IP addresses

11,045 IP addresses reported in published sources on North Korean (DPRK) cyber operations, ordered by value, 200 to a page. This is page 38 of 56, from 23.106.161.5 to 27.102.113.209. Each value links to its own page, which carries every source that reported it and the text around it. Other types are listed in the browse directory.

ValueCampaignFiled underSources
23.106.161.5 IT Worker Fraud 1
23.106.169.114 IT Worker Fraud 1
23.106.169.115 IT Worker Fraud 1
23.106.169.116 IT Worker Fraud 1
23.106.169.120 Contagious InterviewAPT38IT Worker Fraud 4
23.106.215.105 DPRK (cluster unattributed) 1
23.106.253.194 Contagious InterviewLazarus Group 6
23.106.253.209 Contagious InterviewLazarus Group 3
23.106.253.215 Contagious InterviewLazarus Group 3
23.106.253.221 Contagious Interview 2
23.106.253.242 Contagious Interview 2
23.106.70.154 Contagious InterviewLazarus Group 4
23.106.84.130 IT Worker Fraud 1
23.106.84.134 IT Worker Fraud 1
23.106.84.135 IT Worker Fraud 1
23.107.176.100 IT Worker Fraud 1
23.107.176.117 IT Worker Fraud 1
23.107.176.38 IT Worker Fraud 1
23.107.176.79 IT Worker Fraud 1
23.107.176.84 IT Worker Fraud 1
23.108.108.42 Contagious Interview 1
23.108.85.148 IT Worker Fraud 1
23.108.85.207 IT Worker Fraud 1
23.108.85.29 IT Worker Fraud 1
23.111.133.162 Lazarus Group 1
23.115.75.188 Lazarus Group 1
23.127.202.249 Contagious Interview 2
23.131.92.195 Lazarus GroupContagious Interview 1
23.137.104.77 Kimsuky 1
23.137.105.114 Contagious Interview 1
23.137.105.75 DPRK (cluster unattributed)Contagious Interview 2
23.146.144.210 IT Worker Fraud 1
23.146.144.212 IT Worker Fraud 1
23.146.144.213 IT Worker Fraud 1
23.146.144.216 IT Worker Fraud 1
23.152.0.101 Lazarus GroupAPT38Contagious Interview 4
23.152.0.232 Lazarus Group 1
23.152.0.255 Lazarus Group 1
23.160.56.152 IT Worker Fraud 1
23.160.56.153 IT Worker Fraud 1
23.160.56.155 Contagious InterviewIT Worker Fraud 3
23.19.71.250 IT Worker Fraud 1
23.19.74.185 IT Worker Fraud 1
23.19.79.135 IT Worker Fraud 1
23.198.224.36 Lazarus GroupKimsukyAPT38 1
23.198.226.30 Lazarus GroupKimsukyAPT38 1
23.198.249.163 Lazarus GroupKimsukyAPT38 1
23.227.196.116 Lazarus GroupDPRK (cluster unattributed) 1
23.227.199.53 Lazarus Group 2
23.227.199.69 Lazarus Group 2
23.227.199.7 Contagious Interview 1
23.227.202.242 Contagious Interview 1
23.227.202.244 Contagious InterviewLazarus Group 10
23.227.202.51 Contagious Interview 1
23.227.202.52 Contagious Interview 1
23.227.202.54 Lazarus GroupAPT38AndarielKimsuky 1
23.227.203.192 Contagious Interview 1
23.227.203.204 Contagious Interview 1
23.227.203.99 Contagious Interview 1
23.227.38.15 IT Worker Fraud 1
23.228.104.13 IT Worker Fraud 1
23.228.104.31 IT Worker Fraud 1
23.228.120.12 Contagious Interview 1
23.228.121.194 IT Worker Fraud 1
23.228.77.13 IT Worker Fraud 1
23.228.77.3 IT Worker Fraud 1
23.229.111.197 AndarielLazarus Group 2
23.229.86.236 IT Worker Fraud 1
23.231.77.91 IT Worker Fraud 1
23.236.169.233 APT38 2
23.236.237.24 IT Worker Fraud 1
23.237.102.130 IT Worker FraudContagious Interview 4
23.237.102.132 IT Worker Fraud 1
23.237.102.133 IT Worker Fraud 1
23.237.145.36 IT Worker FraudContagious Interview 1
23.237.2.100 IT Worker Fraud 1
23.237.2.101 IT Worker Fraud 1
23.237.2.98 IT Worker Fraud 1
23.237.32.34 IT Worker Fraud 2
23.237.32.36 IT Worker Fraud 1
23.237.33.108 IT Worker Fraud 1
23.237.33.109 IT Worker Fraud 1
23.237.33.110 Contagious InterviewIT Worker Fraud 2
23.238.33.186 IT Worker Fraud 1
23.249.163.163 Contagious Interview 1
23.254.119.12 Lazarus Group 2
23.254.128.114 Contagious InterviewKimsukyAPT38 2
23.254.129.6 APT38Lazarus Group 1
23.254.130.131 APT38Contagious Interview 1
23.254.144.139 APT38 1
23.254.164.123 Lazarus GroupAPT38 6
23.254.164.156 Contagious Interview 1
23.254.164.232 APT38 1
23.254.164.50 KimsukyDPRK (cluster unattributed)Lazarus Group 1
23.254.164.92 Lazarus GroupAPT38 5
23.254.165.112 APT38 1
23.254.167.107 APT38 1
23.254.167.21 APT38 2
23.254.167.216 Contagious InterviewKimsukyAPT38 6
23.254.203.244 APT38Contagious Interview 3
