Chollima Hunter

← All actor clusters

188.227.197.143

188.227.197.143 is an IP address that one published source reports in connection with APT38 activity, which public reporting attributes to North Korea (DPRK). It is cited here from SecurityAlliance. The report is dated 2026-10-13.

ip address APT38 MATCHED IN SOURCE

First seen 2026-10-13 · last seen 2026-10-13

Network

Kinddata centre
NetworkPetrosky Cloud LLC (PetroSky)
Announced byAS400897 PETROSKY CLOUD LLC
CountryCanada
Flagshosting range

Looked up 2026-10-18 at ip-api.com. A hosting range is not evidence on its own.

Source

  • …: teamoftenuse.com teanrisliue.com tearns-liue.com Older C2 servers tied to new UNC1069 phishing deployments: check02id.com 188.227.197.143 SINT-69 An uncategorized intrusion set, remains active after an infrastructure migration.…
    SEAL weekly stats: 6-13 Oct, 2026 — SecurityAlliance · under “DPRK” · published 2026-10-13 · pulled 2026-10-18

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.