IP addresses

11,045 IP addresses reported in published sources on North Korean (DPRK) cyber operations, ordered by value, 200 to a page. This is page 19 of 56, from 156.38.141.117 to 162.241.219.119. Each value links to its own page, which carries every source that reported it and the text around it. Other types are listed in the browse directory.

ValueCampaignFiled underSources
156.38.141.117 IT Worker Fraud 1
156.38.248.116 IT Worker Fraud 1
156.59.13.153 Kimsuky 1
156.59.13.154 Kimsuky 2
156.67.107.145 IT Worker Fraud 1
156.67.222.226 KimsukyKonni 1
156.67.222.228 KimsukyKonni 1
156.67.86.65 IT Worker Fraud 1
157.100.55.52 IT Worker Fraud 1
157.119.201.231 IT Worker Fraud 1
157.119.201.98 IT Worker Fraud 1
157.119.222.186 IT Worker Fraud 1
157.119.50.70 IT Worker Fraud 1
157.180.88.26 Konni 2
157.230.225.87 IT Worker Fraud 1
157.240.247.35 APT37Kimsuky 1
157.245.115.98 IT Worker Fraud 1
157.245.59.236 IT Worker FraudContagious Interview 1
157.245.62.1 IT Worker Fraud 1
157.245.83.23 IT Worker Fraud 1
157.25.200.39 IT Worker Fraud 1
157.250.195.237 Contagious Interview 1
157.250.202.123 Kimsuky 2
157.65.167.24 IT Worker Fraud 1
157.65.167.27 IT Worker Fraud 1
157.65.170.117 IT Worker Fraud 1
157.7.184.11 Contagious InterviewKimsuky 2
157.7.184.15 DPRK (cluster unattributed) 1
157.7.184.26 Kimsuky 1
157.97.122.39 DPRK (cluster unattributed) 1
157.97.122.40 DPRK (cluster unattributed) 1
158.106.129.101 IT Worker Fraud 1
158.173.242.133 DPRK (cluster unattributed) 1
158.173.75.178 DPRK (cluster unattributed) 1
158.247.192.226 Kimsuky 1
158.247.200.50 Lazarus Group 1
158.247.202.109 Kimsuky 2
158.247.204.137 Kimsuky 1
158.247.206.214 Lazarus Group 1
158.247.210.58 Kimsuky 1
158.247.212.35 Lazarus Group 1
158.247.215.121 Kimsuky 1
158.247.219.10 APT37 2
158.247.219.150 Kimsuky 2
158.247.223.235 Kimsuky 1
158.247.230.158 Lazarus Group 1
158.247.230.196 Kimsuky 2
158.247.232.35 Lazarus Group 1
158.247.238.155 DPRK (cluster unattributed) 1
158.247.238.232 Lazarus Group 1
158.247.240.40 Kimsuky 1
158.247.240.44 Lazarus Group 1
158.247.242.169 Kimsuky 1
158.247.242.206 Kimsuky 1
158.247.245.18 Lazarus Group 1
158.247.247.157 Kimsuky 2
158.247.249.129 APT37 1
158.247.249.243 Kimsuky 1
158.247.250.251 Kimsuky 1
158.247.250.37 Kimsuky 1
158.247.253.215 Kimsuky 1
158.255.2.5 IT Worker Fraud 1
158.255.2.6 IT Worker Fraud 1
158.255.2.9 IT Worker Fraud 1
158.255.76.195 Contagious InterviewIT Worker Fraud 2
158.255.76.196 IT Worker Fraud 1
158.255.76.197 IT Worker Fraud 1
158.51.107.2 IT Worker Fraud 1
158.51.123.17 IT Worker Fraud 1
158.51.123.85 IT Worker Fraud 1
158.51.123.99 IT Worker Fraud 1
158.62.198.177 Contagious Interview 1
158.69.181.129 IT Worker Fraud 1
158.69.225.124 IT Worker Fraud 1
158.69.74.53 IT Worker Fraud 1
159.100.13.216 KimsukyLazarus GroupKonni 6
159.100.250.231 Lazarus Group 2
159.100.255.255 Lazarus Group 1
159.100.29.122 Kimsuky 1
159.100.29.38 DPRK (cluster unattributed) 1
159.100.6.137 KimsukyAndariel 2
159.101.255.255 Lazarus Group 1
159.138.135.197 IT Worker Fraud 1
159.192.104.53 IT Worker Fraud 1
159.192.121.240 IT Worker Fraud 1
159.192.138.170 IT Worker Fraud 1
159.192.145.153 IT Worker Fraud 1
159.192.147.186 IT Worker Fraud 1
159.192.148.18 IT Worker Fraud 1
159.192.97.156 IT Worker Fraud 1
159.203.61.169 IT Worker Fraud 1
159.223.59.200 DPRK (cluster unattributed) 1
159.223.85.16 IT Worker Fraud 1
159.224.125.193 IT Worker Fraud 1
159.224.243.185 IT Worker Fraud 1
159.224.66.253 IT Worker Fraud 1
159.242.126.74 IT Worker Fraud 1
