`103.81.116.10`

103.81.116.10 is an IP address that 2 published sources report in connection with Kimsuky and unclustered DPRK activity, which public reporting attributes to North Korea (DPRK). It is cited here from AhnLab ASEC. The reports are dated 2026-10-29.

ip address KimsukyDPRK (cluster unattributed) MATCHED IN SOURCE

First seen 2026-10-29 · last seen 2026-10-29

Network

Kind	fixed line
Network	Excogitate Technologies Pvt. Ltd (Excogitate Technologies Pvt Ltd)
Announced by	AS135851 Excogitate Technologies Pvt Ltd
Country	India

Looked up 2026-11-12 at ip-api.com. A subscriber line, as a person working from home ordinarily has.

Sources

…IP 103.81.116.10 Tags: AutoIT backdoor Decoy 미끼문서 백도어 바로가기 디코이 GitHub HTA HWP HWPX 피싱 한글문서 Keylogger…
2026년 9월 APT 공격 동향 보고서(국내) - ASEC — AhnLab ASEC · under “결론” · published 2026-10-29 · pulled 2026-11-12
…IP 103.81.116.10 Tags: AutoIT backdoor Decoy 미끼문서 백도어 바로가기 디코이 GitHub HTA HWP HWPX 피싱 한글문서 Keylogger…
September 2026 Threat Trend Report on APT Attacks (South Korea) - ASEC — AhnLab ASEC · under “Conclusion” · published 2026-10-29 · pulled 2026-11-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: 2026년 9월 APT 공격 동향 보고서(국내) - ASEC

AhnLab ASEC lists 6 other indicators in this source.