`209.197.3.8`

209.197.3.8 is an IP address that one published source reports in connection with Kimsuky activity, which public reporting attributes to North Korea (DPRK). It is cited here from wezard4u. The report is dated 2023-10-31.

ip address Kimsuky MATCHED IN SOURCE

First seen 2023-10-31 · last seen 2023-10-31

Network

Kind	data centre
Network	Amazon.com, Inc.
Announced by	AS16509 Amazon.com, Inc.
Country	United States
Flags	hosting range

Looked up 2026-09-21 at ip-api.com. A hosting range is not evidence on its own.

Source

…받은 텍스트 응답을 나타내며 해당 부분이 VBScript로 실행 즉 서버에서 반환된 데이터가 VBScript 코드일 경우 해당 코드가 실행 사용하는 IP 트래픽 157.7.184.26:80(TCP) 208.111.177.0:80(TCP) 209.197.3.8:80(TCP) 8.248.153.254:80(TCP) 8.252.193.254:80(TCP) 2023-10-16 07:48:48 UTC 기준 바이러스토탈 에서 탐지하는 보안 업체들은 다음과…
대북 관계자를 목표를 하고 있는 김수키(Kimsuky) 만든 악성코드-북한인권단체 활동의 어려움과 활성화 방안 이광백대표.chm(2023.5.9) — wezard4u · under “사용하는 IP 트래픽” · published 2023-10-31 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: 대북 관계자를 목표를 하고 있는 김수키(Kimsuky) 만든 악성코드-북한인권단체 활동의 어려움과 활성화 방안 이광백대표.chm(2023.5.9)

wezard4u lists 3 other indicators in this source.