114.215.107.218

114.215.107.218 is an IP address that one published source reports in connection with Lazarus Group activity, which public reporting attributes to North Korea (DPRK). It is cited here from Intezer. The report is dated 2017-12-12.

ip address Lazarus Group MATCHED IN SOURCE

First seen 2017-12-12 · last seen 2017-12-12

Network

Kinddata centre
NetworkAddresses CNNIC (Aliyun Computing Co., LTD)
Announced byAS37963 Hangzhou Alibaba Advertising Co.,Ltd.
CountryChina
Flagshosting range

Looked up 2026-09-21 at ip-api.com. A hosting range is not evidence on its own.

Source

  • …( http://www.israeldefense.co.il/he/comment/112488 with link to lzruziniu.com) It appears that during the time of this post, the C&C (114.215.107.218) was also hosting another binary from Lazarus.…
    BLOCKBUSTED: Lazarus Blockbuster and North Korea — Intezer · under “Infection Vectors & Targets” · published 2017-12-12 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: BLOCKBUSTED: Lazarus Blockbuster and North Korea

Intezer lists 12 other indicators in this source.

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.