66.45.225.94
66.45.225.94 is an IP address
that 2 published sources report
in connection with Contagious Interview activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from Socket and Anonhaven.
The earliest of those reports is dated 2026-04-07 and the most recent 2026-04-08.
ip address Contagious Interview CURATED
Network
| Kind | data centre |
|---|---|
| Network | org.interserver.net |
| Announced by | AS19318 Interserver, Inc |
| Country | United States |
| Flags | hosting range |
Sources
-
Direct-IP command-and-control endpoint for the April 2026 cross-ecosystem Contagious Interview wave, reported by Socket.
North Korea's Contagious Interview Campaign Spreads Across 5 Ecosystems, Delivering Staged RAT Payloads — Socket -
…shell, browser theft, keylogging, AnyDesk deployment, and more This package also introduces a second infrastructure cluster centered on 66.45.225.94 , and it is the clearest example of a fuller post-compromise implant chain. The packages reuse the same downloadUrl workflow, archive…
North Korea’s Contagious Interview Campaign Spreads Across 5 Ecosystems, Delivering Staged RAT Payloads | Socket — Socket -
…This package introduces a second infrastructure cluster centered on the IP address 66.45.225.94 . Related: TrueConf zero-day turned trusted updates into a government espionage backdoor Socket's assessment is that the…
Contagious Interview Hits npm, PyPI, Go, Rust, PHP — Anonhaven
Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.
Related indicators
Cited by the same report: North Korea's Contagious Interview Campaign Spreads Across 5 Ecosystems, Delivering Staged RAT Payloads
All 28 indicators from this source