IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Your Exposure
TLP:WHITE19 IOCs

GreyNoise Labs Weekly OAST (Well-known Out-of-band Interaction Domains) Report • Week Ending 2026-01-09

GR
GreyNoise
Published January 10, 2026Original Report

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYunknownINFRASTRUCTURE209.38.59.248104.28.214.434.91.29.122CAPABILITYunknownVICTIMunknown
Adversary
Infrastructure(6)
Capability
Victim

Indicators of Compromise

Indicators of Compromise19

TypeIndicatorConfidenceScoreFirst Seen
IP209.38.59.248
indicatorintel-blognetwork
High
58
Oct 9, 26
IP104.28.214.4
intel-blognetworkproxy
High
58
Oct 9, 26
IP34.91.29.122
indicatorintel-blognetwork
High
58
Oct 9, 26
IP80.191.90.190
indicatorintel-blognetwork
High
58
Oct 9, 26
IP51.77.116.46
exploitintel-blogmalware
High
58
Oct 9, 26
IP195.24.237.218
exploitintel-blognetwork
High
58
Oct 9, 26
IP104.28.246.4
exploitintel-blognetwork
High
58
Oct 9, 26
CVECVE-2021-44228
aptespionageexfiltration
High
80
Jun 5, 26
IP185.181.183.41
indicatorintel-blognetwork
High
58
Oct 9, 26
CVECVE-2025-55182
aptbotnetc2
High
81
Jun 2, 26
IP188.212.125.110
indicatorintel-blognetwork
High
58
Oct 9, 26
IP34.91.156.181
indicatorintel-blognetwork
High
58
Oct 9, 26
IP198.98.61.39
intel-blognetworkproxy
High
58
Oct 9, 26
IP82.154.215.52
exploitintel-blognetwork
High
58
Oct 9, 26
IP34.91.237.187
indicatorintel-blognetwork
High
58
Oct 9, 26
CVECVE-2025-8943
exploitintel-blogmalware
Medium
54
Oct 9, 26
IP94.26.88.61
exploitintel-blognetwork
High
58
Oct 9, 26
IP34.32.217.222
indicatorintel-blognetwork
High
58
Oct 9, 26
IP139.59.217.230
active scanactive scanningasia
Medium
61
Dec 20, 25

IOC Relationship Graph

IOC Relationship Graph19 total IOCs
IPCVE
IP16CVE3REPORTGreyNoise Labs Weekly OAST
scroll to zoom · drag to pan · click IOC to open