← All actor clusters

104.168.145.83

104.168.145.83 is an IP address that 4 published sources report in connection with Kimsuky and Andariel activity, which public reporting attributes to North Korea (DPRK). It is cited here from AhnLab ASEC. The earliest of those reports is dated 2023-12-21 and the most recent 2024-05-27.

ip address KimsukyAndariel MATCHED IN SOURCE

First seen 2023-12-21 · last seen 2024-05-27

Network

Looked up 2026-09-21 at ip-api.com. A hosting range is not evidence on its own.

Sources

• Nearby text:

  …URL http://104.168.145.83:993/ http://107.148.71.88:993/ http://159.100.6.137:993/ http://38.110.1.69:993/ http://45.114.129.138:33890/ AhnLab…

  Kimsuky 그룹의 AppleSeed 악성코드 공격 동향 분석 - ASEC — AhnLab ASEC · under “5. 결론” · published 2023-12-22 · pulled 2026-09-12

• Nearby text:

  …URL http://104.168.145.83:993/ http://107.148.71.88:993/ http://159.100.6.137:993/ http://38.110.1.69:993/ http://45.114.129.138:33890/ Gain…

  Trend Analysis on Kimsuky Group’s Attacks Using AppleSeed - ASEC — AhnLab ASEC · under “5. Conclusion” · published 2023-12-21 · pulled 2026-09-12

• Nearby text:

  …URL http://104.168.145.83:993/ http://104.36.229.179/ http://104.36.229.179/am.dll http://38.110.1.69/ http://38.110.1.69:993/ AhnLab TIP 를 구독하시면…

  국내 기업 대상 공격에 사용 중인 SmallTiger 악성코드 (Kimsuky, Andariel 그룹) - ASEC — AhnLab ASEC · under “4. 결론” · published 2024-05-27 · pulled 2026-09-12

• Nearby text:

  …URL http://104.168.145.83:993/ http://104.36.229.179/ http://104.36.229.179/am.dll http://38.110.1.69/ http://38.110.1.69:993/ Gain access to…

  SmallTiger Malware Used in Attacks Against South Korean Businesses (Kimsuky and Andariel) - ASEC — AhnLab ASEC · under “4. Conclusion” · published 2024-05-26 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: Kimsuky 그룹의 AppleSeed 악성코드 공격 동향 분석 - ASEC

AhnLab ASEC lists 9 other indicators in this source. 5 are shown, chosen across types.

• 02843206001cd952472abf5ae2b981b2 file hash
• 0cce02d2d835a996ad5dfc0406b44b01 file hash
• 153383634ee35b7db6ab59cde68bf526 file hash
• 107.148.71.88 IP address
• 159.100.6.137 IP address

All 10 indicators from this source

Cited by the same report: Trend Analysis on Kimsuky Group’s Attacks Using AppleSeed - ASEC

AhnLab ASEC lists 9 other indicators in this source. 4 are shown, chosen across types.

• 1f7d2cbfc75d6eb2c4f2b8b7a3eec1bf file hash
• 232046aff635f1a5d81e415ef64649b7 file hash
• 38.110.1.69 IP address
• 45.114.129.138 IP address

All 10 indicators from this source

Cited by the same report: 국내 기업 대상 공격에 사용 중인 SmallTiger 악성코드 (Kimsuky, Andariel 그룹) - ASEC

AhnLab ASEC lists 7 other indicators in this source. 3 are shown, chosen across types.

• 0859f9666e0428447451c036a38057f6 file hash
• 0be7d0975d3d81403d16ba4c4c9c7bf8 file hash
• 104.36.229.179 IP address

All 8 indicators from this source