`103.73.189.76`

103.73.189.76 is an IP address that one published source reports in connection with Andariel activity, which public reporting attributes to North Korea (DPRK). It is cited here from DCSO. The report is dated 2023-05-16.

ip address Andariel MATCHED IN SOURCE

First seen 2023-05-16 · last seen 2023-05-16

Network

Kind	fixed line
Network	Evoke Digital Solutions
Announced by	AS135752 Evoke Digital Solutions
Country	India

Looked up 2026-09-21 at ip-api.com. A subscriber line, as a person working from home ordinarily has.

Source

…IKF’s nameserver setup struck us as odd, with the primary nameserver serving niv.co.in and others, ns.iknowledgefactory.com, resolving to 103.73.189.76 — allocated to Evoke Digital Solutions in India — while having its PTR DNS record set to email.lkf.in.…
Andariel’s “Jupiter” malware and the case of the curious C2 — DCSO · under “Investigating the Command & Control” · published 2023-05-16 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: Andariel’s “Jupiter” malware and the case of the curious C2

DCSO lists 4 other indicators in this source.