130.94.19.204

IP Address

Threat entity extracted from intelligence sources

Frequency

9

occurrences

First Seen

November 12, 2026

Last Seen

November 14, 2026

IOC Validation

ThreatCluster AI

Confirmed IOC — High confidence

IP address used by attackers to target vulnerable systems.

Checked against every article that reports it before entering the IOC feed.

Pivot to external tools

Opens in new tab · no data sent to TC

Reputation · 4

Sandbox · 2

Infrastructure · 3

Malware trackers · 1

Web search · 2

Related Clusters (2)

PHP2Shell Vulnerabilities Threaten 70% of Websites with Remote Code Execution

Nov 2·76 sources

Attackers Exploit Check Point Vulnerabilities to Deploy Wiper Malware

1d ago·14 sources

Related Articles (9)

CVE-2026-123039: Check Point Gateways Rooted, ESXi Wiped

Cyberkendra·15h ago

Hackers Chain Three Vulnerabilities to Breach Check Point Firewalls

The420.In·19h ago

Unpatched Check Point Gateways Are Being Wiped exploiting PHP2Shell

Securityaffairs·1d ago

Unpatched Check Point Gateways Are Being Wiped exploiting PHP2Shell

Securityaffairs.Co·1d ago

Hackers Exploit Check Point PHP2Shell Flaws to Gain Root Access and Deploy Wiper Malware

Gbhackers·1d ago

1 / 2

Related Entities

UNC5221 Armory Castle Malware Check Point Ivanti Israel China CVE-2026-109618 CVE-2026-109619 CVE-2026-123039 CWE-269 - Improper Privilege Management CWE-287 - Improper Authentication