IP addresses

11,045 IP addresses reported in published sources on North Korean (DPRK) cyber operations, ordered by value, 200 to a page. This is page 49 of 56, from 67.43.236.20 to 76.8.104.181. Each value links to its own page, which carries every source that reported it and the text around it. Other types are listed in the browse directory.

ValueCampaignFiled underSources
67.43.236.20 IT Worker FraudContagious Interview 1
67.43.239.146 Lazarus Group 2
67.43.48.10 Contagious Interview 1
67.43.49.10 Contagious Interview 2
67.43.54.10 Contagious Interview 1
67.43.59.10 Contagious Interview 1
67.55.186.1 IT Worker Fraud 1
67.55.186.177 IT Worker Fraud 1
67.65.229.53 APT38 1
67.73.245.189 IT Worker Fraud 1
67.82.9.140 IT Worker Fraud 1
68.106.116.250 IT Worker Fraud 1
68.168.123.86 Lazarus Group 3
68.183.130.112 IT Worker Fraud 1
68.183.78.131 Lazarus Group 1
68.183.98.123 IT Worker Fraud 1
68.185.57.66 IT Worker Fraud 1
68.188.59.198 IT Worker Fraud 1
68.188.63.149 IT Worker Fraud 1
68.197.75.194 IT Worker Fraud 1
68.232.175.188 APT38 1
68.65.121.187 APT38 1
68.65.121.244 APT38 1
68.65.121.248 APT38 1
68.65.121.250 APT38 1
68.65.122.160 Lazarus Group 1
68.65.122.191 APT38 1
68.65.122.242 APT38 1
68.65.123.114 APT38 1
68.65.123.117 APT38 1
68.65.123.163 APT38 1
68.65.123.168 APT38 1
68.65.123.178 APT38 1
68.65.123.193 APT38 1
68.65.123.50 APT38 1
68.65.123.75 APT38 1
69.10.50.165 Kimsuky 1
69.10.53.86 Lazarus GroupKimsukyAPT37KonniContagious Interview 3
69.160.192.139 IT Worker Fraud 1
69.163.160.36 IT Worker Fraud 1
69.163.180.70 Kimsuky 1
69.163.33.50 IT Worker Fraud 1
69.163.38.130 IT Worker Fraud 1
69.163.38.131 IT Worker Fraud 1
69.163.38.147 IT Worker Fraud 1
69.163.38.148 IT Worker Fraud 1
69.163.38.150 IT Worker Fraud 1
69.164.196.211 Contagious Interview 1
69.195.124.206 DPRK (cluster unattributed) 1
69.197.143.12 Konni 1
69.197.164.117 Contagious Interview 1
69.197.164.135 Contagious Interview 1
69.197.184.114 IT Worker Fraud 1
69.197.184.116 IT Worker Fraud 1
69.20.25.160 Contagious Interview 1
69.238.204.74 IT Worker Fraud 1
69.30.210.152 IT Worker FraudDPRK (cluster unattributed) 1
69.30.210.159 IT Worker FraudDPRK (cluster unattributed) 1
69.31.84.223 Contagious Interview 1
69.42.222.23 Contagious Interview 1
69.50.165.18 Contagious Interview 1
69.50.170.100 Contagious Interview 1
69.50.175.178 Contagious Interview 1
69.50.175.181 Contagious Interview 1
69.57.162.186 APT38 1
69.57.162.193 APT38 1
69.61.200.104 IT Worker Fraud 1
69.64.54.215 APT38 1
69.70.245.146 IT Worker Fraud 1
69.78.101.142 IT Worker Fraud 1
69.78.101.143 IT Worker Fraud 1
69.89.113.105 IT Worker Fraud 1
70.127.78.92 IT Worker Fraud 1
70.166.167.36 IT Worker Fraud 1
70.166.167.38 IT Worker Fraud 1
70.166.167.55 IT Worker Fraud 1
70.184.87.103 APT38 1
70.185.68.133 IT Worker Fraud 1
70.185.68.155 IT Worker Fraud 1
70.224.36.194 Lazarus Group 2
70.32.24.131 Lazarus Group 1
70.32.3.14 IT Worker Fraud 1
70.32.3.15 Contagious InterviewIT Worker FraudAPT38 6
70.32.3.3 IT Worker Fraud 1
70.32.3.4 IT Worker Fraud 1
70.34.242.255 APT38 1
70.34.245.118 Lazarus GroupAPT38 3
70.36.97.236 Kimsuky 1
70.36.99.82 APT38Contagious InterviewIT Worker Fraud 3
70.36.99.84 IT Worker Fraud 1
70.36.99.85 IT Worker Fraud 1
70.38.40.185 Contagious Interview 1
70.39.103.3 IT Worker FraudContagious InterviewLazarus GroupAPT38 5
70.39.103.4 IT Worker Fraud 1
70.39.70.194 Contagious InterviewAPT38IT Worker Fraud 5
70.39.70.196 Lazarus GroupContagious InterviewIT Worker Fraud 2
70.39.70.197 Lazarus GroupContagious InterviewIT Worker Fraud 2
70.39.70.198 IT Worker Fraud 1
