← All actor clusters

3.39.208.187

3.39.208.187 is an IP address that one published source reports in connection with Lazarus Group activity, which public reporting attributes to North Korea (DPRK). It is cited here from AhnLab ASEC. The report is dated 2022-10-24.

ip address Lazarus Group MATCHED IN SOURCE

First seen 2022-10-24 · last seen 2022-10-24

Network

Looked up 2026-09-21 at ip-api.com. A hosting range is not evidence on its own.

Source

• …[IP/URL] strivemktsupporters.com(3.39.208.187)를 제외하고, 아래 IP는 공격자에 의해 C2로 사용됐으나, 현재도 서비스 중인 정상 사이트들이다.…

  BYOVD 기법으로 백신 프로그램을 무력화하는 라자루스 공격 그룹의 악성코드 감염 사례 - ASEC — AhnLab ASEC · under “악성코드 목록” · published 2022-10-24 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: BYOVD 기법으로 백신 프로그램을 무력화하는 라자루스 공격 그룹의 악성코드 감염 사례 - ASEC

AhnLab ASEC lists 14 other indicators in this source. 12 are shown, chosen across types.

• 1edbd7aa68b1818a1ea98c0362ce84c7 file hash
• 8f39a7afa14541b709fe950d06186944 file hash
• ca6c08b58a35d7fa581dfb419ce5b881 file hash
• 1.249.169.5 IP address
• 110.10.189.167 IP address
• 114.207.112.19 IP address
• 119.207.79.175 IP address
• 14.63.165.32 IP address
• 182.252.138.31 IP address
• 20.194.29.89 IP address
• 211.110.1.17 IP address
• 61.100.5.186 IP address

All 15 indicators from this source