104.239.157.210
Classification: Neutral
104.239.157.210 is a neutral IP address. Reported by 7 threat sources, last seen 2022-09-15. Network: AS33070 Rackspace Hosting.
MITRE ATT&CK associations
Malware families: SOLAR (S1166) PONY (S0453) ANDROMEDA (S1074) EMOTET (S0367)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Malicious Host | ThreatCrowd | 2020-04-21 22:40:10 | 2022-09-15 04:05:14 | malicious-activity | |
| simda | Maltiverse Research Team | 2018-10-30 12:00:30 | 2020-07-03 07:50:01 | ||
| Worm.TSY | Hybrid-Analysis | 2020-05-17 17:45:21 | 2020-05-17 17:45:21 | ||
| Dropped:Generic.Malware.SFMHX | Hybrid-Analysis | 2019-03-18 17:30:20 | 2020-05-13 18:00:10 | ||
| Generic.Malware | Hybrid-Analysis | 2018-07-17 20:45:35 | 2020-05-08 10:45:19 | ||
| Virus.Sality | Hybrid-Analysis | 2018-07-05 01:45:22 | 2020-05-08 10:00:24 | ||
| Trojan.VBKrypt | Hybrid-Analysis | 2020-04-27 08:00:10 | 2020-04-27 08:00:10 | ||
| Malware site | Hybrid-Analysis | 2018-07-08 02:45:08 | 2020-03-04 06:30:23 | ||
| Sality.3 | Hybrid-Analysis | 2018-04-24 17:45:37 | 2020-02-14 18:45:08 | ||
| Worm.FakeDoc | Hybrid-Analysis | 2020-01-23 06:15:56 | 2020-01-23 06:15:56 | ||
| Gen:Heur.Zard | Hybrid-Analysis | 2019-08-19 17:45:18 | 2019-08-19 17:45:18 | ||
| Malicious site | Hybrid-Analysis | 2018-07-05 08:15:14 | 2019-08-14 12:15:04 | ||
| Gen:Variant.Zusy | Hybrid-Analysis | 2018-05-06 20:17:09 | 2019-08-09 10:15:14 | ||
| Kryptik.GUWD | Hybrid-Analysis | 2019-07-25 14:45:30 | 2019-07-25 14:45:30 | ||
| Gen:Variant.Kazy | Hybrid-Analysis | 2019-07-17 18:00:11 | 2019-07-17 18:00:11 | ||
| Trojan.AgentWDCR | Hybrid-Analysis | 2019-07-04 08:00:19 | 2019-07-04 08:00:19 | ||
| Trojan.Generic | Hybrid-Analysis | 2018-07-21 11:00:12 | 2019-07-04 07:45:05 | ||
| CVE-2017-0147 | Hybrid-Analysis | 2019-03-16 04:15:06 | 2019-05-28 04:15:08 | ||
| Shiz.H.gen | Hybrid-Analysis | 2019-03-26 12:00:18 | 2019-03-26 12:00:18 | ||
| suppobox | Maltiverse Research Team | 2018-11-23 01:34:01 | 2019-03-21 01:32:33 | ||
| Neshta.A | Hybrid-Analysis | 2019-03-16 12:45:08 | 2019-03-16 12:45:14 | ||
| Backdoor.Shiz | Hybrid-Analysis | 2018-07-31 03:15:55 | 2018-11-07 17:15:12 | ||
| tinba | Maltiverse Research Team | 2018-11-06 10:45:47 | 2018-11-06 10:45:54 | ||
| Malicious site | Maltiverse | 2018-10-07 00:07:54 | 2018-10-07 00:07:54 | ||
| tinba | Maltiverse | 2018-03-17 21:48:41 | 2018-10-07 00:07:54 | ||
| simda | Maltiverse | 2018-03-25 05:33:57 | 2018-10-06 23:27:19 | ||
| emotet | Maltiverse | 2018-03-13 05:12:08 | 2018-10-06 23:12:05 | S0367 Emotet | |
| ramnit | Maltiverse | 2018-03-25 05:27:52 | 2018-10-06 11:39:13 | ||
