`124.217.209.11`

124.217.209.11 is an IP address that one published source reports in connection with Kimsuky and Konni activity, which public reporting attributes to North Korea (DPRK). It is cited here from ESTsecurity ALYac. The report is dated 2019-06-10.

ip address Kimsuky Konni MATCHED IN SOURCE

First seen 2019-06-10 · last seen 2019-06-10

Network

Kind	data centre
Network	NHNCLOUD
Country	South Korea
Flags	hosting range

Looked up 2026-09-21 at ip-api.com. A hosting range is not evidence on its own.

Source

…그런데 로그 파일을 살펴보면 한국의 리눅스랩 VPN 대역의 아이피 '124.217.209.11' 주소에서 감염 정보가 등록되고, 맥은 '56DFDBA0' 주소가 기록됩니다.…
[스페셜 리포트] APT 캠페인 'Konni' & 'Thallium(Kimsuky)' 조직의 공통점 발견 — ESTsecurity ALYac · under “본문” · published 2019-06-10 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: [스페셜 리포트] APT 캠페인 'Konni' & 'Thallium(Kimsuky)' 조직의 공통점 발견

ESTsecurity ALYac lists 11 other indicators in this source.