# Kazakhstan - Cyber Threat Intelligence

These _indicators_ were reported, collected, and generated during the [VulDB CTI analysis](https://vuldb.com/?kb.cti) of the campaign known as _Kazakhstan_. The _activity monitoring_ correlates data from social media, forums, chat rooms, and darknet markets. It helps to determine associated actors, specific activities, expected intentions, emerging research, and ongoing attacks. Our unique _predictive model_ uses _big data_ to forecast activities and their characteristics.

_Live data_ and more _analysis capabilities_ are available at [https://vuldb.com/?actor](https://vuldb.com/?actor)

## Countries

These _countries_ are directly (e.g. origin of attacks) or indirectly (e.g. access by proxy) associated with Kazakhstan:

* [CN](https://vuldb.com/?country.cn)
* [KZ](https://vuldb.com/?country.kz)
* [US](https://vuldb.com/?country.us)
* ...

There are 15 more country items available. Please use our online service to access the data.

## Actors

These _actors_ are associated with Kazakhstan or other actors linked to the campaign.

ID | Actor | Confidence
-- | ----- | ----------
1 | [Unknown](https://vuldb.com/?actor.unknown) | High
2 | [Calypso](https://vuldb.com/?actor.calypso) | High
3 | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High

## IOC - Indicator of Compromise

These _indicators of compromise_ (IOC) indicate associated network resources which are known to be part of research and attack activities of Kazakhstan.

