`112.74.194.45`

112.74.194.45 is an IP address that 2 published sources report in connection with Contagious Interview and Kimsuky activity, which public reporting attributes to North Korea (DPRK). It is cited here from Genians. The reports are dated 2025-07-01.

ip address Contagious Interview Kimsuky MATCHED IN SOURCE

First seen 2025-07-01 · last seen 2025-07-01

Network

Kind	data centre
Network	Addresses CNNIC (Aliyun Computing Co., LTD)
Announced by	AS37963 Hangzhou Alibaba Advertising Co.,Ltd.
Country	China
Flags	hosting range

Looked up 2026-09-21 at ip-api.com. A hosting range is not evidence on its own.

Sources

…C2 서버 디렉터리 리스팅 화면 ○ 피해자일 가능성이 높은 한국 소재의 IP 주소(비식별화 모자이크 처리) 외에 다수의 국제 주소가 식별됐습니다. [그림 3-11] IP 주소 조회 결과 ○ 이 가운데 중국 소재의 '112.74.194.45' (CN) IP 로그에서 위협 행위자의 키로그(Keylog) 기록이 존재했던 것으로 밝혀졌습니다.…
'클릭픽스' 전술을 활용한 김수키 그룹 위협 사례 분석 — Genians · under “3-3. 웹 사이트 기반 'ClickFix' 전술 도입 사례” · published 2025-07-01 · pulled 2026-09-12
…Lookup Results ○ Among them, a keylogging record linked to the threat actor was found in the logs of the China-based IP address 112.74.194.45 (CN).…
Analysis of the threat case of kimsuky group using 'ClickFix' tactic — Genians · under “3-3. Case of the “ClickFix” Tactic Delivered via a Website” · published 2025-07-01 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: '클릭픽스' 전술을 활용한 김수키 그룹 위협 사례 분석

Genians lists 32 other indicators in this source. 7 are shown, chosen across types.

All 33 indicators from this source

Cited by the same report: Analysis of the threat case of kimsuky group using 'ClickFix' tactic

Genians lists 32 other indicators in this source. 5 are shown, chosen across types.

All 33 indicators from this source