| Gen:Trojan.Ipatre | Hybrid-Analysis | 2018-09-02 01:30:07 | 2018-09-02 01:30:07 | ||
| Backdoor.Androm | Hybrid-Analysis | 2018-08-27 11:30:08 | 2018-08-27 11:30:08 | ||
| Trojan.VBS | Hybrid-Analysis | 2018-05-31 14:45:12 | 2018-05-31 14:45:12 | ||
| Slingshot | Maltiverse Research Team | 2018-05-15 09:48:21 | 2018-05-15 09:48:23 | ||
| FakeDoc.A | Hybrid-Analysis | 2018-05-14 18:15:17 | 2018-05-14 18:15:17 | ||
| Trojan.Bayrob | Hybrid-Analysis | 2018-05-08 22:30:26 | 2018-05-08 22:30:26 | ||
| Backdoor.Xtreme | Hybrid-Analysis | 2018-04-24 14:46:12 | 2018-04-24 15:30:48 | ||
| Citadel | Maltiverse Research Team | 2018-04-16 14:48:34 | 2018-04-16 14:48:34 | ||
| suppobox | Maltiverse | 2018-03-28 02:21:32 | 2018-03-28 02:21:32 | ||
| vawtrak | Maltiverse | 2018-03-25 10:56:35 | 2018-03-25 10:56:35 | ||
| botnet ,sality ,sinkhole ,virut | Maltiverse | 2018-03-21 14:03:14 | 2018-03-21 14:03:14 | ||
| botnet ,palevo | Maltiverse | 2018-03-13 08:45:31 | 2018-03-13 08:45:31 | ||
| panda | Maltiverse | 2018-03-07 20:15:57 | 2018-03-07 20:15:57 | ||
| botnet ,virut | Maltiverse | 2018-03-05 19:02:40 | 2018-03-05 19:02:40 | ||
| backdoor,downloader | Maltiverse | 2018-01-20 16:38:12 | 2018-01-20 16:38:12 | ||
| botnet,exploit,phishing,ransomware,virut,wanacrypt0r,wannacry,wcry | Maltiverse | 2018-01-20 10:20:19 | 2018-01-20 10:20:19 | ||
| botnet,sinkhole,virut | Maltiverse | 2018-01-19 00:52:09 | 2018-01-19 00:52:09 | ||
| pua | Maltiverse | 2018-01-01 05:42:49 | 2018-01-01 05:42:49 | ||
| sality | Maltiverse | 2018-01-01 05:10:37 | 2018-01-01 05:10:37 | ||
| botnet,palevo | Maltiverse | 2017-12-06 08:46:33 | 2017-12-06 08:46:33 | ||
| kazy,loadmoney,pup | Maltiverse | 2017-12-05 15:30:15 | 2017-12-05 15:30:15 | ||
| analysis,test | Maltiverse | 2017-11-27 08:30:37 | 2017-11-27 08:30:37 | ||
| Malicious domain | SANS Internet Storm Center | 2017-11-09 19:23:03 | 2017-11-09 19:23:03 | ||
| Ransomware Locky distribution site | Ransomware Tracker | 2017-10-15 17:31:19 | 2017-10-15 17:31:19 | ||
| Spitmo | Cybercrime-tracker.net | 2017-10-15 16:24:35 | 2017-10-15 16:24:35 | ||
| VertexNet | Cybercrime-tracker.net | 2017-10-15 16:24:18 | 2017-10-15 16:24:18 | ||
| Smoke Bot | Cybercrime-tracker.net | 2017-10-15 16:24:07 | 2017-10-15 16:24:07 | ||
| Cold Death | Cybercrime-tracker.net | 2017-10-15 16:22:57 | 2017-10-15 16:22:57 | ||
| kbot | Cybercrime-tracker.net | 2017-10-15 16:21:42 | 2017-10-15 16:21:42 | ||
| BetaBot | Cybercrime-tracker.net | 2017-10-15 16:20:20 | 2017-10-15 16:20:20 | ||
| Vskimmer | Cybercrime-tracker.net | 2017-10-15 16:18:04 | 2017-10-15 16:18:04 | ||
| ZeuS (Citadel design) | Cybercrime-tracker.net | 2017-10-15 16:11:28 | 2017-10-15 16:11:28 | ||
