IP addresses

11,045 IP addresses reported in published sources on North Korean (DPRK) cyber operations, ordered by value, 200 to a page. This is page 36 of 56, from 211.75.74.227 to 216.189.159.255. Each value links to its own page, which carries every source that reported it and the text around it. Other types are listed in the browse directory.

ValueCampaignFiled underSources
211.75.74.227 IT Worker Fraud 1
212.1.105.186 IT Worker Fraud 1
212.1.108.131 IT Worker Fraud 1
212.112.110.238 IT Worker Fraud 1
212.112.113.108 IT Worker Fraud 1
212.112.125.2 IT Worker Fraud 1
212.115.232.79 IT Worker Fraud 1
212.117.176.187 Contagious Interview 1
212.118.52.168 KonniKimsukyAPT37 1
212.126.108.181 IT Worker Fraud 1
212.126.5.246 IT Worker Fraud 1
212.126.96.154 IT Worker Fraud 1
212.129.10.240 IT Worker Fraud 1
212.129.10.242 Contagious InterviewIT Worker Fraud 2
212.129.10.243 IT Worker Fraud 1
212.129.31.67 Contagious Interview 1
212.142.155.36 IT Worker Fraud 1
212.143.21.43 Lazarus Group 1
212.143.21.63 Lazarus Group 1
212.15.184.190 IT Worker Fraud 1
212.154.251.210 IT Worker Fraud 1
212.156.55.34 IT Worker Fraud 1
212.159.107.216 IT Worker Fraud 1
212.174.242.114 IT Worker Fraud 1
212.174.44.145 IT Worker Fraud 1
212.174.44.16 IT Worker Fraud 1
212.174.44.29 IT Worker Fraud 1
212.174.44.73 IT Worker Fraud 1
212.175.11.26 IT Worker Fraud 1
212.180.199.183 IT Worker Fraud 1
212.186.125.121 IT Worker Fraud 1
212.191.78.146 IT Worker Fraud 1
212.192.219.52 Contagious Interview 1
212.192.241.203 Contagious Interview 1
212.192.241.94 Contagious Interview 1
212.200.118.254 IT Worker Fraud 1
212.200.149.242 IT Worker Fraud 1
212.200.160.106 IT Worker Fraud 1
212.200.161.241 IT Worker Fraud 1
212.200.165.235 IT Worker Fraud 1
212.200.246.24 IT Worker Fraud 1
212.200.27.134 IT Worker Fraud 1
212.200.39.210 IT Worker Fraud 1
212.200.80.97 IT Worker Fraud 1
212.224.107.244 KimsukyDPRK (cluster unattributed) 2
212.225.227.96 IT Worker Fraud 1
212.227.91.36 Lazarus Group 1
212.230.181.209 IT Worker Fraud 1
212.231.196.9 IT Worker Fraud 1
212.3.105.11 IT Worker Fraud 1
212.3.109.7 IT Worker Fraud 1
212.30.37.180 DPRK (cluster unattributed) 1
212.30.37.214 DPRK (cluster unattributed) 1
212.30.37.30 DPRK (cluster unattributed) 1
212.31.100.138 IT Worker Fraud 1
212.31.102.100 Lazarus Group 2
212.34.142.111 EtherHiding 1
212.34.239.253 IT Worker Fraud 1
212.42.116.161 IT Worker Fraud 1
212.42.193.50 IT Worker Fraud 1
212.45.73.70 IT Worker Fraud 1
212.46.38.238 Contagious Interview 1
212.50.19.150 IT Worker Fraud 1
212.50.53.127 IT Worker Fraud 1
212.50.60.231 IT Worker Fraud 1
212.57.43.160 IT Worker Fraud 1
212.7.217.10 APT37 1
212.72.149.234 IT Worker Fraud 1
212.8.50.135 IT Worker Fraud 1
212.80.217.28 IT Worker Fraud 1
212.81.47.217 Contagious Interview 2
212.82.100.137 APT37Kimsuky 1
212.85.29.133 Contagious Interview 1
212.85.29.149 Lazarus GroupAPT38 1
212.85.29.40 Lazarus GroupAPT38 1
212.86.125.24 IT Worker FraudContagious Interview 1
212.91.193.27 IT Worker Fraud 2
212.95.186.68 IT Worker Fraud 1
212.95.52.99 IT Worker Fraud 1
212.95.54.89 IT Worker Fraud 1
212.95.55.66 IT Worker Fraud 1
212.98.147.58 IT Worker Fraud 1
212.98.155.194 IT Worker Fraud 1
212.98.235.50 IT Worker Fraud 1
213.0.92.122 IT Worker Fraud 1
213.109.235.89 IT Worker Fraud 1
213.111.146.132 APT38 1
213.111.148.202 APT38 1
213.111.148.242 APT38 1
213.111.148.90 IT Worker FraudContagious Interview 1
213.135.12.27 IT Worker Fraud 1
213.135.4.164 IT Worker Fraud 1
213.139.205.151 DPRK (cluster unattributed) 1
213.14.31.122 IT Worker Fraud 1
213.14.49.133 IT Worker Fraud 1
213.145.136.20 IT Worker Fraud 1
213.145.139.202 IT Worker Fraud 1
213.145.86.223 APT37KimsukyLazarus GroupKonni 6
