IP > 216.39.55.12

More information on this IP is in AlienVault OTX

Is this malicious?

Reports

https://isc.sans.edu/api/openiocsources/2015-09-21...

https://otx.alienvault.com/pulse/56010e8e67db8c6fb...

Malware

MD5	A/V
0328d6308e266e4c974ebb96a832b916	[VirTool.VBInject] [Trojan.Win32.Autoruner1.ddmzea] [Trojan.Asprox.B] [Injector.GESY] [Win32/Inject.eMeLTLD] [Trojan.Injector!BEaSREK1+mQ] [Trojan.Win32.S.Jorik.912032[h]] [PE:Trojan.Injector!1.9C6E] [TrojWare.Win32.Injector.AOO] [Win32.HLLW.Autoruner1.24454] [Trojan.Injector.Win32.213276] [W32/Worm-FKA!E99AD88D8365] [Mal/Wonton-X] [W32/Trojan.QDXE-5172] [Worm/Win32.VBNA] [Trojan/Win32.Jorik] [Artemis!0328D6308E26] [Worm.VBNA.bdfy] [Trojan.Win32.Injector] [W32/Injector.ZYM!tr] [Trojan.Win32.Injector.BABIP] [Win32/Trojan.610]
176d6404fcc902d82ae987c085b2b161	[WS.Reputation.1]
226bbc878795ed5af2dd12b02727d2d3	[BehavesLike.Win32.Dropper.cc] [Variant.Graftor.df] [PUA.BrowShot]
281a2ce9e82b29f8eea7411e9160b489	[Trojan.FakeMS.ED] [Heur.I] [BehavesLike.Win32.Packed.cm] [Trojan:Win32/Powessere.A] [Trojan/Win32.Zbot] [Backdoor.Win32.PMax] [Trojan.Win32.Kryptik.BCOOJ]
2d7bb5714b2a19dccf36e8deb1c74b06	[HW32.Packed.1745] [Backdoor.Graybird] [Hacktool.Win32.GameHack.MV] [Skodna.GameHack.NXQ]
400c064ffa7d6f6f8acca359dea6d49b	[W32.Clod777.Trojan.d99a] [Trojan/W32.Small.19456.AT] [Worm.Ailis.a] [W32/Ailis.a] [Trojan.Win32.Ailis.fwnq] [W32/Ailis.A] [Win32/Silia.A] [Trojan.AililiA.A] [Worm.Win32.Ailis.a] [Trojan.VB.AililiA.A] [Worm.Ailis!RTdcEYGNTSA] [Worm.Win32.Ailis.A] [WORM_AILIS.A] [Heuristic.BehavesLike.Win32.Suspicious-BAY.K] [Backdoor/PoisonIvy.cg] [Worm/Win32.Ailis] [Worm:Win32/Ailis.A] [W32/Ailis.EUPU-0207] [Win-Trojan/VBAilis.19456] [Worm.Win32.Ailis.ABC] [Win32.Worm.Ailis.Oxuy] [Virus.Worm.SuspectCRC] [W32/Ailis.A!worm] [W32/Ailis.A.worm] [Win32/Trojan.66a]
440aa7234551009779c2cfa272cc1d9f	[Trojan.SMHeist.3] [Adware.AdClick.2] [Riskware/Sim] [Win32/DH{Bw?}]
47d285aec6f3dfd9b6ca0e0ba6625bdf
4a6c4191a86c9de045ad1e5e3fa1008f	[W32.Clod516.Trojan.f992] [Backdoor.Small.CIJ] [Backdoor.Small.CIJ] [TrojanDownloader.VB.z4] [Artemis!4A6C4191A86C] [W32/VB-Downloader-Minimi-based!] [Backdoor.Trojan] [Banload.CDRP] [Trojan.Downloader-69056] [Backdoor.Small.CIJ] [Backdoor.Small.CIJ] [Mal/VB-DC] [Backdoor.Win32.Small.CIJ0] [Backdoor.Small.CIJ] [Trojan.DownLoad.63173] [Mal_Banld-5] [Artemis!4A6C4191A86C] [Backdoor.Small.CIJ] [W32/VB-Downloader-Minimi-based!] [Trojan.Win32.Downloader.ASqD] [Downloader.Rozena] [Trj/Downloader.MDW] [Win32/Trojan.279]
4db19c0167b126fb05326f829de9f453	[W32.Clodbd2.Trojan.3721] [Dialer.RAS] [Trojan.Downloader.Small.UF] [Artemis!4DB19C0167B1] [Trojan/Proxy.Sobit.h] [Riskware.Win32.Tibs.utqa] [W32/Trojan.BEKI] [Adware.Sa] [DIALER_RAS] [Win32:Tibs-ACF] [Trojan-Proxy.Win32.Sobit.h] [Trojan.PR.Sobit!JuOpoicn1uc] [TrojWare.Win32.TrojanProxy.Sobit.h] [Trojan.DownLoader.589] [TR/Dldr.Small.UF] [TrojanProxy.Sobit.f] [Trojan[Proxy]/Win32.Sobit] [Win32.HeurC.KVM003.a.(kcloud)] [TrojanProxy:Win32/Sobit.H] [W32/Trojan.SYHQ-1690] [Win32/SillyDl.OX] [TrojanProxy.Sobit] [Trj/CI.A] [not-a-virus:Porn-Dialer.Win32.Tibs] [Malware_fam.gw] [Proxy.AMYY] [Trojan.Win32.Sobit.Akr]
5022c02e84dbdca5b2800e59d5534a49
5211bcb37be12d805a2210dcd2a638c2
685e6d1e442e2250ab070678cb099bc6
70da06a59b3e6a814260fa7483790fd8
712d01c635be667622cb662cbaec8cdf
74fe0e100be5e913ce43a79ac0f9611b
7d026327537e1250a1ae2c2f25d7f210
8186c7bf72a3e394df28742c09e5657e
82161343906ca1a4dc64e89f89e3a390
95052031a0e1c96377b0d2c762b849e5
973a6258b76c4223fda6e08fb50c9af9
9c01e2d1d929dc32ace1fd14fda091a9
9c48ef2da58a1ac5cbe5ef89d3e52fe1
9cafa10f4ceac2a411ff475cf74cec70
a9782533c21475c629168feb9c32337a
ab99647caa3e6276a4527718bd88a822
d21b746615a6dca61768a287d33cf9ae
e2e3cd2b817191d75742410d4a246906
ea655ab5f6395b51af79ddec4906d355
ed37b1f243c960b2344c42564466fc90

IP Whois

Property	Value
Location	Sunnyvale, United States
Country	United States

Reverse DNS

Domain	Date
ad.adnetwork.net	2015-11-21
cookiex.ngd.yahoo.com	2015-10-30
ads.yahoo.com	2015-10-29
ad.yieldmanager.com	2015-10-27

DNS Resolutions

SSL Certficate

SSL MD5	5ff9682401b5d56a8db1b82fb666159e
SSL SHA1	20edf85006bd863ef36e9fa1b973f062e0b8ceef

IP Classes

216.39.55..x=Browse , 216.39.55..x.x=Browse | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]