← All actor clusters

161.248.239.119

161.248.239.119 is an IP address that one published source reports in connection with Kimsuky activity, which public reporting attributes to North Korea (DPRK). It is cited here from ENKI. The report is dated 2025-08-29.

ip address Kimsuky MATCHED IN SOURCE

First seen 2025-08-29 · last seen 2025-08-29

Network

Looked up 2026-09-21 at ip-api.com. A hosting range is not evidence on its own.

Source

• …310ebb7ca19ff9b75d4054c340b0c82e ca9cb7bb06398670abc6d19186c336cd C&C 158.247.250.251 95.214.54.164 161.248.239.119 195.177.94.43 147.135.109.226 158.247.240.40 Mutex Xilnulmx Ncppn User-Agent Mozilla/5.0 (Windows NT 10.0;…

  국내 IP에서 유포된 PureCrypter 적용 Formbook 페이로드 분석 — ENKI · under “C&C” · published 2025-08-29 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: 국내 IP에서 유포된 PureCrypter 적용 Formbook 페이로드 분석

ENKI lists 14 other indicators in this source. 12 are shown, chosen across types.

• 108b5fd1b62489fd5cdb4ebd4a463226 file hash
• 52a321e48902b8fbd1e984d9bd15f278 file hash
• 6e5198c3aae9005cc58d011a8c6f0bec file hash
• 81bfe3b3204ede1fca418e44aa19b310 file hash
• a6c26a0b5df0db6a35b15c24342f27f8 file hash
• ca9cb7bb06398670abc6d19186c336cd file hash
• e78be07019dfaf682c601985ac3ba424 file hash
• 147.135.109.226 IP address
• 158.247.240.40 IP address
• 158.247.250.251 IP address
• 195.177.94.43 IP address
• 95.214.54.164 IP address

All 15 indicators from this source