IP addresses

11,045 IP addresses reported in published sources on North Korean (DPRK) cyber operations, ordered by value, 200 to a page. This is page 14 of 56, from 134.236.242.161 to 140.227.32.79. Each value links to its own page, which carries every source that reported it and the text around it. Other types are listed in the browse directory.

ValueCampaignFiled underSources
134.236.242.161 IT Worker Fraud 1
134.236.255.6 IT Worker Fraud 1
134.249.151.4 IT Worker Fraud 1
134.249.186.66 IT Worker Fraud 1
134.73.90.114 Kimsuky 1
135.125.177.94 Contagious Interview 1
135.125.248.56 Contagious Interview 2
135.125.255.55 EtherHiding / UNC5342DPRK (cluster unattributed) 3
135.148.76.75 APT38 1
135.181.123.177 Contagious InterviewLazarus Group 11
135.181.185.158 Lazarus Group 1
135.181.193.241 IT Worker Fraud 1
135.181.242.24 Contagious InterviewLazarus Group 4
135.181.67.203 Lazarus Group 1
135.181.7.162 Contagious Interview 1
135.84.124.41 Kimsuky 1
136.0.11.193 Lazarus GroupContagious Interview 1
136.0.141.245 Lazarus GroupContagious Interview 1
136.0.141.91 Lazarus GroupContagious Interview 1
136.0.3.240 Lazarus GroupContagious Interview 1
136.0.3.250 Lazarus GroupContagious Interview 1
136.0.3.71 Lazarus GroupContagious Interview 1
136.0.7.231 EtherHiding / UNC5342Contagious Interview 3
136.0.8.169 Lazarus GroupContagious Interview 1
136.0.9.8 PolinRiderContagious InterviewLazarus Group 6
136.143.188.154 Kimsuky 1
136.143.190.199 Contagious Interview 1
136.228.128.101 IT Worker Fraud 1
136.228.128.159 IT Worker Fraud 1
136.228.128.51 IT Worker Fraud 1
136.232.116.2 IT Worker Fraud 1
136.232.125.70 IT Worker Fraud 1
136.243.81.120 IT Worker Fraud 1
136.244.93.248 Lazarus GroupAPT38 2
136.25.2.93 IT Worker Fraud 1
137.139.135.151 Lazarus Group 2
137.139.255.255 Lazarus Group 1
137.175.17.172 AndarielLazarus Group 2
137.175.17.221 AndarielLazarus Group 2
137.184.15.189 Lazarus GroupDPRK (cluster unattributed) 2
137.59.162.226 IT Worker Fraud 1
137.59.163.199 IT Worker Fraud 1
137.74.114.227 Lazarus Group 1
137.74.229.145 IT Worker Fraud 1
137.74.229.146 IT Worker Fraud 1
137.74.41.56 DPRK (cluster unattributed) 1
138.0.207.18 IT Worker Fraud 1
138.0.228.94 IT Worker Fraud 1
138.0.229.232 IT Worker Fraud 1
138.117.141.27 IT Worker Fraud 1
138.118.213.213 IT Worker Fraud 1
138.121.198.90 IT Worker Fraud 1
138.122.148.194 IT Worker Fraud 1
138.122.148.208 IT Worker Fraud 1
138.122.47.5 IT Worker Fraud 1
138.124.184.171 Contagious Interview 1
138.186.93.4 IT Worker Fraud 1
138.19.193.114 IT Worker Fraud 1
138.197.156.41 IT Worker Fraud 1
138.197.193.107 IT Worker Fraud 1
138.197.197.200 IT Worker Fraud 1
138.197.208.39 IT Worker Fraud 1
138.197.217.238 IT Worker Fraud 1
138.199.34.201 DPRK (cluster unattributed) 1
138.201.125.58 Contagious Interview 1
138.201.128.169 Contagious InterviewIT Worker Fraud 2
138.201.140.23 Contagious Interview 1
138.201.172.111 IT Worker Fraud 1
138.201.199.46 Contagious Interview 1
138.201.207.116 Lazarus GroupContagious Interview 1
138.201.50.5 Contagious InterviewLazarus Group 6
138.204.234.27 IT Worker Fraud 1
138.219.50.170 IT Worker Fraud 1
138.219.71.97 IT Worker Fraud 1
138.219.79.74 IT Worker Fraud 1
138.226.246.94 IT Worker FraudContagious Interview 1
138.226.247.147 Contagious Interview 1
138.226.247.152 Contagious Interview 1
138.226.247.154 Contagious Interview 1
138.255.240.66 IT Worker Fraud 1
138.36.86.237 IT Worker Fraud 1
138.59.140.77 IT Worker Fraud 1
138.59.177.117 IT Worker Fraud 1
138.68.161.170 DPRK (cluster unattributed) 1
138.68.18.219 IT Worker Fraud 1
138.68.235.51 IT Worker Fraud 1
138.68.252.165 IT Worker Fraud 1
138.68.45.192 IT Worker Fraud 1
138.68.51.109 IT Worker Fraud 1
138.68.57.62 IT Worker Fraud 1
