45.89.53.59
45.89.53.59 is an IP address
that 2 published sources report
in connection with Lazarus Group and Contagious Interview activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from Threat Book and JPCERT/CC.
The earliest of those reports is dated 2026-09-12 and the most recent 2026-11-09.
ip address Lazarus GroupContagious Interview MATCHED IN SOURCE
Network
| Kind | data centre |
|---|---|
| Network | PQ HOSTING S.R.L |
| Country | Ukraine |
| Flags | hosting range |
Sources
-
…4.244.242 45.140.147.208 45.61.129.255 45.61.130.0 45.61.131.218 45.61.158.54 45.61.158.7 45.61.160.14 45.61.169.187 45.61.169.99 45.89.53.59 46.4.224.205 67.203.0.152 67.203.123.171 67.203.6.171 67.203.7.163 67.203.7.171 67.203.7.245 77.37.37.81 91.92.120.135 95.164.17.…
Lazarus' Espionage-related Cryptocurrency Activities Remain Active, With A Significant Amount of Assets Still in Circulation — Threat Book -
….61.128.61 45.61.133.110 45.61.150.31 45.61.150.67 45.61.151.71 45.61.158.54 45.61.158.7 45.61.169.99 45.82.255.2 45.83.140.231 45.89.53.54 45.89.53.59 46.4.224.205 5.253.43.122 5.89.53.54 65.140.86.227 66.235.168.232 66.235.168.238 67.203.123.171 67.203.7.163 67.203.7.171 67.203.7.200 67.2…
Contagious Interview IoCs — JPCERT/CC
Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.
Related indicators
Cited by the same report: Lazarus' Espionage-related Cryptocurrency Activities Remain Active, With A Significant Amount of Assets Still in Circulation
All 41 indicators from this source