45.227.254[.]45IP address
Reported by 1 independent source · first reported by SOCRadar · last reported
Last reported 4 days ago
What the reports say
1 report, newest first · the exact sentence from each-
INC and The Gentlemen Ransomware: Exposed AI Infrastructure“A partner onboarding guide (README_PARTNER.md) on 45.227.254[.]45 describes handing Phantom, OpenCode, the knowledge base and WormGPT-MCP servers to external operators, advertising “35 MCP servers”, “55+ tools” and “9K+ CVE PoC”.”
Indicators reported together
named in the same reports- 45.227.254[.]43in 1 report
- trulitesupport[.]comin 1 report
- api.iquickline[.]comin 1 report
Copy these 3 indicators · defanged
Also named with it: CVE-2025-49113, CVE-2026-35616, CVE-2020-1472, CVE-2021-42278, CVE-2021-1675, CVE-2024-57727, CVE-2026-41940, CVE-2024-49112, CVE-2026-42208, CVE-2025-66568
Thanks — we review every report.