144.172.74.108
144.172.74.108 is an IP address
that 2 published sources report
in connection with Lazarus Group and Contagious Interview activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from Threat Book and JPCERT/CC.
The earliest of those reports is dated 2026-09-12 and the most recent 2026-11-09.
ip address Lazarus GroupContagious Interview MATCHED IN SOURCE
Network
| Kind | data centre |
|---|---|
| Network | RouterHosting LLC |
| Announced by | AS14956 RouterHosting LLC |
| Country | United States |
| Flags | hosting range |
Sources
-
…Control 8 ssh_env Match Host Files Named *.env for Target Reconnaissance Appendix - IOC 135.181.242.24 140.99.223.36 144.172.74.108 144.172.74.48 144.172.79.23 147.124.212.146 147.124.212.89 147.124.213.11 147.124.213.17 147.124.213.29 147.124.214.129 147.124.21…
Lazarus' Espionage-related Cryptocurrency Activities Remain Active, With A Significant Amount of Assets Still in Circulation — Threat Book -
…144.172.103.97 144.172.104.10 144.172.104.113 144.172.105.189 144.172.105.235 144.172.106.7 144.172.109.98 144.172.112.106 144.172.122.143 144.172.74.108 144.172.74.48 144.172.86.27 144.172.95.226 144.172.96.80 147.124.197.149 147.124.212.146 147.124.212.89 147.124.213.11 147.124.213.29 147.1…
Contagious Interview IoCs — JPCERT/CC
Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.
Related indicators
Cited by the same report: Lazarus' Espionage-related Cryptocurrency Activities Remain Active, With A Significant Amount of Assets Still in Circulation
All 41 indicators from this source