45.154.12.132

IP Address

Threat entity extracted from intelligence sources

Frequency

2

occurrences

First Seen

October 7, 2026

Last Seen

October 7, 2026

IOC Validation

ThreatCluster AI

Confirmed IOC — High confidence

Listed as a C2 server used by the threat actors in the FortiBleed campaign.

This indicator was confirmed as a true IOC by AI analysis.

Pivot to external tools

Opens in new tab · no data sent to TC

Reputation · 4

Sandbox · 2

Infrastructure · 3

Malware trackers · 1

Web search · 2

Related Clusters (1)

FortiBleed Campaign Locks Out Admins, Compromises 86,644 Fortinet Devices

Oct 7·20 sources

Related Articles (2)

FortiBleed hit 86,000 firewalls by exploiting something nobody can patch away

Securityaffairs·Oct 7

FortiBleed hit 86,000 firewalls by exploiting something nobody can patch away

Securityaffairs·Oct 7

Related Entities

Credential Stuffing Brute Force Data Breach Password Spraying FortiBleed T1566.001 - Spearphishing Attachment T1531 - Account Access Removal T1021 - Remote Services T1110 - Brute Force Fortigate Fortinet FortiGate FortiOS