IP addresses

11,045 IP addresses reported in published sources on North Korean (DPRK) cyber operations, ordered by value, 200 to a page. This is page 30 of 56, from 192.64.119.169 to 195.226.105.219. Each value links to its own page, which carries every source that reported it and the text around it. Other types are listed in the browse directory.

ValueCampaignFiled underSources
192.64.119.169 APT38KimsukyDPRK (cluster unattributed) 1
192.64.119.22 APT38 1
192.64.119.220 APT38 1
192.64.119.249 APT38 1
192.64.119.25 Lazarus GroupKimsukyAPT37KonniContagious Interview 2
192.64.119.29 APT38 1
192.64.119.40 APT38 1
192.64.119.5 APT38 1
192.64.119.88 APT38 1
192.64.119.93 APT38 1
192.74.247.161 IT Worker FraudContagious Interview 3
192.74.247.162 IT Worker Fraud 1
192.74.247.163 IT Worker Fraud 1
192.74.247.165 IT Worker Fraud 1
192.82.92.62 IT Worker Fraud 1
192.95.14.128 DPRK (cluster unattributed) 1
192.99.141.236 IT Worker Fraud 1
192.99.141.237 IT Worker Fraud 1
192.99.141.238 IT Worker Fraud 1
192.99.141.239 IT Worker Fraud 1
192.99.20.39 Lazarus Group 1
192.99.247.190 IT Worker Fraud 1
192.99.255.255 Lazarus Group 1
192.99.7.189 IT Worker Fraud 1
193.105.62.11 IT Worker Fraud 1
193.106.130.249 IT Worker Fraud 1
193.106.130.35 IT Worker Fraud 1
193.106.58.51 IT Worker Fraud 1
193.110.115.220 IT Worker Fraud 1
193.112.118.89 IT Worker Fraud 1
193.118.55.17 Contagious Interview 1
193.118.55.19 Contagious Interview 1
193.118.55.77 Contagious Interview 1
193.142.58.171 Contagious Interview 1
193.148.16.45 KimsukyKonni 2
193.158.12.138 IT Worker Fraud 1
193.16.247.16 IT Worker Fraud 1
193.160.31.10 Kimsuky 1
193.160.32.10 Contagious InterviewKimsuky 2
193.160.32.188 Kimsuky 1
193.160.32.243 Kimsuky 1
193.162.105.1 IT Worker Fraud 1
193.163.116.30 IT Worker Fraud 1
193.164.6.20 IT Worker Fraud 1
193.168.141.107 APT38 1
193.187.148.116 Contagious Interview 1
193.189.144.145 Lazarus Group 1
193.19.205.249 IT Worker Fraud 1
193.19.205.250 IT Worker Fraud 1
193.19.205.26 Contagious Interview 1
193.193.240.36 IT Worker Fraud 1
193.193.240.37 IT Worker Fraud 1
193.200.151.69 IT Worker Fraud 1
193.227.129.196 IT Worker FraudContagious Interview 1
193.227.49.81 IT Worker Fraud 1
193.233.126.94 EtherHiding / UNC5342DPRK (cluster unattributed) 1
193.233.132.177 Contagious Interview 1
193.233.138.30 EtherHiding 1
193.233.171.58 APT38Lazarus Group 2
193.233.85.234 APT38Lazarus Group 2
193.239.101.47 IT Worker Fraud 1
193.239.101.7 IT Worker Fraud 1
193.24.123.68 DPRK (cluster unattributed) 2
193.242.145.138 Contagious Interview 1
193.243.147.143 Contagious Interview 1
193.247.144.38 EtherHiding / UNC5342NullReceiverContagious InterviewDPRK (cluster unattributed)PolinRider 7
193.251.27.90 Lazarus Group 1
193.27.14.208 Contagious Interview 1
193.29.15.147 Contagious Interview 1
193.32.162.52 EtherHiding / UNC5342Contagious Interview 2
193.34.166.22 IT Worker Fraud 1
193.34.95.110 IT Worker Fraud 1
193.37.212.176 DPRK (cluster unattributed) 1
193.37.212.97 Lazarus GroupContagious Interview 1
193.37.214.7 Lazarus GroupContagious Interview 1
193.38.244.17 IT Worker FraudContagious Interview 1
193.39.187.165 Lazarus Group 1
193.40.176.51 IT Worker Fraud 1
193.56.28.103 Lazarus Group 2
193.56.28.251 Lazarus Group 1
193.56.29.123 Andariel 1
193.56.72.56 IT Worker Fraud 1
193.57.57.121 Lazarus GroupContagious Interview 1
193.59.27.68 IT Worker Fraud 1
193.70.64.163 Lazarus Group 1
193.77.127.218 IT Worker Fraud 1
193.77.242.110 IT Worker Fraud 1
193.8.187.2 IT Worker FraudContagious Interview 1
193.84.184.25 IT Worker Fraud 1
193.9.114.26 IT Worker Fraud 1
194.104.136.243 IT Worker FraudContagious Interview 1
194.11.226.16 Lazarus GroupAPT38 1
194.113.73.85 IT Worker Fraud 1
194.12.124.188 IT Worker Fraud 1
194.124.34.62 KimsukyKonni 1
