Chollima Hunter

← Remote Workers

38.146.28.177

38.146.28.177 is an IP address that 2 published sources report in connection with Lazarus Group, APT38 and Contagious Interview activity, which public reporting attributes to North Korea (DPRK). It is cited here from Kucoin and Recorded Future. The earliest of those reports is dated 2025-08-28 and the most recent 2026-10-18.

ip address Lazarus GroupAPT38Contagious Interview MATCHED IN SOURCE

First seen 2025-08-28 · last seen 2026-10-18

Network

Kindfixed line
NetworkCogent Communications
Announced byAS174 Cogent Communications, LLC
CountryUnited States

Looked up 2026-09-21 at ip-api.com. A subscriber line, as a person working from home ordinarily has.

Sources

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: Breaking: Lazarus Group (APT38) Targets Crypto Sector with Sophisticated Phishing Campaign| KuCoin

Kucoin lists 11 other indicators in this source. 7 are shown, chosen across types.

All 12 indicators from this source

Cited by the same report: PurpleBravo’s Targeting of the IT Software Supply Chain

Recorded Future lists 216 other indicators in this source. 5 are shown, chosen across types.

All 217 indicators from this source

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.