← All actor clusters

`162.0.209.91`

162.0.209.91 is an IP address that one published source reports in connection with Kimsuky activity, which public reporting attributes to North Korea (DPRK). It is cited here from Genians. The report is dated 2024-05-10.

ip address Kimsuky MATCHED IN SOURCE

First seen 2024-05-10 · last seen 2024-05-10

Network

Kind	data centre
Network	Namecheap, Inc.
Announced by	AS22612 Namecheap, Inc.
Country	United States
Flags	hosting range

Looked up 2026-09-21 at ip-api.com. A hosting range is not evidence on its own.

Source

…C2 (Related) 52.177.14.24 [US] 69.163.180.70 [US] 162.0.209.27 [US] 162.0.209.91 [US] 199.59.243.225…
페이스북과 MS관리콘솔을 활용한 Kimsuky APT 공격 발견 — Genians · under “6. 침해 지표 (Indicator of Compromise)” · published 2024-05-10 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: 페이스북과 MS관리콘솔을 활용한 Kimsuky APT 공격 발견

Genians lists 12 other indicators in this source.