ID | IP address | Hostname | Actor | Confidence
-- | ---------- | -------- | ----- | ----------
1 | [2.57.96.0](https://vuldb.com/?ip.2.57.96.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
2 | [2.72.0.0](https://vuldb.com/?ip.2.72.0.0) | 2-72-0-0.kcell.kz | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
3 | [2.132.0.0](https://vuldb.com/?ip.2.132.0.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
4 | [2.228.150.86](https://vuldb.com/?ip.2.228.150.86) | 2-228-150-86.ip192.fastwebnet.it | [Unknown](https://vuldb.com/?actor.unknown) | High
5 | [2.229.68.182](https://vuldb.com/?ip.2.229.68.182) | 2-229-68-182.ip195.fastwebnet.it | [Unknown](https://vuldb.com/?actor.unknown) | High
6 | [5.23.24.0](https://vuldb.com/?ip.5.23.24.0) | if-ge-11-3-9-0.tcore1.a062l-uralsk.as6453.net | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
7 | [5.34.0.0](https://vuldb.com/?ip.5.34.0.0) | client.fttb.2day.kz | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
8 | [5.42.222.0](https://vuldb.com/?ip.5.42.222.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
9 | [5.45.204.0](https://vuldb.com/?ip.5.45.204.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
10 | [5.45.213.0](https://vuldb.com/?ip.5.45.213.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
11 | [5.45.221.0](https://vuldb.com/?ip.5.45.221.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
12 | [5.45.221.128](https://vuldb.com/?ip.5.45.221.128) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
13 | [5.45.221.144](https://vuldb.com/?ip.5.45.221.144) | kartel-rp1.yndx.net | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
14 | [5.45.221.152](https://vuldb.com/?ip.5.45.221.152) | std-rc1-gre364.yndx.net | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
15 | [5.45.221.155](https://vuldb.com/?ip.5.45.221.155) | kartel-rp1-gre365.yndx.net | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
16 | [5.45.221.156](https://vuldb.com/?ip.5.45.221.156) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
17 | [5.45.221.160](https://vuldb.com/?ip.5.45.221.160) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
18 | [5.45.221.192](https://vuldb.com/?ip.5.45.221.192) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
19 | [5.59.40.0](https://vuldb.com/?ip.5.59.40.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
20 | [5.59.196.0](https://vuldb.com/?ip.5.59.196.0) | dhcp-0-196-59-5.metro86.ru | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
21 | [5.59.208.0](https://vuldb.com/?ip.5.59.208.0) | dhcp-0-208-59-5.metro86.ru | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
22 | [5.59.242.0](https://vuldb.com/?ip.5.59.242.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
23 | [5.62.60.192](https://vuldb.com/?ip.5.62.60.192) | r-192-60-62-5.consumer-pool.prcdn.net | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
24 | [5.62.62.184](https://vuldb.com/?ip.5.62.62.184) | r-184-62-62-5.consumer-pool.prcdn.net | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
25 | [5.63.64.0](https://vuldb.com/?ip.5.63.64.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
26 | [5.76.0.0](https://vuldb.com/?ip.5.76.0.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
27 | [5.101.52.0](https://vuldb.com/?ip.5.101.52.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
28 | [5.101.56.0](https://vuldb.com/?ip.5.101.56.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
29 | [5.104.232.0](https://vuldb.com/?ip.5.104.232.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
30 | [5.180.16.0](https://vuldb.com/?ip.5.180.16.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
31 | [5.183.178.181](https://vuldb.com/?ip.5.183.178.181) | - | [Calypso](https://vuldb.com/?actor.calypso) | High
32 | [5.188.64.0](https://vuldb.com/?ip.5.188.64.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
33 | [5.188.152.0](https://vuldb.com/?ip.5.188.152.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
34 | [5.188.228.53](https://vuldb.com/?ip.5.188.228.53) | indppur1.example.com | [Calypso](https://vuldb.com/?actor.calypso) | High
35 | [5.188.240.0](https://vuldb.com/?ip.5.188.240.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
36 | [5.189.202.0](https://vuldb.com/?ip.5.189.202.0) | subnet.gcore.lu | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
37 | [5.189.207.0](https://vuldb.com/?ip.5.189.207.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
38 | [5.250.128.0](https://vuldb.com/?ip.5.250.128.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
39 | [5.251.0.0](https://vuldb.com/?ip.5.251.0.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
40 | [5.255.204.0](https://vuldb.com/?ip.5.255.204.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
41 | [31.10.3.0](https://vuldb.com/?ip.31.10.3.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
