`206.165.76.171`

206.165.76.171 is an IP address that one published source reports in connection with EtherHiding / UNC5342 and unclustered DPRK activity, which public reporting attributes to North Korea (DPRK). It is cited here from Hokage Vanguard. The report is dated 2026-05-22.

ip address EtherHiding / UNC5342DPRK (cluster unattributed) CURATED

First seen 2026-05-22 · last seen 2026-05-22

Network

Kind	fixed line
Network	Level 3 Communications, Inc. (Level 3, LLC)
Announced by	AS3549 Level 3 Parent, LLC
Country	United States

Looked up 2026-10-04 at ip-api.com. A subscriber line, as a person working from home ordinarily has.

Source

Address the report lists as the backend behind the EtherRAT C2 domain aabstone.com.
EtherRAT Blockchain C2 Infrastructure Attributed to Lazarus — Hokage Vanguard · published 2026-05-22 · pulled 2026-10-03

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: EtherRAT Blockchain C2 Infrastructure Attributed to Lazarus

Hokage Vanguard lists 20 other indicators in this source. 12 are shown, chosen across types.

All 21 indicators from this source