`AS9341`

AS9341 is an autonomous system number that 12 published sources report in connection with IT Worker Fraud and unclustered DPRK activity, which public reporting attributes to North Korea (DPRK). It is cited here from NKInternet. The earliest of those reports is dated 2024-09-13 and the most recent 2026-07-28.

asn IT Worker FraudDPRK (cluster unattributed) MATCHED IN SOURCE

First seen 2024-09-13 · last seen 2026-07-28

Sources

…from Internet Scanning and Open Source Intelligence Menu Skip to content Home Websites Internet AS9341 – North Korea Government AS131279 – Ryugyong-dong 175.45.176.0/24 175.45.177.0/24 175.45.178.0/24 AS134544 –…
Finding North Korean IT Workers On GitHub | North Korean Internet — NKInternet · under “Insights from Internet Scanning and Open Source Intelligence” · published 2025-04-24 · pulled 2026-09-01
…from Internet Scanning and Open Source Intelligence Menu Skip to content Home Websites Internet AS9341 – North Korea Government AS131279 – Ryugyong-dong 175.45.176.0/24 175.45.177.0/24 175.45.178.0/24 AS134544 –…
npm Malware, Fake Devs, and Deepfake Videos: These Are A Few of My Favorite DPRK Things | North Korean Internet — NKInternet · under “Insights from Internet Scanning and Open Source Intelligence” · published 2026-04-07 · pulled 2026-09-01
…from Internet Scanning and Open Source Intelligence Menu Skip to content Home Websites Internet AS9341 – North Korea Government AS131279 – Ryugyong-dong 175.45.176.0/24 175.45.177.0/24 175.45.178.0/24 AS134544 –…
More Fake Devs, More Fake Companies: vexxloso and Nixsora.com | North Korean Internet — NKInternet · under “Insights from Internet Scanning and Open Source Intelligence” · published 2026-04-26 · pulled 2026-09-09
…from Internet Scanning and Open Source Intelligence Menu Skip to content Home Websites Internet AS9341 – North Korea Government AS131279 – Ryugyong-dong 175.45.176.0/24 175.45.177.0/24 175.45.178.0/24 AS134544 –…
Additional Notes on the Trevor Greer Infostealer Logs — NKInternet · under “Insights from Internet Scanning and Open Source Intelligence” · published 2025-12-16 · pulled 2026-09-12
…from Internet Scanning and Open Source Intelligence Menu Skip to content Home Websites Internet AS9341 – North Korea Government AS131279 – Ryugyong-dong 175.45.176.0/24 175.45.177.0/24 175.45.178.0/24 AS134544 –…
Exploring the North Korean Email Client: Features and Functionality — NKInternet · under “Insights from Internet Scanning and Open Source Intelligence” · published 2024-09-13 · pulled 2026-09-12
…from Internet Scanning and Open Source Intelligence Menu Skip to content Home Websites Internet AS9341 – North Korea Government AS131279 – Ryugyong-dong 175.45.176.0/24 175.45.177.0/24 175.45.178.0/24 AS134544 –…
What We Discovered On a North Korean Server Part 1 — NKInternet · under “Insights from Internet Scanning and Open Source Intelligence” · published 2025-06-16 · pulled 2026-09-12
…from Internet Scanning and Open Source Intelligence Menu Skip to content Home Websites Internet AS9341 – North Korea Government AS131279 – Ryugyong-dong 175.45.176.0/24 175.45.177.0/24 175.45.178.0/24 AS134544 –…
DPRK Captive Portal Infrastructure Found in Testing — NKInternet · under “Insights from Internet Scanning and Open Source Intelligence” · published 2026-05-26 · pulled 2026-09-12
…from Internet Scanning and Open Source Intelligence Menu Skip to content Home Websites Internet AS9341 – North Korea Government AS131279 – Ryugyong-dong 175.45.176.0/24 175.45.177.0/24 175.45.178.0/24 AS134544 –…
Hunting For North Korean Fiber Optic Cables — NKInternet · under “Insights from Internet Scanning and Open Source Intelligence” · published 2025-12-08 · pulled 2026-09-12
…from Internet Scanning and Open Source Intelligence Menu Skip to content Home Websites Internet AS9341 – North Korea Government AS131279 – Ryugyong-dong 175.45.176.0/24 175.45.177.0/24 175.45.178.0/24 AS134544 –…
Hangro: Investigating North Korean VPN Infrastructure Part 2 — NKInternet · under “Insights from Internet Scanning and Open Source Intelligence” · published 2025-07-16 · pulled 2026-09-12
…from Internet Scanning and Open Source Intelligence Menu Skip to content Home Websites Internet AS9341 – North Korea Government AS131279 – Ryugyong-dong 175.45.176.0/24 175.45.177.0/24 175.45.178.0/24 AS134544 –…
Hangro: Investigating North Korean VPN Infrastructure Part 1 — NKInternet · under “Insights from Internet Scanning and Open Source Intelligence” · published 2025-01-06 · pulled 2026-09-12
…from Internet Scanning and Open Source Intelligence Menu Skip to content Home Websites Internet AS9341 – North Korea Government AS131279 – Ryugyong-dong 175.45.176.0/24 175.45.177.0/24 175.45.178.0/24 AS134544 –…
Hato Tsusin: A Long-Forgotten DPRK Front Company Hiding in Plain Sight? — NKInternet · under “Insights from Internet Scanning and Open Source Intelligence” · published 2026-07-28 · pulled 2026-09-12
…from Internet Scanning and Open Source Intelligence Menu Skip to content Home Websites Internet AS9341 – North Korea Government AS131279 – Ryugyong-dong 175.45.176.0/24 175.45.177.0/24 175.45.178.0/24 AS134544 –…
Made for Export: North Korea’s Software Catalog — NKInternet · under “Insights from Internet Scanning and Open Source Intelligence” · published 2026-03-10 · pulled 2026-09-12

Find this indicator in the index, or see every autonomous system number this site holds under Autonomous system numbers in the browse listing.

Related indicators

Cited by the same report: Finding North Korean IT Workers On GitHub | North Korean Internet

NKInternet lists 3 other indicators in this source.

Cited by the same report: npm Malware, Fake Devs, and Deepfake Videos: These Are A Few of My Favorite DPRK Things | North Korean Internet

NKInternet lists 31 other indicators in this source. 5 are shown, chosen across types.

All 32 indicators from this source

Cited by the same report: More Fake Devs, More Fake Companies: vexxloso and Nixsora.com | North Korean Internet

NKInternet lists 3 other indicators in this source. 2 are shown, chosen across types.

All 4 indicators from this source