154.44.31.4

IP Address

Threat entity extracted from intelligence sources

Frequency

2

occurrences

First Seen

November 12, 2026

Last Seen

November 12, 2026

IOC Validation

ThreatCluster AI

Confirmed IOC — High confidence

Server used by attackers to run a customized fork of Cairn

Checked against every article that reports it before entering the IOC feed.

Pivot to external tools

Opens in new tab · no data sent to TC

Reputation · 4

Sandbox · 2

Infrastructure · 3

Malware trackers · 1

Web search · 2

Related Clusters (1)

AI-Driven Cyberattacks Target Key Sectors in China-Nexus Campaign

5h ago·3 sources

Related Articles (2)

Attackers Use Autonomous AI to Target Semiconductor, Defense and Civil Society Sectors

Unit42.Paloaltonetworks·5h ago

Attackers breached 10 organizations with an open

Helpnetsecurity·5h ago

Related Entities

Data Breach Brute Force Credential Stuffing CL-STA-1238 China CWE-200 - Exposure of Sensitive Information CWE-287 - Improper Authentication CWE-798 - Use of Hard-coded Credentials Manufacturing Government T1110 - Brute Force T1003 - OS Credential Dumping