IP > 216.39.55.13

More information on this IP is in AlienVault OTX

Is this malicious?

Reports

https://isc.sans.edu/api/openiocsources/2015-09-21...

https://otx.alienvault.com/pulse/56010e8e67db8c6fb...

Malware

MD5	A/V

03b9436ae41dc3d30bce7217ee2cd25a	[Artemis!03B9436AE41D] [Trojan.DownLoader19.45902] [BehavesLike.Win32.Dropper.bh]
0c153ad62ec3f4d82bdbe5d281966e30	[PUP/Win32.Player]
1933aae3f25ff9ea3006b259c52d62e2	[Variant.Graftor.df] [Trojan/Win32.Xema] [PUA.BrowShot]
1e710400ec24a2fc5eb50e7e5b6c1906	[Worm.Esfury.X3] [Worm.AutoRun] [Trojan/AutoRun.VB.xw] [Trojan.StartPage!cwgHM+XlI18] [AutoRun.COCZ] [Win32/Tnega.LGKVTTC] [TROJ_ESFURY_DD3005F5.UVPA] [Trojan.Win32.AntiAV.trq] [Trojan.Win32.AntiAV.ddemfx] [Worm.Win32.VB.pcy] [Win32.HLLW.Autoruner1.61047] [Trojan.StartPage.Win32.20602] [Mal/VB-GI] [Trojan/StartPage.ufa] [Trojan/Win32.StartPage] [Win32.Troj.StartPage.ck.(kcloud)] [Worm:Win32/Esfury.X] [Virus.Win32.Heur.p] [Trojan.Win32.StartPage.abq] [Worm.Win32.Esfury] [W32/AutoRun.XW!tr] [Trojan.Win32.KillAV.aRmb] [Win32/Trojan.Dropper.7b4]
281a2ce9e82b29f8eea7411e9160b489	[Trojan.FakeMS.ED] [Heur.I] [BehavesLike.Win32.Packed.cm] [Trojan:Win32/Powessere.A] [Trojan/Win32.Zbot] [Backdoor.Win32.PMax] [Trojan.Win32.Kryptik.BCOOJ]
2948864b8afed778a167a4bdeaf0a1fa	[W32.HfsAutoA.11B8] [BehavesLike.Win32.Downloader.cc]
2b7809c589a059c4bb04b8f582f267e7
38706fabb83fd27c54294b69eb48e9d3	[Artemis!38706FABB83F] [Worm.AutoRun.Win32.119470] [Trojan.Encoder.983] [BehavesLike.Win32.Dropper.rc] [Trojan/Rector.df] [TR/Rogue.4669440.4] [Trojan.Rogue]
3a031ddf12fb20646ba9b839f6a12020	[W32.WinlogonNumbH.Trojan] [Worm.Win32.VBNA!O] [Trojan.KillAv.DR] [Trojan.Injector!8Ja3LhIJzn0] [Suspicious.Cloud.5] [Injector.CKYG] [Win32:Sality] [Worm.Win32.VBNA.bmge] [Trojan.Win32.Jorik.xawxf] [UnclassifiedMalware] [Win32.HLLW.Autoruner1.24454] [Trojan.Jorik.Win32.123644] [BehavesLike.Win32.YahLover.dt] [Trojan/Jorik.gdub] [TR/Buzy.EB.9] [Trojan/Win32.VBNA] [Win32.Troj.Undef.(kcloud)] [Trojan/Win32.Jorik] [ObfuscatedAVF!hb!3A031DDF12FB] [Trojan.Jorik.VBNA] [Trj/Chgt.C] [Win32.Worm.Vbna.Liql] [Trojan.Win32.KillAV] [W32/Injector.VMC!tr] [Worm.Win32.Changeup.aAi]
3a3ba4da9f99584f9849d1aef724e0ec
47d285aec6f3dfd9b6ca0e0ba6625bdf
497070d7d17be2360edda234bda06944
5c60d0daeedc33611721abe1e6c5c32a
621af047f4a25b0eb246fc6122662e8a
913cd934dcb28c192a879e3bf80193c1
940a2e373ed6cf3437ec6243235a3382
9d4fd6d412700089ee8c5f29716e5e04
a335611bc3f454a8ae342fd0ea87f8f5
ae7ff15257103c70f319600e19581ed0
dd8a88a71f0bca3af2761fb484bbed68
e9e93efabf4c8a6b9ccf35d64913ce2d
eebd7b6e91a3f32c0b7d77ca97bcb261
eede38815b6958c1b889d96af8fcf8e6
ef89fb84bf16952a83711a60abd45060
f24edd85f9788a1711fa11b737ab339f

IP Whois

Property	Value
Location	Sunnyvale, United States
Country	United States

Reverse DNS

Domain	Date
ad.womensforum.com	2015-11-17
cookiex.ngd.yahoo.com	2015-11-05
ad.adnetwork.net	2015-11-02
ad.yieldmanager.com	2015-10-27
ad.metanetwork.com	2015-06-01
ads.yahoo.com	2014-04-30

IP Classes

216.39.55..x=Browse , 216.39.55..x.x=Browse | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]