← Remote Workers

13.140.228.125

13.140.228.125 is an IP address that one published source reports in connection with Contagious Interview activity, which public reporting attributes to North Korea (DPRK). It is cited here from Newton Paul. The report is dated 2026-10-29.

ip address Contagious Interview MATCHED IN SOURCE

First seen 2026-10-29 · last seen 2026-10-29

Network

Looked up 2026-11-12 at ip-api.com. A subscriber line, as a person working from home ordinarily has.

Source

• …When I checked, the answer was http://13.140.228.125:5000 . Figure 3: The team1 deployer writing its current C2, 13.140.228.125:5000, to the team1 contract.…

  DPRK's Contagious Interview Meets ErrTraffic — Newton Paul · under “Stage 3 - main.js, the C2 Lives on Polygon” · published 2026-10-29 · pulled 2026-11-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: DPRK's Contagious Interview Meets ErrTraffic

Newton Paul lists 33 other indicators in this source. 12 are shown, chosen across types.

• prestonellis97@gmail.com email address
• 5784bc7081fe600212a4d24c304159d4135fdbdd292e3b2214e88b4bb70463a5 file hash
• 13.140.40.133 IP address
• 13.140.40.208 IP address
• 13.140.40.214 IP address
• 13.140.43.225 IP address
• 13.140.43.228 IP address
• 138.226.247.147 IP address
• 138.226.247.152 IP address
• 138.226.247.154 IP address
• 144.172.103.226 IP address
• 0xf70730a4e5b89b6c6e02edaed582badf6465e9d9 cryptocurrency wallet address

All 34 indicators from this source