70.42.52.80 Lazarus Group 1
70.60.132.130 IT Worker Fraud 1
70.60.96.154 IT Worker Fraud 1
70.82.75.118 IT Worker Fraud 1
70.83.106.82 IT Worker Fraud 1
70.95.141.52 IT Worker Fraud 1
71.112.196.114 IT Worker Fraud 1
71.112.196.115 IT Worker Fraud 1
71.167.56.3 IT Worker Fraud 1
71.172.141.30 IT Worker Fraud 1
71.69.154.60 IT Worker Fraud 1
72.10.160.171 IT Worker FraudContagious Interview 1
72.10.160.92 IT Worker FraudContagious Interview 1
72.10.164.178 IT Worker FraudContagious Interview 1
72.14.155.62 Kimsuky 3
72.193.13.228 IT Worker Fraud 1
72.195.114.169 IT Worker Fraud 1
72.195.114.184 IT Worker Fraud 1
72.195.34.35 IT Worker Fraud 1
72.195.34.41 IT Worker Fraud 1
72.195.34.42 IT Worker Fraud 1
72.195.34.58 IT Worker Fraud 1
72.195.34.59 IT Worker Fraud 1
72.195.34.60 IT Worker Fraud 1
72.206.181.103 IT Worker Fraud 1
72.206.181.105 IT Worker Fraud 1
72.206.181.123 IT Worker Fraud 1
72.206.181.97 IT Worker Fraud 1
72.21.91.29 Lazarus GroupKimsukyAPT38 1
72.210.208.101 IT Worker Fraud 1
72.210.252.134 IT Worker Fraud 1
72.210.252.137 IT Worker Fraud 1
72.217.216.239 IT Worker Fraud 1
72.221.164.34 IT Worker Fraud 1
72.221.172.203 IT Worker Fraud 1
72.221.196.145 IT Worker Fraud 1
72.221.196.157 IT Worker Fraud 1
72.221.232.155 IT Worker Fraud 1
72.223.168.67 IT Worker Fraud 1
72.223.168.73 IT Worker Fraud 1
72.223.168.86 IT Worker Fraud 1
72.250.153.47 IT Worker Fraud 1
72.252.4.146 IT Worker Fraud 1
72.255.246.193 IT Worker Fraud 1
72.49.49.11 IT Worker Fraud 1
72.5.42.93 Contagious Interview 1
72.68.158.37 Kimsuky 1
73.245.147.162 APT38 1
73.253.224.112 IT Worker Fraud 1
74.0.48.37 Contagious Interview headhunter705 1
74.119.194.129 Contagious Interview 1
74.119.194.205 Contagious Interview 1
74.119.194.244 Contagious Interview 1
74.120.175.104 IT Worker Fraud 1
74.120.8.15 APT37 1
74.121.190.121 Lazarus GroupDPRK (cluster unattributed) 1
74.125.136.101 Lazarus GroupAPT38 1
74.125.143.94 Kimsuky 1
74.143.245.221 IT Worker Fraud 1
74.201.177.66 IT Worker Fraud 1
74.201.177.68 IT Worker Fraud 1
74.201.177.69 IT Worker Fraud 1
74.205.128.200 IT Worker Fraud 1
74.208.128.22 IT Worker Fraud 1
74.208.178.144 IT Worker Fraud 1
74.208.247.127 Kimsuky 1
74.222.14.201 IT Worker Fraud 1
74.222.14.202 IT Worker Fraud 1
74.222.14.203 IT Worker Fraud 1
74.222.14.74 Contagious InterviewIT Worker Fraud 2
74.222.14.83 APT38Contagious InterviewIT Worker Fraud 3
74.222.14.85 IT Worker Fraud 1
74.222.20.101 IT Worker Fraud 1
74.222.20.113 IT Worker Fraud 1
74.222.20.18 IT Worker Fraud 2
74.222.20.21 IT Worker Fraud 1
74.222.20.26 IT Worker Fraud 1
74.222.20.29 IT Worker Fraud 1
74.222.20.65 IT Worker Fraud 1
74.255.219.229 IT Worker FraudContagious Interview 1
74.50.94.175 KimsukyKonni 4
74.50.94.47 Konni 1
74.56.229.191 IT Worker Fraud 1
74.63.233.50 IT Worker FraudContagious Interview 3
74.63.233.52 IT Worker Fraud 1
74.63.233.53 IT Worker Fraud 1
74.63.233.54 IT Worker Fraud 1
74.82.216.27 Contagious Interview 1
74.94.219.213 IT Worker Fraud 1
75.102.23.3 Lazarus Group 1
75.119.136.207 APT37Kimsuky 4
75.119.143.189 DPRK (cluster unattributed) 1
75.127.1.211 Contagious Interview 1
75.127.12.162 IT Worker Fraud 1
75.151.255.255 DPRK (cluster unattributed) 1
75.151.32.182 DPRK (cluster unattributed) 1
75.151.47.255 DPRK (cluster unattributed) 1
75.162.28.76 IT Worker Fraud 1
75.188.225.212 IT Worker Fraud 1
75.99.63.27 Lazarus Group 1
76.73.68.175 Contagious Interview 1
76.8.104.181 IT Worker Fraud 1
Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. Compromised packages and repositories name victims. See the sourcing methodology.