← Remote Workers

66.235.168.232

66.235.168.232 is an IP address that 3 published sources report in connection with Contagious Interview activity, which public reporting attributes to North Korea (DPRK). It is cited here from NVISO, Recorded Future and JPCERT/CC. The earliest of those reports is dated 2025-11-13 and the most recent 2026-11-09.

ip address Contagious Interview MATCHED IN SOURCE

First seen 2025-11-13 · last seen 2026-11-09

Network

Looked up 2026-09-21 at ip-api.com. A hosting range is not evidence on its own.

Sources

• …45.128.52.14 45.137.213.30 45.43.11.201 45.61.133.110 45.61.150.30 45.61.150.31 45.61.151.71 45.76.160.53 5.253.43.122 66.235.168.232 66.235.175.109 67.203.7.163 67.203.7.171 86.104.74.51 88.218.0.78 94.131.97.195 95.164.17.24 Markdown Tsunami…

  Contagious Interview Actors Now Utilize JSON Storage Services for Malware Delivery — NVISO · under “Indicators of Compromise (IOCs)” · published 2025-11-13 · pulled 2026-09-12

• …2.47.155 45.43.11.201 45.59.163.23 45.59.163.56 45.61.128.61 45.61.133.110 45.61.135.4 45.61.150.30 45.61.160.28 45.61.165.45 66.235.168.17 66.235.168.232 66.235.168.238 66.235.175.109 66.235.175.117 67.203.7.163 67.203.7.200 67.203.7.205 88.218.0.78 107.189.24.80 144.172.95.226 144.172.100.12…

  PurpleBravo’s Targeting of the IT Software Supply Chain — Recorded Future · under “Appendix B: C2 Servers” · published 2026-01-21 · pulled 2026-09-12

• …45.61.158.54 45.61.158.7 45.61.169.99 45.82.255.2 45.83.140.231 45.89.53.54 45.89.53.59 46.4.224.205 5.253.43.122 5.89.53.54 65.140.86.227 66.235.168.232 66.235.168.238 67.203.123.171 67.203.7.163 67.203.7.171 67.203.7.200 67.203.7.209 67.203.7.245 69.197.164.117 74.119.194.129 86.104.74.51 8…

  Contagious Interview IoCs — JPCERT/CC · published 2025-08-25 · pulled 2026-09-18

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: Contagious Interview Actors Now Utilize JSON Storage Services for Malware Delivery

NVISO lists 67 other indicators in this source. 5 are shown, chosen across types.

• drgru854@gmail.com email address
• https://github.com/carlotalentengine-sketch GitHub account
• https://gitlab.com/goldencity-group GitLab account
• 66.235.175.109 IP address
• https://jsonkeeper.com/b/GCGEX payload URL

All 68 indicators from this source

Cited by the same report: PurpleBravo’s Targeting of the IT Software Supply Chain

Recorded Future lists 216 other indicators in this source. 4 are shown, chosen across types.

• domin61013@outlook.com email address
• ricogonzalez1013@gmail.com email address
• techsavvy001013@outlook.com email address
• 66.235.175.117 IP address

All 217 indicators from this source

Cited by the same report: Contagious Interview IoCs

JPCERT/CC lists 539 other indicators in this source. 3 are shown, chosen across types.

• 66.40.9.246 IP address
• 66.42.63.27 IP address
• 67.198.179.75 IP address

All 540 indicators from this source