`162.241.253.27`

162.241.253.27 is an IP address that one published source reports in connection with Konni activity, which public reporting attributes to North Korea (DPRK). It is cited here from Genians. The report is dated 2024-07-31.

ip address Konni MATCHED IN SOURCE

First seen 2024-07-31 · last seen 2024-07-31

Network

Kind	data centre
Network	Unified Layer (Oracle Corporation)
Announced by	AS31898 Oracle Corporation
Country	United States
Flags	hosting range

Looked up 2026-09-21 at ip-api.com. A hosting range is not evidence on its own.

Source

…공식 주소(nta.go.kr)와 유사하지만, 상위 도메인(TLD, SLD)을 자세히 살펴보면 'go.kr' 주소가 아닌 'co.kr' 도메인 주소로 전혀 다른 웹 사이트인 것을 알 수 있습니다. ○ 그리고 'believeinsanta.com (162.241.253.27)' 주소가 실제 발송지인 것을 알 수 있습니다.…
AutoIt 활용 방어 회피 전술의 코니 APT 캠페인 분석 — Genians · under “3. 악성 파일 분석 (Malware Analysis)” · published 2024-07-31 · pulled 2026-09-11

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: AutoIt 활용 방어 회피 전술의 코니 APT 캠페인 분석

Genians lists 12 other indicators in this source.