174.138.187.2

IP Address

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

November 27, 2025

Last Seen

November 27, 2025

API

IOC Validation

ThreatCluster AI

False Positive — False Positive confidence

Reclassified: MISP warninglist: Specialized list of vpn-ipv4 addresses belonging to common VPN providers and datacenters (MISP allowlist backfill 2026-07-21)

This indicator was flagged as a false positive by AI analysis.

Pivot to external tools

Opens in new tab · no data sent to TC

Reputation · 4

Sandbox · 2

Infrastructure · 3

Malware trackers · 1

Web search · 2

Related Clusters (2)

Bactor Ransomware Identified in Cybersecurity Monitoring

Nov 20·5 sources

Emergence of New Ransomware Variants: Bactor, ChickenKiller, and Midnight

Nov 27·7 sources

Related Entities

Ransomware Eternidade Stealer Campaign Brazil Financial Eternidade Stealer WhatsApp Windows ChickenKiller Bcdedit.exe