88.119.169.96
88.119.169.96 is an IP address
that one published source reports
in connection with Konni activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from Frost (@fr0s7_).
The report is dated 2023-09-01.
ip address Konni RESEARCHER POST
Network
| Kind | data centre |
|---|---|
| Network | UAB Bacloud |
| Announced by | AS61272 UAB Bacloud |
| Country | The Netherlands |
| Flags | hosting range |
Source
-
Two posts the researcher tags #APT #Konni, three days apart. The first gives a sample, its C2 domain and the address it resolved to; the second gives another sample and says it uses the same domain.
x.com/fr0s7_/status/1697506531724419277 — Frost (@fr0s7_)
Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.