213.152.165.20 IT Worker Fraud 1
213.152.51.169 Lazarus Group 1
213.157.47.38 IT Worker Fraud 1
213.157.51.74 IT Worker Fraud 1
213.159.251.88 IT Worker Fraud 1
213.16.81.147 IT Worker Fraud 1
213.16.81.182 IT Worker Fraud 1
213.165.160.251 IT Worker Fraud 1
213.166.79.162 IT Worker Fraud 1
213.166.79.178 IT Worker Fraud 1
213.169.34.205 IT Worker Fraud 1
213.169.49.142 IT Worker FraudContagious Interview 1
213.172.89.227 IT Worker Fraud 1
213.173.66.111 IT Worker Fraud 1
213.174.0.72 IT Worker Fraud 1
213.180.180.154 Lazarus Group 3
213.183.50.124 IT Worker Fraud 1
213.183.50.125 IT Worker Fraud 1
213.186.202.149 IT Worker Fraud 1
213.190.6.159 Kimsuky 1
213.190.6.57 Kimsuky 1
213.207.37.214 IT Worker Fraud 1
213.216.67.190 IT Worker Fraud 1
213.219.39.6 IT Worker Fraud 1
213.226.11.149 IT Worker Fraud 1
213.226.16.46 IT Worker Fraud 1
213.240.224.24 IT Worker Fraud 1
213.240.25.98 IT Worker Fraud 1
213.252.232.171 APT38Lazarus Group 3
213.32.252.127 IT Worker Fraud 1
213.32.252.134 IT Worker Fraud 1
213.32.253.117 IT Worker Fraud 1
213.32.255.222 IT Worker Fraud 1
213.32.75.44 IT Worker Fraud 1
213.7.196.26 IT Worker Fraud 1
213.73.9.61 IT Worker Fraud 1
213.74.253.190 IT Worker Fraud 1
213.74.58.60 IT Worker Fraud 1
213.76.114.106 IT Worker Fraud 1
213.81.129.238 IT Worker Fraud 1
213.81.129.251 IT Worker Fraud 1
213.81.178.169 IT Worker Fraud 1
213.87.144.144 IT Worker FraudContagious Interview 2
213.87.149.35 IT Worker FraudContagious Interview 2
213.87.90.110 IT Worker FraudContagious Interview 2
213.89.86.172 APT38 1
213.96.16.193 IT Worker Fraud 1
213.96.240.156 IT Worker Fraud 1
213.96.31.253 IT Worker Fraud 1
213.97.98.89 IT Worker Fraud 1
214.6.26.30 DPRK (cluster unattributed) 1
216.107.136.10 APT38Contagious InterviewKimsuky 2
216.107.137.53 APT38 1
216.107.137.73 KimsukyLazarus GroupKonni 2
216.120.201.112 Andariel 1
216.126.196.190 Contagious Interview 1
216.126.224.168 Contagious Interview 1
216.126.224.220 Contagious Interview 1
216.126.225.104 Contagious Interview 2
216.126.225.243 Contagious Interview 4
216.126.225.83 Contagious Interview 1
216.126.227.239 Contagious InterviewLazarus Group 3
216.126.229.166 Contagious InterviewLazarus Group 4
216.126.236.244 Contagious Interview 1
216.126.237.71 Contagious InterviewLazarus Group 2
216.126.239.166 Contagious Interview 1
216.127.113.58 IT Worker Fraud 1
216.154.201.132 IT Worker Fraud 1
216.155.131.192 IT Worker Fraud 1
216.155.131.193 IT Worker Fraud 1
216.155.131.194 IT Worker Fraud 1
216.155.131.195 IT Worker Fraud 1
216.155.131.196 IT Worker Fraud 1
216.155.131.197 IT Worker Fraud 1
216.155.131.198 IT Worker Fraud 1
216.155.131.199 IT Worker Fraud 1
216.155.131.200 IT Worker Fraud 1
216.155.131.201 IT Worker Fraud 1
216.155.131.202 IT Worker Fraud 1
216.155.131.203 IT Worker Fraud 1
216.155.131.204 IT Worker Fraud 1
216.155.131.205 IT Worker Fraud 1
216.155.131.206 IT Worker Fraud 1
216.155.131.207 IT Worker Fraud 1
216.155.89.66 IT Worker Fraud 1
216.155.93.238 IT Worker Fraud 1
216.170.114.67 Contagious Interview 1
216.172.156.165 IT Worker Fraud 1
216.172.156.166 IT Worker Fraud 1
216.172.156.171 IT Worker Fraud 1
216.172.156.172 IT Worker Fraud 1
216.173.115.200 Contagious Interview 1
216.173.64.63 Lazarus GroupContagious Interview 1
216.173.65.45 Lazarus GroupContagious Interview 1
216.18.197.130 Contagious Interview 1
216.189.145.247 Lazarus Group 1
216.189.149.78 Kimsuky 1
216.189.150.185 Lazarus GroupAPT38 2
216.189.154.6 Kimsuky 4
216.189.157.89 Kimsuky 1
216.189.159.197 Kimsuky 2
216.189.159.255 Lazarus Group 1
Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. Compromised packages and repositories name victims. See the sourcing methodology.