95.169.180.140
95.169.180.140 is an IP address
that 2 published sources report
in connection with Contagious Interview activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from Sophos and Jamf Threat Labs.
The earliest of those reports is dated 2026-03-23 and the most recent 2026-10-18.
ip address Contagious Interview MATCHED IN SOURCE
Network
| Kind | data centre |
|---|---|
| Network | Keyweb AG IP Network |
| Announced by | AS262287 Latitude.sh LTDA |
| Country | United States |
| Flags | hosting range |
Sources
-
…used by NICKEL ALLEY (audiodriver.py) talentacq.pro Domain name NICKEL ALLEY malware staging server for PyLangGhost RAT infections 95.169.180.140 IP address PyLangGhost RAT C2 server used by NICKEL ALLEY publicshare.org Domain name NICKEL ALLEY malware staging server for…
NICKEL ALLEY strategy: Fake it ‘til you make it — Sophos -
…Finally, it contacts the hard‑coded C2 server at http://95.169.180.140:8080 and begins the first communication loop by invoking core.StartFirst5179Iter() with the machine ID and C2 url.…
FlexibleFerret: macOS Malware Deploys in Fake Job Scams — Jamf Threat Labs
Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.