159.253.4.64 DPRK (cluster unattributed) 1
159.253.4.70 DPRK (cluster unattributed) 1
159.255.255.255 Lazarus Group 1
159.65.131.94 Lazarus Group 1
159.65.14.150 IT Worker Fraud 1
159.65.171.69 IT Worker Fraud 1
159.65.225.8 IT Worker Fraud 1
159.65.232.22 IT Worker Fraud 1
159.65.69.186 IT Worker Fraud 1
159.69.204.95 IT Worker Fraud 1
159.8.114.34 IT Worker Fraud 1
159.8.114.37 IT Worker Fraud 1
159.89.131.73 IT Worker Fraud 1
159.89.214.31 Contagious Interview 1
159.89.221.73 IT Worker Fraud 1
159.89.49.236 IT Worker Fraud 1
159.89.9.74 Contagious Interview 1
16.115.172.144 APT38 1
16.173.115.200 Contagious Interview 1
160.119.128.58 IT Worker Fraud 1
160.124.191.80 Kimsuky 1
160.153.235.20 APT38Lazarus Group 1
160.153.33.195 Lazarus Group 1
160.16.104.81 IT Worker Fraud 1
160.16.143.191 IT Worker FraudContagious Interview 2
160.16.218.63 IT Worker FraudContagious Interview 2
160.16.75.178 IT Worker Fraud 1
160.16.89.237 IT Worker Fraud 1
160.187.147.119 Kimsuky 1
160.19.141.246 IT Worker Fraud 1
160.19.155.51 IT Worker Fraud 1
160.20.147.253 Lazarus Group 1
160.202.160.116 IT Worker Fraud 1
160.202.160.248 KimsukyIT Worker Fraud 2
160.202.160.47 IT Worker Fraud 1
160.202.160.85 IT Worker Fraud 1
160.202.162.78 KimsukyKonni 1
160.202.40.138 IT Worker Fraud 1
160.202.41.194 IT Worker Fraud 1
160.202.42.132 IT Worker Fraud 1
160.202.79.226 APT37Lazarus Group 1
160.226.203.247 IT Worker Fraud 1
160.226.220.80 IT Worker Fraud 1
160.238.179.164 IT Worker Fraud 1
160.238.37.100 APT37 1
160.238.37.95 APT37 1
160.251.19.21 IT Worker Fraud 1
161.199.130.1 IT Worker Fraud 1
161.202.101.222 IT Worker Fraud 1
161.202.226.194 IT Worker Fraud 1
161.202.235.10 IT Worker Fraud 1
161.202.235.11 IT Worker Fraud 1
161.202.235.12 IT Worker Fraud 1
161.202.235.13 IT Worker Fraud 1
161.202.235.14 IT Worker Fraud 1
161.202.235.15 IT Worker Fraud 1
161.202.235.8 IT Worker Fraud 1
161.202.235.9 IT Worker Fraud 1
161.202.236.162 IT Worker Fraud 1
161.202.236.163 IT Worker Fraud 1
161.202.69.48 IT Worker Fraud 1
161.202.69.49 IT Worker Fraud 1
161.202.69.50 IT Worker Fraud 1
161.202.69.51 IT Worker Fraud 1
161.202.69.52 IT Worker Fraud 1
161.202.69.53 IT Worker Fraud 1
161.202.69.54 IT Worker Fraud 1
161.202.69.55 IT Worker Fraud 1
161.202.69.56 IT Worker Fraud 1
161.202.69.57 IT Worker Fraud 1
161.202.69.58 IT Worker Fraud 1
161.202.69.59 IT Worker Fraud 1
161.202.69.60 IT Worker Fraud 1
161.202.69.61 IT Worker Fraud 1
161.202.69.62 IT Worker Fraud 1
161.202.69.63 IT Worker Fraud 1
161.248.239.119 Kimsuky 1
161.35.227.89 Contagious Interview 1
161.35.4.201 IT Worker Fraud 1
161.49.222.67 IT Worker Fraud 1
161.82.252.35 IT Worker Fraud 1
161.97.100.171 Kimsuky 1
161.97.113.34 KimsukyKonniLazarus GroupAPT38 2
161.97.149.38 IT Worker Fraud 1
161.97.172.153 IT Worker Fraud 1
161.97.69.215 IT Worker Fraud 1
162.0.209.27 Kimsuky 3
162.0.209.91 Kimsuky 1
162.0.215.196 APT38 1
162.0.229.227 Contagious InterviewKimsuky 2
162.0.239.85 Contagious Interview 2
162.144.66.22 IT Worker Fraud 1
162.155.10.150 IT Worker Fraud 1
162.19.214.208 Contagious Interview 1
162.19.3.23 Lazarus Group 1
162.19.71.175 Lazarus GroupAndarielDPRK (cluster unattributed) 2
162.213.255.41 APT38 1
162.216.224.39 Kimsuky 1
162.218.114.83 Contagious Interview 1
162.220.11.186 KimsukyContagious Interview 1
162.220.11.202 KimsukyAPT37KonniLazarus Group 2
162.241.216.224 Konni 1
162.241.219.119 Lazarus Group 1
Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. Compromised packages and repositories name victims. See the sourcing methodology.