31.222.238.61
31.222.238.61 is an IP address
that 2 published sources report
in connection with Contagious Interview activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from Mees van Wickeren (Medium) and Hacking But Legal.
The earliest of those reports is dated 2025-11-29 and the most recent 2026-07-15.
ip address Contagious Interview MATCHED IN SOURCE
Network
| Kind | data centre |
|---|---|
| Network | Weiss Hosting Group S.R.L |
| Country | Moldova |
| Flags | hosting range |
Sources
-
Transcribed by hand on 18 September 2026 from the researcher's follow-up to an earlier post on the DredSoftLabs front company, which the scraper cannot read because Medium answers it with a bot check and both archive services refused automated fetches the same day. The post reports that the Dredsoft-Labs GitHub organisation and its Telegram account were renamed JSoft Labs and that a further front company, MetaMint Studio, had appeared on LinkedIn, credits Travis Simcox for the latter, and pivots from one loader string to 116 repositories, nine delivery hostnames and three command-and-control addresses. The three addresses, two of which the post gives with port 4558 and one with port 8353, and the three Vercel hosts are the values carried here; the loader paths on shared JSON-hosting services are recorded above rather than as indicators. Values are re-fanged from the post's hxxp and bracketed-dot form and nothing else is altered.
medium.com/@meeswicky1100/follow-up-blog-on-fake-dprk-dredsoftlabs-company-1f7721214acf — Mees van Wickeren (Medium) -
…C2 IPs (hosting WHOIS-verified): 107.189.16.154:8353 (FranTech / PonyNet, US) · 5.180.30.30:4558 (THE-HOSTING / WorkTitans B.V., NL) · 31.222.238.61:4558 ( P.Q.…
North Korea Is Hiring — Hacking But Legal
Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.