← All actor clusters

46.44.251.52

46.44.251.52 is an IP address that one published source reports in connection with Kimsuky activity, which public reporting attributes to North Korea (DPRK). It is cited here from Sec AI. The report is dated 2022-09-20.

ip address Kimsuky MATCHED IN SOURCE

First seen 2022-09-20 · last seen 2022-09-20

Network

Looked up 2026-10-02 at ip-api.com. A subscriber line, as a person working from home ordinarily has.

Source

• …spliced as page=xxx&mode=xxx&DATA=xxx. In the uploaded information, the first step is to measure the activity by taking C2: 46.44.251.52:91. Then upload the encrypted message. The final loop accepts the return information and executes the relevant commands.…

  Sample Analysis of Kimsuky's Attacks - xls — Sec AI · published 2022-09-20 · pulled 2026-10-01

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.