AS131279
AS131279 is an autonomous system number
that 14 published sources report
in connection with IT Worker Fraud and unclustered DPRK activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from Chollima Group, NKInternet and Intelx.
The earliest of those reports is dated 2019-04-11 and the most recent 2026-07-28.
asn IT Worker FraudDPRK (cluster unattributed) MATCHED IN SOURCE
Sources
-
…Korean IP ranges. The Hong Kong host showed a more direct connection to DPRK IP space as it's ASN directly peers with Ryugyong-dong (AS131279), North Korea's primary AS. Due to the points listed above, and the fact that NetKey appeared to be active at time of infection, we're…
Sample Blog Post | Chollima Group — Chollima Group -
…Source Intelligence Menu Skip to content Home Websites Internet AS9341 – North Korea Government AS131279 – Ryugyong-dong 175.45.176.0/24 175.45.177.0/24 175.45.178.0/24 AS134544 – Cenbong Int’l Holdings Limited…
Finding North Korean IT Workers On GitHub | North Korean Internet — NKInternet -
…Source Intelligence Menu Skip to content Home Websites Internet AS9341 – North Korea Government AS131279 – Ryugyong-dong 175.45.176.0/24 175.45.177.0/24 175.45.178.0/24 AS134544 – Cenbong Int’l Holdings Limited…
npm Malware, Fake Devs, and Deepfake Videos: These Are A Few of My Favorite DPRK Things | North Korean Internet — NKInternet -
…Source Intelligence Menu Skip to content Home Websites Internet AS9341 – North Korea Government AS131279 – Ryugyong-dong 175.45.176.0/24 175.45.177.0/24 175.45.178.0/24 AS134544 – Cenbong Int’l Holdings Limited…
More Fake Devs, More Fake Companies: vexxloso and Nixsora.com | North Korean Internet — NKInternet -
…no one noticed) April 11, 2019 Say hello to North Korea’s 3rd internet uplink! The North Korean autonomous system AS131279 just got a new uplink to AS133073 Teleglobal Communication Services Limited – which is assigned to Hong Kong, according to APNIC.…
North Korea just got a 3rd internet connection (and no one noticed) — Intelx -
…Source Intelligence Menu Skip to content Home Websites Internet AS9341 – North Korea Government AS131279 – Ryugyong-dong 175.45.176.0/24 175.45.177.0/24 175.45.178.0/24 AS134544 – Cenbong Int’l Holdings Limited…
Additional Notes on the Trevor Greer Infostealer Logs — NKInternet -
…Source Intelligence Menu Skip to content Home Websites Internet AS9341 – North Korea Government AS131279 – Ryugyong-dong 175.45.176.0/24 175.45.177.0/24 175.45.178.0/24 AS134544 – Cenbong Int’l Holdings Limited…
Exploring the North Korean Email Client: Features and Functionality — NKInternet -
…Source Intelligence Menu Skip to content Home Websites Internet AS9341 – North Korea Government AS131279 – Ryugyong-dong 175.45.176.0/24 175.45.177.0/24 175.45.178.0/24 AS134544 – Cenbong Int’l Holdings Limited…
What We Discovered On a North Korean Server Part 1 — NKInternet -
…Source Intelligence Menu Skip to content Home Websites Internet AS9341 – North Korea Government AS131279 – Ryugyong-dong 175.45.176.0/24 175.45.177.0/24 175.45.178.0/24 AS134544 – Cenbong Int’l Holdings Limited…
DPRK Captive Portal Infrastructure Found in Testing — NKInternet -
…Source Intelligence Menu Skip to content Home Websites Internet AS9341 – North Korea Government AS131279 – Ryugyong-dong 175.45.176.0/24 175.45.177.0/24 175.45.178.0/24 AS134544 – Cenbong Int’l Holdings Limited…
Hunting For North Korean Fiber Optic Cables — NKInternet -
…Source Intelligence Menu Skip to content Home Websites Internet AS9341 – North Korea Government AS131279 – Ryugyong-dong 175.45.176.0/24 175.45.177.0/24 175.45.178.0/24 AS134544 – Cenbong Int’l Holdings Limited…
Hangro: Investigating North Korean VPN Infrastructure Part 2 — NKInternet -
…Source Intelligence Menu Skip to content Home Websites Internet AS9341 – North Korea Government AS131279 – Ryugyong-dong 175.45.176.0/24 175.45.177.0/24 175.45.178.0/24 AS134544 – Cenbong Int’l Holdings Limited…
Hangro: Investigating North Korean VPN Infrastructure Part 1 — NKInternet -
…Source Intelligence Menu Skip to content Home Websites Internet AS9341 – North Korea Government AS131279 – Ryugyong-dong 175.45.176.0/24 175.45.177.0/24 175.45.178.0/24 AS134544 – Cenbong Int’l Holdings Limited…
Hato Tsusin: A Long-Forgotten DPRK Front Company Hiding in Plain Sight? — NKInternet -
…Source Intelligence Menu Skip to content Home Websites Internet AS9341 – North Korea Government AS131279 – Ryugyong-dong 175.45.176.0/24 175.45.177.0/24 175.45.178.0/24 AS134544 – Cenbong Int’l Holdings Limited…
Made for Export: North Korea’s Software Catalog — NKInternet
Find this indicator in the index, or see every autonomous system number this site holds under Autonomous system numbers in the browse listing.
Related indicators
Cited by the same report: Sample Blog Post | Chollima Group
All 28 indicators from this source
Cited by the same report: Finding North Korean IT Workers On GitHub | North Korean Internet
All 4 indicators from this source