23.254.204.184 APT38Contagious Interview 2
23.254.211.230 Lazarus GroupKimsuky 2
23.254.217.53 Lazarus Group 1
23.254.225.184 Konni 1
23.254.226.130 Contagious InterviewKimsukyAPT38 1
23.254.226.83 APT38 1
23.254.226.90 Lazarus GroupAPT38AndarielKimsukyContagious InterviewDPRK (cluster unattributed) 5
23.254.229.101 Contagious Interview 1
23.254.230.253 Lazarus GroupAPT38 1
23.254.244.242 Lazarus Group 1
23.254.244.248 APT38 1
23.254.244.73 Contagious Interview 1
23.254.244.74 Contagious Interview 1
23.254.247.32 APT38 1
23.254.247.53 DPRK (cluster unattributed)APT38 2
23.254.253.75 APT38Contagious InterviewKimsuky 3
23.26.237.117 Lazarus GroupContagious Interview 1
23.26.237.237 Lazarus GroupContagious Interview 1
23.27.12.214 Lazarus GroupContagious Interview 1
23.27.120.142 PolinRiderLazarus GroupContagious Interview 5
23.27.124.228 Lazarus Group 1
23.27.124.91 Lazarus GroupContagious Interview 1
23.27.13.135 EtherHiding / UNC5342NullReceiverContagious InterviewDPRK (cluster unattributed)PolinRider 8
23.27.13.242 Contagious Interview 1
23.27.13.43 PolinRiderContagious Interview 4
23.27.13.72 EtherHiding / UNC5342NullReceiverContagious InterviewPolinRider 4
23.27.140.135 Lazarus Group 1
23.27.140.228 Lazarus Group 1
23.27.140.49 KimsukyDPRK (cluster unattributed)Lazarus Group 3
23.27.163.245 Lazarus GroupContagious Interview 1
23.27.168.222 Lazarus GroupContagious Interview 1
23.27.169.4 Lazarus GroupContagious Interview 1
23.27.169.64 Lazarus GroupContagious Interview 1
23.27.177.183 KimsukyDPRK (cluster unattributed)Lazarus Group 1
23.27.20.143 EtherHiding / UNC5342Contagious InterviewLazarus GroupNullReceiver 8
23.27.20.187 NullReceiverPolinRider 2
23.27.201.30 Lazarus GroupContagious Interview 1
23.27.201.57 Lazarus GroupContagious Interview 1
23.27.202.143 Contagious Interview 1
23.27.202.27 Contagious InterviewPolinRiderLazarus Group 13
23.27.24.227 Lazarus GroupContagious Interview 1
23.27.24.90 Lazarus GroupContagious Interview 1
23.27.240.237 Lazarus GroupContagious Interview 1
23.27.240.252 Lazarus GroupContagious Interview 1
23.27.244.39 Lazarus GroupContagious Interview 1
23.27.48.113 Lazarus GroupContagious Interview 1
23.27.48.179 Lazarus GroupContagious Interview 1
23.27.48.4 Lazarus GroupContagious Interview 1
23.27.48.77 Lazarus GroupContagious Interview 1
23.29.115.171 Lazarus Group 1
23.75.68.149 Lazarus GroupKimsukyAPT38 1
23.81.125.10 IT Worker Fraud 1
23.81.143.15 IT Worker Fraud 1
23.81.143.248 IT Worker Fraud 1
23.81.143.250 IT Worker Fraud 1
23.81.143.254 IT Worker Fraud 1
23.81.143.66 IT Worker Fraud 1
23.81.246.131 Lazarus Group 1
23.81.246.179 Lazarus GroupDPRK (cluster unattributed) 2
23.82.19.209 Contagious Interview 1
23.82.46.51 IT Worker Fraud 1
23.82.46.52 IT Worker Fraud 1
23.83.129.1 APT38IT Worker Fraud 2
23.83.129.43 IT Worker Fraud 1
23.83.129.44 IT Worker Fraud 1
23.83.129.46 IT Worker Fraud 1
23.83.133.196 APT38 1
23.88.122.128 Contagious Interview 1
23.94.100.50 IT Worker Fraud 1
23.94.149.131 IT Worker Fraud 1
23.94.233.2 IT Worker Fraud 1
23.95.122.25 Contagious Interview 1
23.95.137.162 IT Worker Fraud 1
23.95.182.5 Lazarus Group 1
23.95.213.210 Kimsuky 1
23.95.238.122 Contagious Interview 1
24.106.221.230 IT Worker Fraud 1
24.116.202.31 IT Worker Fraud 1
24.123.196.28 IT Worker Fraud 1
24.172.34.114 IT Worker Fraud 1
24.203.247.55 IT Worker Fraud 1
24.249.199.12 IT Worker Fraud 1
24.249.199.4 IT Worker Fraud 1
24.37.125.246 IT Worker Fraud 1
24.37.138.6 IT Worker Fraud 1
24.50.93.16 IT Worker Fraud 1
24.51.249.27 IT Worker Fraud 1
26.165.218.44 Lazarus Group 2
26.255.255.255 Lazarus Group 1
27.102.101.26 Kimsuky 1
27.102.102.70 Kimsuky 2
27.102.106.122 KimsukyKonni 1
27.102.107.224 Andariel 2
27.102.107.63 Kimsuky 1
27.102.112.58 Kimsuky 3
27.102.113.106 Kimsuky 2
27.102.113.107 Kimsuky 1
27.102.113.170 Kimsuky 1
27.102.113.20 Kimsuky 1
27.102.113.209 Kimsuky 1
Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. Compromised packages and repositories name victims. See the sourcing methodology.