← All actor clusters

152.32.243.215

152.32.243.215 is an IP address that 2 published sources report in connection with Kimsuky activity, which public reporting attributes to North Korea (DPRK). It is cited here from Break Glass Intelligence and Idanmalihi. The earliest of those reports is dated 2026-03-12 and the most recent 2026-06-01.

ip address Kimsuky MATCHED IN SOURCE

First seen 2026-03-12 · last seen 2026-06-01

Network

Looked up 2026-09-21 at ip-api.com. A hosting range is not evidence on its own.

Sources

• …443 AS135377 UCloud HK 152.32.139.149 80 AS135377 UCloud HK 167.88.166.204 443 — — 118.194.248.183 80 AS135377 UCloud HK 152.32.243.215 80 AS135377 UCloud HK 27.102.138.125 — AS45996 DAOU Technology 118.194.249.109 — AS135377 UCloud HK 101.36.114.231 443 — —…

  Kimsuky's Five-Stage GrimResource Loader: When an MMC File Becomes a Shellcode Injector — Break Glass Intelligence · under “C2 IP Addresses” · published 2026-03-12 · pulled 2026-09-12

• …8.194.248.95 101.36.114.215 118.194.248.246 118.194.249.36 152.32.138.146 123.58.200.186 152.32.138.225 123.58.201.8 118.193.68.95 152.32.243.215 152.32.243.169 118.193.69.100 101.36.114.24 165.154.52.21 152.32.243.224 152.32.138.167 152.32.138.172 101.36.114.83 152.32.138.11…

  Tracking North Korea Nation-State APT Infrastructure: Kimsuky — Idanmalihi · under “IP Addresses” · published 2026-06-01 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: Kimsuky's Five-Stage GrimResource Loader: When an MMC File Becomes a Shellcode Injector

Break Glass Intelligence lists 28 other indicators in this source. 7 are shown, chosen across types.

• AS135377 autonomous system number
• AS45996 autonomous system number
• link-nid-log.oc9bk.dynv6.net domain
• link-nid-log.oq7n2.dynv6.net domain
• 253d232e1485e7e60ff3380999412c773d0a9a14 file hash
• f239e3fedc4926ff3cf58f95bacff9d8f11289e58036ed507ab3f435dce1b2b1 file hash
• 167.88.166.204 IP address

All 29 indicators from this source

Cited by the same report: Tracking North Korea Nation-State APT Infrastructure: Kimsuky

Idanmalihi lists 42 other indicators in this source. 5 are shown, chosen across types.

• 101.36.114.215 IP address
• 101.36.114.231 IP address
• 152.32.243.224 IP address
• 152.32.243.238 IP address
• 165.154.52.21 IP address

All 43 indicators from this source