136.243.104.235
Classification: Neutral
136.243.104.235 is a neutral IP address: not currently flagged by Maltiverse. Previously reported by 3 threat sources, last seen 2023-11-02.
MITRE ATT&CK associations
Malware families: FLAWEDAMMYY (S0381)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| FlawedAmmyy | ThreatFox Abuse.ch | 2023-10-31 14:17:03 | 2023-11-02 13:18:47 | malicious-activity | S0381 FlawedAmmyy |
| Application.RemoteAdmin | Hybrid-Analysis | 2021-10-22 23:00:06 | 2021-10-22 23:00:06 | ||
| IOC_19052020 | CronUp Threat Intel | 2020-05-20 03:03:09 | 2020-05-20 03:03:09 | ||
| Threats200220200050 | CronUp Threat Intel | 2020-02-20 03:54:47 | 2020-02-20 03:54:47 | ||
| TOP AMENAZAS - 19022020 | CronUp Threat Intel | 2020-02-19 16:47:26 | 2020-02-19 16:47:26 | ||
| Gen:Variant.Application.RemoteAdmin | Hybrid-Analysis | 2020-01-24 13:30:51 | 2020-01-24 13:30:51 | ||
| RemoteAdmin.Ammyy | Hybrid-Analysis | 2019-10-19 23:00:05 | 2019-10-19 23:00:05 |
Tags
malware port:443Whois information
- AS name
- AS24940 Hetzner Online GmbH
- AS registry
- ripencc
- AS date
- 2004-04-14 00:00:00
- AS CIDR
- 136.243.0.0/16
- Registrant
- Hetzner Online GmbH
- City
- Falkenstein/Vogtl.
- Postal code
- 08223
- Country
- DE — Germany 🇩🇪
- First indexed
- 2019-10-19 23:00:05
- Last updated
- 2026-07-26 08:23:51
Malicious IPs in the same CIDR
136.243.228.195 136.243.176.166 136.243.176.179 136.243.3.194 136.243.147.89 136.243.92.194 136.243.154.74 136.243.153.169 136.243.228.181 136.243.176.148 136.243.174.159 136.243.89.124 136.243.228.197 136.243.172.168 136.243.228.194 136.243.220.213 136.243.220.212 136.243.7.52 136.243.220.214 136.243.220.209