89.117.139.230
89.117.139.230 is an IP address
that 2 published sources report
in connection with Kimsuky activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from Cyberstanc and Interlab.
The earliest of those reports is dated 2023-09-15 and the most recent 2026-10-18.
ip address Kimsuky MATCHED IN SOURCE
Network
| Kind | data centre |
|---|---|
| Network | HOSTINGER US |
| Announced by | AS47583 Hostinger International Limited |
| Country | United States |
| Flags | hosting range |
Sources
-
…– 4000.explorer.exe File paths C:\Users\Public\Documents\proc.db C:\Users\Public\Documents\sys.db Domain and IPs hironchk.com 89.117.139.230 © 2025 All rights reserved.…
North Korea's Hackers Caught Red-Handed: The Cyberstanc Revelation — Cyberstanc -
…This variant of SuperBear RAT established a connection to a C2 server located at: IP Address: 89.117.139.230 Domain: hironchk.com The RAT performs one of 3 primary attack operations: 1.…
Interlab 인터랩 | Novel RAT discovered “SuperBear” targeting journalist covering geopolitics of Asia — Interlab
Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.