`52.219.169.16`

52.219.169.16 is an IP address that one published source reports in connection with APT37 activity, which public reporting attributes to North Korea (DPRK). It is cited here from wezard4u. The report is dated 2024-03-03.

ip address APT37 MATCHED IN SOURCE

First seen 2024-03-03 · last seen 2024-03-03

Network

Kind	data centre
Network	Amazon.com, Inc. (AWS S3 (eu-central-1))
Announced by	AS16509 Amazon.com, Inc.
Country	Germany
Flags	hosting range

Looked up 2026-09-21 at ip-api.com. A hosting range is not evidence on its own.

Source

…악성코드 실행시 나오는 안보칼럼 으로 위장한 HWP 악성코드 IP Traffic 104.123.41.162:80 (TCP) 23.55.161.142:80 (TCP) 52.219.169.16:80…
북한 해킹 단체 APT37 Reaper(리퍼)에서 만든 악성코드-(안보칼럼) 반국가세력에 안보기관이 무기력해서는 안된다.zip(2024.02.22) — wezard4u · under “IP Traffic” · published 2024-03-03 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: 북한 해킹 단체 APT37 Reaper(리퍼)에서 만든 악성코드-(안보칼럼) 반국가세력에 안보기관이 무기력해서는 안된다.zip(2024.02.22)

wezard4u lists 1 other indicator in this source.