← Remote Workers

144.172.106.7

144.172.106.7 is an IP address that 3 published sources report in connection with Contagious Interview activity, which public reporting attributes to North Korea (DPRK). It is cited here from Veracode, Recorded Future and JPCERT/CC. The earliest of those reports is dated 2025-07-31 and the most recent 2026-11-09.

ip address Contagious Interview MATCHED IN SOURCE

First seen 2025-07-31 · last seen 2026-11-09

Network

Looked up 2026-09-21 at ip-api.com. A hosting range is not evidence on its own.

Sources

• Nearby text:

  …C2 axios request Indicators of Compromise (IOCs) http://144.172.105.235:1224 – C2 #1 http://45.61.128.61:1224 – C2 #2 http://144.172.106.7:1224 – C2 #3 http://144.172.109.98:1224 – C2 #4 http://144.172.104.10:1224 – C2 #5 http://45.61.165.45:1224 – C2…

  North Korean Crypto Stealing Campaign Rears Its Head Again — Veracode · under “Indicators of Compromise (IOCs)” · published 2025-07-31 · pulled 2026-09-09

• …44.172.95.226 144.172.100.124 144.172.100.142 144.172.102.21 144.172.102.148 144.172.103.97 144.172.104.113 144.172.105.189 144.172.105.235 144.172.106.7 144.172.106.133 144.172.109.98 144.172.109.155 144.172.112.106 146.70.253.107 147.124.197.138 147.124.212.125 147.124.213.19 147.124.213.23…

  PurpleBravo’s Targeting of the IT Software Supply Chain — Recorded Future · under “Appendix B: C2 Servers” · published 2026-01-21 · pulled 2026-09-12

• …144.172.100.142 144.172.101.45 144.172.102.148 144.172.102.21 144.172.103.97 144.172.104.10 144.172.104.113 144.172.105.189 144.172.105.235 144.172.106.7 144.172.109.98 144.172.112.106 144.172.122.143 144.172.74.108 144.172.74.48 144.172.86.27 144.172.95.226 144.172.96.80 147.124.197.149 147.…

  Contagious Interview IoCs — JPCERT/CC · published 2025-08-25 · pulled 2026-09-18

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: North Korean Crypto Stealing Campaign Rears Its Head Again

Veracode lists 8 other indicators in this source. 5 are shown, chosen across types.

• 144.172.109.98 IP address
• 45.61.128.61 IP address
• 45.61.150.67 IP address
• 45.61.165.45 IP address
• https://api.npoint.io/e5a5e32cdf9bfe7d2386 payload URL

All 9 indicators from this source

Cited by the same report: PurpleBravo’s Targeting of the IT Software Supply Chain

Recorded Future lists 216 other indicators in this source. 4 are shown, chosen across types.

• hundredup2023@gmail.com email address
• ricogonzalez1013@gmail.com email address
• techsavvy001013@outlook.com email address
• 144.172.109.155 IP address

All 217 indicators from this source

Cited by the same report: Contagious Interview IoCs

JPCERT/CC lists 539 other indicators in this source. 3 are shown, chosen across types.

• 144.172.122.143 IP address
• 144.172.74.108 IP address
• 144.172.74.48 IP address

All 540 indicators from this source