`94.224.115.64`

94.224.115.64 is an IP address that one published source reports in connection with Contagious Interview activity, which public reporting attributes to North Korea (DPRK). It is cited here from GitLab Threat Intelligence. The report is dated 2025-09-17.

ip address Contagious Interview MATCHED IN SOURCE

First seen 2025-09-17 · last seen 2025-09-17

Network

Kind	fixed line
Network	Telenet N.V. (Telenet)
Announced by	AS6848 Telenet BV
Country	Belgium

Looked up 2026-09-21 at ip-api.com. A subscriber line, as a person working from home ordinarily has.

Source

…web application that contained only the first two IP addresses. 188.43.33.250 49.145.111.7 190.120.252.13 118.148.107.73 87.249.132.144 94.224.115.64 198.50.130.118 94.71.186.249 77.166.75.76 134.228.221.237 81.184.178.102 81.34.167.92 50.67.15.10 128.203.96.252 We observed the threat…
Tech Note - BeaverTail variant distributed via malicious repositories and ClickFix lure - GitLab Security Tech Notes — GitLab Threat Intelligence · under “Related Infrastructure and Personas” · published 2025-09-17 · pulled 2026-09-09

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: Tech Note - BeaverTail variant distributed via malicious repositories and ClickFix lure - GitLab Security Tech Notes

GitLab Threat Intelligence lists 36 other indicators in this source. 12 are shown, chosen across types.

All 37 indicators from this source