`125.206.177.152`

125.206.177.152 is an IP address that one published source reports in connection with Lazarus Group activity, which public reporting attributes to North Korea (DPRK). It is cited here from Hvs-consulting. The report is dated 2020-12-15.

ip address Lazarus Group MATCHED IN SOURCE

First seen 2020-12-15 · last seen 2020-12-15

Network

Kind	mobile carrier
Network	NTT Communications Corporation (Open Computer Network)
Announced by	AS4713 NTT DOCOMO BUSINESS,Inc.
Country	Japan
Flags	mobile carrier

Looked up 2026-09-21 at ip-api.com.

Source

…@ The RAT components ( i.e., executables started with parameter - p 0x57AC098B ) connect to PHP files like http://125.206.177.152/o ld/viewer.php .…
Greetings from Lazarus — Hvs-consulting · published 2020-12-15 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: Greetings from Lazarus

Hvs-consulting lists 6 other indicators in this source.