`37.238.135.70`

37.238.135.70 is an IP address that one published source reports in connection with Lazarus Group activity, which public reporting attributes to North Korea (DPRK). It is cited here from Check Point Research. The report is dated 2019-02-19.

ip address Lazarus Group MATCHED IN SOURCE

First seen 2019-02-19 · last seen 2019-02-19

Network

Kind	fixed line
Network	Hulum (EarthLink Ltd. Communications&)
Announced by	AS203214 Hulum Almustakbal Company for Communication Engineering and Services Ltd
Country	Iraq

Looked up 2026-09-21 at ip-api.com. A subscriber line, as a person working from home ordinarily has.

Source

…It is important to note the CAB file is disguised as a JPEG image on the compromised host ( http://37.238.135.70/img/anan.jpg ). A closer look at the compromised server shows an unconvincing website for the “Information Department” of the “South Oil…
North Korea Turns Against New Targets?! - Check Point Research — Check Point Research · under “North Korea Turns Against New Targets?!” · published 2019-02-19 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: North Korea Turns Against New Targets?! - Check Point Research

Check Point Research lists 3 other indicators in this source.