← All actor clusters

68.65.122.160

68.65.122.160 is an IP address that one published source reports in connection with Lazarus Group activity, which public reporting attributes to North Korea (DPRK). It is cited here from CISA. The report is dated 2021-02-17.

ip address Lazarus Group MATCHED IN SOURCE

First seen 2021-02-17 · last seen 2021-02-17

Network

Looked up 2026-09-21 at ip-api.com. A hosting range is not evidence on its own.

Source

• …"airbseeker.com" has a legitimately signed Sectigo SSL certificate, which was “Domain Control Validated." The domain was at the IP address 68.65.122.160 with ASN 22612. globalkeystroke.com Tags command-and-control Whois Whois for globalkeystroke.com had the following…

  MAR-10322463-5.v1 - AppleJeus: CoinGoTrade | CISA — CISA · under “Description” · published 2021-02-17 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: MAR-10322463-5.v1 - AppleJeus: CoinGoTrade | CISA

CISA lists 23 other indicators in this source. 12 are shown, chosen across types.

• 358f4c8575c82f45340886f282d41ca0560cfa6e file hash
• 3e5442440aea07229a1bf6ca2fdf78c5e2e5eaac312a325ccb49d45da14f97f4 file hash
• 451c23709ecd5a8461ad060f6346930c file hash
• 527792dfab79f026eaa6930d2109c93e816ed31826dba0338a9223db71aced18 file hash
• 565005404f00b7def4499142ade5e3dd file hash
• 572a124f5665be68eaa472590f3ba75bf34b0ea2942b5fcbfd3e74654202dd09 file hash
• 58b0516d28bd7218b1908fb266b8fe7582e22a5f file hash
• 185.228.83.129 IP address
• 198.54.114.175 IP address
• 23.152.0.101 IP address
• 23.152.0.255 IP address
• 85.13.146.113 IP address

All 24 indicators from this source