`144.172.97.7`

144.172.97.7 is an IP address that 3 published sources report in connection with Lazarus Group and Contagious Interview activity, which public reporting attributes to North Korea (DPRK). It is cited here from Logpresso, NVISO and JPCERT/CC. The earliest of those reports is dated 2025-03-17 and the most recent 2026-11-09.

ip address Lazarus Group Contagious Interview MATCHED IN SOURCE

First seen 2025-03-17 · last seen 2026-11-09

Network

Kind	proxy or VPN
Network	RouterHosting LLC (FranTech Solutions)
Announced by	AS14956 RouterHosting LLC
Country	United States
Flags	hosting range, known proxy or VPN

Looked up 2026-09-21 at ip-api.com. This range is classed as a proxy or VPN; it does not show who used it.

Sources

…IP 주소 1 172.86.84.38 2 45.61.150.31 3 94.131.97.195 4 144.172.97.7 5 185.235.241.208 6 45.61.128.110 7 144.172.86.27 8 185.153.182.241 9 45.137.213.30 10 86.104.74.51 11 45.128.52.14…
[위협 분석] 북한 라자루스(Lazarus) 그룹이 배포한 악성 npm 패키지 감염 사례 | 로그프레소 — Logpresso · under “IP” · published 2025-03-17 · pulled 2026-09-12
…Markdown BeaverTail/InvisibleFerret Command & Control servers 107.189.25.109 144.172.100.142 144.172.103.97 144.172.95.226 144.172.97.7 146.70.253.10 146.70.253.107 147.124.197.138 147.124.197.149 147.124.212.146 147.124.212.89 147.124.214.129 147.124.214.131…
Contagious Interview Actors Now Utilize JSON Storage Services for Malware Delivery — NVISO · under “Indicators of Compromise (IOCs)” · published 2025-11-13 · pulled 2026-09-12
….93.32.117 103.35.188.237 23.227.203.204 217.148.142.113 0.10.51.212 45.61.151.174 23.227.203.192 23.227.202.51 23.227.202.52 172.86.116.90 144.172.97.7 95.179.135.133 37.60.234.203 107.172.31.179 188.255.239.34 197.182.186.212 43.136.234.140 192.210.215.11 46.28.70.102 156.245.19.127 155.15…
Contagious Interview IoCs — JPCERT/CC · published 2025-08-25 · pulled 2026-09-18

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: [위협 분석] 북한 라자루스(Lazarus) 그룹이 배포한 악성 npm 패키지 감염 사례 | 로그프레소

Logpresso lists 10 other indicators in this source. 5 are shown, chosen across types.

All 11 indicators from this source

Cited by the same report: Contagious Interview Actors Now Utilize JSON Storage Services for Malware Delivery

NVISO lists 67 other indicators in this source. 4 are shown, chosen across types.

All 68 indicators from this source

Cited by the same report: Contagious Interview IoCs

JPCERT/CC lists 539 other indicators in this source. 3 are shown, chosen across types.

All 540 indicators from this source