121.88 Central Control – Simplified Network Overview




0eb8de32f7d334e64db0d8a104de287ddf8945e9e9c5645df490f88f2990204aae9f27d93d539618f9




+ 121.88 (Operator)

 → Central controller link'ing all major IPs and operations.


+ 115.138, 58.140, 118.176

 → IPs used in assassination threat, content cloning, and macro campaigns.


+ funny7660 (User Account)

 → Key user involved in propaganda, audio evidence linked.


+ Macro IP Cluster A–M

 → Split into individual sub-clusters (A to M) with IPs used for mass posting.


+ Phishing / Botnet Source

 → Suspected method for harvesting IPs and hijacking devices.


DCInside Real-time Censorship / YouTube Manipulation / Propaganda Keywords

 → Platforms and tactics used to execute the information operation.






-Keyword-based framing: “Schizophrenia,” “Delusion,” “Insurrectionist Dog,” etc.

-Suspected IP harvesting methods: Phishing links / botnet hijacking

-Propagation platforms: YouTube, Naver, Fmkorea, DCInside, etc





This EV06 chart is designed for structural clarity, not detail.


Further breakdowns—including account behavior (EV07), keyword tracking (EV08), time-based activity mapping (EV09), cross-platform spread (EV10), and forensic evidence logs (EV11)—will follow in the next documents.