138.68.6.227 IT Worker Fraud 1
138.68.60.8 IT Worker Fraud 1
138.97.0.147 IT Worker Fraud 1
138.99.204.47 IT Worker Fraud 1
138.99.93.224 IT Worker Fraud 1
138.99.93.62 IT Worker Fraud 1
139.0.21.236 IT Worker Fraud 1
139.159.118.14 IT Worker Fraud 1
139.159.48.155 IT Worker Fraud 1
139.162.100.170 IT Worker Fraud 1
139.162.151.176 IT Worker Fraud 1
139.162.22.35 Contagious Interview 1
139.162.227.68 IT Worker Fraud 1
139.162.76.176 IT Worker Fraud 1
139.177.190.243 Andariel 2
139.178.67.134 IT Worker FraudContagious Interview 1
139.180.192.19 Kimsuky 1
139.180.217.203 DPRK (cluster unattributed) 1
139.194.232.48 IT Worker Fraud 1
139.196.55.146 Lazarus Group 2
139.198.30.210 IT Worker Fraud 1
139.215.45.250 IT Worker Fraud 1
139.255.104.154 IT Worker Fraud 1
139.255.113.194 IT Worker Fraud 1
139.255.158.151 IT Worker Fraud 1
139.255.58.94 IT Worker Fraud 1
139.255.86.226 IT Worker Fraud 1
139.255.94.122 IT Worker Fraud 1
139.5.133.132 IT Worker Fraud 1
139.5.157.128 IT Worker Fraud 2
139.5.29.97 IT Worker Fraud 1
139.5.71.243 IT Worker Fraud 1
139.59.1.14 IT Worker Fraud 1
139.59.209.204 Contagious Interview 1
139.59.36.242 IT Worker Fraud 1
139.59.56.239 IT Worker Fraud 1
139.60.163.206 Contagious Interview 1
139.99.141.144 IT Worker Fraud 1
139.99.141.145 IT Worker Fraud 1
139.99.141.146 IT Worker Fraud 1
139.99.141.147 IT Worker Fraud 1
139.99.141.148 IT Worker Fraud 1
139.99.141.149 IT Worker Fraud 1
139.99.141.150 IT Worker Fraud 1
139.99.141.151 IT Worker Fraud 1
139.99.141.152 IT Worker Fraud 1
139.99.141.153 IT Worker Fraud 1
139.99.141.154 IT Worker Fraud 1
139.99.141.155 IT Worker Fraud 1
139.99.141.156 IT Worker Fraud 1
139.99.141.157 IT Worker Fraud 1
139.99.141.158 IT Worker Fraud 1
139.99.141.159 IT Worker Fraud 1
139.99.190.112 IT Worker Fraud 1
139.99.190.113 IT Worker Fraud 1
139.99.190.114 IT Worker Fraud 1
139.99.190.115 IT Worker Fraud 1
139.99.190.116 IT Worker Fraud 1
139.99.190.117 IT Worker Fraud 1
139.99.190.118 IT Worker Fraud 1
139.99.190.119 IT Worker Fraud 1
139.99.190.120 IT Worker Fraud 1
139.99.190.121 IT Worker Fraud 1
139.99.190.122 IT Worker Fraud 1
139.99.190.123 IT Worker Fraud 1
139.99.190.124 IT Worker Fraud 1
139.99.190.125 IT Worker Fraud 1
139.99.190.126 IT Worker Fraud 1
139.99.190.127 IT Worker Fraud 1
139.99.208.34 IT Worker Fraud 1
139.99.36.158 Kimsuky 1
139.99.66.103 APT38 1
14.1.29.115 IT Worker Fraud 1
14.1.29.116 IT Worker Fraud 1
14.1.29.117 IT Worker Fraud 1
14.102.19.50 IT Worker Fraud 1
14.102.78.67 IT Worker Fraud 1
14.102.89.96 IT Worker Fraud 1
14.114.114.114 Contagious Interview 1
14.139.107.211 IT Worker Fraud 1
14.139.200.107 Lazarus Group 2
14.140.116.172 Lazarus Group 2
14.140.131.82 IT Worker Fraud 1
14.160.23.139 IT Worker Fraud 1
14.160.3.78 IT Worker Fraud 1
14.161.14.196 Lazarus Group 1
14.161.17.4 IT Worker Fraud 1
14.162.216.52 IT Worker Fraud 1
14.215.212.37 IT Worker Fraud 1
14.225.215.117 IT Worker FraudContagious Interview 1
14.232.160.247 IT Worker Fraud 1
14.232.160.252 IT Worker Fraud 1
14.232.164.94 IT Worker Fraud 1
14.241.241.185 IT Worker Fraud 1
14.248.80.34 IT Worker Fraud 1
14.248.94.32 IT Worker Fraud 1
14.34.85.86 Contagious Interview 1
14.37.47.13 Contagious Interview 1
14.47.189.243 Kimsuky 1
14.63.165.32 Lazarus Group 1
140.117.91.22 APT38 2
140.136.134.201 APT38 1
140.136.158.199 IT Worker Fraud 1
140.227.122.55 IT Worker Fraud 1
140.227.126.229 IT Worker Fraud 1
140.227.211.47 IT Worker Fraud 1
140.227.25.235 IT Worker Fraud 1
140.227.25.253 IT Worker Fraud 1
140.227.28.39 IT Worker Fraud 1
140.227.32.79 IT Worker Fraud 1
Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. Compromised packages and repositories name victims. See the sourcing methodology.