`175.45.176.27`

175.45.176.27 is an IP address that 3 published sources report in connection with IT Worker Fraud, Contagious Interview and Lazarus Group activity, which public reporting attributes to North Korea (DPRK). It is cited here from Kudelski Security Research, Kudelski Security and Security Scorecard. The earliest of those reports is dated 2025-01-29 and the most recent 2026-10-18.

ip address IT Worker Fraud Contagious Interview Lazarus Group MATCHED IN SOURCE

First seen 2025-01-29 · last seen 2026-10-18

Network

Kind	fixed line
Network	Star Joint Venture Co. Ltd. (Star Joint Venture Co. Ltd)
Announced by	AS131279 Ryugyong-dong
Country	North Korea

Looked up 2026-09-21 at ip-api.com. A subscriber line, as a person working from home ordinarily has.

Sources

…123456 ) Content IOC’s IP Description 175.45.178.222 DPRK attacker exit node 175.45.176.27 C2 operations 175.45.176.40 C2 operations 175.45.176.160 C2 operations 175.45.176.180…
Kudelski Security Research — Kudelski Security Research · under “IOC’s” · published 2025-03-05 · pulled 2026-09-10
…123456 ) Content IOC’s IP Description 175.45.178.222 DPRK attacker exit node 175.45.176.27 C2 operations 175.45.176.40 C2 operations 175.45.176.160 C2 operations 175.45.176.180…
DPRK Fake IT Workers: Inside Their Evolving Network Infrastructure - Kudelski Security Research Center — Kudelski Security · under “IOC’s” · published 2026-07-17 · pulled 2026-09-12
…Initial Connection : North Korean IP addresses, including 175.45.178.130 , 175.45.176.27 , 175.45.178.14 , 175.45.178.9 , 175.45.178.11 , and 175.45.178.10 , were the starting points of the operation.…
Operation Phantom Circuit: North Korea's Global Data Exfiltration Campaign — Security Scorecard · under “The Evidence Chain” · published 2025-01-29 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: Kudelski Security Research

Kudelski Security Research lists 66 other indicators in this source. 5 are shown, chosen across types.

All 67 indicators from this source

Cited by the same report: DPRK Fake IT Workers: Inside Their Evolving Network Infrastructure - Kudelski Security Research Center

Kudelski Security lists 23 other indicators in this source. 4 are shown, chosen across types.

All 24 indicators from this source

Cited by the same report: Operation Phantom Circuit: North Korea's Global Data Exfiltration Campaign

Security Scorecard lists 20 other indicators in this source. 3 are shown, chosen across types.

All 21 indicators from this source