Help RSS API Feed Maltego Contact                        

Domain > ip.aa2.cn

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to ip.aa2.cn

MD5A/V
1a9a5ff3ccc19f703603d835d719e8a9[Trojan/Kryptik.ddgl] [Trojan.Vehidis!] [W32/S-fd0b39e8!Eldorado] [PE:Backdoor.Win32.Zegost.av!1075357568] [UnclassifiedMalware] [BackDoor.Spy.2743] [Trojan.Vehidis.Win32.743] [W32/S-fd0b39e8!Eldorado] [Backdoor/Farfli.mt] [W32/Kryptik.DDGL!tr] [Trojan/Win32.Vehidis] [Trojan.Mikey.D2AE0] [Backdoor/Win32.Zegost] [Backdoor:Win32/Zegost!rfn] [Backdoor.Farfli] [Adware.Win32.iBryte.DMDY] [Trojan-GameThief.Win32.Magania] [Crypt4.JLP]
19c53067a4d499c0b8e8c6d68d2f9b00
7190a0f05ba934b0b92c9eabb79866ac
0adf5f12490a1728df0596752e4bb14f
b1d80f047178f7d9e57738a8d0023c41
03b96fe6cfac73838920bb72cc0fae1b
710dd32389cb3bb467157542684795eb
06d0f2273cc19cbec623821edca064ea
b13c77d94982e88819fa5c910a05377e[BackDoor.Spy.2743] [Win32/Kryptik.DDGL] [W32/Kryptik.DDGL!tr] [Crypt4.JLP] [Trojan-GameThief.Win32.Magania] [Trojan.Win32.Vehidis.bsk] [Backdoor*Win32/Zegost!rfn] [Trojan.Vehidis.vix.pbxv] [Trojan.Vehidis]
1bb7e16ea8d8fb317cc91fa10910a309[Trojan.Vehidis.r4] [BackDoor.Spy.2743] [Win32/Kryptik.DDGL] [W32/Kryptik.DDGL!tr] [Crypt4.JLP] [Trojan-GameThief.Win32.Magania] [Trojan.Win32.Vehidis.vlw] [Backdoor*Win32/Zegost!rfn] [Trojan.Vehidis.vix.pbxv] [Trojan.Vehidis]
9574457395cd3da73b5ecc0f05047bf1[W32/S-fd0b39e8!Eldorado] [BackDoor.Spy.2743] [Win32/Kryptik.DDGL] [W32/Kryptik.DDGL!tr] [Crypt4.JLP] [Trojan-GameThief.Win32.Magania] [Backdoor*Win32/Zegost!rfn] [Trojan.Vehidis.vix.pbxv] [Trojan.Vehidis]
c8f97ccfa012045ce64e76270bb98a04[Backdoor.Win32.Zegost.av] [BackDoor.Spy.2743] [Backdoor.Farfli] [Trojan.Vehidis.08576] [Trojan.Vehidis.Win32.743] [Trojan-GameThief.Win32.Magania] [W32/S-fd0b39e8!Eldorado] [Backdoor*Win32/Zegost!rfn] [W32/Kryptik.DDGL!tr] [Crypt4.JLP] [Win32/Kryptik.DMDY] [Trojan.Vehidis.vix.pbxv]
17295e77d01991c1921017c529562a51[BackDoor.Spy.2743] [Trojan.Vehidis.Win32.743] [BKDR_ZEGOST.DFA] [Crypt4.JLP] [Trojan-GameThief.Win32.Magania] [Backdoor.Farfli] [Trojan.Vehidis.vix.pbxv] [W32/Kryptik.DDGL!tr] [W32/S-fd0b39e8!Eldorado] [Downloader.Upatre] [Win32/Kryptik.DMDY] [Backdoor.Win32.Zegost.av] [Trojan.Vehidis.08576] [Backdoor*Win32/Zegost!rfn]
c56e3aa9156f509eec2a315e11467903[Backdoor.Win32.Zegost.av] [Trojan.Vehidis.vix.pbxv] [Win32/Kryptik.DMDY] [Crypt4.JLP] [Backdoor.Trojan] [W32/Kryptik.DDGL!tr] [Backdoor*Win32/Zegost!rfn] [W32/Trojan.RLZR-2457] [Trojan-GameThief.Win32.Magania] [Trojan.Vehidis.Win32.743] [Backdoor.Zegost.r4] [Backdoor.Farfli] [BackDoor.Spy.2743]
2365e95add3444a839db046a20c09da5[Backdoor.Win32.Zegost.av] [Trojan.Vehidis.vix.pbxv] [Win32/Kryptik.DMDY] [Crypt4.JLP] [W32/Kryptik.DDGL!tr] [Backdoor*Win32/Zegost!rfn] [W32/S-fd0b39e8!Eldorado] [Trojan-GameThief.Win32.Magania] [Trojan.Vehidis.Win32.743] [Backdoor.Farfli] [BackDoor.Spy.2743]
018cb20edc17a88fdeff5ca7a4911566[Backdoor.Win32.Zegost.av] [BackDoor.Spy.2743] [W32/Kryptik.DDGL!tr] [Backdoor.Farfli] [Trojan-GameThief.Win32.Magania] [Trojan.Vehidis.vix.pbxv] [W32/S-fd0b39e8!Eldorado] [Win32/Kryptik.DMDY] [Trojan.Vehidis.Win32.743] [Crypt4.JLP] [Backdoor*Win32/Zegost!rfn]
3a310d6f6bb077f1e40e34e14d298ee2
4350cdc38b82af7580c9cb67ebe1cf76
f9290aff082f69fcfb6834a476854e38
3e302240d352fe2a69cd416d8dee01dd

