115.92.4.123
115.92.4.123 is an IP address
that 3 published sources report
in connection with Contagious Interview and Kimsuky activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from Genians and Proofpoint.
The earliest of those reports is dated 2025-04-16 and the most recent 2025-07-01.
ip address Contagious InterviewKimsuky MATCHED IN SOURCE
Network
| Kind | fixed line |
|---|---|
| Network | LG DACOM Corporation |
| Announced by | AS3786 LG DACOM Corporation |
| Country | South Korea |
Sources
-
…통해 피해자 컴퓨터에 원격으로 액세스할 수 있도록 설정을 구성합니다. ○ 참고로, ' Microsoft Threat Intelligence ' SNS 통해 유사한 사례가 알려졌는데, 'securedrive.fin-tech.com', '115.92.4.123' (KR) C2 주소가 공개된 바 있습니다. ○ 한국 사례의 C2는 'kida.plusdocs.kro.kr' 도메인이고, 연결된 IP 주소는 '1.223.129.234' (KR) 입니다.…
'클릭픽스' 전술을 활용한 김수키 그룹 위협 사례 분석 — Genians -
…February 2025 eunsoolim29@gmail.com Email address Sender email January 2025 115.92.4.123 IP Likely legitimate but compromised server January 2025 121.179.161.230 IP Likely…
Around the World in 90 Days: State-Sponsored Actors Try ClickFix | Proofpoint US — Proofpoint -
…shared on social media by “ Microsoft Threat Intelligence ”, which revealed related C2 addresses such as “securedrive.fin-tech.com” and “115.92.4.123 (KR)”. ○ In the Korean case, the C2 domain was “kida.plusdocs.kro.kr,” with an associated IP address of 1.223.129.234 (KR).…
Analysis of the threat case of kimsuky group using 'ClickFix' tactic — Genians
Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.
Related indicators
Cited by the same report: '클릭픽스' 전술을 활용한 김수키 그룹 위협 사례 분석
All 33 indicators from this source
Cited by the same report: Around the World in 90 Days: State-Sponsored Actors Try ClickFix | Proofpoint US
All 23 indicators from this source