`185.49.69.210`

185.49.69.210 is an IP address that one published source reports in connection with unclustered DPRK activity, which public reporting attributes to North Korea (DPRK). It is cited here from Objective-see. The report is dated 2020-01-01.

ip address DPRK (cluster unattributed) MATCHED IN SOURCE

First seen 2020-01-01 · last seen 2020-01-01

Network

Kind	fixed line
Network	LeaseWeb DE
Announced by	AS28753 Leaseweb Deutschland GmbH
Country	Germany

Looked up 2026-09-21 at ip-api.com. A subscriber line, as a person working from home ordinarily has.

Source

…attack: 5/ Hashes (sha1): b639bca429778d24bda4f4a40c1bbc64de46fa79 23017a55b3d25a2597b7148214fd8fb2372591a5 C2 IPs: 89.34.111.113:443 185.49.69.210:80 — Philip Martin (@SecurityGuyPhil) June 19, 2019 This (Firefox) 0day, has now been patched as CVE-2019-11707, and covered in…
The Mac Malware of 2019 — Objective-see · under “👾 OSX.Netwire” · published 2020-01-01 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: The Mac Malware of 2019

Objective-see lists 5 other indicators in this source.