`173.249.44.87`

173.249.44.87 is an IP address that one published source reports in connection with Andariel activity, which public reporting attributes to North Korea (DPRK). It is cited here from DCSO. The report is dated 2023-05-16.

ip address Andariel MATCHED IN SOURCE

First seen 2023-05-16 · last seen 2023-05-16

Network

Kind	data centre
Network	Contabo GmbH
Announced by	AS51167 Contabo GmbH
Country	France
Flags	hosting range

Looked up 2026-09-21 at ip-api.com. A hosting range is not evidence on its own.

Source

…No other FQDNs have been seen on this IP address thus far. niv.co.in , however, resolves to 173.249.44.87 , also allocated to Contabo GmbH, and appears to be used as a mass-hosting web server by an Indian marketing and web development company, I…
Andariel’s “Jupiter” malware and the case of the curious C2 — DCSO · under “Investigating the Command & Control” · published 2023-05-16 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: Andariel’s “Jupiter” malware and the case of the curious C2

DCSO lists 4 other indicators in this source.