103.138.13.30

IP Address

Threat entity extracted from intelligence sources

Frequency

1

occurrences

First Seen

July 16, 2026

Last Seen

July 16, 2026

IOC Validation

ThreatCluster AI

False Positive — False Positive confidence

Not enough context to determine if it's attacker-controlled

This indicator was flagged as a false positive by AI analysis.

Pivot to external tools

Opens in new tab · no data sent to TC

Reputation · 4

Sandbox · 2

Infrastructure · 3

Malware trackers · 1

Web search · 2

Related Clusters (1)

GoSerpent Backdoor Steals Sensitive Data from Southeast Asian Governments

Jul 17·8 sources

Related Articles (1)

GoSerpent: a persistent threat evolves with sophisticated data collection and exfiltration

Securelist·Jul 16

Related Entities

TetrisPhantom Data Exfiltration Malware GoSerpent Campaign Government GoSerpent McMx TmcLoader TmcPayload T1003 - OS Credential Dumping T1041 - Exfiltration Over C2 Channel T1071 - Application Layer Protocol