`103.149.98.248`

103.149.98.248 is an IP address that 2 published sources report in connection with Contagious Interview and Kimsuky activity, which public reporting attributes to North Korea (DPRK). It is cited here from Genians. The reports are dated 2025-07-01.

ip address Contagious Interview Kimsuky MATCHED IN SOURCE

First seen 2025-07-01 · last seen 2025-07-01

Network

Kind	fixed line
Network	IDC VietNam Data Joint Stock Company (VDC)
Announced by	AS135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
Country	Vietnam

Looked up 2026-09-21 at ip-api.com. A subscriber line, as a person working from home ordinarily has.

Sources

…그리고 베트남 소재의 '103.149.98.248' (VN) 주소는 악성파일 C2 서버로 쓰였을 것으로 추정됩니다. ○ 특히, '1.223.129.234' (KR) 외에 '211.170.73.245' (KR), '106.243.157.158' (KR) 주소도 위협 인프라로 사용됐을 가능성이…
'클릭픽스' 전술을 활용한 김수키 그룹 위협 사례 분석 — Genians · under “3-3. 웹 사이트 기반 'ClickFix' 전술 도입 사례” · published 2025-07-01 · pulled 2026-09-12
…The Vietnam-based address 103.149.98.248 (VN) is believed to have been used as a C2 server for distributing malicious files. ○ In particular, beyond 1.223.129.234 (KR), the…
Analysis of the threat case of kimsuky group using 'ClickFix' tactic — Genians · under “3-3. Case of the “ClickFix” Tactic Delivered via a Website” · published 2025-07-01 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: '클릭픽스' 전술을 활용한 김수키 그룹 위협 사례 분석

Genians lists 32 other indicators in this source. 7 are shown, chosen across types.

All 33 indicators from this source

Cited by the same report: Analysis of the threat case of kimsuky group using 'ClickFix' tactic

Genians lists 32 other indicators in this source. 5 are shown, chosen across types.

All 33 indicators from this source