`160.238.37.95`

160.238.37.95 is an IP address that one published source reports in connection with APT37 activity, which public reporting attributes to North Korea (DPRK). It is cited here from Genians. The report is dated 2026-07-12.

ip address APT37 MATCHED IN SOURCE

First seen 2026-07-12 · last seen 2026-07-12

Network

Kind	proxy or VPN
Network	PacketHub S.A. (Packethub S.A)
Announced by	AS147049 PacketHub S.A.
Country	South Korea
Flags	hosting range, known proxy or VPN

Looked up 2026-09-21 at ip-api.com. This range is classed as a proxy or VPN; it does not show who used it.

Source

…5.180.208.57 (US) - Clouvider 5.180.208.60 (US) - Clouvider 89.147.101.197 (KR) - Nord VPN 89.187.161.220 (JP) - Astrill VPN 160.238.37.95 (KR) - Nord VPN 160.238.37.100 (KR) - Nord VPN 상기 정보는 위협 행위자가 스피어피싱 공격 수행 및 공격 인프라 구축, 운영 과정에서 사용한 것으로 확인된 침해지표의 일부이며, 향후 동일 또는…
Operation Capsule Vault: EMBED_PAYLOAD_v2 기반 RokRAT 공격 체인 분석 — Genians · under “3-1. 상관 관계 분석” · published 2026-07-12 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: Operation Capsule Vault: EMBED_PAYLOAD_v2 기반 RokRAT 공격 체인 분석

Genians lists 7 other indicators in this source.