← All actor clusters

5.78.68.117

5.78.68.117 is an IP address that one published source reports in connection with Konni activity, which public reporting attributes to North Korea (DPRK). It is cited here from Genians. The report is dated 2024-07-31.

ip address Konni MATCHED IN SOURCE

First seen 2024-07-31 · last seen 2024-07-31

Network

Looked up 2026-09-21 at ip-api.com. A hosting range is not evidence on its own.

Source

• …그리고 'setting.ini' 파일을 통해 '5.78.68.117 [US]' 주소를 할당합니다. [그림 26] 포트 포워딩 코드 분석 화면 ○ 유무선 공유기, NAT 환경 등으로 외부에서 원격데스크톱(RDP) 접속이 불가한 환경에 역방향 세션을 허용하고, RDP 터널링으로 원격 접속이…

  AutoIt 활용 방어 회피 전술의 코니 APT 캠페인 분석 — Genians · under “4. 침해 사고 조사 (Breach Incident Investigation)” · published 2024-07-31 · pulled 2026-09-11

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: AutoIt 활용 방어 회피 전술의 코니 APT 캠페인 분석

Genians lists 12 other indicators in this source.

• no-reply.trustmaster@hometax.go.kr email address
• 16eb2cceb920319eaddd5d7b85483cc4 file hash
• 61f65bd593ea0e52ac0dfdc6bc9cd73a file hash
• 87dc4c8f67cffc8a9699328face923e2 file hash
• 162.241.216.224 IP address
• 162.241.253.27 IP address
• 185.231.154.22 IP address
• 5.161.182.109 IP address
• 5.75.181.118 IP address
• 62.113.118.157 IP address
• 93.183.93.185 IP address
• 94.103.87.212 IP address