`89.46.102.43`

89.46.102.43 is an IP address that one published source reports in connection with APT37 activity, which public reporting attributes to North Korea (DPRK). It is cited here from Kaspersky. The report is dated 2017-08-25.

ip address APT37 MATCHED IN SOURCE

First seen 2017-08-25 · last seen 2017-08-25

Network

Kind	proxy or VPN
Network	M247 Europe SRL
Announced by	AS9009 M247 Europe SRL
Country	Romania
Flags	hosting range, known proxy or VPN

Looked up 2026-09-21 at ip-api.com. This range is classed as a proxy or VPN; it does not show who used it.

Source

…Both samples have been configured to work with the same command-and-control server: 89.46.102.43.…
WALKING IN YOUR ENEMY’S SHADOW: WHEN FOURTH-PARTY COLLECTION BECOMES ATTRIBUTION HELL — Kaspersky · published 2017-08-25 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: WALKING IN YOUR ENEMY’S SHADOW: WHEN FOURTH-PARTY COLLECTION BECOMES ATTRIBUTION HELL

Kaspersky lists 4 other indicators in this source.