IP addresses

11,045 IP addresses reported in published sources on North Korean (DPRK) cyber operations, ordered by value, 200 to a page. This is page 9 of 56, from 104.237.253.196 to 108.61.186.55. Each value links to its own page, which carries every source that reported it and the text around it. Other types are listed in the browse directory.

ValueCampaignFiled underSources
104.237.253.196 IT Worker Fraud 1
104.238.137.217 IT Worker Fraud 1
104.238.144.26 IT Worker Fraud 1
104.238.97.215 IT Worker Fraud 1
104.243.33.74 IT Worker Fraud 2
104.243.33.75 IT Worker Fraud 1
104.243.33.77 IT Worker Fraud 1
104.243.41.186 KimsukyKonni 1
104.244.210.18 IT Worker Fraud 1
104.244.210.20 IT Worker Fraud 1
104.244.210.21 IT Worker Fraud 1
104.244.42.65 APT37Kimsuky 1
104.247.162.67 Lazarus Group 1
104.248.249.47 IT Worker Fraud 1
104.250.131.79 Contagious InterviewIT Worker Fraud 2
104.250.131.88 IT Worker Fraud 1
104.250.148.58 IT Worker FraudContagious Interview 5
104.250.148.60 IT Worker Fraud 1
104.250.148.61 IT Worker Fraud 1
104.250.150.35 IT Worker Fraud 1
104.253.160.77 IT Worker FraudContagious InterviewLazarus Group 2
104.253.201.228 IT Worker FraudContagious InterviewLazarus Group 2
104.253.43.239 IT Worker FraudContagious InterviewLazarus Group 2
104.253.7.10 IT Worker Fraud 1
104.253.7.202 IT Worker FraudContagious InterviewLazarus Group 3
104.253.7.4 IT Worker Fraud 1
104.253.7.5 IT Worker Fraud 1
104.253.75.110 IT Worker FraudContagious InterviewLazarus Group 2
104.255.170.63 IT Worker Fraud 1
104.255.170.67 IT Worker Fraud 1
104.255.170.70 IT Worker Fraud 1
104.255.170.89 IT Worker Fraud 1
104.255.172.52 APT38Contagious InterviewLazarus Group 1
104.255.172.56 APT38Contagious InterviewLazarus Group 1
104.255.173.70 IT Worker Fraud 1
104.255.173.87 IT Worker Fraud 1
104.31.74.89 KimsukyLazarus Group 1
104.36.229.179 KimsukyAndariel 2
104.37.168.41 Contagious Interview 1
104.43.230.151 IT Worker Fraud 1
104.45.128.122 IT Worker Fraud 1
105.112.135.41 IT Worker Fraud 1
105.174.30.162 IT Worker Fraud 1
105.174.40.238 IT Worker Fraud 1
105.213.100.173 IT Worker Fraud 1
105.213.87.142 IT Worker Fraud 1
105.213.97.120 IT Worker Fraud 1
105.234.155.221 IT Worker Fraud 1
105.234.156.53 IT Worker Fraud 1
105.235.195.30 IT Worker Fraud 1
105.235.201.234 IT Worker Fraud 1
105.235.222.2 IT Worker Fraud 1
105.235.235.36 IT Worker Fraud 1
105.29.64.195 IT Worker Fraud 1
105.29.75.113 IT Worker Fraud 1
106.0.61.66 IT Worker Fraud 1
106.104.148.208 IT Worker Fraud 1
106.14.166.53 Kimsuky 1
106.14.198.6 IT Worker Fraud 1
106.14.248.171 IT Worker Fraud 1
106.14.249.212 IT Worker Fraud 1
106.243.157.158 Contagious InterviewKimsuky 2
106.249.25.142 Kimsuky 1
106.249.253.146 Contagious InterviewKimsuky 1
106.250.168.50 Kimsuky 1
106.51.72.222 IT Worker Fraud 1
106.53.242.88 IT Worker Fraud 1
106.58.218.185 IT Worker Fraud 1
107.1.80.135 IT Worker Fraud 1
107.148.71.88 KimsukyAndariel 2
107.150.17.3 IT Worker Fraud 1
107.150.17.8 IT Worker Fraud 1
107.150.38.250 IT Worker FraudContagious Interview 4
107.150.38.252 IT Worker Fraud 1
107.150.38.253 IT Worker Fraud 1
107.150.47.16 IT Worker FraudDPRK (cluster unattributed) 1
107.150.47.23 IT Worker FraudDPRK (cluster unattributed) 1
107.152.32.62 IT Worker Fraud 1
107.154.160.132 APT38Lazarus Group 1
107.155.105.218 IT Worker Fraud 1
107.155.105.219 IT Worker Fraud 1
107.155.105.221 IT Worker Fraud 1
107.155.105.222 IT Worker Fraud 1
107.158.194.90 IT Worker Fraud 1
107.158.194.92 IT Worker Fraud 1
107.167.165.11 Contagious Interview 1
107.167.244.38 IT Worker Fraud 1
107.167.244.42 Contagious InterviewIT Worker Fraud 2
107.167.245.114 IT Worker Fraud 1
107.167.245.115 IT Worker Fraud 1
107.167.245.34 IT Worker Fraud 1
107.167.245.37 IT Worker Fraud 1
107.167.25.130 Contagious InterviewIT Worker Fraud 2
