`203.193.165.77`

203.193.165.77 is an IP address that 2 published sources report in connection with Lazarus Group activity, which public reporting attributes to North Korea (DPRK). It is cited here from JPCERT/CC. The earliest of those reports is dated 2021-10-29 and the most recent 2021-11-24.

ip address Lazarus Group MATCHED IN SOURCE

First seen 2021-10-29 · last seen 2021-11-24

Network

Kind	fixed line
Network	Software Technology Parks of India (Software Technology Parks of India, Society)
Announced by	AS7633 Software Technology Parks of India - Bangalore
Country	India

Looked up 2026-10-01 at ip-api.com. A subscriber line, as a person working from home ordinarily has.

Sources

…reserv ed. 66 Stunnel [pop3] client = yes accept = 127.0.0.1:5821 connect = [ プロキシサーバー ]:[ プロキシポート番号 ] protocol = connect protocolHost = 203.193.165.77:443 userAgent = "Mozilla/5.0 (Windows NT 6.2; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0" ; verifyChain = yes ; CAfile =…
The Lazarus Group's Attack Operations Targeting Japan (CODE BLUE 2021) — JPCERT/CC · published 2021-11-24 · pulled 2026-10-01
…= yes accept = 127.0.0.1:5821 connect = [PROXY SERVER]:[PROXY PORT] protocol = connect protocolHost = 203.193.165.77:443 userAgent = "Mozilla/5.0 (Windows NT 6.2; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0" ; verifyChain = yes ; CAfile =…
Anatomy of COBRA (HITCON 2021) — JPCERT/CC · published 2021-10-29 · pulled 2026-10-01

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: The Lazarus Group's Attack Operations Targeting Japan (CODE BLUE 2021)

JPCERT/CC lists 1 other indicator in this source.