`122.114.233.77`

122.114.233.77 is an IP address that one published source reports in connection with Kimsuky activity, which public reporting attributes to North Korea (DPRK). It is cited here from DomainTools. The report is dated 2026-01-06.

ip address Kimsuky MATCHED IN SOURCE

First seen 2026-01-06 · last seen 2026-01-06

Network

Kind	fixed line
Network	CHINA UNICOM China169 Backbone (Zhengzhou GIANT Computer Network Technology Co., Ltd)
Announced by	AS4837 CHINA UNICOM China169 Backbone
Country	China

Looked up 2026-09-21 at ip-api.com. A subscriber line, as a person working from home ordinarily has.

Source

…include 23.95.213.210 (a known VPS provider used in past credential-stuffing campaigns), 218.92.0.210 (allocated to a Chinese ISP), and 122.114.233.77 (Henan Mobile, China).…
Inside the Kimsuky Leak: How the “Kim” Dump Exposed North Korea’s Credential Theft Playbook — DomainTools · under “SSH and Log-Based Evidence” · published 2026-01-06 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: Inside the Kimsuky Leak: How the “Kim” Dump Exposed North Korea’s Credential Theft Playbook

DomainTools lists 9 other indicators in this source.