5.181.21.75

IP Address

Threat entity extracted from intelligence sources

Frequency

2

occurrences

First Seen

May 22, 2026

Last Seen

May 25, 2026

IOC Validation

ThreatCluster AI

False Positive — False Positive confidence

No context provided.

This indicator was flagged as a false positive by AI analysis.

Pivot to external tools

Opens in new tab · no data sent to TC

Reputation · 4

Sandbox · 2

Infrastructure · 3

Malware trackers · 1

Web search · 2

Related Clusters (2)

Cloud Atlas APT Group Exploits CVE-2018-0802 and Modifies termsrv.dll for RDP Access

May 25·4 sources

Cloud Atlas APT Targets Russia and Belarus with New Tools and Techniques

May 23·2 sources

Related Articles (2)

Cloud Atlas said in a report shared with GBhackers

securelist.ru·May 25

Cloud Atlas activity in the second half of 2025 and early 2026: new tools and a new payload

Securelist·May 22

Related Entities

Cloud Atlas Malware Phishing Belarus Russia Cwe-119 - Improper Restriction Of Operations Within Memory Buffer CWE-94 - Code Injection Government PhantomHeart PowerShower VBCloud T1059.001 - PowerShell