiabotnetbotnet activitybotnet iocsbotnet miraibotnet propagationbrute forcebrute force attackercommand and controlcommunication protocolconnected devicescredential accesscredential stuffingdata exfiltrationdata store exposureddosddos attacksdenial of servicedevice managementdistributed attacksexploitationexploitation activitygorillabotidentity & access exploitationindicatorindustrial iotinitial accessinjection activityinternet of thingsiocsiot analyticsiot applicationsiot botnetiot devicesiot platformsiot securityiot/ics attackipv4irckorea, republic ofkrlinuxmalicious softwaremalwaremirai botnetmirai internetnetworknetwork attacksnetwork protocolnetwork scanningnetwork securityoutlawprocess injectionprotocol exploitationproxyreconnaissanceresearchedscanning activitysmart devicessouth koreassh attackt1021t1021.001t1040t1053.005t1055t1059t1059.004t1071t1071.001t1078t1078.001t1105t1110.002t1190t1203t1486t1496t1497t1497.001t1498.001t1499.002t1499.003t1565t1595.001t1595.002t1595.003tcp protocoltelnet threatthingsthreat actortor nodetwitterxmrig

Activity Timeline

1 total obs
Jun 6Jun 6

Threat Activity Heatmap

· Peak: 2026-06-06
Less
More
Mon
Wed
Fri
Jun
·
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Threat ScoreLow Risk
37
SIGNAL
Signal Score
37%
Confidence
8
Reports
First seenFeb 14, 2025
Last seenJun 6, 2026
GeolocationKR
CountryKorea, Republic of
LocationTongyeong, Gyeongsangnam-do
ASNAS4766
OrgKorea Telecom
Coords34.8496, 128.4280
Proxy

VirusTotal

Not checked

WHOIS

references
https://1275.ru/ioc/gs-25-1490-mirai-botnet-iocs_10200

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 1 year ago · Last seen 8 days ago
Appeared in 8 threat reports