`185.218.19.162`

185.218.19.162 is an IP address that one published source reports in connection with Lazarus Group activity, which public reporting attributes to North Korea (DPRK). It is cited here from e Sentire. The report is dated 2026-03-25.

ip address Lazarus Group MATCHED IN SOURCE

First seen 2026-03-25 · last seen 2026-03-25

Network

Kind	fixed line
Network	ZhouyiSat Communications (Huize Holdings LLC)
Announced by	AS400992 ZhouyiSat Communications
Country	Germany

Looked up 2026-09-21 at ip-api.com. A subscriber line, as a person working from home ordinarily has.

Source

…12 – Reobfuscation request, restarts itself EtherRAT SYS_INFO Module In our analysis, TRU observed the EtherRAT C2 at aurineuroth.com (185.218.19.162 - ASN#400992 "ZhouyiSat Communications") return additional code to execute.…
EtherRAT & SYS_INFO Module: C2 on Ethereum (EtherHiding), Target Selection, CDN-Like Beacons — e Sentire · under “EtherRAT SYS_INFO Module” · published 2026-03-25 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: EtherRAT & SYS_INFO Module: C2 on Ethereum (EtherHiding), Target Selection, CDN-Like Beacons

e Sentire lists 18 other indicators in this source. 12 are shown, chosen across types.

All 19 indicators from this source