42 | [31.31.216.0](https://vuldb.com/?ip.31.31.216.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
43 | [31.43.179.0](https://vuldb.com/?ip.31.43.179.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
44 | [31.132.80.0](https://vuldb.com/?ip.31.132.80.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
45 | [31.133.208.0](https://vuldb.com/?ip.31.133.208.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
46 | [31.148.22.0](https://vuldb.com/?ip.31.148.22.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
47 | [31.148.140.0](https://vuldb.com/?ip.31.148.140.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
48 | [31.169.0.0](https://vuldb.com/?ip.31.169.0.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
49 | [31.171.160.0](https://vuldb.com/?ip.31.171.160.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
50 | [31.210.174.0](https://vuldb.com/?ip.31.210.174.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
51 | [31.223.192.0](https://vuldb.com/?ip.31.223.192.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
52 | [37.0.127.0](https://vuldb.com/?ip.37.0.127.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
53 | [37.9.16.0](https://vuldb.com/?ip.37.9.16.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
54 | [37.17.176.0](https://vuldb.com/?ip.37.17.176.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
55 | [37.18.30.0](https://vuldb.com/?ip.37.18.30.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
56 | [37.18.91.0](https://vuldb.com/?ip.37.18.91.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
57 | [37.46.48.0](https://vuldb.com/?ip.37.46.48.0) | 37-46-48-0.obit.kz | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
58 | [37.46.96.0](https://vuldb.com/?ip.37.46.96.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
59 | [37.61.229.0](https://vuldb.com/?ip.37.61.229.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
60 | [37.61.231.0](https://vuldb.com/?ip.37.61.231.0) | subnet.gcore.lu | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
61 | [37.77.128.0](https://vuldb.com/?ip.37.77.128.0) | 37-77-128-0.obit.kz | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
62 | [37.99.0.0](https://vuldb.com/?ip.37.99.0.0) | client.fttb.2day.kz | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
63 | [37.150.0.0](https://vuldb.com/?ip.37.150.0.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
64 | [37.208.40.0](https://vuldb.com/?ip.37.208.40.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
65 | [37.221.202.0](https://vuldb.com/?ip.37.221.202.0) | 37-221-202-0.obit.kz | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
66 | [37.221.207.0](https://vuldb.com/?ip.37.221.207.0) | 37-221-207-0.obit.kz | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
67 | [37.228.64.0](https://vuldb.com/?ip.37.228.64.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
68 | [37.230.202.0](https://vuldb.com/?ip.37.230.202.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
69 | [37.230.231.0](https://vuldb.com/?ip.37.230.231.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
70 | [37.230.251.0](https://vuldb.com/?ip.37.230.251.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
71 | [45.8.116.0](https://vuldb.com/?ip.45.8.116.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
72 | [45.12.70.126](https://vuldb.com/?ip.45.12.70.126) | assessed.yourbandinc.com | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
73 | [45.12.71.126](https://vuldb.com/?ip.45.12.71.126) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
74 | [45.13.16.0](https://vuldb.com/?ip.45.13.16.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
75 | [45.32.184.101](https://vuldb.com/?ip.45.32.184.101) | 45.32.184.101.vultrusercontent.com | [Unknown](https://vuldb.com/?actor.unknown) | High
76 | [45.59.141.0](https://vuldb.com/?ip.45.59.141.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
77 | [45.63.114.127](https://vuldb.com/?ip.45.63.114.127) | 45.63.114.127.vultrusercontent.com | [Unknown](https://vuldb.com/?actor.unknown) | High
78 | [45.66.24.0](https://vuldb.com/?ip.45.66.24.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
79 | [45.77.234.118](https://vuldb.com/?ip.45.77.234.118) | MPVWEP01.myphonevouchers.com.au | [Unknown](https://vuldb.com/?actor.unknown) | High
80 | [45.80.208.0](https://vuldb.com/?ip.45.80.208.0) | subnet.gcore.lu | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
81 | [45.82.31.0](https://vuldb.com/?ip.45.82.31.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
82 | [45.84.178.0](https://vuldb.com/?ip.45.84.178.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
83 | [45.86.80.0](https://vuldb.com/?ip.45.86.80.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
84 | [45.92.84.0](https://vuldb.com/?ip.45.92.84.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
