`87.249.132.144`

87.249.132.144 is an IP address that one published source reports in connection with Contagious Interview activity, which public reporting attributes to North Korea (DPRK). It is cited here from GitLab Threat Intelligence. The report is dated 2025-09-17.

ip address Contagious Interview MATCHED IN SOURCE

First seen 2025-09-17 · last seen 2025-09-17

Network

Kind	proxy or VPN
Network	Datacamp Limited (DataCamp Limited)
Announced by	AS212238 Datacamp Limited
Country	Germany
Flags	hosting range, known proxy or VPN

Looked up 2026-09-21 at ip-api.com. This range is classed as a proxy or VPN; it does not show who used it.

Source

…draft of the web application that contained only the first two IP addresses. 188.43.33.250 49.145.111.7 190.120.252.13 118.148.107.73 87.249.132.144 94.224.115.64 198.50.130.118 94.71.186.249 77.166.75.76 134.228.221.237 81.184.178.102 81.34.167.92 50.67.15.10 128.203.96.252 We…
Tech Note - BeaverTail variant distributed via malicious repositories and ClickFix lure - GitLab Security Tech Notes — GitLab Threat Intelligence · under “Related Infrastructure and Personas” · published 2025-09-17 · pulled 2026-09-09

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: Tech Note - BeaverTail variant distributed via malicious repositories and ClickFix lure - GitLab Security Tech Notes

GitLab Threat Intelligence lists 36 other indicators in this source. 12 are shown, chosen across types.

All 37 indicators from this source