118.193.69.151

118.193.69.151 is an IP address that 2 published sources report in connection with Contagious Interview and Kimsuky activity, which public reporting attributes to North Korea (DPRK). It is cited here from Genians. The reports are dated 2025-07-01.

ip address Contagious InterviewKimsuky MATCHED IN SOURCE

First seen 2025-07-01 · last seen 2025-07-01

Network

Kinddata centre
NetworkUCLOUD INFORMATION TECHNOLOGY (HK) LIMITED (Ucloud Information Technology)
Announced byAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
CountrySouth Korea
Flagshosting range

Looked up 2026-09-21 at ip-api.com. A hosting range is not evidence on its own.

Sources

  • …'Adersoft'에서 배포하는 'VBScript Editor with Debugger' 프로그램의 Launcher 파일을 이용해 악성 manifest 파일을 호출합니다. ○ 아울러 C2 서버 'androcl.csproject.org', '118.193.69.151' (KR) 주소와 통신시 기존 'BabyShark' 패턴과 유사한 것을 알 수 있습니다.…
    '클릭픽스' 전술을 활용한 김수키 그룹 위협 사례 분석 — Genians · under “3-3. 웹 사이트 기반 'ClickFix' 전술 도입 사례” · published 2025-07-01 · pulled 2026-09-12
  • …with Debugger” program to execute a malicious manifest file. ○ Additionally, communication with the C2 servers androcl.csproject.org and 118.193.69.151 (KR) exhibited patterns similar to those seen in previous “BabyShark” activity.…
    Analysis of the threat case of kimsuky group using 'ClickFix' tactic — Genians · under “3-3. Case of the “ClickFix” Tactic Delivered via a Website” · published 2025-07-01 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: '클릭픽스' 전술을 활용한 김수키 그룹 위협 사례 분석

Genians lists 32 other indicators in this source. 7 are shown, chosen across types.

All 33 indicators from this source

Cited by the same report: Analysis of the threat case of kimsuky group using 'ClickFix' tactic

Genians lists 32 other indicators in this source. 5 are shown, chosen across types.

All 33 indicators from this source

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.