51.254.60.208

51.254.60.208 is an IP address that one published source reports in connection with Kimsuky activity, which public reporting attributes to North Korea (DPRK). It is cited here from ESTsecurity ALYac. The report is dated 2019-07-30.

ip address Kimsuky MATCHED IN SOURCE

First seen 2019-07-30 · last seen 2019-07-30

Network

Kinddata centre
NetworkOVH SAS (OVH)
Announced byAS16276 OVH SAS
CountryFrance
Flagshosting range

Looked up 2026-09-21 at ip-api.com. A hosting range is not evidence on its own.

Source

  • …03:47:11 8ba860e1340b29439ff5f6e3df98d537 nvgifx.exe 2019-07-08 11:19:12 f1af683eba25bb9cdf4fa88176fc6128 C&C 서버 정보 - 51.254.60.208 흥미로운 점은 한국에서 발생했던 다수의 APT 공격용 악성파일의 커스텀 암호화 로직과 유사성을 가지고 있어, 특정 정부의 후원을 받는 해킹 조직이 배후에 있을 것으로 보입니다.…
    라자루스 APT, 국내 보안업체의 유효한 디지털서명을 탑재한 악성코드 주의! — ESTsecurity ALYac · under “본문” · published 2019-07-30 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.