118.36.192.211
118.36.192.211 is an IP address
that 2 published sources report
in connection with Kimsuky activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from ESTsecurity ALYac and Genians.
The earliest of those reports is dated 2022-06-29 and the most recent 2025-03-04.
ip address Kimsuky MATCHED IN SOURCE
Network
| Kind | fixed line |
|---|---|
| Network | Korea Telecom |
| Announced by | AS4766 Korea Telecom |
| Country | South Korea |
Sources
-
…이번 공격에 사용된 서버 118.36.192.211은 nca.naverccrp.com, xn--nid-mo0a.naverccrp.com, m.naverccrp.com 등 여러번 일반 사용자들 대상으로 진행된 피싱 공격에도 악용된 적이 있는 것으로 확인되었습니다.…
국회입법조사처 사칭하여 '국방·외교·안보'분야 교수 해킹을 시도하는 北 연계 해킹공격 주의! — ESTsecurity ALYac -
…info 118.36.192.211 209.99.40.222 ○ 대북분야 대상 SSO 피싱 캠페인 (Kimsuky) kakauth .com 172.67.177.237 104.21.59.136 navauth .com…
비상계엄 테마 APT 공격과 Kimsuky 그룹 연관성 분석 — Genians
Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.