`218.25.43.212`

218.25.43.212 is an IP address that one published source reports in connection with unclustered DPRK activity, which public reporting attributes to North Korea (DPRK). It is cited here from NKInternet. The report is dated 2025-01-06.

ip address DPRK (cluster unattributed) MATCHED IN SOURCE

First seen 2025-01-06 · last seen 2025-01-06

Network

Kind	fixed line
Network	CHINA UNICOM China169 Backbone (Liaoning Clear channel data Communication, Inc)
Announced by	AS4837 CHINA UNICOM China169 Backbone
Country	China

Looked up 2026-09-21 at ip-api.com. A subscriber line, as a person working from home ordinarily has.

Source

…The interesting thing is that it came with a default config in place that is designed to connect back to 218.25.43.212 on port 8888 Pulling some additional details for that IP reveals an abuse contact email of postmaster@silibank.com[email protected]…
Hangro: Investigating North Korean VPN Infrastructure Part 1 — NKInternet · under “What is Hangro Used For?” · published 2025-01-06 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: Hangro: Investigating North Korean VPN Infrastructure Part 1

NKInternet lists 5 other indicators in this source.