`45.77.71.42`

45.77.71.42 is an IP address that 2 published sources report in connection with IT Worker Fraud activity, which public reporting attributes to North Korea (DPRK). It is cited here from ANY.RUN. The earliest of those reports is dated 2026-08-10 and the most recent 2026-08-20.

ip address IT Worker Fraud MATCHED IN SOURCE

First seen 2026-08-10 · last seen 2026-08-20

Network

Kind	data centre
Network	The Constant Company (Vultr Holdings, LLC)
Announced by	AS20473 The Constant Company, LLC
Country	United States
Flags	hosting range

Looked up 2026-09-21 at ip-api.com. A hosting range is not evidence on its own.

Sources

…IOCs IPv4: 62.33.223.165 // INVESTSTROY-NET (InvestStroyTrest) IPv4: 89.187.185.11 // DPRK-operated VPS IPv4: 45.77.71.42 // DPRK-operated VPS IPv4: 185.152.67.39 // DPRK-operated VPS IPv4: 104.250.148.58 // AstrillVPN exit node IPv4: 192.200.115.226 //…
Smile, You’re on Camera! Part 2: Lazarus IT Workers Exposed — ANY.RUN · under “IOCs” · published 2026-08-10 · pulled 2026-09-01
…exit nodes. DPRK IT Worker IOCs IPv4: 89.187.185.11 // DPRK-operated VPS IPv4: 45.77.71.42 // DPRK-operated VPS IPv4: 185.152.67.39 // DPRK-operated VPS IPv4: 104.250.148.58 // AstrillVPN exit node IPv4: 192.200.115.226 //…
North Korean IT Workers Scheme: Detection Steps for SOC Teams — ANY.RUN · under “DPRK IT Worker IOCs” · published 2026-08-20 · pulled 2026-09-11

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: Smile, You’re on Camera! Part 2: Lazarus IT Workers Exposed

ANY.RUN lists 9 other indicators in this source. 7 are shown, chosen across types.

All 10 indicators from this source

Cited by the same report: North Korean IT Workers Scheme: Detection Steps for SOC Teams

ANY.RUN lists 10 other indicators in this source. 4 are shown, chosen across types.

All 11 indicators from this source