89.34.111.113

89.34.111.113 is an IP address that one published source reports in connection with unclustered DPRK activity, which public reporting attributes to North Korea (DPRK). It is cited here from Objective-see. The report is dated 2020-01-01.

ip address DPRK (cluster unattributed) MATCHED IN SOURCE

First seen 2020-01-01 · last seen 2020-01-01

Network

Kinddata centre
NetworkInternet Numbers Authority
CountryUnited States
Flagshosting range

Looked up 2026-09-21 at ip-api.com. A hosting range is not evidence on its own.

Source

  • …the same attack: 5/ Hashes (sha1): b639bca429778d24bda4f4a40c1bbc64de46fa79 23017a55b3d25a2597b7148214fd8fb2372591a5 C2 IPs: 89.34.111.113:443 185.49.69.210:80 — Philip Martin (@SecurityGuyPhil) June 19, 2019 This (Firefox) 0day, has now been patched as CVE-2019-11707,…
    The Mac Malware of 2019 — Objective-see · under “👾 OSX.Netwire” · published 2020-01-01 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: The Mac Malware of 2019

Objective-see lists 5 other indicators in this source.

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.