`213.145.86.223`

213.145.86.223 is an IP address that 6 published sources report in connection with APT37, Kimsuky, Lazarus Group and Konni activity, which public reporting attributes to North Korea (DPRK). It is cited here from AhnLab ASEC and Logpresso. The earliest of those reports is dated 2025-04-21 and the most recent 2026-01-14.

ip address APT37 Kimsuky Lazarus Group Konni MATCHED IN SOURCE

First seen 2025-04-21 · last seen 2026-01-14

Network

Kind	fixed line
Network	Latitude.sh (Private Customer)
Announced by	AS396356 Latitude.sh
Country	United States

Looked up 2026-09-21 at ip-api.com. A subscriber line, as a person working from home ordinarily has.

Sources

…IP 174.138.186.157 213.145.86.223 Tags: APT AutoIT backdoor Brandoor CAB Decoy DLLSideLoading EndRAT 미끼문서 바로가기 디코이 HTA…
2025년 7월 APT 공격 동향 보고서(국내) - ASEC — AhnLab ASEC · under “Type B” · published 2025-08-13 · pulled 2026-09-11
…IP 174.138.186.157 213.145.86.223 Tags: APT AutoIT backdoor Brandoor CAB Decoy DLLSideLoading EndRAT 미끼문서 바로가기 디코이 HTA HWP 한글문서 JSE Keylogger LNK mshta Nightello…
July 2025 APT Attack Trends Report (South Korea) - ASEC — AhnLab ASEC · under “Type B” · published 2025-08-13 · pulled 2026-09-11
…IP 174.138.186.157 213.145.86.223 77.246.101.72 Tags: APT AutoIT backdoor CAB Decoy Endoor EndRAT 미끼문서 바로가기 디코이 HTA HWP…
2025년 8월 APT 공격 동향 보고서(국내) - ASEC — AhnLab ASEC · under “Type B” · published 2025-09-12 · pulled 2026-09-11
…IP 159.100.13.216 213.145.86.223 216.219.87.41 64.20.59.148 AhnLab TIP 를 구독하시면 연관 IOC 및 상세 분석 정보를 추가적으로 확인하실 수 있습니다.…
2025년 3월 PebbleDash 악성코드 유포 사례 - ASEC — AhnLab ASEC · under “결론” · published 2025-04-21 · pulled 2026-09-12
…IP 159.100.13.216 213.145.86.223 216.219.87.41 64.20.59.148 Gain access to related IOCs and detailed analysis by subscribing to AhnLab TIP . For…
Distribution of PebbleDash Malware in March 2025 - ASEC — AhnLab ASEC · under “Conclusion” · published 2025-04-21 · pulled 2026-09-12
…naverwork.o-r.kr image.secuwizvpn.r-e.kr load.rwbcode.com rwbcode.com 174.138.186.157:5511 174.138.186.157:7788 174.138.186.157:9558 213.145.86.223:9005 111.92.189.34:21 142.11.248.98 162.220.11.202 ydcxcm.pklzd.com quemr.mailhubsec.com link24.kr www.link24.kr vvopen.pklzd.com…
2025 북한 연계 APT 공격 분석 회고 (Lazarus · Kimsuky · APT37 · Konni) | 로그프레소 — Logpresso · under “Kimsuky” · published 2026-01-14 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: 2025년 7월 APT 공격 동향 보고서(국내) - ASEC

AhnLab ASEC lists 7 other indicators in this source. 5 are shown, chosen across types.

All 8 indicators from this source

Cited by the same report: July 2025 APT Attack Trends Report (South Korea) - ASEC

AhnLab ASEC lists 7 other indicators in this source. 2 are shown, chosen across types.

All 8 indicators from this source

Cited by the same report: 2025년 8월 APT 공격 동향 보고서(국내) - ASEC

AhnLab ASEC lists 7 other indicators in this source. 5 are shown, chosen across types.

All 8 indicators from this source