ClusterHawk is a threat infrastructure analysis platform built for cybersecurity professionals to find, profile, and track malicious infrastructure using machine learning.

How does IP clustering work?

ClusterHawk uses ensemble clustering algorithms to analyze IP address patterns, identify relationships, and generate threat intelligence automatically.

What subscription plans are available?

ClusterHawk offers Analyst, Team, Professional, and Enterprise tiers with varying levels of features and analysis capabilities.

How do I submit IPs for analysis?

Upload your IP addresses through the secure Workspace interface. The platform handles datasets up to 5000 addresses per job.

Platform Documentation

Learn how to use ClusterHawk for IP clustering and threat detection

Search Documentation

No results found for ""

Try searching for: clustering, pipeline, model, api, account, dashboard, results, configuration

New to ClusterHawk?

Follow these steps to get started with professional threat intelligence analysis

Submit IPs

Upload your IP addresses of interest through our secure interface. Our platform handles datasets up to 5000 addresses.

Analysis

Our deterministic ensemble pipeline analyzes patterns, identifies relationships, and generates threat intelligence automatically — same input, same clusters, same reasoning, every run.

Receive reports

Get comprehensive threat intelligence reports with IOCs, YARA rules, and hunting queries.

Execute hunting queries

Use our automated hunting query execution service to validate findings and monitor for new threats.

User Guide

Job Management

Analysis Job Management

The Analysis Results page has tools for managing and filtering your analysis jobs:

Job Selection: Use the job selector to navigate between different analysis jobs. You can:
- Filter jobs by pipeline type (Basic, Model Training, Prediction, etc.)
- Search for specific jobs by name or ID
- View job metadata including creation date, IP count, and description
- Quickly switch between different analyses to compare results
Analysis Filtering: Apply filters to narrow down your job list:
- Date range filters to find jobs from specific time periods
- Pipeline type filters to focus on specific analysis types
- Status filters to view completed, running, or failed jobs
Results Export: Export analysis results in various formats for further processing or sharing