`81.34.167.92`

81.34.167.92 is an IP address that one published source reports in connection with Contagious Interview activity, which public reporting attributes to North Korea (DPRK). It is cited here from GitLab Threat Intelligence. The report is dated 2025-09-17.

ip address Contagious Interview MATCHED IN SOURCE

First seen 2025-09-17 · last seen 2025-09-17

Network

Kind	fixed line
Network	Telefonica de Espana SAU (RIMA (Red IP Multi Acceso))
Announced by	AS3352 TELEFONICA DE ESPANA S.A.U.
Country	Spain

Looked up 2026-09-21 at ip-api.com. A subscriber line, as a person working from home ordinarily has.

Source

…5.111.7 190.120.252.13 118.148.107.73 87.249.132.144 94.224.115.64 198.50.130.118 94.71.186.249 77.166.75.76 134.228.221.237 81.184.178.102 81.34.167.92 50.67.15.10 128.203.96.252 We observed the threat actor originating from the first IP address, 188.43.33.250 , when active on…
Tech Note - BeaverTail variant distributed via malicious repositories and ClickFix lure - GitLab Security Tech Notes — GitLab Threat Intelligence · under “Related Infrastructure and Personas” · published 2025-09-17 · pulled 2026-09-09

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: Tech Note - BeaverTail variant distributed via malicious repositories and ClickFix lure - GitLab Security Tech Notes

GitLab Threat Intelligence lists 36 other indicators in this source. 12 are shown, chosen across types.

All 37 indicators from this source