45.227.254[.]43IP address
Reported by 2 independent sources · first reported by SOCRadar · last reported
Last reported yesterday
What the reports say
2 reports, newest first · the exact sentence from each-
Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions“An examination of the exposed directory at 45.227.254[.]43 has revealed the activity logged 8,257 messages across 133 sessions.”
-
INC and The Gentlemen Ransomware: Exposed AI Infrastructure“The investigation began with an exposed command-and-control server at 45.227.254[.]43, whose open directories held the operators’ knowledge base, AI session logs and the Phantom source code.”
Indicators reported together
named in the same reports- trulitesupport[.]comin 1 report
- 45.227.254[.]45in 1 report
- api.iquickline[.]comin 1 report
Copy these 3 indicators · defanged
Also named with it: CVE-2026-35616, CVE-2024-57727, CVE-2026-41940, CVE-2026-42208, CVE-2025-49113, CVE-2026-15409, CVE-2026-63030, CVE-2020-1472, CVE-2021-42278, CVE-2021-1675, CVE-2026-9082, CVE-2024-49112, CVE-2025-66568
Thanks — we review every report.