Help RSS API Feed Maltego Contact                        

Domain > 1s.gaebot.ip.or.kr

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to 1s.gaebot.ip.or.kr
MD5A/V
b1c4b158acf8cf6711cd08eb71a6c93c[W32.SwaveF.Trojan] [Backdoor.PcClient.TEV] [Backdoor.PcClient.ZL4] [Trojan.FakeMS.ED] [W32/Backdoor2.EPNZ] [BKDR_VENIK.SMA] [Backdoor.PcClient.TEV] [Backdoor.PcClient.TEV] [Backdoor.PcClient.TEV] [Trojan.DownLoader9.28536] [BKDR_VENIK.SMA] [BehavesLike.Win32.Backdoor.qc] [Troj/Bckdr-QWZ] [W32/Backdoor.NGGB-2178] [Backdoor:Win32/Venik] [Backdoor.PcClient.TEV] [Backdoor.PcClient.TEV] [Backdoor/Win32.Nbdd] [BScope.P2P-Worm.Palevo] [W32/Nbdd.FB!tr.bdr] [BackDoor.PcClient.2.BK]

Whois
PropertyValue
Namewoo, sangcheol
Email sangcheolwoo@gmail.com
NameServer ns24.dnsever.com
Created 2005-08-04 00:00:00
Changed 2012-02-20 00:00:00
Expires 2016-08-04 00:00:00
Registrar Megazone

DNS Resolutions
DateIP Address
2016-03-08103.232.215.148 (ClassC)
2025-11-01151.80.13.35 (ClassC)

Port 80

Subdomains
DateDomainIP
gkz2000.ip.or.kr2025-07-31151.80.13.35
iium4.ip.or.kr2014-10-15114.207.112.202
jst926.ip.or.kr2025-08-31151.80.13.35
hhk0208.ip.or.kr2025-07-09151.80.13.35
banetta.ip.or.kr2025-10-29151.80.13.35
amcc.ip.or.kr2025-10-27151.80.13.35
lovemusic.ip.or.kr2025-10-27151.80.13.35
ilife.ip.or.kr2025-10-27151.80.13.35
aprointeractive.ip.or.kr2025-10-27151.80.13.35
kheng.ip.or.kr2025-10-27151.80.13.35
yam.drug.ip.or.kr2014-10-16123.123.123.123
daum.drug.ip.or.kr2014-10-14123.123.123.123
naver.drug.ip.or.kr2014-10-14123.123.123.123
com.wangyi.ip.or.kr2025-05-22151.80.13.35
link.ip.or.kr2025-10-27151.80.13.35
bangkok.ip.or.kr2014-10-16222.231.0.4
mcn.ip.or.kr2025-10-27151.80.13.35
comtip.ip.or.kr2025-09-30151.80.13.35
develop.ip.or.kr2025-10-28151.80.13.35
kthftp.ip.or.kr2025-07-02151.80.13.35
lover.ip.or.kr2025-10-06151.80.13.35
tsohr.ip.or.kr2025-10-27221.160.104.191
fountainsprings.ip.or.kr2025-10-27151.80.13.35
lks.fountainsprings.ip.or.kr2025-10-27151.80.13.35
jaypos.ip.or.kr2025-05-22151.80.13.35
impact.ip.or.kr2025-09-25151.80.13.35
1s.gaebot.ip.or.kr2016-03-08103.232.215.148
greenport.ip.or.kr2025-10-11151.80.13.35
itu.ip.or.kr2025-10-27151.80.13.35
mailrelay.ip.or.kr2025-10-27151.80.13.35
infy.ip.or.kr2025-10-02151.80.13.35
holy.ip.or.kr2025-10-27151.80.13.35
ddosmany.ip.or.kr2025-10-27151.80.13.35
gyz.ip.or.kr2025-10-09151.80.13.35
View on OTX | View on ThreatMiner








Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]



� Copyright 2019 AlienVault, Inc. | Legal| Status| Do Not Sell My Personal Information