108.62.141.33

108.62.141.33 is an IP address that one published source reports in connection with Kimsuky activity, which public reporting attributes to North Korea (DPRK). It is cited here from Threatconnect. The report is dated 2020-09-28.

ip address Kimsuky MATCHED IN SOURCE

First seen 2020-09-28 · last seen 2020-09-28

Network

Kinddata centre
NetworkLeaseweb USA, Inc. (LeaseWeb USA, Inc. New York)
Announced byAS396362 Leaseweb USA, Inc.
CountryUnited States
Flagshosting range

Looked up 2026-09-21 at ip-api.com. A hosting range is not evidence on its own.

Source

  • …hosting the domain to uncover a number of domains hosted on the same IP. Figure 3: sslport.work to IP to Domains to IP to Domains IP: 108.62.141.33…
    Kimsuky Phishing Operations Putting In Work — Threatconnect · under “IP Pivot” · published 2020-09-28 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: Kimsuky Phishing Operations Putting In Work

Threatconnect lists 1 other indicator in this source.

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.