← All actor clusters

23.152.0.255

23.152.0.255 is an IP address that one published source reports in connection with Lazarus Group activity, which public reporting attributes to North Korea (DPRK). It is cited here from CISA. The report is dated 2021-02-17.

ip address Lazarus Group MATCHED IN SOURCE

First seen 2021-02-17 · last seen 2021-02-17

Network

Looked up 2026-09-21 at ip-api.com. A hosting range is not evidence on its own.

Source

• …8080 TCP Whois Queried whois.arin.net with "n 23.152.0.101"... NetRange: 23.152.0.0 - 23.152.0.255 CIDR: 23.152.0.0/24 NetName: CROWNCLOUD-V6V4 NetHandle: NET-23-152-0-0-1 Parent: NET23 (NET-23-0-0-0-0) NetType: Direct…

  MAR-10322463-5.v1 - AppleJeus: CoinGoTrade | CISA — CISA · under “Whois” · published 2021-02-17 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: MAR-10322463-5.v1 - AppleJeus: CoinGoTrade | CISA

CISA lists 23 other indicators in this source. 12 are shown, chosen across types.

• 326d7836d580c08cf4b5e587434f6e5011ebf2284bbf3e7c083a8f41dac36ddd file hash
• 358f4c8575c82f45340886f282d41ca0560cfa6e file hash
• 3e5442440aea07229a1bf6ca2fdf78c5e2e5eaac312a325ccb49d45da14f97f4 file hash
• 451c23709ecd5a8461ad060f6346930c file hash
• 527792dfab79f026eaa6930d2109c93e816ed31826dba0338a9223db71aced18 file hash
• 565005404f00b7def4499142ade5e3dd file hash
• 572a124f5665be68eaa472590f3ba75bf34b0ea2942b5fcbfd3e74654202dd09 file hash
• 185.228.83.129 IP address
• 198.54.114.175 IP address
• 23.152.0.101 IP address
• 68.65.122.160 IP address
• 85.13.146.113 IP address

All 24 indicators from this source