34.13.42.35
34.13.42.35 is an IP address
that 2 published sources report
in connection with APT37 activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from Kaspersky Securelist and Seongsu Park (presentations).
The earliest of those reports is dated 2019-05-13 and the most recent 2020-02-06.
ip address APT37 MATCHED IN SOURCE
Network
| Kind | data centre |
|---|---|
| Network | Google LLC |
| Announced by | AS396982 Google LLC |
| Country | United Kingdom |
| Flags | hosting range |
Sources
-
…GreezaBackdoor of DarkHotel 5e0e11bca0e94914e565c1dcc1ee6860 Konni 4c2016df6b546326d67ac2a79dea1343 URLs http://34.13.42.35/uploads/1.jpg http://34.13.42.35/uploads/2.jpg http://34.13.42.35/uploads/qwerty.jpg http://34.13.42.35/uploads/girl.jpg http://34.13.4…
ScarCruft continues to evolve, introduces Bluetooth harvester | Securelist — Kaspersky Securelist -
…Dropper Installer Downloader Config File r efer to Include UAC Bypass method [General] Agent=Host Process Update UrlCount =5 URL1=34.13.42.35 URL2=34.13.42.35 URL3=kmbr1.nitesbr1.org URL4=www.stjohns-burscough.org URL5=lotusprintgroup.com Object1 =/uploads/girl.jpg Object2 =/uploa…
Behind the mask of ScarCruft: Unveiling endeavor of shady actor — Seongsu Park (presentations)
Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.