← All actor clusters

108.181.52.229

108.181.52.229 is an IP address that one published source reports in connection with APT37 activity, which public reporting attributes to North Korea (DPRK). It is cited here from Genians. The report is dated 2024-11-05.

ip address APT37 MATCHED IN SOURCE

First seen 2024-11-05 · last seen 2024-11-05

Network

Looked up 2026-09-21 at ip-api.com. A hosting range is not evidence on its own.

Source

• …하기 아이피들은 실제 공격에 활용됐던 중요한 지표이지만, 시계열 시점상 휘발성 특성도 고려해야 합니다. 108.181.50.58 108.181.52.169 108.181.52.229 108.181.52.231 108.181.52.234 108.181.52.235 108.181.52.236 N/A [표 3] 2023년 식별된 아이피 대역들 ○ 한편, 지난 4월과 9월에 발견된 첨부파일…

  APT37 위협 배후의 사이버 정찰 활동 분석 — Genians · under “4. 정찰 시나리오 (Recon Scenario)” · published 2024-11-05 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: APT37 위협 배후의 사이버 정찰 활동 분석

Genians lists 17 other indicators in this source. 12 are shown, chosen across types.

• sandozmessi@gmail.com email address
• 105ecd9f6585df4e1fe267c2809ee190 file hash
• 5f6682ad9da4590cba106e2f1a8cbe26 file hash
• 7a66738cca9f86f4133415eedcbf8e88 file hash
• 108.181.52.231 IP address
• 108.181.52.234 IP address
• 108.181.52.235 IP address
• 108.181.52.236 IP address
• 141.164.60.110 IP address
• 141.164.62.19 IP address
• 158.247.219.10 IP address
• 158.247.249.129 IP address

All 18 indicators from this source