`114.207.244.99`

114.207.244.99 is an IP address that 2 published sources report in connection with Kimsuky activity, which public reporting attributes to North Korea (DPRK). It is cited here from ESTsecurity ALYac and somedieyoung ZZ. The earliest of those reports is dated 2019-12-03 and the most recent 2024-08-14.

ip address Kimsuky MATCHED IN SOURCE

First seen 2019-12-03 · last seen 2024-08-14

Network

Kind	fixed line
Network	SK Broadband Co Ltd (broadNnet)
Announced by	AS9318 SK Broadband Co Ltd
Country	South Korea

Looked up 2026-09-21 at ip-api.com. A subscriber line, as a person working from home ordinarily has.

Sources

…내용으로 위장한 피싱 이메일 화면 당시 공격자는 발신자를 실제 다음(Daum) 보안센터처럼 위장하기 위해 다른 서버에서 공격을 수행한 흔적이 발견되었는데, '오퍼레이션 블루 에스티메이트'에서 사용된 C2 서버 'antichrist.or.kr (114.207.244.99) 주소가 동일하게 목격됩니다.…
김수키 조직, 청와대 녹지원/상춘재 행사 견적서 사칭 APT 공격 — ESTsecurity ALYac · under “본문” · published 2019-12-03 · pulled 2026-09-12
…DOMAIN antichrist.or.kr IP 114.207.244.99 NewAct.dat MD5 e54b370d96ca0e2ecc083c2d42f05210 SHA-1 03c35e4c6a641373db665e7d58cea421188fbc82 SHA-256 1050935f6acee3afda3876478718632b96…
Kimsuky 5 — somedieyoung ZZ · under “IOC” · published 2024-08-14 · pulled 2026-10-01

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: Kimsuky 5

somedieyoung ZZ lists 6 other indicators in this source.