IP addresses

11,045 IP addresses reported in published sources on North Korean (DPRK) cyber operations, ordered by value, 200 to a page. This is page 31 of 56, from 195.228.123.142 to 199.189.104.125. Each value links to its own page, which carries every source that reported it and the text around it. Other types are listed in the browse directory.

ValueCampaignFiled underSources
195.228.123.142 IT Worker Fraud 1
195.228.65.164 IT Worker Fraud 1
195.24.61.7 IT Worker Fraud 1
195.242.110.246 IT Worker Fraud 1
195.242.138.20 IT Worker Fraud 1
195.250.24.113 Kimsuky 1
195.250.254.18 IT Worker Fraud 1
195.26.248.212 Contagious Interview 1
195.29.155.98 IT Worker Fraud 1
195.39.243.194 IT Worker Fraud 1
195.39.249.178 IT Worker Fraud 1
195.47.243.254 IT Worker Fraud 1
195.50.242.110 AndarielLazarus GroupKimsuky 2
195.64.235.233 IT Worker Fraud 1
195.66.213.162 Contagious Interview 1
195.66.213.5 APT38 1
195.69.231.254 IT Worker Fraud 1
195.74.72.111 IT Worker Fraud 1
195.78.100.162 IT Worker Fraud 1
195.85.250.12 IT Worker FraudContagious Interview 1
195.88.208.210 Contagious Interview 1
195.91.86.172 APT38 1
196.0.111.186 IT Worker Fraud 1
196.0.28.4 IT Worker Fraud 1
196.0.39.50 IT Worker Fraud 1
196.1.184.194 IT Worker Fraud 1
196.1.95.117 IT Worker Fraud 1
196.175.250.205 IT Worker Fraud 1
196.2.13.60 IT Worker Fraud 1
196.2.64.152 IT Worker Fraud 1
196.202.210.65 IT Worker Fraud 1
196.216.13.36 IT Worker Fraud 1
196.22.221.2 IT Worker Fraud 1
196.22.60.14 IT Worker Fraud 1
196.221.147.125 IT Worker Fraud 1
196.25.43.30 IT Worker Fraud 1
196.250.39.65 IT Worker Fraud 1
196.251.17.206 IT Worker Fraud 1
196.27.107.173 IT Worker Fraud 1
196.28.234.66 IT Worker Fraud 1
196.29.166.218 Lazarus GroupAPT38 2
196.3.97.71 IT Worker Fraud 1
196.38.48.121 Lazarus Group 2
196.41.102.130 IT Worker Fraud 1
196.41.225.24 IT Worker Fraud 1
196.41.45.170 IT Worker Fraud 1
196.41.46.242 IT Worker Fraud 1
196.43.97.114 IT Worker Fraud 1
196.44.49.154 DPRK (cluster unattributed) 1
196.50.7.11 IT Worker Fraud 1
196.61.44.54 IT Worker Fraud 1
197.149.90.166 Contagious Interview 1
197.155.81.134 IT Worker Fraud 1
197.156.240.66 IT Worker Fraud 1
197.157.219.169 IT Worker Fraud 1
197.182.186.212 Contagious Interview 1
197.210.150.57 IT Worker Fraud 1
197.210.217.66 IT Worker Fraud 1
197.211.212.31 Lazarus Group 2
197.211.212.59 Lazarus Group 2
197.211.215.255 Lazarus Group 1
197.211.240.119 IT Worker Fraud 1
197.211.244.112 IT Worker Fraud 1
197.211.245.208 IT Worker Fraud 1
197.211.255.255 Lazarus Group 1
197.221.158.186 IT Worker Fraud 1
197.231.196.44 IT Worker Fraud 1
197.231.221.211 Lazarus Group 1
197.232.2.18 IT Worker Fraud 1
197.232.253.210 IT Worker Fraud 1
197.232.30.37 IT Worker Fraud 1
197.232.43.224 IT Worker Fraud 1
197.232.47.102 IT Worker Fraud 1
197.234.13.37 IT Worker Fraud 1
197.234.13.51 IT Worker Fraud 1
197.234.13.77 IT Worker Fraud 1
197.242.203.246 IT Worker Fraud 1
197.245.230.122 IT Worker Fraud 1
197.246.6.83 Lazarus Group 1
197.248.101.223 IT Worker Fraud 1
197.248.196.90 IT Worker Fraud 1
197.248.249.147 IT Worker Fraud 1
197.248.28.17 IT Worker Fraud 1
197.248.30.121 IT Worker Fraud 1
197.248.30.122 IT Worker Fraud 1
197.248.30.123 IT Worker Fraud 1
197.248.30.125 IT Worker Fraud 1
197.250.15.87 IT Worker Fraud 1
197.251.254.104 IT Worker Fraud 1
197.253.58.89 IT Worker Fraud 1
197.253.59.38 IT Worker Fraud 1
197.254.7.86 IT Worker Fraud 1
197.255.253.33 IT Worker Fraud 1
197.44.198.211 APT38 1
197.51.50.158 APT38 1
198.1.94.46 IT Worker Fraud 1
198.105.127.124 Lazarus GroupContagious Interview 1
198.105.127.210 Contagious InterviewPolinRider 11
198.105.127.98 Lazarus GroupContagious Interview 1
