185.208.159.155

IP Address

Threat entity extracted from intelligence sources

Frequency

1

occurrences

First Seen

March 19, 2026

Last Seen

March 19, 2026

IOC Validation

ThreatCluster AI

Confirmed IOC — High confidence

C2 server used by the threat actor

This indicator was confirmed as a true IOC by AI analysis.

Pivot to external tools

Opens in new tab · no data sent to TC

Reputation · 4

Sandbox · 2

Infrastructure · 3

Malware trackers · 1

Web search · 2

Related Clusters (1)

OpenWebUI Servers Hijacked for Crypto Mining and Data Theft

Mar 19·2 sources

Related Articles (1)

Malicious campaign targeting vulnerable OpenWebUI servers: technical analysis

Cybernews·Mar 19

Related Entities

Malware Seychelles Switzerland Gminer XMRig T1203 - Exploitation for Client Execution Linux OpenWebUI Windows