| Mailer | Cybercrime-tracker.net | 2017-10-15 15:58:51 | 2017-10-15 15:58:51 | ||
| iBanking | Cybercrime-tracker.net | 2017-10-15 15:57:33 | 2017-10-15 15:57:33 | ||
| SpyEye | Cybercrime-tracker.net | 2017-10-15 15:55:06 | 2017-10-15 15:55:06 | ||
| Madness | Cybercrime-tracker.net | 2017-10-15 15:40:28 | 2017-10-15 15:40:28 | ||
| WebInject | Cybercrime-tracker.net | 2017-10-15 15:29:51 | 2017-10-15 15:29:51 | ||
| Plasma | Cybercrime-tracker.net | 2017-10-15 15:29:13 | 2017-10-15 15:29:13 | ||
| JackPos | Cybercrime-tracker.net | 2017-10-15 15:17:55 | 2017-10-15 15:17:55 | ||
| Phase | Cybercrime-tracker.net | 2017-10-15 15:11:38 | 2017-10-15 15:11:38 | ||
| HawkEye | Cybercrime-tracker.net | 2017-10-15 15:09:06 | 2017-10-15 15:09:06 | ||
| DDoS | Cybercrime-tracker.net | 2017-10-15 15:07:26 | 2017-10-15 15:07:26 | ||
| Keylogger | Cybercrime-tracker.net | 2017-10-15 15:05:34 | 2017-10-15 15:05:34 | ||
| Unknown | Cybercrime-tracker.net | 2017-10-15 15:05:23 | 2017-10-15 15:05:23 | ||
| LoadHTTP | Cybercrime-tracker.net | 2017-10-15 15:04:05 | 2017-10-15 15:04:05 | ||
| Kraken | Cybercrime-tracker.net | 2017-10-15 15:02:53 | 2017-10-15 15:02:53 | ||
| Betabot | Cybercrime-tracker.net | 2017-10-15 15:01:49 | 2017-10-15 15:01:49 | ||
| Dexter | Cybercrime-tracker.net | 2017-10-15 15:01:26 | 2017-10-15 15:01:26 | ||
| Andromeda | Cybercrime-tracker.net | 2017-10-15 15:00:44 | 2017-10-15 15:00:44 | S1074 ANDROMEDA | |
| Alina | Cybercrime-tracker.net | 2017-10-15 14:57:32 | 2017-10-15 14:57:32 | ||
| ZeuS | Cybercrime-tracker.net | 2017-10-15 14:54:58 | 2017-10-15 14:54:58 | ||
| Neutrino | Cybercrime-tracker.net | 2017-10-15 14:54:36 | 2017-10-15 14:54:36 | ||
| IceIX | Cybercrime-tracker.net | 2017-10-15 14:51:29 | 2017-10-15 14:51:29 | ||
| Pony | Cybercrime-tracker.net | 2017-10-15 14:50:11 | 2017-10-15 14:50:11 | S0453 Pony | |
| Solar | Cybercrime-tracker.net | 2017-10-15 14:49:19 | 2017-10-15 14:49:19 | S1166 Solar | |
| Athena | Cybercrime-tracker.net | 2017-10-15 14:47:54 | 2017-10-15 14:47:54 | ||
| Citadel | Cybercrime-tracker.net | 2017-10-15 14:21:53 | 2017-10-15 14:21:53 |
Tags
botnet virut panda c&c c2 dga palevo sality sinkhole citadel trojan banker apt28 natoWhois information
- AS name
- AS33070 Rackspace Hosting
- AS registry
- arin
- AS date
- 2014-12-02 00:00:00
- AS CIDR
- 104.239.128.0/19
- CIDR
- 104.239.128.0/17
- Registrant
- Rackspace Hosting
- Address
- 1 Fanatical Place
- City
- Dallas
- State
- TX
- Postal code
- 75202
- Country
- US — United States 🇺🇸
- Contact email
- [email protected], [email protected]
- First indexed
- 2017-10-15 14:21:53
- Last updated
- 2026-09-03 01:38:40