`211.196.153.24`

211.196.153.24 is an IP address that 2 published sources report in connection with unclustered DPRK activity, which public reporting attributes to North Korea (DPRK). It is cited here from piyokango. The reports are dated 2013-06-26.

ip address DPRK (cluster unattributed) MATCHED IN SOURCE

First seen 2013-06-26 · last seen 2013-06-26

Network

Kind	fixed line
Network	Korea Telecom (Kornet)
Announced by	AS4766 Korea Telecom
Country	South Korea

Looked up 2026-09-21 at ip-api.com. A subscriber line, as a person working from home ordinarily has.

Sources

…マルウェア配布元 www.simdisk.co.kr/app/simdisk_setup.exe www.songsari.com 通信先 No.1 www.habang.co.kr/images/korea/c.jpg(or d.Jpg)（211.196.153.24） No.2 Torで接続するサーバー(詳細不明) No.3 webmail.genesyshost.com/mail/ (2) Wiper マルウェア配布元 N/A 通信先 No.1 112.217.190.…
6月25日と7月1日に発生した韓国へのサイバー攻撃をまとめてみた — piyokango · under “配布元・通信先” · published 2013-06-26 · pulled 2026-09-12
…マルウェア配布元 www.simdisk.co.kr/app/simdisk_setup.exe www.songsari.com 通信先 No.1 www.habang.co.kr/images/korea/c.jpg(or d.Jpg)（211.196.153.24） No.2 Torで接続するサーバー(詳細不明) No.3 webmail.genesyshost.com/mail/ (2) Wiper マルウェア配布元 N/A 通信先 No.1 112.217.190.…
6月25日と7月1日に発生した韓国へのサイバー攻撃をまとめてみた — piyokango · under “配布元・通信先” · published 2013-06-26 · pulled 2026-09-27

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: 6月25日と7月1日に発生した韓国へのサイバー攻撃をまとめてみた

piyokango lists 2 other indicators in this source.