193.168.141.107

193.168.141.107 is an IP address that one published source reports in connection with APT38 activity, which public reporting attributes to North Korea (DPRK). It is cited here from Objective-See. The report is dated 2024-01-01.

ip address APT38 MATCHED IN SOURCE

First seen 2024-01-01 · last seen 2024-01-01

Network

Kindfixed line
NetworkZergrush SRL
Announced byAS39622 ZERGRUSH SRL
CountryRomania

Looked up 2026-09-21 at ip-api.com. A subscriber line, as a person working from home ordinarily has.

Source

  • …of strings related the capabilities of PureLand : stealing! % strings - PureLand/Installer.app/Contents/MacOS/Installer http://193.168.141.107:8888/ /Library/Application Support/Google/Chrome/Default/Local Extension Settings/nkbihfbeogaeaoehlefnkodbefgpgknn/ /Library/Application…
    The Mac Malware of 2023 — Objective-See · under “👾 PureLand” · published 2024-01-01 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: The Mac Malware of 2023

Objective-See lists 1 other indicator in this source.

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.