First seen May 10, 2026 · Last seen May 20, 2026 · Threat Feed
Public preview
IOC type, status and defensive guidance visible. Pro adds alert context, Pro+ adds exports and deeper relationships.
Context
Mock IP associated with SilkGate Broker VPN exploitation infrastructure. Currently inactive.
Defensive Guidance
Review VPN access logs for connections from this range. Patch Fortinet SSL VPN vulnerabilities.
Tags
Safety Note
RFC 5737 documentation IP (198.51.100.0/24). Not a real indicator.
Actions
Related Threat Feed Items
Deeper context available with Pro+
View plans →