85 | [45.129.0.0](https://vuldb.com/?ip.45.129.0.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
86 | [45.130.139.0](https://vuldb.com/?ip.45.130.139.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
87 | [45.132.84.0](https://vuldb.com/?ip.45.132.84.0) | www.example.com | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
88 | [45.132.160.0](https://vuldb.com/?ip.45.132.160.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
89 | [45.133.232.0](https://vuldb.com/?ip.45.133.232.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
90 | [45.133.234.0](https://vuldb.com/?ip.45.133.234.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
91 | [45.135.131.0](https://vuldb.com/?ip.45.135.131.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
92 | [45.136.56.0](https://vuldb.com/?ip.45.136.56.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
93 | [45.137.188.0](https://vuldb.com/?ip.45.137.188.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
94 | [45.138.220.0](https://vuldb.com/?ip.45.138.220.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
95 | [45.141.248.0](https://vuldb.com/?ip.45.141.248.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
96 | [45.143.88.0](https://vuldb.com/?ip.45.143.88.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
97 | [45.143.240.0](https://vuldb.com/?ip.45.143.240.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
98 | [45.144.242.216](https://vuldb.com/?ip.45.144.242.216) | - | [Calypso](https://vuldb.com/?actor.calypso) | High
99 | [45.145.4.0](https://vuldb.com/?ip.45.145.4.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
100 | [45.147.228.131](https://vuldb.com/?ip.45.147.228.131) | - | [Calypso](https://vuldb.com/?actor.calypso) | High
101 | [45.148.30.122](https://vuldb.com/?ip.45.148.30.122) | - | [Unknown](https://vuldb.com/?actor.unknown) | High
102 | [45.149.128.0](https://vuldb.com/?ip.45.149.128.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
103 | [45.152.84.0](https://vuldb.com/?ip.45.152.84.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
104 | [45.152.214.0](https://vuldb.com/?ip.45.152.214.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
105 | [45.153.50.0](https://vuldb.com/?ip.45.153.50.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
106 | [45.153.54.0](https://vuldb.com/?ip.45.153.54.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
107 | [45.154.1.0](https://vuldb.com/?ip.45.154.1.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
108 | [45.159.86.0](https://vuldb.com/?ip.45.159.86.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
109 | [45.159.250.0](https://vuldb.com/?ip.45.159.250.0) | . | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
110 | [45.192.129.0](https://vuldb.com/?ip.45.192.129.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
111 | [45.251.241.26](https://vuldb.com/?ip.45.251.241.26) | - | [Unknown](https://vuldb.com/?actor.unknown) | High
112 | [46.8.25.0](https://vuldb.com/?ip.46.8.25.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
113 | [46.8.31.0](https://vuldb.com/?ip.46.8.31.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
114 | [46.8.43.0](https://vuldb.com/?ip.46.8.43.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
115 | [46.8.108.0](https://vuldb.com/?ip.46.8.108.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
116 | [46.8.149.0](https://vuldb.com/?ip.46.8.149.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
117 | [46.8.150.0](https://vuldb.com/?ip.46.8.150.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
118 | [46.8.249.0](https://vuldb.com/?ip.46.8.249.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
119 | [46.8.252.0](https://vuldb.com/?ip.46.8.252.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
120 | [46.16.144.0](https://vuldb.com/?ip.46.16.144.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
121 | [46.17.249.0](https://vuldb.com/?ip.46.17.249.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
122 | [46.17.255.0](https://vuldb.com/?ip.46.17.255.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
123 | [46.19.40.0](https://vuldb.com/?ip.46.19.40.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
124 | [46.34.130.0](https://vuldb.com/?ip.46.34.130.0) | 46-34-130-0.obit.kz | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
125 | [46.34.146.0](https://vuldb.com/?ip.46.34.146.0) | 46-34-146-0.obit.kz | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
126 | [46.34.192.0](https://vuldb.com/?ip.46.34.192.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
127 | [46.36.128.0](https://vuldb.com/?ip.46.36.128.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
128 | [46.36.201.131](https://vuldb.com/?ip.46.36.201.131) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
129 | [46.36.201.132](https://vuldb.com/?ip.46.36.201.132) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
