← All actor clusters

159.100.29.38

159.100.29.38 is an IP address that one published source reports in connection with unclustered DPRK activity, which public reporting attributes to North Korea (DPRK). It is cited here from Genians. The report is dated 2024-02-21.

ip address DPRK (cluster unattributed) MATCHED IN SOURCE

First seen 2024-02-21 · last seen 2024-02-21

Network

Looked up 2026-09-21 at ip-api.com. A hosting range is not evidence on its own.

Source

• …그리고 명령제어(C2) 주소는 RemoteEndPoint 값으로 설정돼 있습니다. ○ 본 위협 사례에서 사용된 C2 서버는 독일소재의 159.100.29.38 아이피 주소가 사용됐으며, 포트명은 9999 입니다. [그림 10] XenoRAT C2 주소 디버깅 모습 4.…

  새해 오피니언 언론 칼럼 위장 해킹 분석 — Genians · under “3. 악성파일 분석 (Malware Analysis)” · published 2024-02-21 · pulled 2026-09-11

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: 새해 오피니언 언론 칼럼 위장 해킹 분석

Genians lists 11 other indicators in this source.

• tianfox67@gmail.com email address
• 2a40543f5b4b8cc1f4bd8993df44708e file hash
• 92a18b9ac4945b444466b9950cb83e10 file hash
• ade57773e415db6265815df636aa83e9 file hash
• 27.255.75.153 IP address
• 27.255.75.158 IP address
• 27.255.81.111 IP address
• 27.255.81.113 IP address
• 27.255.81.73 IP address
• 27.255.81.77 IP address
• 61.97.251.248 IP address