Whois

PropertyValue
Organization 黄鹏
Email altxxg@163.com
NameServer f1g1ns2.dnspod.net

DNS Resolutions

DateIP Address
2014-08-10115.231.84.94 (ClassC)
2014-08-13218.92.226.80 (ClassC)
2015-02-12218.92.226.42 (ClassC)
2015-02-1661.153.104.232 (ClassC)
2015-03-2658.216.25.33 (ClassC)
2015-04-1227.221.23.222 (ClassC)
2015-04-22119.147.227.139 (ClassC)
2015-05-07112.90.51.173 (ClassC)
2015-05-0761.240.150.11 (ClassC)
2015-05-07222.161.220.33 (ClassC)
2015-08-09119.29.31.99 (ClassC)
2015-08-27119.29.118.14 (ClassC)
2015-09-11183.131.85.221 (ClassC)
2015-10-15122.114.94.191 (ClassC)
2015-10-27222.186.58.144 (ClassC)
2015-11-12203.195.174.215 (ClassC)
2015-12-24119.57.196.112 (ClassC)
2016-01-01120.52.113.28 (ClassC)
2016-01-26183.232.29.143 (ClassC)
2016-03-24115.231.110.77 (ClassC)
2016-03-30183.232.29.158 (ClassC)
2016-04-05115.231.103.92 (ClassC)
2016-04-10118.192.150.112 (ClassC)
2016-06-27118.192.151.183 (ClassC)
2017-05-12139.199.85.59 (ClassC)
2017-05-2543.248.102.137 (ClassC)
2017-09-01103.45.12.197 (ClassC)
2017-10-1969.197.156.68 (ClassC)
2018-05-25103.45.100.102 (ClassC)
2018-09-2243.226.34.202 (ClassC)
2018-11-1243.226.35.41 (ClassC)
2019-08-1543.226.39.75 (ClassC)
2020-07-2947.91.170.222 (ClassC)
2020-10-10103.45.105.244 (ClassC)
2020-12-2945.119.125.223 (ClassC)
2024-07-27103.119.3.249 (ClassC)
2025-07-2423.224.74.121 (ClassC)
2025-08-03172.247.217.30 (ClassC)

Port 80

View on OTX | View on ThreatMiner








Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]



� Copyright 2019 AlienVault, Inc. | Legal| Status| Do Not Sell My Personal Information