216.107.136.10
216.107.136.10 is an IP address
that 2 published sources report
in connection with APT38, Contagious Interview and Kimsuky activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from Rewterz and SentinelOne.
The earliest of those reports is dated 2024-11-07 and the most recent 2024-11-08.
ip address APT38Contagious InterviewKimsuky MATCHED IN SOURCE
Network
| Kind | fixed line |
|---|---|
| Network | Latitude.sh |
| Announced by | AS396356 Latitude.sh |
| Country | United States |
Sources
-
…IP 45.61.140.26 23.254.253.75 45.61.128.122 45.61.135.105 144.172.74.23 144.172.74.141 172.86.108.47 216.107.136.10 MD5 529fe6eff1cf452680976087e2250c02 SHA-256 bd2aa5805b76f272b43a595b3d73e29d0fc4647e15e87950b8f904ea26dcf053 SHA1…
North Korean Threat Actors Deploy Hidden Risk Malware on macOS to Target Crypto Firms - Active IOCs - Rewterz — Rewterz -
…23.254.253.75 45.61.128.122 45.61.135.105 45.61.140.26 139.99.66.103 144.172.74.23 144.172.74.141 172.86.102.98 172.86.108.47 216.107.136.10 Domains…
BlueNoroff Hidden Risk | Threat Actor Targets Macs with Fake Crypto News and Novel Persistence | SentinelOne — SentinelOne
Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.
Related indicators
Cited by the same report: North Korean Threat Actors Deploy Hidden Risk Malware on macOS to Target Crypto Firms - Active IOCs - Rewterz
All 11 indicators from this source