← All actor clusters

216.189.159.255

216.189.159.255 is an IP address that one published source reports in connection with Lazarus Group activity, which public reporting attributes to North Korea (DPRK). It is cited here from CISA. The report is dated 2021-02-17.

ip address Lazarus Group MATCHED IN SOURCE

First seen 2021-02-17 · last seen 2021-02-17

Network

Looked up 2026-09-21 at ip-api.com. A hosting range is not evidence on its own.

Source

• …Ports 8080 TCP Whois Queried whois.arin.net with "n 216.189.150.185"... NetRange: 216.189.144.0 - 216.189.159.255 CIDR: 216.189.144.0/20 NetName: HOSTUS-IPV4-3 NetHandle: NET-216-189-144-0-1 Parent: NET216 (NET-216-0-0-0-0) NetType: Direct…

  MAR-10322463-3.v1 - AppleJeus: Union Crypto | CISA — CISA · under “Whois” · published 2021-02-17 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: MAR-10322463-3.v1 - AppleJeus: Union Crypto | CISA

CISA lists 29 other indicators in this source. 12 are shown, chosen across types.

• noc@hostus.us email address
• 0f03ec3487578cef2398b5b732631fec file hash
• 1ef0e1cabd344726b663cec8d9e68f147259da55 file hash
• 24b3614d5c5e53e40b42b4e057001770 file hash
• 2ab58b7ce583402bf4cbc90bee643ba5f9503461f91574845264d4f7e3ccb390 file hash
• 349fb7c922fba6da4bf5c2a3a9e0735f11068dac file hash
• 41587b0dd5104a4ee6484ff8cf47fd21 file hash
• 46b3061fe981d0a5edfd8d55f75adf9f file hash
• 514263acf79aeb49d87192ae08f6c76854cdda12 file hash
• 104.168.167.16 IP address
• 216.189.150.185 IP address
• 3eCYK5JEBXaM6Jq4p3MpJy5Tb3MpJy5T cryptocurrency wallet address

All 30 indicators from this source