IP addresses

11,045 IP addresses reported in published sources on North Korean (DPRK) cyber operations, ordered by value, 200 to a page. This is page 13 of 56, from 123.18.206.50 to 134.228.221.237. Each value links to its own page, which carries every source that reported it and the text around it. Other types are listed in the browse directory.

ValueCampaignFiled underSources
123.18.206.50 IT Worker Fraud 1
123.190.56.214 IT Worker Fraud 2
123.200.15.218 IT Worker Fraud 1
123.200.17.166 IT Worker Fraud 1
123.200.2.122 IT Worker Fraud 1
123.200.22.234 IT Worker Fraud 1
123.200.25.130 IT Worker Fraud 1
123.200.4.42 IT Worker Fraud 1
123.200.4.50 IT Worker Fraud 1
123.200.6.58 IT Worker Fraud 1
123.200.9.30 IT Worker Fraud 1
123.203.156.79 IT Worker Fraud 1
123.231.141.43 IT Worker Fraud 1
123.231.141.62 IT Worker Fraud 1
123.231.175.19 IT Worker Fraud 1
123.231.185.162 IT Worker Fraud 1
123.231.191.171 IT Worker Fraud 1
123.231.230.58 IT Worker Fraud 1
123.49.48.130 IT Worker Fraud 1
123.49.59.100 IT Worker Fraud 1
123.58.200.119 Kimsuky 1
123.58.200.13 Kimsuky 1
123.58.200.186 Kimsuky 1
123.58.200.50 Kimsuky 1
123.58.200.69 Kimsuky 1
123.58.201.2 Kimsuky 1
123.58.201.222 Kimsuky 1
123.58.201.34 Kimsuky 1
123.58.201.8 Kimsuky 1
123.59.100.242 IT Worker Fraud 1
123.59.100.243 IT Worker Fraud 1
123.59.100.246 IT Worker Fraud 1
123.60.219.176 IT Worker Fraud 1
123.76.96.130 Kimsuky 1
124.105.29.181 IT Worker Fraud 1
124.105.55.176 IT Worker Fraud 1
124.107.167.225 IT Worker Fraud 1
124.107.231.80 IT Worker Fraud 1
124.107.36.198 IT Worker Fraud 1
124.107.46.206 IT Worker Fraud 1
124.109.17.151 IT Worker Fraud 1
124.109.44.126 IT Worker Fraud 1
124.122.142.142 DPRK (cluster unattributed) 1
124.158.144.186 IT Worker Fraud 1
124.158.167.171 IT Worker Fraud 1
124.158.168.22 IT Worker Fraud 1
124.158.179.158 IT Worker Fraud 1
124.193.102.25 IT Worker Fraud 1
124.217.209.11 KimsukyKonni 1
124.217.252.62 Contagious Interview 1
124.248.184.103 IT Worker Fraud 1
124.248.190.237 IT Worker Fraud 1
124.248.190.71 IT Worker Fraud 1
124.248.228.30 Lazarus Group 2
124.41.211.196 IT Worker Fraud 1
124.41.213.201 IT Worker Fraud 1
124.41.225.251 IT Worker Fraud 1
124.41.240.203 IT Worker Fraud 1
124.41.240.53 IT Worker Fraud 1
124.41.240.66 IT Worker Fraud 1
124.41.240.96 IT Worker Fraud 1
124.41.252.31 IT Worker Fraud 1
124.5.163.111 Kimsuky 1
124.5.163.170 Kimsuky 1
124.65.144.38 IT Worker Fraud 1
124.67.67.17 IT Worker Fraud 1
125.100.175.62 APT38 1
125.162.75.248 IT Worker Fraud 1
125.163.161.250 IT Worker Fraud 1
125.167.32.158 IT Worker Fraud 1
125.206.177.152 Lazarus Group 1
125.209.94.234 IT Worker Fraud 1
125.212.132.222 Lazarus Group 1
125.214.195.17 Lazarus GroupAPT38 2
125.227.75.208 Contagious Interview 1
125.227.80.190 Contagious Interview 1
125.227.82.145 Contagious Interview 1
125.227.90.115 Contagious InterviewIT Worker Fraud 2
125.227.90.117 IT Worker Fraud 1
125.227.90.118 IT Worker Fraud 1
125.227.91.177 IT Worker Fraud 1
125.227.91.179 IT Worker Fraud 1
125.228.143.207 IT Worker Fraud 1
125.25.184.10 IT Worker Fraud 1
125.25.40.37 IT Worker Fraud 1
125.25.57.76 IT Worker Fraud 1
125.254.53.120 IT Worker Fraud 1
125.26.238.166 IT Worker FraudContagious Interview 1
125.26.99.228 IT Worker Fraud 1
125.27.10.84 IT Worker Fraud 1
125.27.251.173 IT Worker Fraud 1
125.62.193.209 IT Worker Fraud 1
125.62.193.53 IT Worker Fraud 1
125.62.198.65 IT Worker Fraud 1
125.62.213.18 IT Worker Fraud 1
125.65.88.195 KimsukyDPRK (cluster unattributed)Lazarus Group 1
125.67.171.158 KimsukyDPRK (cluster unattributed)Lazarus Group 1
