`65.254.248.151`

65.254.248.151 is an IP address that 2 published sources report in connection with Contagious Interview and Kimsuky activity, which public reporting attributes to North Korea (DPRK). It is cited here from Genians. The reports are dated 2025-07-01.

ip address Contagious Interview Kimsuky MATCHED IN SOURCE

First seen 2025-07-01 · last seen 2025-07-01

Network

Kind	data centre
Network	Newfold Digital, Inc.
Announced by	AS29873 Newfold Digital, Inc.
Country	United States
Flags	hosting range

Looked up 2026-09-21 at ip-api.com. A hosting range is not evidence on its own.

Sources

…kida.plusdocs.kro.kr 1.223.129.234 KR mspro.kro.kr msprovider.menews.o-r.kr securedrive-overseas-state.bit-albania.com 65.254.248.151 US securedrive.privatedns.org 121.179.161.231 KR [표 4-1] C2별 Domain, IP 주소 비교 5.…
'클릭픽스' 전술을 활용한 김수키 그룹 위협 사례 분석 — Genians · under “4. 위협 인텔리전스 피벗팅 (Threat Intelligence Pivoting)” · published 2025-07-01 · pulled 2026-09-12
…kida.plusdocs.kro.kr 1.223.129.234 KR mspro.kro.kr msprovider.menews.o-r.kr securedrive-overseas-state.bit-albania.com 65.254.248.151 US securedrive.privatedns.org 121.179.161.231 KR [Table 4-1] Comparison of Domains and IP Addresses by C2 5.…
Analysis of the threat case of kimsuky group using 'ClickFix' tactic — Genians · under “4. Threat Intelligence Pivoting” · published 2025-07-01 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: '클릭픽스' 전술을 활용한 김수키 그룹 위협 사례 분석

Genians lists 32 other indicators in this source. 7 are shown, chosen across types.

All 33 indicators from this source

Cited by the same report: Analysis of the threat case of kimsuky group using 'ClickFix' tactic

Genians lists 32 other indicators in this source. 5 are shown, chosen across types.

All 33 indicators from this source