`92.38.135.213`

92.38.135.213 is an IP address that one published source reports in connection with Kimsuky activity, which public reporting attributes to North Korea (DPRK). It is cited here from Joe Słowik. The report is dated 2022-11-23.

ip address Kimsuky MATCHED IN SOURCE

First seen 2022-11-23 · last seen 2022-11-23

Network

Kind	data centre
Network	G-Core Labs S.A. (GCL)
Announced by	AS202422 G-Core Labs S.A.
Country	South Korea
Flags	hosting range

Looked up 2026-09-21 at ip-api.com. A hosting range is not evidence on its own.

Source

…Iris ScreenShot We can spot several items that look suspicious here – anonymized registration, dedicated hosting (on IP address 92.38.135.213), suspicious authoritative name server use – but unfortunately there’s very little to pivot on to learn more about this item (or identify…
Detailing Daily Domain Hunting — Joe Słowik · under “Published by Joe on 11/23/2022 11/23/2022” · published 2022-11-23 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.