← All actor clusters

54.164.68.94

54.164.68.94 is an IP address that one published source reports in connection with APT37 activity, which public reporting attributes to North Korea (DPRK). It is cited here from Genians. The report is dated 2023-05-22.

ip address APT37 MATCHED IN SOURCE

First seen 2023-05-22 · last seen 2023-05-22

Network

Looked up 2026-09-21 at ip-api.com. A hosting range is not evidence on its own.

Source

• …압축 파일명 이력서 모음 .zip 다운로드 도메인 filestorage.b4a.app/download.html (Back4app) 아이피 주소 44.199.48.119 [ 미국 ], 54.164.68.94 [ 미국 ] / (AMAZON-AES) 악성 파일명 임원이력서 - 김 **.lnk ( 일부 * 표기 대체 ) MD5 1b046ab2261bc0dc5c6cd999f9a8b1c6 SHA256…

  북한인권단체를 사칭한 APT37 공격 사례 — Genians · published 2023-05-22 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: 북한인권단체를 사칭한 APT37 공격 사례

Genians lists 28 other indicators in this source. 12 are shown, chosen across types.

• claudiaback0910@yandex.com email address
• njrntop@gmail.com email address
• pardonsingh@yandex.com email address
• 35ac9f5ab3caba22c4ca204074cd8c01 file hash
• 3b06e73ccb903b71f9ff1a60218f4b42 file hash
• 44bdeb6c0af7c36a08c64e31ceadc63c file hash
• 6ffa17d5da06a643a2d4231497e66ee1 file hash
• 71c5990bd1c04488b3f99cbebbcbfc19 file hash
• 7ca1e08fc07166a440576d1af0a15bb1 file hash
• 85e71578ad7fea3c15095b6185b14881 file hash
• 904781cfcc946573bd2bf8882c85edbd file hash
• 44.199.48.119 IP address

All 29 indicators from this source