22.0.0.16

22.0.0.16 is an IP address that one published source reports in connection with Contagious Interview activity, which public reporting attributes to North Korea (DPRK). It is cited here from Objective-See. The report is dated 2025-01-01.

ip address Contagious Interview MATCHED IN SOURCE

First seen 2025-01-01 · last seen 2025-01-01

Network

Kindfixed line
NetworkUnited States Department of Defense (DoD Network Information Center)
Announced byAS749 United States Department of Defense (DoD)
CountryUnited States

Looked up 2026-09-21 at ip-api.com. A subscriber line, as a person working from home ordinarily has.

Source

  • …"file": { "destination": "/private/tmp/.test", "process": { "pid": 1026, "name": "UltraEdit", "path": "/Volumes/UltraEdit 22.0.0.16/UltraEdit.app/Contents/MacOS/UltraEdit", ... } } } …while the file (remotely named bd.log ) will be saved to /Users/Shared/.fseventsd…
    The Mac Malware of 2024 👾 — Objective-See · under “👾 Zuru(2?)” · published 2025-01-01 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: The Mac Malware of 2024 👾

Objective-See lists 5 other indicators in this source.

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.