121.130.210.38

121.130.210.38 is an IP address that 2 published sources report in connection with APT37 activity, which public reporting attributes to North Korea (DPRK). It is cited here from AhnLab ASEC. The reports are dated 2025-08-13.

ip address APT37 MATCHED IN SOURCE

First seen 2025-08-13 · last seen 2025-08-13

Network

Kindfixed line
NetworkKorea Telecom (KT Corporation)
Announced byAS4766 Korea Telecom
CountrySouth Korea

Looked up 2026-09-21 at ip-api.com. A subscriber line, as a person working from home ordinarily has.

Sources

  • Nearby text:

    …URL http://121.130.210.38/pprb/cool/d.php?newpa=tony http://121.130.210.38/pprb/server/d.php?newpa=attach http://121.130.210.38/pprb/server/d.php?newpa=cool http:…
    2025년 7월 APT 공격 동향 보고서(국내) - ASEC — AhnLab ASEC · under “Type B” · published 2025-08-13 · pulled 2026-09-11
  • Nearby text:

    …URL http://121.130.210.38/pprb/cool/d.php?newpa=tony http://121.130.210.38/pprb/server/d.php?newpa=attach http://121.130.210.38/pprb/server/d.php?newpa=cool http:…
    July 2025 APT Attack Trends Report (South Korea) - ASEC — AhnLab ASEC · under “Type B” · published 2025-08-13 · pulled 2026-09-11

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: 2025년 7월 APT 공격 동향 보고서(국내) - ASEC

AhnLab ASEC lists 7 other indicators in this source.

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.