← All actor clusters

152.32.138.146

152.32.138.146 is an IP address that 2 published sources report in connection with Kimsuky activity, which public reporting attributes to North Korea (DPRK). It is cited here from Break Glass Intelligence and Idanmalihi. The earliest of those reports is dated 2026-03-12 and the most recent 2026-06-01.

ip address Kimsuky MATCHED IN SOURCE

First seen 2026-03-12 · last seen 2026-06-01

Network

Looked up 2026-09-21 at ip-api.com. A hosting range is not evidence on its own.

Sources

• …443 AS135377 UCloud HK 152.32.243.178 80 AS135377 UCloud HK 101.36.114.66 80 — Korea 27.102.137.140 80 AS45996 DAOU Technology 152.32.138.146 443 AS135377 UCloud HK 118.194.248.134 443 AS135377 UCloud HK 118.193.69.19 443 AS135377 UCloud HK 152.32.139.149 80 AS135377…

  Kimsuky's Five-Stage GrimResource Loader: When an MMC File Becomes a Shellcode Injector — Break Glass Intelligence · under “C2 IP Addresses” · published 2026-03-12 · pulled 2026-09-12

• …32.138.158 118.193.69.37 118.194.248.158 123.58.201.222 118.193.68.11 118.194.248.95 101.36.114.215 118.194.248.246 118.194.249.36 152.32.138.146 123.58.200.186 152.32.138.225 123.58.201.8 118.193.68.95 152.32.243.215 152.32.243.169 118.193.69.100 101.36.114.24 165.154.52.21…

  Tracking North Korea Nation-State APT Infrastructure: Kimsuky — Idanmalihi · under “IP Addresses” · published 2026-06-01 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: Kimsuky's Five-Stage GrimResource Loader: When an MMC File Becomes a Shellcode Injector

Break Glass Intelligence lists 28 other indicators in this source. 7 are shown, chosen across types.

• AS135377 autonomous system number
• AS45996 autonomous system number
• 3tg8i.dns.army domain
• a7f3q.v6.navy domain
• 66126fa42accfb183f72e25b20750b97 file hash
• 6db53d66629f95a2d830a4f56e8c69f2 file hash
• 152.32.139.149 IP address

All 29 indicators from this source

Cited by the same report: Tracking North Korea Nation-State APT Infrastructure: Kimsuky

Idanmalihi lists 42 other indicators in this source. 5 are shown, chosen across types.

• 152.32.138.158 IP address
• 152.32.138.167 IP address
• 152.32.138.172 IP address
• 152.32.138.225 IP address
• 152.32.139.104 IP address

All 43 indicators from this source