49.239.189.45
49.239.189.45 is an IP address
that 2 published sources report
in connection with Andariel activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from FSI.
The earliest of those reports is dated 2017-12-07 and the most recent 2026-10-18.
ip address Andariel MATCHED IN SOURCE
Network
| Kind | fixed line |
|---|---|
| Network | ELIMNET, INC. |
| Announced by | AS4663 ELIMNET, INC. |
| Country | South Korea |
Sources
-
…data from C2(additional file download & execution) But we did not get any additional file from C2 C2 is https://www.unsunozo.org 49.239.189.45 CASE 2: IMPERSONATED as A NATIONAL POLICE OFFICER KOREA MAJOR BANK ATTACK FRO M BLUENOROFF ATM OPERATOR COMPANY BREACH…
NATION-STATE MONEYMULE'S HUNTING SEASON — FSI -
…data from C2(additional file download & execution) • But we did not get any additional file from C2 • C2 is https://www.unsunozo.org • 49.239.189.45 CASE 2: IMPERSONATED as A NATIONAL POLICE OFFICER From unidentifiable nation-state actors Another Attack Targeting Financial…
NATION-STATE MONEYMULE'S HUNTING SEASON – APT ATTACKS TARGETING FINANCIAL INSTITUTION — FSI
Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.