152.32.139.149

IPv4

Country: 🇰🇷 Korea, Republic of
Location: 37.565800, 126.978000
ASN: AS135377 — UCLOUD INFORMATION TECHNOLOGY HK LIMITED
Associated Domains: ncodcoverify.dns.navy, nidlogins.ncodcnverify.dns.navy, navs.ncodcrverify.dns.navy, ncodcqverify.dns.navy, ncodcsverify.dns.navy, ncodcrverify.dns.navy, nid.ncodcrverify.dns.navy, ncodcuverify.dns.navy, ncodcvverify.dns.navy, www.ncodcjverify.dns.army, ncoddbverify.v6.army, ncodbsverify.dynv6.net, nid.ncodbvverify.dynv6.net, ncodbvverify.dynv6.net, ndocavverify.dynv6.net, ndocadverify.dynv6.net, ndocazverify.dynv6.net, ndocawverify.dynv6.net, ndocayverify.dynv6.net, nid.ndocazverify.dynv6.net, ndocs0link.dns.army
First Seen: 2026-03-12
Last Seen: 2026-06-01

Shortcuts: Censys Criminal IP Hybrid Analysis Shodan Virustotal urlscan

2

Related Reports
22

Related IOCs

Related Reports

2026-04-17

Break Glass Intelligence

850 Hostnames, 6 Servers, 1 Kill Chain: Mapping Kimsuky's 2026 Korean Credential Harvesting Machine

#Kimsuky #Phishing #T1102.002 #T1059.005 #T1027 #T1583.006 #T1566.003 #T1567 #T1583.003 #T1204.004 #T1057 #T1082 #T1518.001 #T1568.001 #T1566.001 #T1547.001 #T1585.002 #T1140 #T1056.003 #T1204.001 #T1053.005 #T1539 #T1041 #T1113 #T1608.005 #T1608.001 #T1204.002 #T1598.003 #T1071.001 #T1590.005 #T1115 #T1083 #T1583.001 #T1059.001 #T1497 #T1056.001 #T1566.002 #T1036.005

2026-03-12

Break Glass Intelligence

Kimsuky's Five-Stage GrimResource Loader: When an MMC File Becomes a Shellcode Injector

#Kimsuky #GrimResource #T1055 #T1140 #T1059.007 #T1127 #T1566.001 #T1568.001 #T1027 #T1218 #T1071.001 #T1220

« Back

⚠ These IoCs were automatically extracted using regular expressions or an LLM and may include non-malicious data.