144.172.104.113

144.172.104.113 is an IP address that 2 published sources report in connection with Contagious Interview activity, which public reporting attributes to North Korea (DPRK). It is cited here from Recorded Future and JPCERT/CC. The earliest of those reports is dated 2026-09-12 and the most recent 2026-11-09.

ip address Contagious Interview MATCHED IN SOURCE

First seen 2026-09-12 · last seen 2026-11-09

Network

Kindproxy or VPN
NetworkRouterHosting LLC (FranTech Solutions)
Announced byAS14956 RouterHosting LLC
CountryUnited States
Flagshosting range, known proxy or VPN

Looked up 2026-09-21 at ip-api.com. This range is classed as a proxy or VPN; it does not show who used it.

Sources

  • …3.7.200 67.203.7.205 88.218.0.78 107.189.24.80 144.172.95.226 144.172.100.124 144.172.100.142 144.172.102.21 144.172.102.148 144.172.103.97 144.172.104.113 144.172.105.189 144.172.105.235 144.172.106.7 144.172.106.133 144.172.109.98 144.172.109.155 144.172.112.106 146.70.253.107 147.124.197.138…
    PurpleBravo’s Targeting of the IT Software Supply Chain — Recorded Future · under “Appendix B: C2 Servers” · published 2026-01-21 · pulled 2026-09-12
  • …138.124.184.171 138.201.199.46 144.172.100.124 144.172.100.142 144.172.101.45 144.172.102.148 144.172.102.21 144.172.103.97 144.172.104.10 144.172.104.113 144.172.105.189 144.172.105.235 144.172.106.7 144.172.109.98 144.172.112.106 144.172.122.143 144.172.74.108 144.172.74.48 144.172.86.27 144…
    Contagious Interview IoCs — JPCERT/CC · published 2025-08-25 · pulled 2026-09-18

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: PurpleBravo’s Targeting of the IT Software Supply Chain

Recorded Future lists 216 other indicators in this source. 7 are shown, chosen across types.

All 217 indicators from this source

Cited by the same report: Contagious Interview IoCs

JPCERT/CC lists 539 other indicators in this source. 5 are shown, chosen across types.

All 540 indicators from this source

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.