199.180.116.228

199.180.116.228 is an IP address that one published source reports in connection with Kimsuky activity, which public reporting attributes to North Korea (DPRK). It is cited here from ESTsecurity ALYac. The report is dated 2018-02-05.

ip address Kimsuky MATCHED IN SOURCE

First seen 2018-02-05 · last seen 2018-02-05

Network

Kindproxy or VPN
NetworkIT7 Networks Inc (Cluster Logic Inc)
Announced byAS25820 IT7 Networks Inc
CountryUnited States
Flagshosting range, known proxy or VPN

Looked up 2026-09-21 at ip-api.com. This range is classed as a proxy or VPN; it does not show who used it.

Source

  • …199.180.116.228 (미국) [그림 9] 미국의 특정 서버로 통신을 시도하는 코드 화면 또한, 2018년 국회의원실을 사칭해 설치된 악성 코드와 2016년 국방분야 관련 공격에 사용된 악성 코드의 암복호화 알고리즘을…
    특정 국회의원실의 가상화폐 법안자료로 위장한 표적공격 주의 — ESTsecurity ALYac · under “본문” · published 2018-02-05 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.