← All actor clusters

162.216.224.39

162.216.224.39 is an IP address that one published source reports in connection with Kimsuky activity, which public reporting attributes to North Korea (DPRK). It is cited here from ESTsecurity ALYac. The report is dated 2022-01-13.

ip address Kimsuky MATCHED IN SOURCE

First seen 2022-01-13 · last seen 2022-01-13

Network

Looked up 2026-09-21 at ip-api.com. A subscriber line, as a person working from home ordinarily has.

Source

• …피싱 공격 발신지는 162.216.224.39 IP 주소가 활용됐는데, Hide All IP VPN 서비스로 조사됐고, 명령 제어(C2) 서버는 ‘bigfilemail.net’ 주소가 사용됐다.…

  금융社 또는 북한 내부 정보로 현혹하는 北 배후 해킹 증가 주의 — ESTsecurity ALYac · under “본문” · published 2022-01-13 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.