`106.243.157.158`

106.243.157.158 is an IP address that 2 published sources report in connection with Contagious Interview and Kimsuky activity, which public reporting attributes to North Korea (DPRK). It is cited here from Genians. The reports are dated 2025-07-01.

ip address Contagious Interview Kimsuky MATCHED IN SOURCE

First seen 2025-07-01 · last seen 2025-07-01

Network

Kind	fixed line
Network	LG DACOM Corporation (Boranet)
Announced by	AS3786 LG DACOM Corporation
Country	South Korea

Looked up 2026-09-21 at ip-api.com. A subscriber line, as a person working from home ordinarily has.

Sources

…그리고 베트남 소재의 '103.149.98.248' (VN) 주소는 악성파일 C2 서버로 쓰였을 것으로 추정됩니다. ○ 특히, '1.223.129.234' (KR) 외에 '211.170.73.245' (KR), '106.243.157.158' (KR) 주소도 위협 인프라로 사용됐을 가능성이 높습니다. IP Domain Hosting 1.223.129.234 (KR) kida.plusdocs.kro.kr 내도메인.한국 mspro.kro.kr…
'클릭픽스' 전술을 활용한 김수키 그룹 위협 사례 분석 — Genians · under “3-3. 웹 사이트 기반 'ClickFix' 전술 도입 사례” · published 2025-07-01 · pulled 2026-09-12
…used as a C2 server for distributing malicious files. ○ In particular, beyond 1.223.129.234 (KR), the addresses 211.170.73.245 (KR) and 106.243.157.158 (KR) are also considered likely components of the threat infrastructure. IP Domain Hosting 1.223.129.234 (KR)…
Analysis of the threat case of kimsuky group using 'ClickFix' tactic — Genians · under “3-3. Case of the “ClickFix” Tactic Delivered via a Website” · published 2025-07-01 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: '클릭픽스' 전술을 활용한 김수키 그룹 위협 사례 분석

Genians lists 32 other indicators in this source. 7 are shown, chosen across types.

All 33 indicators from this source

Cited by the same report: Analysis of the threat case of kimsuky group using 'ClickFix' tactic

Genians lists 32 other indicators in this source. 5 are shown, chosen across types.

All 33 indicators from this source