95.164.7.171

95.164.7.171 is an IP address that 2 published sources report in connection with Contagious Interview activity, which public reporting attributes to North Korea (DPRK). It is cited here from Rayssa Cardoso and e Sentire. The earliest of those reports is dated 2024-11-14 and the most recent 2025-03-05.

ip address Contagious Interview MATCHED IN SOURCE

First seen 2024-11-14 · last seen 2025-03-05

Network

Kinddata centre
NetworkNetassist International EOOD
CountryBulgaria
Flagshosting range

Looked up 2026-09-21 at ip-api.com. A hosting range is not evidence on its own.

Sources

  • …Follow me on social media: https://www.linkedin.com/in/rayssac/ . IoC 5.253.43.122:1224 41.208.185.235 95.164.7.171:8637 MITRE ATT&CK TTPs T1027 — Obfuscated Files or Information T1027.002 — Obfuscated Files or Information: Software Packing…
    Infostealer malware linked to Lazarus Group campaigns — Rayssa Cardoso · under “IoC” · published 2025-03-05 · pulled 2026-09-12
  • …http://95.164.7.171:8637/api/clip “Pay” Component Overview The pay component conducts various host fingerprinting activities…
    Bored BeaverTail & InvisibleFerret Yacht Club – A Lazarus Lure Pt.2 — e Sentire · under “Analysis of InvisibleFerret Python Files” · published 2024-11-14 · pulled 2026-10-01

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: Infostealer malware linked to Lazarus Group campaigns

Rayssa Cardoso lists 2 other indicators in this source.

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.