`195.26.248.212`

195.26.248.212 is an IP address that one published source reports in connection with Contagious Interview activity, which public reporting attributes to North Korea (DPRK). It is cited here from Elastic Security Labs. The report is dated 2026-07-18.

ip address Contagious Interview MATCHED IN SOURCE

First seen 2026-07-18 · last seen 2026-07-18

Network

Kind	data centre
Network	Contabo Inc. (Contabo GmbH)
Announced by	AS40021 Contabo Inc.
Country	United States
Flags	hosting range

Looked up 2026-09-21 at ip-api.com. A hosting range is not evidence on its own.

Source

…C2 controller.rightwidth.dev domain-name Socket.IO RAT C2 file.rightwidth.dev domain-name Windows second-stage download host 195.26.248.212 ipv4 OTTERCOOKIE C2 Server 188.40.64.61 ipv4 OTTERCOOKIE C2 Server References The following were referenced throughout the above…
New North Korean campaign uses fake coding interviews to steal developer credentials — Elastic Security Labs · under “Observables” · published 2026-07-18 · pulled 2026-09-01

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: New North Korean campaign uses fake coding interviews to steal developer credentials

Elastic Security Labs lists 10 other indicators in this source.