← All actor clusters

194.36.191.196

194.36.191.196 is an IP address that one published source reports in connection with Lazarus Group activity, which public reporting attributes to North Korea (DPRK). It is cited here from CISA. The report is dated 2021-02-17.

ip address Lazarus Group MATCHED IN SOURCE

First seen 2021-02-17 · last seen 2021-02-17

Network

Looked up 2026-09-21 at ip-api.com. A hosting range is not evidence on its own.

Source

• …The domain is registered with NameCheap at the IP address 194.36.191.196 with ASN 60117. Relationship Summary [Redacted] Downloaded_By ants2whale.com [Redacted] Contains…

  MAR-10322463-7.v1 - AppleJeus: Ants2Whale | CISA — CISA · under “Description” · published 2021-02-17 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: MAR-10322463-7.v1 - AppleJeus: Ants2Whale | CISA

CISA lists 10 other indicators in this source.

• decombahton4@combahton.net email address
• 022298cf16c0c44d7b01b5de2cf84023 file hash
• 34e134d614a0d5b0e4d94d63336aa8b898b0b104 file hash
• 939ec41183bbe1f4fb65c924323543ee91a35dbf file hash
• bb430087484c1f4587c54efc75681eb60cf70956ef2a999a75ce7b563b8bd694 file hash
• d4d1bcdfb67ee30303f30137db752b94 file hash
• d5ac680e14b013e0624470da7f46e84809d00b59a7544f6a42b110cf0e29254e file hash
• 198.54.114.237 IP address
• 45.147.231.255 IP address
• 45.147.231.77 IP address