130 | [46.42.192.0](https://vuldb.com/?ip.46.42.192.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
131 | [46.105.227.110](https://vuldb.com/?ip.46.105.227.110) | - | [Calypso](https://vuldb.com/?actor.calypso) | High
132 | [46.161.62.0](https://vuldb.com/?ip.46.161.62.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
133 | [46.166.129.241](https://vuldb.com/?ip.46.166.129.241) | thekubectlbook.com | [Unknown](https://vuldb.com/?actor.unknown) | High
134 | [46.227.184.0](https://vuldb.com/?ip.46.227.184.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
135 | [46.235.80.0](https://vuldb.com/?ip.46.235.80.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
136 | [46.255.232.0](https://vuldb.com/?ip.46.255.232.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
137 | [57.90.140.0](https://vuldb.com/?ip.57.90.140.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
138 | [57.92.144.0](https://vuldb.com/?ip.57.92.144.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
139 | [62.4.116.0](https://vuldb.com/?ip.62.4.116.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
140 | [62.32.78.0](https://vuldb.com/?ip.62.32.78.0) | 62-32-78-0.obit.ru | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
141 | [62.32.84.0](https://vuldb.com/?ip.62.32.84.0) | 62-32-84-0.obit.kz | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
142 | [62.32.92.0](https://vuldb.com/?ip.62.32.92.0) | 62-32-92-0.obit.kz | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
143 | [62.84.32.0](https://vuldb.com/?ip.62.84.32.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
144 | [62.89.216.0](https://vuldb.com/?ip.62.89.216.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
145 | [62.122.0.0](https://vuldb.com/?ip.62.122.0.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
146 | [62.122.104.0](https://vuldb.com/?ip.62.122.104.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
147 | [62.133.47.0](https://vuldb.com/?ip.62.133.47.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
148 | [62.141.111.58](https://vuldb.com/?ip.62.141.111.58) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
149 | [64.64.121.232](https://vuldb.com/?ip.64.64.121.232) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
150 | [66.102.46.192](https://vuldb.com/?ip.66.102.46.192) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
151 | [67.209.128.0](https://vuldb.com/?ip.67.209.128.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
152 | [77.73.128.0](https://vuldb.com/?ip.77.73.128.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
153 | [77.73.130.0](https://vuldb.com/?ip.77.73.130.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
154 | [77.73.135.0](https://vuldb.com/?ip.77.73.135.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
155 | [77.74.64.0](https://vuldb.com/?ip.77.74.64.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
156 | [77.81.177.0](https://vuldb.com/?ip.77.81.177.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
157 | [77.91.75.0](https://vuldb.com/?ip.77.91.75.0) | . | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
158 | [77.94.3.0](https://vuldb.com/?ip.77.94.3.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
159 | [77.94.4.0](https://vuldb.com/?ip.77.94.4.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
160 | [77.94.8.0](https://vuldb.com/?ip.77.94.8.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
161 | [77.94.16.0](https://vuldb.com/?ip.77.94.16.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
162 | [77.220.206.0](https://vuldb.com/?ip.77.220.206.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
163 | [77.240.32.0](https://vuldb.com/?ip.77.240.32.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
164 | [77.245.96.0](https://vuldb.com/?ip.77.245.96.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
165 | [78.40.108.0](https://vuldb.com/?ip.78.40.108.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
166 | [78.109.144.0](https://vuldb.com/?ip.78.109.144.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
167 | [78.140.223.0](https://vuldb.com/?ip.78.140.223.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
168 | [78.140.244.0](https://vuldb.com/?ip.78.140.244.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
169 | [79.110.22.128](https://vuldb.com/?ip.79.110.22.128) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
170 | [79.133.184.0](https://vuldb.com/?ip.79.133.184.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
171 | [79.134.32.0](https://vuldb.com/?ip.79.134.32.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
172 | [79.137.170.0](https://vuldb.com/?ip.79.137.170.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
173 | [79.137.176.0](https://vuldb.com/?ip.79.137.176.0) | - | [Kazakhstan Unknown](https://vuldb.com/?actor.kazakhstan_unknown) | High
174 | ... | ... | ... | ...

