← Remote Workers

135.125.248.56

135.125.248.56 is an IP address that 2 published sources report in connection with Contagious Interview activity, which public reporting attributes to North Korea (DPRK). It is cited here from ESET and JPCERT/CC. The earliest of those reports is dated 2026-09-12 and the most recent 2026-11-09.

ip address Contagious Interview MATCHED IN SOURCE

First seen 2026-09-12 · last seen 2026-11-09

Network

Looked up 2026-09-21 at ip-api.com. A hosting range is not evidence on its own.

Sources

• …135.125.248.56 N/A OVH SAS 2023‑06‑30 BeaverTail/InvisibleFerret C&C and staging server.…

  DeceptiveDevelopment targets freelance developers — ESET · under “Network” · published 2025-02-20 · pulled 2026-09-12

• ip 103.161.35.57 103.35.190.170 104.194.133.88 107.189.16.122 107.189.16.176 107.189.20.152 107.189.24.80 107.189.25.109 108.181.185.2 135.125.248.56 135.181.242.24 138.124.184.171 138.201.199.46 144.172.100.124 144.172.100.142 144.172.101.45 144.172.102.148 144.172.102.21 144.172.103.97…

  Contagious Interview IoCs — JPCERT/CC · published 2025-08-25 · pulled 2026-09-18

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: DeceptiveDevelopment targets freelance developers

ESET lists 5 other indicators in this source.

• 147.124.214.129 IP address
• 147.124.214.237 IP address
• 23.106.253.194 IP address
• 45.61.131.218 IP address
• 67.203.7.171 IP address

Cited by the same report: Contagious Interview IoCs

JPCERT/CC lists 539 other indicators in this source. 7 are shown, chosen across types.

• 138.124.184.171 IP address
• 138.201.125.58 IP address
• 138.201.199.46 IP address
• 139.162.22.35 IP address
• 139.59.209.204 IP address
• 14.114.114.114 IP address
• 141.255.147.215 IP address

All 540 indicators from this source