`5.180.208.60`

5.180.208.60 is an IP address that one published source reports in connection with APT37 activity, which public reporting attributes to North Korea (DPRK). It is cited here from Genians. The report is dated 2026-07-12.

ip address APT37 MATCHED IN SOURCE

First seen 2026-07-12 · last seen 2026-07-12

Network

Kind	proxy or VPN
Network	Clouvider Limited (Packethub S.A)
Announced by	AS62240 Clouvider
Country	United States
Flags	hosting range, known proxy or VPN

Looked up 2026-09-21 at ip-api.com. This range is classed as a proxy or VPN; it does not show who used it.

Source

…johnson8903013@gmail.com 5.180.208.57 (US) - Clouvider 5.180.208.60 (US) - Clouvider 89.147.101.197 (KR) - Nord VPN 89.187.161.220 (JP) - Astrill VPN 160.238.37.95 (KR) - Nord VPN 160.238.37.100…
Operation Capsule Vault: EMBED_PAYLOAD_v2 기반 RokRAT 공격 체인 분석 — Genians · under “3-1. 상관 관계 분석” · published 2026-07-12 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: Operation Capsule Vault: EMBED_PAYLOAD_v2 기반 RokRAT 공격 체인 분석

Genians lists 7 other indicators in this source.