125.209.235.170 Threat Intelligence - South Korea | IP Address Lookup
ipinfopage
Share on:
General
IP Address
125.209.235.170
Location
🇰🇷 South Korea
Network
AS23576
Threat Score
40/100
Attack Intelligence
MITRE ATT&CK Techniques
T1046 - Network Service Scanning, T1595.001 - Scanning IP Blocks, T1595.002 - Vulnerability Scanning
Noticed
36 times
Protocols Attacked
mitre
Countries Attacked
Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
Geographic Location
Country
South Korea
City
Unknown
Region
Unknown
Coordinates
37.5112, 126.9741
Network Information
ASN
AS23576
Organization
NAVER Cloud Corp.
Network
AS23576 NAVER Cloud Corp.
WHOIS Information
inetnum
125.209.192.0 - 125.209.255.255
netname
NBP-NET
descr
NAVER Cloud Corp.
country
KR
admin-c
IM681-AP
tech-c
IM681-AP
status
ALLOCATED PORTABLE
mnt-by
MNT-KRNIC-AP
mnt-irt
IRT-KRNIC-KR
last-modified
2021-03-16T00:14:44Z
irt
IRT-KRNIC-KR
address
9, Jinheung-gil, Naju-si, Jeollanam-do
e-mail
irt@nic.or.kr
abuse-mailbox
irt@nic.or.kr
person
IP Manager
phone
+82-31-1588-3820
nic-hdl
IM681-AP
changed
hostmaster@nic.or.kr 20240912
Attack Logs
| Date | Target Location | Protocol | Link |
|---|---|---|---|
| 2026-10-19 | Webexploit Mitre T1593 Ip List 2026 10 19 | Multiple | View Log |
Additional Intelligence
Threat Feeds / IP Sets
- cruzit_web_attacks
Disclaimer
This page contains threat intelligence information for the IPv4 address 125.209.235.170 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only, and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.