23.106.253.242

23.106.253.242 is an IP address that 2 published sources report in connection with Contagious Interview activity, which public reporting attributes to North Korea (DPRK). It is cited here from NVISO and JPCERT/CC. The earliest of those reports is dated 2025-11-13 and the most recent 2026-11-09.

ip address Contagious Interview MATCHED IN SOURCE

First seen 2025-11-13 · last seen 2026-11-09

Network

Kinddata centre
NetworkLeaseweb Singapore Pte. LTD (Leaseweb Asia Pacific pte. ltd.)
Announced byAS59253 LEASEWEB SINGAPORE PTE. LTD.
CountrySingapore
Flagshosting range

Looked up 2026-09-21 at ip-api.com. A hosting range is not evidence on its own.

Sources

  • …172.86.84.38 172.86.98.240 185.153.182.241 185.235.241.208 216.126.229.166 23.106.253.194 23.106.253.215 23.106.253.221 23.106.253.242 23.106.70.154 23.227.202.242 23.227.202.244 23.254.164.156 38.92.47.151 38.92.47.85 38.92.47.91 45.128.52.14…
    Contagious Interview Actors Now Utilize JSON Storage Services for Malware Delivery — NVISO · under “Indicators of Compromise (IOCs)” · published 2025-11-13 · pulled 2026-09-12
  • …01 185.153.182.241 185.235.241.208 191.96.31.38 195.201.172.170 216.126.229.166 23.106.253.194 23.106.253.209 23.106.253.215 23.106.253.221 23.106.253.242 23.106.70.154 23.227.202.244 38.92.47.151 38.92.47.85 38.92.47.91 45.128.52.14 45.130.43.97 45.137.213.30 45.159.248.110 45.43.11.201 45.61…
    Contagious Interview IoCs — JPCERT/CC · published 2025-08-25 · pulled 2026-09-18

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: Contagious Interview Actors Now Utilize JSON Storage Services for Malware Delivery

NVISO lists 67 other indicators in this source. 7 are shown, chosen across types.

All 68 indicators from this source

Cited by the same report: Contagious Interview IoCs

JPCERT/CC lists 539 other indicators in this source. 5 are shown, chosen across types.

All 540 indicators from this source

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.