`103.225.168.159`

103.225.168.159 is an IP address that one published source reports in connection with Lazarus Group and Kimsuky activity, which public reporting attributes to North Korea (DPRK). It is cited here from ESTsecurity ALYac. The report is dated 2019-03-27.

ip address Lazarus Group Kimsuky MATCHED IN SOURCE

First seen 2019-03-27 · last seen 2019-03-27

Network

Kind	data centre
Network	CS Loxinfo Public Company Limited (Cloud Business Co., ltd.)
Announced by	AS9891 CS LOXINFO Public Company Limited.
Country	Thailand
Flags	hosting range

Looked up 2026-09-21 at ip-api.com. A hosting range is not evidence on its own.

Source

…'Thumbs.db.lnk' 바로가기 파일은 다음과 같은 메타데이터를 포함하고 있는데, 아이콘 로케이션이 '103.225.168.159' 주소로 연결되어 있고, 작업 경로에 존재하는 사용자 계정명은 'john' 입니다.…
라자루스(Lazarus) 그룹, 이스라엘 군수업체 대상 APT 역습 — ESTsecurity ALYac · under “본문” · published 2019-03-27 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: 라자루스(Lazarus) 그룹, 이스라엘 군수업체 대상 APT 역습

ESTsecurity ALYac lists 3 other indicators in this source.