`222.122.49.15`

222.122.49.15 is an IP address that 2 published sources report in connection with APT37 activity, which public reporting attributes to North Korea (DPRK). It is cited here from Genians. The reports are dated 2026-04-12.

ip address APT37 MATCHED IN SOURCE

First seen 2026-04-12 · last seen 2026-04-12

Network

Kind	fixed line
Network	Korea Telecom (Kornet)
Announced by	AS4766 Korea Telecom
Country	South Korea

Looked up 2026-09-21 at ip-api.com. A subscriber line, as a person working from home ordinarily has.

Sources

…28d0143718153bf04c1919a26bb70c2d 36be2cbb59cd1c3f745d5f80f9aee21c C2 japanroom.com 38.32.68.195 222.122.49.15 이 글 공유하기 Facebook LinkedIn Email…
APT37의 프리텍스팅 기반 표적 침투: 페이스북 정찰과 소프트웨어 변조 공격 분석 — Genians · under “C2” · published 2026-04-12 · pulled 2026-09-12
…28d0143718153bf04c1919a26bb70c2d 36be2cbb59cd1c3f745d5f80f9aee21c C2 japanroom.com 38.32.68.195 222.122.49.15 이 글 공유하기 Facebook LinkedIn Email…
APT37’s Pretexting-Based Targeted Intrusion: Analysis of Facebook Reconnaissance and Software Tampering Attacks — Genians · under “C2” · published 2026-04-12 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: APT37의 프리텍스팅 기반 표적 침투: 페이스북 정찰과 소프트웨어 변조 공격 분석

Genians lists 7 other indicators in this source.

Cited by the same report: APT37’s Pretexting-Based Targeted Intrusion: Analysis of Facebook Reconnaissance and Software Tampering Attacks

Genians lists 6 other indicators in this source. 1 are shown, chosen across types.

All 7 indicators from this source