← All actor clusters

152.32.243.178

152.32.243.178 is an IP address that 2 published sources report in connection with Kimsuky activity, which public reporting attributes to North Korea (DPRK). It is cited here from Break Glass Intelligence and Idanmalihi. The earliest of those reports is dated 2026-03-12 and the most recent 2026-06-01.

ip address Kimsuky MATCHED IN SOURCE

First seen 2026-03-12 · last seen 2026-06-01

Network

Looked up 2026-09-21 at ip-api.com. A hosting range is not evidence on its own.

Sources

• …3 DNS Providers, 1 Fingerprint C2 IP Addresses IP Address Port ASN Organization 118.194.248.246 443 AS135377 UCloud HK 152.32.243.178 80 AS135377 UCloud HK 101.36.114.66 80 — Korea 27.102.137.140 80 AS45996 DAOU Technology 152.32.138.146 443 AS135377 UCloud HK…

  Kimsuky's Five-Stage GrimResource Loader: When an MMC File Becomes a Shellcode Injector — Break Glass Intelligence · under “C2 IP Addresses” · published 2026-03-12 · pulled 2026-09-12

• …in this research is attributable to Kimsuky activity. IoCs IP Addresses 123.58.201.34 152.32.138.131 152.32.243.178 101.36.114.231 101.36.114.66 118.193.69.19 123.58.201.2 118.193.68.242 152.32.139.36 152.32.243.238 123.58.200.69 123.58.200.119…

  Tracking North Korea Nation-State APT Infrastructure: Kimsuky — Idanmalihi · under “IP Addresses” · published 2026-06-01 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: Kimsuky's Five-Stage GrimResource Loader: When an MMC File Becomes a Shellcode Injector

Break Glass Intelligence lists 28 other indicators in this source. 7 are shown, chosen across types.

• AS135377 autonomous system number
• AS45996 autonomous system number
• elecviews85.dynv6.net domain
• link-nid-log.oc9bk.dynv6.net domain
• 95f4954ad79fa972bfd4fe217608ed5216c674e8ae6662cb8ffb31dbed50ec63 file hash
• f239e3fedc4926ff3cf58f95bacff9d8f11289e58036ed507ab3f435dce1b2b1 file hash
• 152.32.243.215 IP address

All 29 indicators from this source

Cited by the same report: Tracking North Korea Nation-State APT Infrastructure: Kimsuky

Idanmalihi lists 42 other indicators in this source. 5 are shown, chosen across types.

• 101.36.114.215 IP address
• 101.36.114.231 IP address
• 152.32.243.224 IP address
• 152.32.243.238 IP address
• 165.154.52.21 IP address

All 43 indicators from this source