45.115.26.23

IP Address

Threat entity extracted from intelligence sources

Frequency

1

occurrences

First Seen

November 11, 2026

Last Seen

November 11, 2026

IOC Validation

ThreatCluster AI

Confirmed IOC — High confidence

Used as a reverse shell endpoint in a PowerShell command for remote control and persistence.

Checked against every article that reports it before entering the IOC feed.

Pivot to external tools

Opens in new tab · no data sent to TC

Reputation · 4

Sandbox · 2

Infrastructure · 3

Malware trackers · 1

Web search · 2

Related Clusters (1)

Threat Actors Target Qlik Sense Servers with Exploits and Reverse Shells

10h ago·1 sources

Related Articles (1)

Hackers Target Qlik Sense Servers With Reverse Shells, Stage ActiveMQ and Veeam Exploits

Thehackernews·13h ago

Related Entities

Malware Cactus Ransomware Campaign CWE-200 - Exposure of Sensitive Information CWE-22 - Path Traversal CWE-269 - Improper Privilege Management CWE-287 - Improper Authentication T1021.004 - SSH T1053.005 - Scheduled Task T1059.001 - PowerShell T1071 - Application Layer Protocol Apache ActiveMQ Linux