`223.165.6.30`

223.165.6.30 is an IP address that one published source reports in connection with Lazarus Group and Contagious Interview activity, which public reporting attributes to North Korea (DPRK). It is cited here from Ransom-ISAC. The report is dated 2025-11-13.

ip address Lazarus Group Contagious Interview MATCHED IN SOURCE

First seen 2025-11-13 · last seen 2025-11-13

Network

Kind	fixed line
Network	Evoxt Sdn. Bhd. (Evoxt Sdn. Bhd)
Announced by	AS149440 Evoxt Sdn. Bhd.
Country	United States

Looked up 2026-09-21 at ip-api.com. A subscriber line, as a person working from home ordinarily has.

Source

…100000) 198.105.127.98 May-24 DPRK Lazarus (through domain resolution) 198.105.127.124 May-25 PoC Exploit for Critical Zero Day 223.165.6.30 Jul-24 VenomRAT 38.211.230.5 Jul-25 Dark Peony (Operation Controlplug) 38.246.73.120 Jun-25 Dark Peony (Operation Controlplug)…
Cross-Chain TxDataHiding Crypto Heist: A Very Chainful Process (Part 1) — Ransom-ISAC · under “1. ASN IOCs (High-Medium Degree of Confidence)” · published 2025-11-13 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: Cross-Chain TxDataHiding Crypto Heist: A Very Chainful Process (Part 1)

Ransom-ISAC lists 131 other indicators in this source. 12 are shown, chosen across types.

All 132 indicators from this source