`181.117.128.64`

181.117.128.64 is an IP address that one published source reports in connection with Lazarus Group and Contagious Interview activity, which public reporting attributes to North Korea (DPRK). It is cited here from Ransom-ISAC. The report is dated 2025-11-13.

ip address Lazarus Group Contagious Interview MATCHED IN SOURCE

First seen 2025-11-13 · last seen 2025-11-13

Network

Kind	fixed line
Network	Techtel LMDS Comunicaciones Interactivas S.A.
Announced by	AS11664 Techtel LMDS Comunicaciones Interactivas S.A.
Country	Argentina

Looked up 2026-09-21 at ip-api.com. A subscriber line, as a person working from home ordinarily has.

Source

…Evoxt Enterprise Part of Cluster 1 166.88.4.2 Evoxt Enterprise Part of Cluster 1 23.27.120.142 Evoxt Enterprise Part of Cluster 1 181.117.128.64 AMX Argentina NEW 183.101.157.30 Korea Telecom NEW 195.122.31.246 VAKS, KOOPERATIVA SABIEDRIBA NEW 202.155.8.173 CV.…
Cross-Chain TxDataHiding Crypto Heist: A Very Chainful Process (Part 1) — Ransom-ISAC · under “Infrastructure Fingerprint” · published 2025-11-13 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: Cross-Chain TxDataHiding Crypto Heist: A Very Chainful Process (Part 1)

Ransom-ISAC lists 131 other indicators in this source. 12 are shown, chosen across types.

All 132 indicators from this source