← All actor clusters

38.110.1.69

38.110.1.69 is an IP address that 4 published sources report in connection with Kimsuky and Andariel activity, which public reporting attributes to North Korea (DPRK). It is cited here from AhnLab ASEC. The earliest of those reports is dated 2023-12-21 and the most recent 2024-05-27.

ip address KimsukyAndariel MATCHED IN SOURCE

First seen 2023-12-21 · last seen 2024-05-27

Network

Looked up 2026-09-21 at ip-api.com. A subscriber line, as a person working from home ordinarily has.

Sources

• Nearby text:

  …URL http://104.168.145.83:993/ http://107.148.71.88:993/ http://159.100.6.137:993/ http://38.110.1.69:993/ http://45.114.129.138:33890/ AhnLab TIP 를 구독하시면 연관 IOC 및 상세 분석 정보를 추가적으로 확인하실 수 있습니다.…

  Kimsuky 그룹의 AppleSeed 악성코드 공격 동향 분석 - ASEC — AhnLab ASEC · under “5. 결론” · published 2023-12-22 · pulled 2026-09-12

• Nearby text:

  …URL http://104.168.145.83:993/ http://107.148.71.88:993/ http://159.100.6.137:993/ http://38.110.1.69:993/ http://45.114.129.138:33890/ Gain access to related IOCs and detailed analysis by subscribing to AhnLab TIP . For…

  Trend Analysis on Kimsuky Group’s Attacks Using AppleSeed - ASEC — AhnLab ASEC · under “5. Conclusion” · published 2023-12-21 · pulled 2026-09-12

• Nearby text:

  …URL http://104.168.145.83:993/ http://104.36.229.179/ http://104.36.229.179/am.dll http://38.110.1.69/ http://38.110.1.69:993/ AhnLab TIP 를 구독하시면 연관 IOC 및 상세 분석 정보를 추가적으로 확인하실 수 있습니다.…

  국내 기업 대상 공격에 사용 중인 SmallTiger 악성코드 (Kimsuky, Andariel 그룹) - ASEC — AhnLab ASEC · under “4. 결론” · published 2024-05-27 · pulled 2026-09-12

• Nearby text:

  …URL http://104.168.145.83:993/ http://104.36.229.179/ http://104.36.229.179/am.dll http://38.110.1.69/ http://38.110.1.69:993/ Gain access to related IOCs and detailed analysis by subscribing to AhnLab TIP . For subscription…

  SmallTiger Malware Used in Attacks Against South Korean Businesses (Kimsuky and Andariel) - ASEC — AhnLab ASEC · under “4. Conclusion” · published 2024-05-26 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: Kimsuky 그룹의 AppleSeed 악성코드 공격 동향 분석 - ASEC

AhnLab ASEC lists 9 other indicators in this source. 5 are shown, chosen across types.

• 02843206001cd952472abf5ae2b981b2 file hash
• 1f7d2cbfc75d6eb2c4f2b8b7a3eec1bf file hash
• 232046aff635f1a5d81e415ef64649b7 file hash
• 104.168.145.83 IP address
• 45.114.129.138 IP address

All 10 indicators from this source

Cited by the same report: Trend Analysis on Kimsuky Group’s Attacks Using AppleSeed - ASEC

AhnLab ASEC lists 9 other indicators in this source. 4 are shown, chosen across types.

• 0cce02d2d835a996ad5dfc0406b44b01 file hash
• 153383634ee35b7db6ab59cde68bf526 file hash
• 107.148.71.88 IP address
• 159.100.6.137 IP address

All 10 indicators from this source

Cited by the same report: 국내 기업 대상 공격에 사용 중인 SmallTiger 악성코드 (Kimsuky, Andariel 그룹) - ASEC

AhnLab ASEC lists 7 other indicators in this source. 3 are shown, chosen across types.

• 1210ff921922f2e27db4feae9fe63394 file hash
• 188f289206c3a945d670f29400d9f77f file hash
• 104.36.229.179 IP address

All 8 indicators from this source