`103.130.212.116`

103.130.212.116 is an IP address that 2 published sources report in connection with Kimsuky activity, which public reporting attributes to North Korea (DPRK). It is cited here from AhnLab ASEC. The reports are dated 2025-06-11.

ip address Kimsuky MATCHED IN SOURCE

First seen 2025-06-11 · last seen 2025-06-11

Network

Kind	data centre
Network	P815
Announced by	AS135953 Vietnam Online Network Solution Joint Stock Compnay
Country	Vietnam
Flags	hosting range

Looked up 2026-09-21 at ip-api.com. A hosting range is not evidence on its own.

Sources

…FQDN niva.serverpit.com IP 103.130.212.116 103.149.98.230 Tags: AnyDesk BabyShark Dropbox 북한 김수키 교수 논문 HWP 킴수키 한글 원격 원격제어 Kimsuky RandomQuery…
논문파일을 위장한 악성코드 유포 주의 (Kimsuky 그룹) - ASEC — AhnLab ASEC · under “논문파일을 위장한 악성코드 유포 주의 (Kimsuky 그룹)” · published 2025-06-11 · pulled 2026-09-12
…FQDN niva.serverpit.com IP 103.130.212.116 103.149.98.230 Tags: AnyDesk BabyShark Dropbox 북한 김수키 교수 논문 HWP 킴수키 한글 원격 원격제어 Kimsuky RandomQuery…
Warning Against Distribution of Malware Disguised as Research Papers (Kimsuky Group) - ASEC — AhnLab ASEC · under “Warning Against Distribution of Malware Disguised as Research Papers (Kimsuky Group)” · published 2025-06-11 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: 논문파일을 위장한 악성코드 유포 주의 (Kimsuky 그룹) - ASEC

AhnLab ASEC lists 6 other indicators in this source.