104.238.158.106

Classification: Suspicious

104.238.158.106 is a suspicious IP address. Reported by 8 threat sources, last seen 2022-09-15. Network: AS20473 Choopa LLC.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Malicious Host ThreatCrowd 2020-04-21 22:40:09 2022-09-15 04:05:14 malicious-activity
ET CNC Zeus Tracker Reported CnC Server UDP Emerging Threats 2017-10-15 14:01:06 2018-10-19 07:51:23
ET CNC Zeus Tracker Reported CnC Server TCP Emerging Threats 2017-10-15 14:01:05 2018-10-12 07:53:32
Malicious site Hybrid-Analysis 2018-07-22 06:30:11 2018-07-22 06:30:11
Gen:Variant.Mayachok Hybrid-Analysis 2018-04-19 16:45:22 2018-04-19 16:45:23
atmos,banker,evasive,ransomware,trojan,zbot,zeus Maltiverse 2017-12-24 23:04:13 2017-12-24 23:04:13
banker,evasive,ransomware,zbot,zeus Maltiverse 2017-12-24 22:45:23 2017-12-24 22:45:23
Malicious host Talos Intelligence 2017-12-09 16:51:16 2017-12-09 16:51:16
pony,trojan Maltiverse 2017-12-03 00:15:25 2017-12-03 00:15:25
ZeuS Zeustracker 2017-11-10 20:16:32 2017-11-10 20:16:32
Malicious domain SANS Internet Storm Center 2017-11-09 19:15:28 2017-11-09 19:15:28
ZeuS (Cit design) Cybercrime-tracker.net 2017-10-15 16:07:31 2017-10-15 16:07:31
Carbon Grabber Cybercrime-tracker.net 2017-10-15 15:25:44 2017-10-15 15:25:44
IceIX Cybercrime-tracker.net 2017-10-15 15:10:20 2017-10-15 15:10:20
Solar Cybercrime-tracker.net 2017-10-15 14:49:59 2017-10-15 14:49:59
WSO Cybercrime-tracker.net 2017-10-15 14:47:28 2017-10-15 14:47:28
Neutrino Cybercrime-tracker.net 2017-10-15 14:46:37 2017-10-15 14:46:37
JackPos Cybercrime-tracker.net 2017-10-15 14:39:22 2017-10-15 14:39:22
Tornado Cybercrime-tracker.net 2017-10-15 14:35:25 2017-10-15 14:35:25
Mailer Cybercrime-tracker.net 2017-10-15 14:35:20 2017-10-15 14:35:20
Chanitor Cybercrime-tracker.net 2017-10-15 14:26:55 2017-10-15 14:26:55
H1N1 Cybercrime-tracker.net 2017-10-15 14:26:51 2017-10-15 14:26:51
Backdoor Cybercrime-tracker.net 2017-10-15 14:26:09 2017-10-15 14:26:09
Betabot Cybercrime-tracker.net 2017-10-15 14:25:00 2017-10-15 14:25:00
Citadel Cybercrime-tracker.net 2017-10-15 14:22:49 2017-10-15 14:22:49
iSpy Cybercrime-tracker.net 2017-10-15 14:18:41 2017-10-15 14:18:41
ZeuS Cybercrime-tracker.net 2017-10-15 14:06:31 2017-10-15 14:06:31
KeyBase Cybercrime-tracker.net 2017-10-15 14:01:43 2017-10-15 14:01:43
Pony Cybercrime-tracker.net 2017-10-15 13:55:33 2017-10-15 13:55:33

Tags

c&c

Whois information

AS name
AS20473 Choopa LLC
AS registry
arin
AS date
2014-11-13 00:00:00
AS CIDR
104.238.158.0/23
CIDR
104.238.128.0/18
Registrant
Choopa, LLC
Address
14 Cliffwood Ave Suite 300
City
Matawan
State
NJ
Postal code
07747
Country
DE — Germany 🇩🇪
Contact email
[email protected], [email protected]
First indexed
2017-10-15 13:55:33
Last updated
2026-02-13 14:48:05