← All actor clusters

106.249.25.142

106.249.25.142 is an IP address that one published source reports in connection with Kimsuky activity, which public reporting attributes to North Korea (DPRK). It is cited here from ESTsecurity ALYac. The report is dated 2019-04-03.

ip address Kimsuky MATCHED IN SOURCE

First seen 2019-04-03 · last seen 2019-04-03

Network

Looked up 2026-09-21 at ip-api.com. A hosting range is not evidence on its own.

Source

• …- enindi25-142.godo.co.kr ( 106.249.25.142 ) 그리고 2019년 03월 04일 외교통일위원회를 사칭해 수행된 피싱에서도 이와 동일한 데이터가 사용됩니다.…

  김수키(Kimsuky) 조직, 스텔스 파워(Operation Stealth Power) 침묵 작전 — ESTsecurity ALYac · under “본문” · published 2019-04-03 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.