`198.50.130.118`

198.50.130.118 is an IP address that one published source reports in connection with Contagious Interview activity, which public reporting attributes to North Korea (DPRK). It is cited here from GitLab Threat Intelligence. The report is dated 2025-09-17.

ip address Contagious Interview MATCHED IN SOURCE

First seen 2025-09-17 · last seen 2025-09-17

Network

Kind	data centre
Network	OVH SAS (OVH Hosting, Inc.)
Announced by	AS16276 OVH SAS
Country	Canada
Flags	hosting range

Looked up 2026-09-21 at ip-api.com. A hosting range is not evidence on its own.

Source

…that contained only the first two IP addresses. 188.43.33.250 49.145.111.7 190.120.252.13 118.148.107.73 87.249.132.144 94.224.115.64 198.50.130.118 94.71.186.249 77.166.75.76 134.228.221.237 81.184.178.102 81.34.167.92 50.67.15.10 128.203.96.252 We observed the threat actor…
Tech Note - BeaverTail variant distributed via malicious repositories and ClickFix lure - GitLab Security Tech Notes — GitLab Threat Intelligence · under “Related Infrastructure and Personas” · published 2025-09-17 · pulled 2026-09-09

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: Tech Note - BeaverTail variant distributed via malicious repositories and ClickFix lure - GitLab Security Tech Notes

GitLab Threat Intelligence lists 36 other indicators in this source. 12 are shown, chosen across types.

All 37 indicators from this source