23.137.105.75
23.137.105.75 is an IP address
that one published source reports
in connection with unclustered DPRK and Contagious Interview activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from Proofpoint.
The report is dated 2026-06-05.
ip address DPRK (cluster unattributed)Contagious Interview CURATED
Network
| Kind | data centre |
|---|---|
| Network | Advin Services LLC |
| Announced by | AS22295 Advin Services LLC |
| Country | United States |
| Flags | hosting range |
Sources
-
Command-and-control server in Proofpoint's UNK_DeadDrop campaign of April to May 2026, reached over a persistent WebSocket connection on port 5173 by the loader the lure repositories installed.
Don't Fear the Repo: UNK_DeadDrop Phishing Campaign Targets Developers to Steal Cryptocurrency — Proofpoint -
…(Base64-decoded). Once Overlord is running, it immediately establishes a persistent WebSocket connection to the C&C server at 23.137.105.75:5173 . Figure 12.…
Don't Fear the Repo: UNK_DeadDrop Phishing Campaign Targets Developers to Steal Cryptocurrency | Proofpoint US — Proofpoint
Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.