107.172.195.20 Lazarus Group 1
107.172.197.175 Lazarus Group 2
107.172.242.125 IT Worker Fraud 1
107.172.242.4 APT38IT Worker Fraud 2
107.172.242.5 IT Worker Fraud 1
107.172.242.54 IT Worker Fraud 1
107.172.242.6 IT Worker Fraud 1
107.172.249.140 Kimsuky 1
107.172.31.179 Contagious Interview 1
107.172.97.67 Contagious InterviewIT Worker Fraud 2
107.174.131.131 IT Worker Fraud 1
107.174.131.133 IT Worker Fraud 1
107.174.131.134 IT Worker Fraud 1
107.174.131.204 APT38IT Worker Fraud 2
107.174.20.110 IT Worker Fraud 1
107.175.130.191 Kimsuky 1
107.175.3.10 Contagious Interview 1
107.178.11.226 IT Worker FraudContagious Interview 1
107.178.6.30 IT Worker Fraud 1
107.178.9.186 IT Worker Fraud 1
107.180.119.82 APT38 1
107.182.231.193 Lazarus GroupContagious Interview 1
107.182.231.196 Lazarus GroupContagious Interview 1
107.187.66.103 Lazarus Group 1
107.189.11.54 Contagious Interview 1
107.189.16.122 Contagious Interview 1
107.189.16.154 Contagious Interview 2
107.189.16.176 Contagious Interview 1
107.189.16.65 DPRK (cluster unattributed) 1
107.189.20.115 Contagious Interview 1
107.189.20.152 Contagious Interview 1
107.189.22.20 Contagious Interview 1
107.189.24.80 Contagious Interview 3
107.189.25.109 Contagious Interview 2
107.189.6.214 Contagious Interview 1
107.189.8.240 IT Worker FraudContagious Interview 1
107.21.38.230 IT Worker Fraud 1
107.22.45.20 IT Worker Fraud 1
107.6.12.135 Lazarus Group 3
108.165.100.36 Contagious Interview 1
108.165.147.181 Lazarus GroupContagious Interview 1
108.170.31.81 Lazarus Group 1
108.170.33.178 IT Worker Fraud 1
108.170.33.179 IT Worker Fraud 1
108.170.33.180 IT Worker Fraud 1
108.170.33.182 IT Worker Fraud 1
108.170.53.158 IT Worker Fraud 1
108.170.55.202 APT38Lazarus Group 1
108.174.194.10 Lazarus Group 1
108.174.194.196 Contagious InterviewAPT38 2
108.174.194.44 Contagious InterviewAPT38 2
108.174.195.134 Lazarus Group 1
108.174.198.11 APT38 1
108.177.119.102 Kimsuky 1
108.177.119.95 Kimsuky 1
108.177.126.132 Kimsuky 1
108.177.126.139 Kimsuky 1
108.177.126.94 Kimsuky 1
108.177.126.95 Kimsuky 1
108.177.127.84 Kimsuky 1
108.177.127.95 Kimsuky 1
108.177.235.82 APT38 1
108.177.96.138 Kimsuky 1
108.179.192.85 Contagious Interview 1
108.179.214.134 Kimsuky 1
108.181.121.130 IT Worker Fraud 1
108.181.121.132 IT Worker Fraud 1
108.181.15.109 IT Worker Fraud 1
108.181.15.110 IT Worker Fraud 1
108.181.15.172 IT Worker Fraud 1
108.181.15.173 IT Worker Fraud 1
108.181.17.44 IT Worker Fraud 1
108.181.185.2 Contagious Interview 1
108.181.237.237 IT Worker Fraud 1
108.181.255.5 IT Worker Fraud 1
108.181.255.6 IT Worker Fraud 1
108.181.255.9 IT Worker Fraud 1
108.181.40.12 IT Worker Fraud 1
108.181.40.13 IT Worker Fraud 1
108.181.41.227 IT Worker Fraud 1
108.181.41.229 IT Worker Fraud 1
108.181.41.230 IT Worker Fraud 1
108.181.41.234 Contagious InterviewIT Worker Fraud 2
108.181.46.194 IT Worker Fraud 1
108.181.46.196 IT Worker Fraud 1
108.181.46.197 IT Worker Fraud 1
108.181.46.198 IT Worker Fraud 1
108.181.50.52 IT Worker Fraud 1
108.181.50.53 IT Worker Fraud 1
108.181.50.54 IT Worker Fraud 1
108.181.50.58 APT37DPRK (cluster unattributed)IT Worker Fraud 4
108.181.52.164 IT Worker Fraud 1
108.181.52.165 IT Worker Fraud 1
108.181.52.169 APT37IT Worker Fraud 2
108.181.52.229 APT37 1
108.181.52.231 APT37 1
108.181.52.234 APT37 1
108.181.52.235 APT37 1
108.181.52.236 APT37 1
108.181.57.127 Lazarus GroupContagious Interview 1
108.181.66.106 IT Worker Fraud 1
108.181.66.110 IT Worker Fraud 1
108.181.66.62 IT Worker Fraud 1
108.181.92.71 Lazarus Group 1
108.222.149.173 Lazarus Group 1
108.26.234.212 IT Worker Fraud 1
108.61.186.55 Lazarus Group 2
Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. Compromised packages and repositories name victims. See the sourcing methodology.