74.50.94.47

74.50.94.47 is an IP address that one published source reports in connection with Konni activity, which public reporting attributes to North Korea (DPRK). It is cited here from ENKI. The report is dated 2025-03-12.

ip address Konni MATCHED IN SOURCE

First seen 2025-03-12 · last seen 2025-03-12

Network

Kinddata centre
NetworkInterserver, Inc (Host Department NJ, LLC)
Announced byAS19318 Interserver, Inc
CountryUnited States
Flagshosting range

Looked up 2026-09-21 at ip-api.com. A hosting range is not evidence on its own.

Source

  • …| caption - 각 메일에서 확인된 정보 피싱 사이트 도메인인 olsiop.shop 과 acieodls.shop 은 74.50.94.47 ip 주소와 연결된 흔적이 확인되었으며, X-PHP-Script 헤더에 존재하는 74.50.94.175 와 동일한 대역대의 ip 주소입니다.…
    Konni의 최신 AsyncRAT 공격: LNK 파일을 활용한 감염 기법 — ENKI · under “3.4. C&C 서버와 연관된 피싱 메일” · published 2025-03-12 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: Konni의 최신 AsyncRAT 공격: LNK 파일을 활용한 감염 기법

ENKI lists 6 other indicators in this source.

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.