`158.247.219.10`

158.247.219.10 is an IP address that 2 published sources report in connection with APT37 activity, which public reporting attributes to North Korea (DPRK). It is cited here from Genians and Rewterz. The earliest of those reports is dated 2024-11-04 and the most recent 2024-11-05.

ip address APT37 MATCHED IN SOURCE

First seen 2024-11-04 · last seen 2024-11-05

Network

Kind	data centre
Network	The Constant Company, LLC
Announced by	AS20473 The Constant Company, LLC
Country	South Korea
Flags	hosting range

Looked up 2026-09-21 at ip-api.com. A hosting range is not evidence on its own.

Sources

…연결된 곳은 'filedownloadserve.com' 도메인이며, Passive DNS 이력으로 2개의 아이피가 사용됐습니다. Domain 주소 IP 주소 국가 코드 filedownloadserve.com 158.247.219.10 [KR] 141.164.60.110 [KR] kakaofilestorage.com 158.247.219.10 [KR] 141.164.62.19 [KR] [표 2] C2 서버 정보 ○ 특히,…
APT37 위협 배후의 사이버 정찰 활동 분석 — Genians · under “4. 정찰 시나리오 (Recon Scenario)” · published 2024-11-05 · pulled 2026-09-12
…ROKRAT and similar sophisticated malware. Impact Information Theft and Espionage Indicators of Compromise IP 108.181.50.58 158.247.219.10 175.214.194.61 61.97.243.2 MD5 5f6682ad9da4590cba106e2f1a8cbe26 SHA-256…
APT37 aka ScarCruft or RedEyes - Active IOCs - Rewterz — Rewterz · under “IP” · published 2024-11-04 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: APT37 위협 배후의 사이버 정찰 활동 분석

Genians lists 17 other indicators in this source. 7 are shown, chosen across types.

All 18 indicators from this source

Cited by the same report: APT37 aka ScarCruft or RedEyes - Active IOCs - Rewterz

Rewterz lists 6 other indicators in this source. 4 are shown, chosen across types.

All 7 indicators from this source