ctrlINT What the industry said about every indicator, with the quote

104.219.234[.]138IP address

Reported by 1 independent source · first reported by Google Threat Intelligence · last reported

Last reported 29 days ago

What the reports say

1 report, newest first · the exact sentence from each

  1. “In September 2026 intrusions, UNC6240 continued to use IT-themed infrastructure associated with MeshAgent (winmanage-me.network on 104.219.234[.]138) for secondary staging and management.”

    Google Threat IntelligenceVendor
    ShinyHunters Renewed Mass Exploitation Campaign Targeting Oracle PeopleSoft

Indicators reported together

named in the same reports
Copy these 12 indicators · defanged

Also named with it: CVE-2026-35273

Thanks — we review every report.

Report a wrong value
What is wrong with 104.219.234[.]138 here?
No account needed. We do not store your IP address.