← All actor clusters

221.9.247.17

221.9.247.17 is an IP address that one published source reports in connection with Kimsuky activity, which public reporting attributes to North Korea (DPRK). It is cited here from ESTsecurity ALYac. The report is dated 2018-04-19.

ip address Kimsuky MATCHED IN SOURCE

First seen 2018-04-19 · last seen 2018-04-19

Network

Looked up 2026-09-21 at ip-api.com. A subscriber line, as a person working from home ordinarily has.

Source

• …해당 공격은 당시 '외교안보연구소(ifans.go.kr)'에서 공식적으로 발송된 것처럼 위장되어 있었지만, 실제 발신자 아이피 주소(221.9.247.17)는 중국 지린성의 장춘시 입니다.…

  2010년 해외 대상 APT 공격자, 오퍼레이션 베이비 코인(Operation Baby Coin)으로 한국 귀환 — ESTsecurity ALYac · under “본문” · published 2018-04-19 · pulled 2026-09-11

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.