Ransomware IP address :: 198.11.172.242

IP Information

IP address:198.11.172.242
AS number:AS45102
AS name:CNNIC-ALIBABA-CN-NET-AP Alibaba (China) Technology Co., Ltd., CN
Country:- United States (US)
Spamhaus SBL:Not listed

Associated Ransomware Infrastructure

The table below shows all Ransomware infrastructure that is associated with the IP address 198.11.172.242.

Firstseen (UTC)HostActive (?This row indicates whether the domain name's A record is currently pointing to an IP address or whether the record is historic (e.g. because the A record has been moved to a different IP address).

yes = Active A record
no = Historical record
)
RegistrarThreatMalware
2016-12-09 06:38:44yug13.comnoHICHINA ZHICHENG TECHNOLOGY LTD.Distribution SiteLocky
2016-12-05 13:08:53oyunbee.comnoGODADDY.COM, LLCDistribution SiteLocky
2016-11-30 16:59:01njzhigaokt.comnoCHENGDU WEST DIMENSION DIGITAL TECHNOLOGY CO., LTD.Distribution SiteLocky
2016-11-25 13:47:40nxarab.netnoDOMAIN.COM, LLCDistribution SiteLocky
2016-11-23 10:29:21njzhigaokt.comnoCHENGDU WEST DIMENSION DIGITAL TECHNOLOGY CO., LTD.Distribution SiteLocky
2016-11-11 16:08:00xmdqcy.comnoBEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CNDistribution SiteLocky
2016-11-10 15:42:24hexinjituan.comnoHICHINA ZHICHENG TECHNOLOGY LTD.Distribution SiteLocky
2016-11-08 16:26:33hkyidianyuan.comnoMAFF INC.Distribution SiteLocky
2016-11-08 14:56:31dinglihn.comnoBEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CNDistribution SiteLocky
2016-11-04 14:38:13hexinjituan.comnoHICHINA ZHICHENG TECHNOLOGY LTD.Distribution SiteLocky
2016-11-04 06:29:590791longyao.comnoBEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CNDistribution SiteLocky
2016-11-03 05:52:11dinglihn.comnoBEIJING INNOVATIVE LINKAGE TECHNOLOGY LTD. DBA DNS.COM.CNDistribution SiteLocky
2016-11-01 13:30:57bjxdsm.comnoHICHINA ZHICHENG TECHNOLOGY LTD.Distribution SiteLocky
2016-10-28 05:08:18kpkms.comnoGODADDY.COM, LLCDistribution SiteLocky

Ransomware infrastructure associated with this IP address: 14