`216.173.65.45`

216.173.65.45 is an IP address that one published source reports in connection with Lazarus Group and Contagious Interview activity, which public reporting attributes to North Korea (DPRK). It is cited here from Ransom-ISAC. The report is dated 2025-11-13.

ip address Lazarus Group Contagious Interview MATCHED IN SOURCE

First seen 2025-11-13 · last seen 2025-11-13

Network

Kind	data centre
Network	Evoxt Sdn. Bhd. (Evoxt US2)
Announced by	AS149440 Evoxt Sdn. Bhd.
Country	United States
Flags	hosting range

Looked up 2026-09-21 at ip-api.com. A hosting range is not evidence on its own.

Source

…Sep-25 Remcos 156.227.0.60 Sep-25 Rhadamanthys Stealer 96.126.191.167 Sep-25 Xworm 108.165.147.181 Sep-25 SuperShell C2 216.173.65.45 Sep-25 Remcos 166.88.194.123 Aug-25 Cobalt Strike (Watermark: 0) 23.27.163.245 Aug-25 VenomRAT 23.27.169.64 Aug-25 DCRAT…
Cross-Chain TxDataHiding Crypto Heist: A Very Chainful Process (Part 1) — Ransom-ISAC · under “1. ASN IOCs (High-Medium Degree of Confidence)” · published 2025-11-13 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: Cross-Chain TxDataHiding Crypto Heist: A Very Chainful Process (Part 1)

Ransom-ISAC lists 131 other indicators in this source. 12 are shown, chosen across types.

All 132 indicators from this source