162.220.11.202
162.220.11.202 is an IP address
that 2 published sources report
in connection with Kimsuky, APT37, Konni and Lazarus Group activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from Logpresso.
The earliest of those reports is dated 2026-01-14 and the most recent 2026-11-13.
ip address KimsukyAPT37KonniLazarus Group MATCHED IN SOURCE
Network
| Kind | data centre |
|---|---|
| Network | Interserver, Inc |
| Announced by | AS26666 Interserver, Inc |
| Country | United States |
| Flags | hosting range |
Sources
-
…ate.alzip.r-e.kr mail.naverwork.r-e.kr gwa.wooritg.o-r.kr mail.naverwork.o-r.kr image.secuwizvpn.r-e.kr load.rwbcode.com rwbcode.com 162.220.11.202 http://load.samework.o-r.kr/index.php http://load.rwbcode.com/index.php See Also More Supply…
[위협 분석] 건강검진 안내 문서로 위장한 악성코드 | Logpresso — Logpresso -
…e.com rwbcode.com 174.138.186.157:5511 174.138.186.157:7788 174.138.186.157:9558 213.145.86.223:9005 111.92.189.34:21 142.11.248.98 162.220.11.202 ydcxcm.pklzd.com quemr.mailhubsec.com link24.kr www.link24.kr vvopen.pklzd.com quemr.mailhubsec.com mailhubsec.com www.mailhubsec.c…
2025 북한 연계 APT 공격 분석 회고 (Lazarus · Kimsuky · APT37 · Konni) | 로그프레소 — Logpresso
Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.