103.149.98.230

103.149.98.230 is an IP address that 2 published sources report in connection with Kimsuky activity, which public reporting attributes to North Korea (DPRK). It is cited here from AhnLab ASEC. The reports are dated 2025-06-11.

ip address Kimsuky MATCHED IN SOURCE

First seen 2025-06-11 · last seen 2025-06-11

Network

Kindfixed line
NetworkIDC VietNam Data Joint Stock Company (VDC)
Announced byAS135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
CountryVietnam

Looked up 2026-09-21 at ip-api.com. A subscriber line, as a person working from home ordinarily has.

Sources

  • …FQDN niva.serverpit.com IP 103.130.212.116 103.149.98.230 Tags: AnyDesk BabyShark Dropbox 북한 김수키 교수 논문 HWP 킴수키 한글 원격 원격제어 Kimsuky RandomQuery…
    논문파일을 위장한 악성코드 유포 주의 (Kimsuky 그룹) - ASEC — AhnLab ASEC · under “논문파일을 위장한 악성코드 유포 주의 (Kimsuky 그룹)” · published 2025-06-11 · pulled 2026-09-12
  • …FQDN niva.serverpit.com IP 103.130.212.116 103.149.98.230 Tags: AnyDesk BabyShark Dropbox 북한 김수키 교수 논문 HWP 킴수키 한글 원격 원격제어 Kimsuky RandomQuery…
    Warning Against Distribution of Malware Disguised as Research Papers (Kimsuky Group) - ASEC — AhnLab ASEC · under “Warning Against Distribution of Malware Disguised as Research Papers (Kimsuky Group)” · published 2025-06-11 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: 논문파일을 위장한 악성코드 유포 주의 (Kimsuky 그룹) - ASEC

AhnLab ASEC lists 6 other indicators in this source.

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.