`103.179.143.219`

103.179.143.219 is an IP address that one published source reports in connection with PolinRider activity, which public reporting attributes to North Korea (DPRK). It is cited here from OxSecurity. The report is dated 2026-11-04.

ip address PolinRider MATCHED IN SOURCE

First seen 2026-11-04 · last seen 2026-11-04

Network

Kind	fixed line
Network	Evoxt Enterprise
Announced by	AS149440 Evoxt Sdn. Bhd.
Country	United Kingdom

Looked up 2026-11-12 at ip-api.com. A subscriber line, as a person working from home ordinarily has.

Source

…and resolves multiple IP addresses which are used as a C2 server. We found the following IP addresses being used by the malware – 103.179.143.219, 166.88.134.75, 23.27.13.72, 95.135.181.151 After downloading the remote payload from the server, the malware executes it using the same…
PolinRider Returns: Hijacked npm Packages Use Ethereum Blockchain to Conceal Malware Infrastructure | OX Security — OxSecurity · under “Threat Analysis” · published 2026-11-04 · pulled 2026-11-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: PolinRider Returns: Hijacked npm Packages Use Ethereum Blockchain to Conceal Malware Infrastructure | OX Security

OxSecurity lists 2 other indicators in this source.