IOC Radar
IPMediumSignal 100/100

175.214.78.244

Location
Korea, Republic ofKorea, Republic of
Seongbuk-gu, 11
ASN
AS4766
Kornet
First Seen
Apr 29, 2024
Last Seen
Feb 14, 2026
Apr 29
First Seen
773d ago
Feb 14
Last Seen
117d ago
13
Reports
source reports
99%
Confidence
medium
6/91
VirusTotal
detections
Found in 13 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
99%
Signal Score
100 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

37 techniques

Network Information

CountryKRKorea, Republic of
RegionSeongbuk-gu, 11
ASNAS4766
OrganizationKornet

Feed Intelligence Summary

13 reports99% confidence
13
Source reports
99%
Confidence score
Category tags
abuseabusech-urlhaus-c2caccess controlactive scanningasiaattackauthentication failurebotnetbrute forcebrute force attackc2censyscommand and controlcommunication protocolcommunication technologiescredential accesscredential harvestingcredential stuffingdata exfiltrationddosddos attacksdecoy systemdenial of servicedistributed attackselfexploit attemptsexploited hostftp brute forcehackinghajimehttp brute forceindicatorinfrastructure acquisitionreconnaissanceinternet of thingsintrusion detectioniot attackiot botnetiot/ics attackkorea, republic ofkrlateral movementloginlogin attemptsmalicious activitymalicious softwaremalwaremalware propagationmalware scanningmanualmirai botnetmobile carriersmobile networksnetworknetwork attacksnetwork probenetwork probingnetwork reconnaissancenetwork scanningnetwork securitypassword attacksphishing attackprocess injectionprotocol exploitationreconnaissanceremote accessremote access attemptremote servicesresearchedscanscannersecurity policysmtp brute forcesocial engineeringsocradar honeypotsouth koreasql injection attemptsssh attackt1021t1021.001t1040t1046t1055t1059t1071.001t1076t1078t1110t1110.001t1110.002t1110.003t1110.004t1133t1187t1190t1199t1210t1486t1496t1499.001t1499.002t1499.003t1563t1565t1566.001t1566.002t1566.003t1587.001t1588t1589t1590.001t1595t1595.001t1595.002t1595.003tcp protocoltcp/23telecom servicestelecommunicationstelnet threatthreat actorthreat intelligencethreat preventionunauthorized access

Activity Timeline

1 total obs
Feb 14Feb 14

Threat Activity Heatmap

· Peak: 2026-02-14
Less
More
Mon
Wed
Fri
Jun
·
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Threat ScoreHigh Risk
100
SIGNAL
Signal Score
99%
Confidence
13
Reports
First seenApr 29, 2024
Last seenFeb 14, 2026
GeolocationKR
CountryKorea, Republic of
LocationSeongbuk-gu, 11
ASNAS4766
OrgKornet
Coords37.5944, 126.9864

VirusTotal

6/ 91vendors flagged
7% detection rateJun 8, 2026

WHOIS

raw
inetnum: 175.192.0.0 - 175.215.255.255 netname: KORNET descr: Korea Telecom admin-c: IM667-AP tech-c: IM667-AP country: KR status: ALLOCATED PORTABLE mnt-by: MNT-KRNIC-AP mnt-irt: IRT-KRNIC-KR last-modified: 2017-02-03T02:22:08Z source: APNIC irt: IRT-KRNIC-KR address: 9, Jinheung-gil, Naju-si, Jeollanam-do e-mail: [email protected] abuse-mailbox: [email protected] admin-c: IM574-AP tech-c: IM574-AP auth: # Filtered remarks: [email protected] was validated on 2020-04-09 mnt-by: MNT-KRNIC-AP last-modified: 2025-09-04T01:00:01Z source: APNIC person: IP Manager address: Gyeonggi-do Bundang-gu, Seongnam-si Buljeong-ro 90 country: KR phone: +82-2-500-6630 e-mail: [email protected] nic-hdl: IM667-AP mnt-by: MNT-KRNIC-AP last-modified: 2017-03-28T06:37:04Z source: APNIC inetnum: 175.192.0.0 - 175.215.255.255 netname: KORNET-KR descr: Korea Telecom country: KR admin-c: IA9-KR tech-c: IM9-KR status: ALLOCATED PORTABLE mnt-by: MNT-KRNIC-AP mnt-irt: IRT-KRNIC-KR changed: [email protected] 20240912 remarks: This information has been partially mirrored by APNIC from remarks: KRNIC. To obtain more specific information, please use the remarks: KRNIC whois server at whois.kisa.or.kr. source: KRNIC person: IP Manager address: Gyeonggi-do Bundang-gu, Seongnam-si Buljeong-ro 90 address: KT Head Office country: KR phone: +82-2-500-6630 e-mail: [email protected] nic-hdl: IA9-KR mnt-by: MNT-KRNIC-AP changed: [email protected] 20240912 remarks: This information has been partially mirrored by APNIC from remarks: KRNIC. To obtain more specific information, please use the remarks: KRNIC whois server at whois.kisa.or.kr. source: KRNIC person: IP Manager address: Gyeonggi-do Bundang-gu, Seongnam-si Buljeong-ro 90 address: KT Head Office country: KR phone: +82-2-500-6630 e-mail: [email protected] nic-hdl: IM9-KR mnt-by: MNT-KRNIC-AP changed: [email protected] 20240912 remarks: This information has been partially mirrored by APNIC from remarks: KRNIC. To obtain more specific information, please use the remarks: KRNIC whois server at whois.kisa.or.kr. source: KRNIC
references
https://raw.githubusercontent.com/ahamed-rizvan/IOCs/refs/heads/main/Malicous%20IP%20Address.txt, https://www.linkedin.com/posts/starlightintel_cybersecurity-cyberattack-rce-activity-7244721743091658755-VDq6?utm_source=share&utm_medium=member_desktop

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 2 years ago · Last seen 3 months ago
Appeared in 13 threat reports