`11.11.11.1`

11.11.11.1 is an IP address that one published source reports in connection with Lazarus Group activity, which public reporting attributes to North Korea (DPRK). It is cited here from AhnLab ASEC. The report is dated 2022-05-11.

ip address Lazarus Group MATCHED IN SOURCE

First seen 2022-05-11 · last seen 2022-05-11

Network

Kind	fixed line
Network	United States Department of Defense (DoD Network Information Center)
Announced by	AS749 United States Department of Defense (DoD)
Country	United States

Looked up 2026-09-21 at ip-api.com. A subscriber line, as a person working from home ordinarily has.

Source

…이렇게 수집한 정보들은 추후 측면 이동 공격에 사용될 수 있으며, 성공할 경우 공격자는 도메인 내의 시스템들을 장악할 수 있다. cmd.exe /c “ping 11.11.11.1” cmd.exe /c “ipconfig /all” cmd.exe /c “query user” cmd.exe “net group “domain admins” /domain” net user _smuser white1234!@#$ cmd.exe…
Log4Shell 취약점을 악용하는 Lazarus 그룹 (NukeSped) - ASEC — AhnLab ASEC · under “NukeSped를 이용한 공격” · published 2022-05-11 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: Log4Shell 취약점을 악용하는 Lazarus 그룹 (NukeSped) - ASEC

AhnLab ASEC lists 8 other indicators in this source.