IP addresses

11,045 IP addresses reported in published sources on North Korean (DPRK) cyber operations, ordered by value, 200 to a page. This is page 18 of 56, from 150.136.62.28 to 156.34.105.58. Each value links to its own page, which carries every source that reported it and the text around it. Other types are listed in the browse directory.

ValueCampaignFiled underSources
150.136.62.28 IT Worker Fraud 1
150.241.203.68 Contagious Interview 1
150.251.113.223 Contagious InterviewDPRK (cluster unattributed) 1
150.40.98.42 EtherHiding / UNC5342Contagious Interview 2
150.60.192.67 Lazarus Group 1
151.106.2.139 Lazarus Group 1
151.106.34.139 IT Worker Fraud 1
151.106.6.242 IT Worker Fraud 1
151.106.6.245 IT Worker Fraud 1
151.164.1.82 Contagious Interview 1
151.22.181.213 IT Worker Fraud 1
151.22.181.223 IT Worker Fraud 1
151.241.109.136 Contagious Interview 1
151.243.101.229 KimsukyLazarus GroupContagious Interview 3
151.253.243.219 DPRK (cluster unattributed) 1
151.80.76.64 Contagious Interview 1
151.80.76.66 Contagious Interview 2
151.80.76.67 Contagious Interview 1
152.156.122.10 IT Worker Fraud 1
152.160.144.129 IT Worker Fraud 1
152.160.144.6 IT Worker Fraud 1
152.171.101.103 IT Worker Fraud 1
152.199.19.74 APT37Kimsuky 1
152.228.173.50 IT Worker Fraud 1
152.231.25.114 IT Worker Fraud 1
152.231.59.160 IT Worker Fraud 1
152.231.62.172 IT Worker Fraud 1
152.237.230.29 DPRK (cluster unattributed) 1
152.26.229.34 IT Worker FraudContagious Interview 1
152.26.229.42 IT Worker FraudContagious Interview 1
152.26.229.46 IT Worker FraudContagious Interview 1
152.26.229.47 IT Worker FraudContagious Interview 1
152.26.229.83 IT Worker FraudContagious Interview 1
152.26.229.86 IT Worker FraudContagious Interview 1
152.26.229.93 IT Worker FraudContagious Interview 1
152.26.231.42 IT Worker FraudContagious Interview 1
152.26.231.83 IT Worker FraudContagious Interview 1
152.26.231.86 IT Worker FraudContagious Interview 1
152.26.231.93 IT Worker FraudContagious Interview 1
152.26.231.94 IT Worker FraudContagious Interview 1
152.32.138.108 Lazarus Group 1
152.32.138.116 Kimsuky 1
152.32.138.131 Kimsuky 1
152.32.138.146 Kimsuky 2
152.32.138.15 Kimsuky 1
152.32.138.158 Kimsuky 1
152.32.138.167 Kimsuky 2
152.32.138.172 Kimsuky 1
152.32.138.191 Kimsuky 1
152.32.138.225 Kimsuky 1
152.32.138.63 Kimsuky 1
152.32.139.104 Kimsuky 1
152.32.139.149 Kimsuky 1
152.32.139.36 Kimsuky 1
152.32.215.107 IT Worker Fraud 1
152.32.233.49 IT Worker Fraud 1
152.32.243.136 Kimsuky 1
152.32.243.153 Kimsuky 1
152.32.243.169 Kimsuky 1
152.32.243.178 Kimsuky 2
152.32.243.184 Kimsuky 1
152.32.243.215 Kimsuky 2
152.32.243.224 Kimsuky 1
152.32.243.238 Kimsuky 1
152.32.78.24 IT Worker Fraud 1
152.42.239.211 Lazarus Group 1
152.89.205.10 IT Worker Fraud 1
152.89.205.4 IT Worker Fraud 1
152.89.205.5 IT Worker Fraud 1
152.89.205.9 IT Worker Fraud 1
152.89.247.26 Konni 1
152.89.247.57 Kimsuky 2
152.89.247.87 APT38 2
152.99.200.6 DPRK (cluster unattributed) 2
153.121.36.194 IT Worker Fraud 1
153.75.233.17 Kimsuky 2
153.75.87.26 Contagious Interview 1
153.75.89.4 Contagious Interview 1
153.75.91.159 APT38 1
153.75.94.94 Contagious Interview 1
153.92.126.84 Contagious Interview 2
153.92.214.226 IT Worker FraudContagious Interview 1
154.0.15.166 IT Worker Fraud 1
154.113.32.26 IT Worker Fraud 1
154.117.212.18 IT Worker Fraud 1
154.12.92.53 Contagious Interview 1
154.120.133.190 IT Worker Fraud 1
154.120.194.164 IT Worker Fraud 1
154.126.202.225 IT Worker Fraud 1
154.13.83.39 IT Worker Fraud 1
154.16.3.86 IT Worker Fraud 1
154.16.63.16 IT Worker Fraud 1
154.194.120.14 KimsukyKonni 1
154.204.168.53 IT Worker Fraud 1
154.204.179.4 Contagious Interview 1
154.205.138.70 Lazarus Group 1
154.21.14.10 IT Worker Fraud 1
154.21.14.110 IT Worker Fraud 1
