IOC Radar
IPLowSignal 34/100

135.196.166.183

Location
Korea, Republic ofKorea, Republic of
Seoul, Seoul
ASN
AS4766
CODE200GTT
First Seen
Jan 29, 2026
Last Seen
May 31, 2026
Jan 29
First Seen
133d ago
May 31
Last Seen
11d ago
2
Reports
source reports
34%
Confidence
low
0/91
VirusTotal
detections
Found in 2 reports. Confidence: low. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
34%
Signal Score
34 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

10 techniques

Network Information

CountryKRKorea, Republic of
RegionSeoul, Seoul
ASNAS4766
OrganizationCODE200GTT

Feed Intelligence Summary

2 reports34% confidence
2
Source reports
34%
Confidence score
Category tags
active scanactive scanningasiabad web botbotnet activitybrute forcebrute force attackbrute-forcecredential accesscredential stuffingddosdenial of serviceexploitation activityhackingidentity & access exploitationkrnetworkpassword attacksproxyreconnaissanceresearchedscannersouth koreat1110.001t1110.002t1110.003t1110.004t1190t1203t1499.001t1595.001t1595.002t1595.003web app attackweb application attackweb exploitation

Activity Timeline

1 total obs
May 31May 31

Threat Activity Heatmap

· Peak: 2026-05-31
Less
More
Mon
Wed
Fri
Jun
·
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Threat ScoreLow Risk
34
SIGNAL
Signal Score
34%
Confidence
2
Reports
First seenJan 29, 2026
Last seenMay 31, 2026
GeolocationKR
CountryKorea, Republic of
LocationSeoul, Seoul
ASNAS4766
OrgCODE200GTT
Coords37.5658, 126.9780

VirusTotal

0/ 91vendors flagged
0% detection rateJun 10, 2026

WHOIS

raw
inetnum: 135.196.166.0 - 135.196.166.255 netname: LT-CODE200-20080305-GTT descr: Code200 UAB country: LT admin-c: ET6133-RIPE tech-c: JC12505-RIPE status: LEGACY mnt-by: AS3257-IPAM-MNT mnt-by: mnt-lt-code200-1 created: 2025-07-28T08:52:06Z last-modified: 2025-09-08T10:37:54Z source: RIPE geofeed: https://code200noc.github.io/suballocated-geofeed.csv person: Egle Trumpulyte address: Gostauto 40A, Vilnius, Lithuania phone: +370 691 31338 nic-hdl: ET6133-RIPE mnt-by: AS3257-IPAM-MNT created: 2025-05-15T07:37:36Z last-modified: 2025-05-15T07:37:36Z source: RIPE # Filtered person: Julius Cicenas address: Gostauto 40A, Vilnius, Lithuania phone: +370 5 207-8174 nic-hdl: JC12505-RIPE mnt-by: AS3257-IPAM-MNT created: 2025-05-15T07:38:53Z last-modified: 2025-05-15T07:38:53Z source: RIPE # Filtered route: 135.196.166.0/24 origin: AS4766 mnt-by: AS3257-IPAM-MNT mnt-by: mnt-lt-code200-1 created: 2025-08-29T15:37:25Z last-modified: 2025-08-29T15:37:25Z source: RIPE

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

low
First detected 4 months ago · Last seen 11 days ago
Appeared in 2 threat reports