`144.124.224.120`

144.124.224.120 is an IP address that one published source reports in connection with EtherHiding activity, which no published source ties to North Korea (DPRK). It is cited here from Chollima Hunter (on-chain observation). The report is dated 2026-05-27.

DPRK link unconfirmed Found by this site's hunt in a chain-wide sweep for the DataUpdated(string,string) event; no published report covers it. The stored values are cryptocurrency-miner configurations, which points to a cryptojacking operation, and nothing ties it to North Korea. The EtherHiding tracker covers every reported EtherHiding contract and wallet, not only North Korean ones, so this value may belong to another actor.

On-chain links

EtherHiding addresses that pointed malware at this host, newest first. Dates are when the value was written on-chain, and Transaction opens the one that first wrote it; a row without one is a tie a cited report states. See the EtherHiding Tracker.

Address	Type	Role	Malware family	First written
`0x17fff8d3f56574a85840d12af91b9d8f4178f85b`	Contract, polygon		cryptominer (unidentified)	reported
`0x19532c0fbaf0fb8c1d0f3fac0b704bf2f4645539`	Wallet, polygon	owner wallet		reported
`0x2fbd66fe245052d265ca0eda7d01d35b2d8b9feb`	Contract, polygon		cryptominer (unidentified)	reported
`0x439fbf20c9ddd49ec7b2e8cb52804f48f6e913e4`	Contract, polygon		cryptominer (unidentified)	reported

ip address EtherHiding CURATED

First seen 2026-05-27 · last seen 2026-05-27

Network

Kind	data centre
Network	Servers Tech Fzco
Announced by	AS216071 SERVERS TECH FZCO
Country	The Netherlands
Flags	hosting range

Looked up 2026-10-20 at ip-api.com. A hosting range is not evidence on its own.

Source

Mining pool or configuration server named on port 27031 in the XOR-encoded cryptocurrency-miner configurations stored on Polygon by 0x19532c0fbaf0fb8c1d0f3fac0b704bf2f4645539, first on 2026-05-27 and last on 2026-07-30. Recorded as an address the miner was pointed at, not one this site has observed serving anything.
Polygon transaction 0x55e264d024e410e1cc405285bf17e36c882a40d64346003786d0543258972c30 — Chollima Hunter (on-chain observation) · published 2026-05-27 · pulled 2026-10-20

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: Polygon transaction 0x55e264d024e410e1cc405285bf17e36c882a40d64346003786d0543258972c30

Chollima Hunter (on-chain observation) lists 2 other indicators in this source.