194.124.36.250 IT Worker Fraud 1
194.15.112.200 Lazarus GroupAPT38 1
194.158.93.30 IT Worker Fraud 1
194.163.148.53 IT Worker Fraud 1
194.164.206.37 IT Worker FraudContagious Interview 1
194.164.234.151 Contagious Interview 1
194.165.4.39 Contagious Interview 1
194.178.112.202 Contagious Interview 1
194.180.191.15 Contagious Interview 1
194.183.174.14 IT Worker Fraud 1
194.187.251.100 IT Worker Fraud 1
194.187.251.106 IT Worker Fraud 1
194.187.251.107 IT Worker Fraud 1
194.187.251.99 IT Worker Fraud 1
194.195.209.88 Contagious Interview 1
194.208.13.7 IT Worker Fraud 1
194.208.68.180 IT Worker Fraud 1
194.213.8.34 IT Worker Fraud 1
194.233.67.98 IT Worker Fraud 1
194.233.69.38 IT Worker Fraud 1
194.233.69.41 IT Worker Fraud 1
194.233.69.90 IT Worker Fraud 1
194.243.107.74 IT Worker Fraud 1
194.28.91.10 IT Worker Fraud 1
194.31.33.50 IT Worker Fraud 1
194.32.120.58 DPRK (cluster unattributed) 1
194.32.120.76 DPRK (cluster unattributed) 1
194.33.45.162 IT Worker FraudContagious InterviewAPT38 6
194.34.133.46 IT Worker Fraud 1
194.34.133.76 IT Worker Fraud 1
194.34.133.77 IT Worker Fraud 1
194.34.133.79 IT Worker Fraud 1
194.36.190.41 Contagious Interview 1
194.36.191.10 Contagious Interview 1
194.36.191.196 Lazarus Group 1
194.38.20.211 Contagious Interview 1
194.44.104.242 IT Worker Fraud 1
194.44.20.112 IT Worker Fraud 1
194.44.230.51 IT Worker Fraud 1
194.44.255.9 IT Worker Fraud 1
194.44.38.111 IT Worker Fraud 1
194.44.78.85 IT Worker Fraud 1
194.44.85.38 IT Worker Fraud 1
194.44.87.245 IT Worker Fraud 1
194.5.48.68 DPRK (cluster unattributed) 1
194.5.48.71 DPRK (cluster unattributed) 1
194.5.53.248 DPRK (cluster unattributed) 1
194.5.83.4 DPRK (cluster unattributed) 1
194.50.16.252 Kimsuky 1
194.61.91.131 IT Worker Fraud 1
194.68.27.204 Konni 1
194.8.145.174 IT Worker Fraud 1
194.87.95.123 Contagious Interview 1
195.110.7.195 IT Worker Fraud 1
195.112.197.19 IT Worker Fraud 1
195.117.107.190 IT Worker Fraud 1
195.122.31.246 Lazarus GroupContagious Interview 1
195.123.212.191 IT Worker Fraud 1
195.128.141.1 IT Worker Fraud 1
195.133.26.32 Lazarus GroupAPT38 2
195.138.73.54 IT Worker Fraud 1
195.138.79.162 IT Worker Fraud 1
195.138.82.198 IT Worker Fraud 1
195.138.82.40 IT Worker Fraud 1
195.138.90.226 IT Worker Fraud 1
195.140.226.244 IT Worker Fraud 1
195.146.5.31 Lazarus GroupContagious InterviewIT Worker Fraud 3
195.146.5.33 IT Worker Fraud 1
195.146.5.34 IT Worker Fraud 1
195.15.240.27 IT Worker Fraud 1
195.154.84.106 IT Worker Fraud 1
195.158.234.60 Lazarus Group 2
195.159.124.57 IT Worker FraudContagious Interview 1
195.162.81.91 IT Worker Fraud 1
195.167.104.114 IT Worker Fraud 1
195.168.91.238 IT Worker Fraud 1
195.175.67.202 IT Worker Fraud 1
195.175.73.214 IT Worker Fraud 1
195.175.87.14 IT Worker Fraud 1
195.175.89.198 IT Worker Fraud 1
195.177.217.131 IT Worker Fraud 1
195.177.94.43 Kimsuky 1
195.178.33.86 IT Worker Fraud 1
195.178.56.32 IT Worker Fraud 1
195.178.56.33 IT Worker Fraud 1
195.178.56.35 IT Worker Fraud 1
195.178.56.37 IT Worker Fraud 1
195.187.63.42 IT Worker Fraud 1
195.189.248.212 IT Worker Fraud 1
195.201.104.53 Contagious Interview 4
195.201.172.170 Contagious Interview 1
195.201.194.107 Contagious Interview 2
195.205.226.146 IT Worker Fraud 1
195.205.33.237 IT Worker Fraud 1
195.206.112.59 IT Worker Fraud 1
195.211.84.188 IT Worker Fraud 1
195.214.222.201 IT Worker Fraud 1
195.22.221.210 IT Worker Fraud 1
195.22.237.54 Kimsuky 1
195.222.104.157 IT Worker Fraud 1
195.222.107.85 IT Worker Fraud 1
195.224.212.226 IT Worker Fraud 1
195.225.176.69 Contagious Interview 1
195.225.49.137 IT Worker Fraud 1
195.226.105.219 IT Worker Fraud 1
Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. Compromised packages and repositories name victims. See the sourcing methodology.