170.205.29.83
170.205.29.83 is an IP address
that 4 published sources report
in connection with Contagious Interview, Kimsuky and APT37 activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from Proofpoint, Genians and Stormshield.
The earliest of those reports is dated 2026-06-05 and the most recent 2026-11-11.
ip address Contagious InterviewKimsukyAPT37 MATCHED IN SOURCE
Network
| Kind | data centre |
|---|---|
| Network | Advin Services LLC |
| Announced by | AS206216 Advin Services LLC |
| Country | Japan |
| Flags | hosting range |
Sources
-
…LLC IPs for hosting, which are likely attacker-controlled boxes that were also used as sender IPs in early UNK_DeadDrop campaigns: 170.205.29.83 and 170.205.30.227 .…
Don't Fear the Repo: UNK_DeadDrop Phishing Campaign Targets Developers to Steal Cryptocurrency | Proofpoint US — Proofpoint -
…f4e7ca8c1de252840c1f0e957cd4b717 f73e07efb8707e3561e9cbff74557acb C2 112.216.9.171 170.205.29.83 170.205.30.227 185.27.134.140 27.102.137.126 27.102.137.159 27.102.138.44 Domain stoks.great-site.net…
Kimsuky Integrates AI into Attack Operations, From AI-Generated Decoy Documents to a Local LLM — Genians -
…f4e7ca8c1de252840c1f0e957cd4b717 f73e07efb8707e3561e9cbff74557acb C2 112.216.9.171 170.205.29.83 170.205.30.227 185.27.134.140 27.102.137.126 27.102.137.159 27.102.138.44 Domain stoks.great-site.net…
AI를 공격 체계에 접목하는 김수키, 미끼 문서 제작부터 로컬 LLM 구축까지 — Genians -
…asteara.org is among the infrastructure attributed by Proofpoint to the UNK_DeadDrop cluster as early as April 2026 [1]. The IP address 170.205.29.83 was used by the same cluster for its phishing email delivery [1] and appears among the C2 servers listed by Genians [3].…
Discover of the Trigram Campaign, IA, Blockchain & Logistic — Stormshield
Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.
Related indicators
Cited by the same report: Don't Fear the Repo: UNK_DeadDrop Phishing Campaign Targets Developers to Steal Cryptocurrency | Proofpoint US
All 82 indicators from this source
Cited by the same report: Kimsuky Integrates AI into Attack Operations, From AI-Generated Decoy Documents to a Local LLM
All 54 indicators from this source