`45.61.148.153`

45.61.148.153 is an IP address that 2 published sources report in connection with Andariel activity, which public reporting attributes to North Korea (DPRK). It is cited here from AhnLab ASEC. The reports are dated 2024-12-22.

ip address Andariel MATCHED IN SOURCE

First seen 2024-12-22 · last seen 2024-12-22

Network

Kind	data centre
Network	RouterHosting LLC (FranTech Solutions)
Announced by	AS14956 RouterHosting LLC
Country	United States
Flags	hosting range

Looked up 2026-09-21 at ip-api.com. A hosting range is not evidence on its own.

Sources

…현재 다운로드는 불가하지만 다운로드 서버인 “45.61.148.153”은 위 공격 사례에서 확인된 SmallTiger의 C&C 서버 주소이기도 하다. powershell.exe (New-Object…
Andariel 그룹의 국내 솔루션 대상 공격 사례 분석 (SmallTiger) - ASEC — AhnLab ASEC · under “2. 국내 문서 중앙화 솔루션 대상 공격 사례” · published 2024-12-22 · pulled 2026-09-12
…Currently, downloading is not possible, but the download server “45.61.148.153” is also identified as the C&C server address for SmallTiger in the aforementioned attack case. powershell.exe (New-Object…
Analysis of Attack Cases Against Korean Solutions by the Andariel Group (SmallTiger) - ASEC — AhnLab ASEC · under “2. Attack Cases on Document Management Solution” · published 2024-12-22 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: Andariel 그룹의 국내 솔루션 대상 공격 사례 분석 (SmallTiger) - ASEC

AhnLab ASEC lists 4 other indicators in this source.