128.127.104.17 IT Worker Fraud 1
128.127.104.20 IT Worker Fraud 1
128.127.104.21 IT Worker Fraud 1
128.14.140.242 IT Worker Fraud 1
128.14.140.252 IT Worker Fraud 1
128.199.111.243 IT Worker Fraud 1
128.199.161.225 IT Worker Fraud 1
128.199.202.122 IT Worker Fraud 1
128.199.213.193 IT Worker Fraud 1
128.200.115.228 Lazarus Group 2
128.200.59.190 Lazarus Group 1
128.201.119.250 IT Worker Fraud 1
128.201.156.102 IT Worker Fraud 1
128.201.64.194 APT38 2
128.201.68.213 IT Worker Fraud 1
128.203.96.252 Contagious Interview 1
128.31.0.39 Lazarus Group 1
128.90.176.13 DPRK (cluster unattributed) 1
129.126.102.14 IT Worker Fraud 1
129.18.180.224 IT Worker Fraud 1
129.2.4.2 Contagious Interview 1
129.213.69.94 IT Worker Fraud 1
129.221.254.13 APT38 1
129.232.146.182 IT Worker Fraud 1
129.232.166.108 IT Worker Fraud 1
129.232.166.109 IT Worker Fraud 1
129.232.193.253 Lazarus GroupContagious InterviewIT Worker Fraud 3
129.232.225.34 IT Worker Fraud 1
13.107.246.45 Contagious Interview 1
13.112.233.199 Contagious Interview 1
13.140.228.125 Contagious Interview 1
13.140.40.133 Contagious Interview 1
13.140.40.208 Contagious Interview 1
13.140.40.214 Contagious Interview 1
13.140.43.225 Contagious Interview 1
13.140.43.228 Contagious Interview 1
13.224.163.100 Kimsuky 1
13.228.21.89 IT Worker Fraud 1
13.231.238.12 Contagious Interview 1
13.248.151.237 APT38 1
13.248.158.159 APT38 1
13.248.252.114 APT38 1
13.250.36.159 IT Worker Fraud 1
13.49.212.207 APT37Kimsuky 1
13.52.63.181 IT Worker Fraud 1
13.76.133.68 Andariel 2
13.84.36.78 IT Worker Fraud 1
130.130.121.44 Kimsuky 1
130.185.213.146 IT Worker Fraud 1
130.185.75.198 DPRK (cluster unattributed) 1
130.255.92.133 IT Worker Fraud 1
130.65.230.100 Contagious Interview 2
130.94.29.111 Kimsuky 1
131.0.246.113 IT Worker Fraud 1
131.100.40.84 IT Worker Fraud 1
131.100.51.1 IT Worker Fraud 1
131.108.124.117 IT Worker Fraud 1
131.108.60.22 IT Worker Fraud 1
131.153.96.90 IT Worker Fraud 1
131.153.96.93 IT Worker Fraud 1
131.153.96.94 IT Worker Fraud 1
131.153.97.156 IT Worker Fraud 1
131.161.68.37 IT Worker Fraud 1
131.161.68.41 IT Worker Fraud 1
131.196.114.9 IT Worker Fraud 1
131.196.180.1 IT Worker Fraud 1
131.221.148.78 IT Worker Fraud 1
131.226.2.120 Lazarus GroupAPT38 4
131.226.2.43 APT38 2
131.255.124.209 IT Worker Fraud 1
131.255.184.28 IT Worker Fraud 1
131.255.6.48 IT Worker Fraud 1
131.255.6.49 IT Worker Fraud 1
131.255.6.53 IT Worker Fraud 1
131.255.6.55 IT Worker Fraud 1
131.255.6.56 IT Worker Fraud 1
132.145.247.182 IT Worker Fraud 1
132.148.217.168 APT38 1
132.148.240.198 Kimsuky 1
132.148.5.251 IT Worker Fraud 1
132.148.85.91 IT Worker Fraud 1
132.226.24.246 IT Worker Fraud 1
132.255.109.224 IT Worker Fraud 1
132.255.109.230 IT Worker Fraud 1
133.167.100.251 IT Worker Fraud 1
134.119.180.50 IT Worker Fraud 1
134.119.180.52 IT Worker Fraud 1
134.119.180.53 IT Worker Fraud 1
134.119.193.13 IT Worker Fraud 1
134.122.130.138 KimsukyAPT37KonniLazarus Group 1
134.122.38.73 DPRK (cluster unattributed) 1
134.175.236.132 Contagious Interview 1
134.19.254.2 IT Worker Fraud 1
134.195.197.175 Contagious Interview 2
134.195.198.101 IT Worker Fraud 1
134.195.198.194 IT Worker Fraud 1
134.195.198.77 IT Worker Fraud 1
134.209.100.103 IT Worker Fraud 1
134.209.159.64 DPRK (cluster unattributed) 1
134.209.171.194 IT Worker Fraud 1
134.209.181.133 DPRK (cluster unattributed) 1
134.209.252.157 DPRK (cluster unattributed) 1
134.228.221.237 Contagious Interview 1
Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. Compromised packages and repositories name victims. See the sourcing methodology.