`45.77.179.89`

45.77.179.89 is an IP address that 2 published sources report in connection with Contagious Interview and APT38 activity, which public reporting attributes to North Korea (DPRK). It is cited here from SentinelOne and Objective-See. The earliest of those reports is dated 2025-01-01 and the most recent 2025-01-20.

ip address Contagious Interview APT38 MATCHED IN SOURCE

First seen 2025-01-01 · last seen 2025-01-20

Network

Kind	data centre
Network	The Constant Company (Vultr Holdings, LLC)
Announced by	AS20473 The Constant Company, LLC
Country	Japan
Flags	hosting range

Looked up 2026-09-21 at ip-api.com. A hosting range is not evidence on its own.

Sources

…Detection Opportunities Telegram bot auth token 7069293498:AAGH47J19fkbGT-56jkgWtvMCYRZpQxePwE Network Connections: 45.77.179.89 clip / .Safari_V8_Config 3efff55f643010647ac72a6761da38d934052140 65f47b3297e39e85a4c163184b12439797fbac11…
2024 macOS Malware Review | Infostealers, Backdoors, and APT Campaigns Targeting the Enterprise | SentinelOne — SentinelOne · under “Detection Opportunities” · published 2025-01-20 · pulled 2026-09-12
…noted that after performing a geolocation check (to avoid infecting victims in China), the malware will downloaded a binary from 45.77.179.89 .…
The Mac Malware of 2024 👾 — Objective-See · under “👾 CloudChat” · published 2025-01-01 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: 2024 macOS Malware Review | Infostealers, Backdoors, and APT Campaigns Targeting the Enterprise | SentinelOne

SentinelOne lists 3 other indicators in this source.

Cited by the same report: The Mac Malware of 2024 👾

Objective-See lists 5 other indicators in this source.