← Remote Workers

45.61.150.31

45.61.150.31 is an IP address that 4 published sources report in connection with Contagious Interview and Lazarus Group activity, which public reporting attributes to North Korea (DPRK). It is cited here from Ossprey, Logpresso, NVISO and JPCERT/CC. The earliest of those reports is dated 2025-03-17 and the most recent 2026-11-09.

ip address Contagious InterviewLazarus Group MATCHED IN SOURCE

First seen 2025-03-17 · last seen 2026-11-09

Network

Looked up 2026-09-21 at ip-api.com. A hosting range is not evidence on its own.

Sources

• …Five of ours appear on it: 23.227.202.244 , 146.70.253.107 , 45.61.150.31 , 88.218.0.78 and 5.253.43.122 .…

  Uncovering a 300+ Package DPRK Contagious Interview Campaign — Ossprey · under “The shape of the network” · published 2026-07-02 · pulled 2026-09-02

• …IP 주소 1 172.86.84.38 2 45.61.150.31 3 94.131.97.195 4 144.172.97.7 5 185.235.241.208 6 45.61.128.110 7 144.172.86.27 8 185.153.182.241 9 45.137.213.30…

  [위협 분석] 북한 라자루스(Lazarus) 그룹이 배포한 악성 npm 패키지 감염 사례 | 로그프레소 — Logpresso · under “IP” · published 2025-03-17 · pulled 2026-09-12

• …23.254.164.156 38.92.47.151 38.92.47.85 38.92.47.91 45.128.52.14 45.137.213.30 45.43.11.201 45.61.133.110 45.61.150.30 45.61.150.31 45.61.151.71 45.76.160.53 5.253.43.122 66.235.168.232 66.235.175.109 67.203.7.163 67.203.7.171 86.104.74.51 88.218.0.78…

  Contagious Interview Actors Now Utilize JSON Storage Services for Malware Delivery — NVISO · under “Indicators of Compromise (IOCs)” · published 2025-11-13 · pulled 2026-09-12

• …202.244 38.92.47.151 38.92.47.85 38.92.47.91 45.128.52.14 45.130.43.97 45.137.213.30 45.159.248.110 45.43.11.201 45.61.128.61 45.61.133.110 45.61.150.31 45.61.150.67 45.61.151.71 45.61.158.54 45.61.158.7 45.61.169.99 45.82.255.2 45.83.140.231 45.89.53.54 45.89.53.59 46.4.224.205 5.253.43.122…

  Contagious Interview IoCs — JPCERT/CC · published 2025-08-25 · pulled 2026-09-18

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: Uncovering a 300+ Package DPRK Contagious Interview Campaign

Ossprey lists 14 other indicators in this source. 5 are shown, chosen across types.

• ec26774218bc9ba577cab41f108138831165d891e83252cce231a542e797a0d3 file hash
• 5.253.43.122 IP address
• 88.218.0.78 IP address
• https://jsonkeeper.com/b/BADC6 payload URL
• https://jsonkeeper.com/b/UPCMV payload URL

All 15 indicators from this source

Cited by the same report: [위협 분석] 북한 라자루스(Lazarus) 그룹이 배포한 악성 npm 패키지 감염 사례 | 로그프레소

Logpresso lists 10 other indicators in this source. 4 are shown, chosen across types.

• 144.172.86.27 IP address
• 144.172.97.7 IP address
• 86.104.74.51 IP address
• 94.131.97.195 IP address

All 11 indicators from this source

Cited by the same report: Contagious Interview Actors Now Utilize JSON Storage Services for Malware Delivery

NVISO lists 67 other indicators in this source. 3 are shown, chosen across types.

• reichenausteve@gmail.com email address
• https://github.com/tommyminion GitHub account
• https://gitlab.com/technicalmanager-group GitLab account

All 68 indicators from this source