154.21.14.13 IT Worker Fraud 1
154.21.14.4 IT Worker Fraud 1
154.21.14.45 IT Worker Fraud 1
154.21.15.10 IT Worker Fraud 1
154.21.15.128 IT Worker Fraud 1
154.21.15.174 IT Worker Fraud 1
154.21.209.10 IT Worker Fraud 1
154.21.209.3 IT Worker Fraud 1
154.216.177.215 KimsukyDPRK (cluster unattributed)Lazarus Group 1
154.216.19.19 Lazarus GroupContagious Interview 1
154.223.179.14 Kimsuky 1
154.239.6.163 IT Worker Fraud 1
154.29.79.194 IT Worker Fraud 1
154.30.132.4 IT Worker Fraud 1
154.30.132.5 IT Worker Fraud 1
154.38.188.168 Contagious Interview 1
154.39.239.56 Contagious Interview 1
154.58.204.15 Contagious Interview 2
154.61.227.8 IT Worker Fraud 1
154.62.226.22 Contagious Interview 2
154.66.125.34 IT Worker Fraud 1
154.66.153.133 IT Worker Fraud 1
154.66.208.12 IT Worker Fraud 1
154.68.162.13 IT Worker Fraud 1
154.7.253.191 Contagious Interview 1
154.70.151.234 IT Worker Fraud 1
154.72.201.190 IT Worker Fraud 1
154.72.202.130 IT Worker Fraud 1
154.72.78.146 IT Worker Fraud 1
154.72.88.102 IT Worker Fraud 1
154.72.91.22 IT Worker Fraud 1
154.73.133.42 IT Worker Fraud 1
154.73.65.17 IT Worker Fraud 1
154.73.85.1 IT Worker Fraud 1
154.73.85.133 IT Worker Fraud 1
154.73.86.153 IT Worker Fraud 1
154.74.140.214 IT Worker Fraud 1
154.79.242.178 IT Worker Fraud 1
154.79.244.38 IT Worker Fraud 1
154.81.174.108 IT Worker Fraud 1
154.81.220.233 Lazarus GroupContagious Interview 1
154.86.159.242 IT Worker Fraud 1
154.90.62.152 Kimsuky 1
154.90.62.226 Kimsuky 1
154.90.62.67 Lazarus Group 1
154.90.63.101 Kimsuky 1
154.91.0.103 EtherHiding / UNC5342Contagious InterviewPolinRiderLazarus Group 7
154.91.0.196 Contagious Interview 1
154.91.0.20 EtherHiding / UNC5342Contagious Interview 4
154.91.64.19 Contagious Interview 1
155.0.181.254 IT Worker Fraud 1
155.0.202.254 IT Worker Fraud 1
155.133.83.161 IT Worker Fraud 1
155.138.159.45 APT38 2
155.138.219.140 APT38Contagious InterviewLazarus Group 2
155.138.236.240 Kimsuky 1
155.138.254.3 Contagious Interview 1
155.15.133.69 Contagious Interview 1
155.254.60.160 Lazarus GroupContagious Interview 1
155.93.96.54 IT Worker Fraud 1
155.94.0.7 Contagious Interview 2
155.94.198.2 IT Worker Fraud 1
155.94.198.33 IT Worker Fraud 1
155.94.198.4 IT Worker Fraud 1
155.94.198.5 IT Worker Fraud 1
155.94.199.12 IT Worker Fraud 1
155.94.199.59 IT Worker FraudContagious Interview 3
155.94.199.8 IT Worker Fraud 1
155.94.207.39 IT Worker Fraud 1
155.94.207.4 IT Worker Fraud 1
155.94.207.5 IT Worker Fraud 1
155.94.208.209 Lazarus GroupAndariel 1
155.94.210.11 Lazarus Group 2
155.94.210.73 Contagious Interview 1
155.94.255.2 IT Worker FraudContagious InterviewAPT38 5
155.94.255.4 IT Worker Fraud 1
155.94.255.5 IT Worker Fraud 1
156.0.229.194 IT Worker Fraud 1
156.154.113.16 Kimsuky 1
156.154.132.200 APT38KimsukyDPRK (cluster unattributed) 1
156.155.188.152 IT Worker Fraud 1
156.155.235.8 IT Worker Fraud 1
156.227.0.187 Lazarus GroupContagious Interview 1
156.227.0.60 Lazarus GroupContagious Interview 1
156.227.25.248 IT Worker Fraud 1
156.227.26.252 IT Worker Fraud 1
156.235.89.227 Lazarus GroupContagious Interview 1
156.236.40.140 IT Worker Fraud 1
156.236.46.70 IT Worker Fraud 1
156.236.54.3 IT Worker Fraud 1
156.236.55.252 IT Worker Fraud 1
156.236.76.90 Lazarus GroupContagious Interview 1
156.241.164.178 IT Worker Fraud 1
156.241.166.173 IT Worker Fraud 1
156.241.166.174 IT Worker Fraud 1
156.241.170.3 IT Worker Fraud 1
156.241.171.5 IT Worker Fraud 1
156.241.173.24 IT Worker Fraud 1
156.241.174.18 IT Worker Fraud 1
156.245.16.55 Lazarus Group 1
156.245.19.127 Contagious Interview 1
156.34.105.58 IT Worker Fraud 1
Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. Compromised packages and repositories name victims. See the sourcing methodology.