31.56.209.245
Classification: Suspicious
31.56.209.245 is a suspicious IP address in Amsterdam, NL. Linked to Chaos malware. 2 sightings from ThreatFox Abuse.ch, last seen 2026-09-10.
MITRE ATT&CK associations
Malware families: CHAOS (S0220)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Chaos | ThreatFox Abuse.ch | 2026-08-18 09:46:30 | 2026-09-10 20:25:17 | botnet malicious-activity | S0220 Chaos |
Tags
fakeryuk yashma chaos port:5088 ryukjoke drb-ra port:443Whois information
- AS name
- AS209373 SWISSNET LLC
- Registrant
- SWISSNET LLC
- City
- Amsterdam
- Postal code
- 1012
- Country
- NL — Netherlands 🇳🇱
- First indexed
- 2026-08-18 10:25:06
- Last updated
- 2026-09-18 05:26:49