There are 692 more IOC items available. Please use our online service to access the data.

## TTP - Tactics, Techniques, Procedures

_Tactics, techniques, and procedures_ (TTP) summarize the suspected MITRE ATT&CK techniques used within Kazakhstan. This data is unique as it uses our predictive model for actor profiling.

ID | Technique | Weakness | Description | Confidence
-- | --------- | -------- | ----------- | ----------
1 | T1006 | CWE-21, CWE-22, CWE-23, CWE-24, CWE-50 | Path Traversal | High
2 | T1040 | CWE-319 | Authentication Bypass by Capture-replay | High
3 | T1055 | CWE-74 | Injection | High
4 | T1059 | CWE-88, CWE-94, CWE-1321 | Argument Injection | High
5 | T1059.007 | CWE-79, CWE-80 | Cross Site Scripting | High
6 | ... | ... | ... | ...

There are 21 more TTP items available. Please use our online service to access the data.

## IOA - Indicator of Attack

These _indicators of attack_ (IOA) list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration during Kazakhstan. This data is unique as it uses our predictive model for actor profiling.

ID | Type | Indicator | Confidence
-- | ---- | --------- | ----------
1 | File | `/?p=products` | Medium
2 | File | `/admin/controller/JobLogController.java` | High
3 | File | `/api/baskets/{name}` | High
4 | File | `/api/jolokia org.jolokia.http.HttpRequestHandler#handlePostRequest` | High
5 | File | `/api/stl/actions/search` | High
6 | File | `/api/sys/login` | High
7 | File | `/api/sys/set_passwd` | High
8 | File | `/api/trackedEntityInstances` | High
9 | File | `/api/v2/cli/commands` | High
10 | File | `/aux` | Low
11 | File | `/bin/ate` | Medium
12 | File | `/booking/show_bookings/` | High
13 | File | `/cgi-bin` | Medium
14 | File | `/changePassword` | High
15 | File | `/Content/Template/root/reverse-shell.aspx` | High
16 | File | `/dashboard/add-blog.php` | High
17 | File | `/data/remove` | Medium
18 | File | `/debug/pprof` | Medium
19 | File | `/dottie.js` | Medium
20 | File | `/ecshop/admin/template.php` | High
21 | File | `/env` | Low
22 | File | `/etc/passwd` | Medium
23 | File | `/forum/away.php` | High
24 | File | `/geoserver/rest/about/status` | High
25 | File | `/group1/uploa` | High
26 | File | `/index.php` | Medium
27 | File | `/index.php?menu=asterisk_cli` | High
28 | File | `/nagiosxi/admin/banner_message-ajaxhelper.php` | High
29 | File | `/php-sms/admin/?page=user/manage_user` | High
30 | File | `/plesk-site-preview/` | High
31 | File | `/post.php` | Medium
32 | File | `/resources//../` | High
33 | File | `/testConnection` | High
34 | File | `/tmp/ppd.trace` | High
35 | File | `/uncpath/` | Medium
36 | File | `/user/inc/workidajax.php` | High
37 | File | `/user/ticket/create` | High
38 | ... | ... | ...

There are 326 more IOA items available (file, library, argument, input value, pattern, network port). Please use our online service to access the data.

## References

The following list contains _external sources_ which discuss the campaign and the associated activities:

* https://blog.google/threat-analysis-group/italian-spyware-vendor-targets-users-in-italy-and-kazakhstan/
* https://github.com/firehol/blocklist-ipsets/blob/master/geolite2_country/country_kz.netset
* https://github.com/firehol/blocklist-ipsets/blob/master/ip2location_country/ip2location_country_kz.netset
* https://github.com/firehol/blocklist-ipsets/blob/master/ipip_country/ipip_country_kz.netset
* https://news.drweb.com/show/?i=14451
* https://st.drweb.co.jp/static/new-www/news/2020/july/Study_of_the_APT_attacks_on_state_institutions_in_Kazakhstan_and_Kyrgyzstan_en.pdf
* https://st.drweb.com/static/new-www/news/2022/march/telecom_research_en.pdf

## Literature

The following _articles_ explain our unique predictive cyber threat intelligence:

* [VulDB Cyber Threat Intelligence Documentation](https://vuldb.com/?kb.cti)
* [Cyber Threat Intelligence - Early Anticipation of Attacks](https://www.scip.ch/en/?labs.20201022)

## License

(c) [1997-2024](https://vuldb.com/?kb.changelog) by [vuldb.com](https://vuldb.com/?kb.about). All data on this page is shared under the license [CC BY-NC-SA 4.0](https://creativecommons.org/licenses/by-nc-sa/4.0/). Questions? Check the [FAQ](https://vuldb.com/?kb.faq), read the [documentation](https://vuldb.com/?kb) or [contact us](https://vuldb.com/?contact)!
