`35.245.79.218`

35.245.79.218 is an IP address that one published source reports in connection with Konni and Kimsuky activity, which public reporting attributes to North Korea (DPRK). It is cited here from wezard4u. The report is dated 2024-07-24.

ip address Konni Kimsuky MATCHED IN SOURCE

First seen 2024-07-24 · last seen 2024-07-24

Network

Kind	data centre
Network	Google LLC (Google Cloud (us-east4))
Announced by	AS396982 Google LLC
Country	United States
Flags	hosting range

Looked up 2026-09-21 at ip-api.com. A hosting range is not evidence on its own.

Source

…transfer.cab 에 포함 이 된 VBS 파일 C&C 176.97(.064.174:80 (http://shutss.com/list.php?6385730(0)2331562265=bx5RX5T b(x)6I5%2fs4mBw%3d%3d) 35.245.79.218:443(https://thevintagegarage.com) 최근 북한 애들 보니까 transfer.cab 이런 식으로 cab 파일에 vbs 파일을 집어넣어 두고 풀고 삭제 그리고 한국 사이트는 수사가 잘 이루어지니 오픈소스를 기반으로 한…
북한 해킹 단체 Konni(코니) 암호화폐 거래소 빗썸(Bithumb) 정보 업데이트 요청으로 위장한 악성코드-금융당국 요청에 따른 프로젝트 — wezard4u · under “C&C” · published 2024-07-24 · pulled 2026-09-11

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.