`192.248.167.90`

192.248.167.90 is an IP address that one published source reports in connection with APT38 activity, which public reporting attributes to North Korea (DPRK). It is cited here from Validin. The report is dated 2025-03-11.

ip address APT38 MATCHED IN SOURCE

First seen 2025-03-11 · last seen 2025-03-11

Network

Kind	data centre
Network	The Constant Company, LLC (Vultr Holdings LLC London)
Announced by	AS20473 The Constant Company, LLC
Country	United Kingdom
Flags	hosting range

Looked up 2026-09-21 at ip-api.com. A hosting range is not evidence on its own.

Source

…these features. Starting with the banner hash b21405ce3c3456214ad8fc5263eeabb1 , we find a third domain, getcoinprice.info , hosted on 192.248.167.90 , around the same time that getstockprice.info was in use. Figure 7.…
Lazarus Group Bybit Heist: C2 forensics — Validin · under “Pivoting on Banner Hash” · published 2025-03-11 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: Lazarus Group Bybit Heist: C2 forensics

Validin lists 16 other indicators in this source. 12 are shown, chosen across types.

All 17 indicators from this source