`101.36.114.190`

101.36.114.190 is an IP address that 3 published sources report in connection with Kimsuky activity, which public reporting attributes to North Korea (DPRK). It is cited here from Rewterz, wezard4u and ENKI. The earliest of those reports is dated 2025-03-16 and the most recent 2025-06-19.

ip address Kimsuky MATCHED IN SOURCE

First seen 2025-03-16 · last seen 2025-06-19

Network

Kind	data centre
Network	UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED (Ucloud Information Technology (hk) Limited)
Announced by	AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
Country	South Korea
Flags	hosting range

Looked up 2026-09-21 at ip-api.com. A hosting range is not evidence on its own.

Sources

…and steal valuable intellectual property. Impact Data Theft and Espionage Sensitive Data Exposure Indicators of Compromise IP 101.36.114.190 MD5…
North Korean APT Kimsuky aka Black Banshee - Active IOCs - Rewterz — Rewterz · under “IP” · published 2025-03-17 · pulled 2026-09-12
…외부 서버로 데이터 전송 ZIP 파일을 Base64로 인코딩하여 데이터 크기를 줄이고 탐지를 회피 이후 HTTP POST 요청을 이용하여 공격자의 서버로 전송 공격자 서버: http://101.36.114.190/accounts.kakao.comwebloginfind_account/showHeader/nate.php 공격자가 제어하는 C2 서버 4.…
김수키(Kimsuky) 에서 만든 파워셀 악성코드-1.ps1(<-가칭 2025.3.13) — wezard4u · under “악성코드 분석” · published 2025-03-16 · pulled 2026-09-12
…190 : 5724 caption - 추가로 확보한 악성코드 정보 추가로 확보한 악성코드에서 확인된 C&C 서버 주소 101.36.114.190에 요청을 보내는 파워쉘 스크립트도 발견되었다. 85f5075610661c9706571a33548d7585 해당 파워쉘 스크립트는 Temp 경로에 존재하는 dose.vbs, processlist.zip, processlist.txt 파일을…
Github를 공격 인프라로 악용하는 Kimsuky의 최신 국내 공격 사례 분석 — ENKI · under “5.1. XenoRAT” · published 2025-06-19 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: North Korean APT Kimsuky aka Black Banshee - Active IOCs - Rewterz

Rewterz lists 12 other indicators in this source. 7 are shown, chosen across types.

All 13 indicators from this source

Cited by the same report: Github를 공격 인프라로 악용하는 Kimsuky의 최신 국내 공격 사례 분석

ENKI lists 40 other indicators in this source. 5 are shown, chosen across types.

All 41 indicators from this source