198.12.107.229 Contagious Interview 1
198.12.91.160 Contagious Interview 1
198.133.183.67 Lazarus Group 1
198.135.49.154 IT Worker Fraud 2
198.144.149.2 IT Worker Fraud 1
198.144.149.4 IT Worker Fraud 1
198.144.149.5 IT Worker Fraud 1
198.144.149.6 IT Worker Fraud 1
198.15.82.162 Contagious Interview 1
198.180.198.6 Lazarus Group 2
198.186.192.83 IT Worker Fraud 1
198.187.29.20 Lazarus Group 2
198.187.29.26 APT38 1
198.199.86.11 IT Worker Fraud 1
198.199.86.169 IT Worker Fraud 1
198.2.228.20 IT Worker Fraud 1
198.2.228.22 IT Worker Fraud 1
198.2.228.23 Contagious InterviewIT Worker Fraud 2
198.2.228.4 IT Worker Fraud 1
198.2.228.5 IT Worker Fraud 1
198.20.116.74 IT Worker Fraud 1
198.211.99.26 IT Worker Fraud 1
198.229.231.13 IT Worker Fraud 1
198.23.148.18 IT Worker FraudContagious Interview 3
198.23.148.20 IT Worker Fraud 1
198.23.148.21 IT Worker Fraud 1
198.23.172.90 Contagious Interview 1
198.23.241.254 APT38IT Worker Fraud 2
198.23.251.121 Contagious Interview 1
198.244.135.250 Lazarus GroupAPT38AndarielKimsuky 1
198.251.83.27 Lazarus Group 1
198.252.102.112 KonniKimsuky 1
198.252.102.89 KimsukyKonni 1
198.252.103.65 KimsukyKonni 1
198.252.103.74 KonniKimsuky 1
198.255.161.102 IT Worker Fraud 1
198.255.45.126 IT Worker Fraud 1
198.255.45.131 Contagious InterviewIT Worker Fraud 2
198.255.45.134 IT Worker Fraud 1
198.255.66.27 IT Worker Fraud 1
198.255.66.30 IT Worker Fraud 1
198.255.67.36 IT Worker Fraud 1
198.27.108.198 IT Worker Fraud 1
198.37.103.70 IT Worker Fraud 1
198.46.248.10 IT Worker Fraud 1
198.50.130.118 Contagious Interview 1
198.50.18.229 IT Worker Fraud 1
198.53.64.194 IT Worker FraudContagious Interview 1
198.54.114.175 Lazarus Group 2
198.54.114.236 APT38 1
198.54.114.237 Lazarus Group 2
198.54.115.108 APT38 1
198.54.115.166 APT38 1
198.54.115.248 APT38 1
198.54.115.40 APT38 1
198.54.115.51 Lazarus Group 2
198.54.116.166 APT38 1
198.54.116.177 Lazarus GroupKimsukyAPT37KonniContagious Interview 2
198.54.116.214 APT38 1
198.54.116.40 APT38 1
198.54.117.197 Lazarus Group 1
198.54.117.198 Lazarus Group 1
198.54.117.199 Lazarus Group 1
198.54.117.200 Lazarus Group 1
198.54.117.242 APT38KimsukyDPRK (cluster unattributed) 2
198.54.119.94 Lazarus GroupKimsukyAPT37KonniContagious Interview 2
198.54.120.79 APT38 1
198.54.126.155 Kimsuky 1
198.54.127.82 Kimsuky 1
198.55.119.112 AndarielLazarus Group 1
198.57.247.218 APT38KimsukyDPRK (cluster unattributed) 1
198.58.118.167 Lazarus Group 1
198.8.94.170 IT Worker Fraud 1
198.89.91.90 IT Worker Fraud 1
198.96.95.58 Lazarus GroupKimsuky 1
199.115.98.61 IT Worker Fraud 1
199.115.98.62 IT Worker Fraud 1
199.115.99.34 IT Worker FraudContagious InterviewAPT38 4
199.115.99.62 Lazarus GroupContagious InterviewIT Worker Fraud 2
199.119.202.101 IT Worker Fraud 1
199.119.202.102 IT Worker Fraud 1
199.119.74.245 IT Worker Fraud 1
199.168.112.161 IT Worker Fraud 1
199.168.112.162 IT Worker Fraud 1
199.168.112.163 IT Worker Fraud 1
199.168.112.175 IT Worker FraudContagious Interview 4
199.168.113.17 IT Worker Fraud 1
199.168.113.18 IT Worker Fraud 1
199.168.113.19 IT Worker Fraud 1
199.168.113.31 Lazarus GroupContagious InterviewIT Worker Fraud 3
199.180.116.228 Kimsuky 1
199.180.148.134 Lazarus Group 2
199.188.103.115 APT38Lazarus Group 1
199.188.200.147 Lazarus GroupKimsukyAPT37KonniContagious Interview 4
199.188.200.186 Kimsuky 1
199.188.200.35 APT38 1
199.188.200.43 APT38 1
199.188.205.45 APT38 1
199.188.206.75 Lazarus Group 1
199.189.104.117 IT Worker Fraud 1
199.189.104.125 IT Worker Fraud 1
Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. Compromised packages and repositories name victims. See the sourcing methodology.