175.45.178.19
175.45.178.19 is an IP address
that 2 published sources report
in connection with IT Worker Fraud and Lazarus Group activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from Multilateral Sanctions Monitoring Team (MSMT) and Group-IB.
The earliest of those reports is dated 2017-05-30 and the most recent 2025-10-22.
ip address IT Worker FraudLazarus Group MATCHED IN SOURCE
Network
| Kind | fixed line |
|---|---|
| Network | Star Joint Venture Co. Ltd. |
| Announced by | AS131279 Ryugyong-dong |
| Country | North Korea |
Sources
-
…hacking operations. 31 Devices used by 722 L iaison Off ice actor s have been linked to IP address range 175.45.178. 11 - 175.45.178.19 and overlapped with activity across range 210.52.109.0 - 210.52.109.255 . T he 722 , as a l iaison o ffice-level unit,…
The DPRK’s Violation and Evasion of UN Sanctions through Cyber and Information Technology Worker Activities (MSMT 2025 2) — Multilateral Sanctions Monitoring Team (MSMT) -
…under license combat helicopters and fighter jets. On the screen behind the host, Group-IB specialists noticed two IP addresses 175.45.178.19 and 175.45.178.97, which had been used to control Ghost RAT malware.…
LAZARUS ARISEN | Group-IB Blog — Group-IB
Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.
Related indicators
Cited by the same report: The DPRK’s Violation and Evasion of UN Sanctions through Cyber and Information Technology Worker Activities (MSMT 2025 2)
All 93 indicators from this source