167.88.165.122
167.88.165.122 is an IP address
that 2 published sources report
in connection with Kimsuky activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from AhnLab ASEC.
The earliest of those reports is dated 2026-07-16 and the most recent 2026-07-23.
ip address Kimsuky MATCHED IN SOURCE
Network
| Kind | data centre |
|---|---|
| Network | RouterHosting LLC |
| Announced by | AS14956 RouterHosting LLC |
| Country | United States |
| Flags | hosting range |
Sources
-
…URL http://167.88.165.122/login.asp http://edcvbgtrf.medianewsonline.com/1t32.exe http://edcvbgtrf.medianewsonline.com/rdpwrap.bat http://edcvbgtrf.medianewsonlin…
Attack Cases by the Kimsuky Group Impersonating Diplomats (PebbleDash, PrxClient) - ASEC — AhnLab ASEC -
…URL http://167.88.165.122/login.asp http://edcvbgtrf.medianewsonline.com/1t32.exe http://edcvbgtrf.medianewsonline.com/rdpwrap.bat http://edcvbgtrf.medianewsonlin…
Kimsuky 그룹의 외교 관련 종사자 사칭 공격 사례 (PebbleDash, PrxClient) - ASEC — AhnLab ASEC
Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.
Related indicators
Cited by the same report: Attack Cases by the Kimsuky Group Impersonating Diplomats (PebbleDash, PrxClient) - ASEC
All 9 indicators from this source