126.com
Classification: Whitelisted
126.com is a whitelisted (trusted) hostname. Reported by 4 threat sources, last seen 2025-05-24. IoC context and downloadable threat intel on Maltiverse.
Current activity
- Online — resolving/reachable. Last checked 2025-05-24 09:52:55.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Top Popularity Site | Cisco Umbrella | 2022-07-18 21:13:08 | 2025-05-24 09:52:56 | benign | |
| Alexa Top 1 Million | Alexa | 2020-04-20 23:42:08 | 2022-07-14 00:07:23 | benign | |
| Malware | Hybrid-Analysis | 2021-06-06 14:00:17 | 2022-01-18 19:01:11 | ||
| Worm.Netsky | Hybrid-Analysis | 2022-01-11 18:17:38 | 2022-01-11 18:17:38 | ||
| Worm.Mydoom | Hybrid-Analysis | 2019-02-04 14:15:48 | 2021-11-16 22:15:19 | ||
| Netsky.D@mm | Hybrid-Analysis | 2021-11-15 17:00:16 | 2021-11-15 17:00:16 | ||
| Trojan.Prolaco | Hybrid-Analysis | 2021-11-10 16:17:22 | 2021-11-10 16:17:22 | ||
| Worm.Mytob | Hybrid-Analysis | 2021-10-19 21:17:12 | 2021-10-19 21:17:12 | ||
| Worm.Bloored | Hybrid-Analysis | 2021-07-19 14:45:49 | 2021-07-29 19:17:10 | ||
| SMTP.Generic | Hybrid-Analysis | 2021-07-28 15:30:42 | 2021-07-28 15:30:42 | ||
| Generic.Malware | Hybrid-Analysis | 2019-03-27 14:30:16 | 2021-04-19 23:45:30 | ||
| Netsky.W | Hybrid-Analysis | 2021-04-07 07:17:17 | 2021-04-07 07:17:17 | ||
| Worm.Stration | Hybrid-Analysis | 2019-07-17 22:30:18 | 2021-04-03 12:33:11 | ||
| Netsky.O@mm | Hybrid-Analysis | 2021-04-01 08:16:04 | 2021-04-01 08:16:04 | ||
| Netsky | Hybrid-Analysis | 2021-03-31 17:01:07 | 2021-03-31 17:01:07 | ||
| Dropped:Stration.Gen@mm | Hybrid-Analysis | 2021-01-27 11:00:19 | 2021-01-27 11:00:19 | ||
| Gen:Heur.Mint.Zard | Hybrid-Analysis | 2021-01-19 21:15:33 | 2021-01-19 21:15:33 | ||
| Trojan.Buzus | Hybrid-Analysis | 2020-02-19 21:00:30 | 2020-12-16 08:30:16 | ||
| Mydoom.L@mm | Hybrid-Analysis | 2020-03-19 05:15:13 | 2020-11-07 19:45:09 | ||
| Netsky.P@mm | Hybrid-Analysis | 2020-11-03 12:30:21 | 2020-11-03 12:30:21 | ||
| GenPack:Trojan.Generic | Hybrid-Analysis | 2020-09-22 10:17:10 | 2020-09-22 10:17:10 | ||
| Stration.Gen@mm | Hybrid-Analysis | 2020-07-29 09:00:19 | 2020-07-29 09:00:19 | ||
| Trojan.Mansabo | Hybrid-Analysis | 2020-06-02 17:32:01 | 2020-06-02 17:32:01 | ||
| Worm.TSY | Hybrid-Analysis | 2020-05-17 17:45:21 | 2020-05-17 17:45:21 | ||
| Dropper.Mudrop | Hybrid-Analysis | 2019-06-15 16:15:08 | 2020-05-09 21:15:24 | ||
| Generic.Mydoom | Hybrid-Analysis | 2019-09-29 23:30:05 | 2019-09-29 23:30:05 | ||
| Backdoor.Tofsee | Hybrid-Analysis | 2019-06-13 07:33:23 | 2019-09-15 12:45:09 | ||
| Trojan.Warezov | Hybrid-Analysis | 2019-09-05 23:15:05 | 2019-09-05 23:15:05 | ||
| Trojan.ELENOOKA.SM | Hybrid-Analysis | 2019-06-14 01:45:17 | 2019-06-14 01:45:17 | ||
| mydoom | Maltiverse | 2017-12-18 07:17:32 | 2017-12-18 07:17:32 |
Tags
mydoomIP addresses resolved by this hostname
- 220.181.12.218 (2017-12-18 07:17:33)
- 123.125.50.22 (2017-12-18 07:17:33)
- 111.124.203.38 (2025-05-24 09:52:55)
Whois information
- AS name
- AS23724 IDC, China Telecommunications Corporation
- Domain
- 126.com
- TLD
- com
- DNSSEC
- ['unsigned']
- Nameservers
- NS1.NEASE.NET, NS2.166.COM, NS3.NEASE.NET, NS4.NEASE.NET, NS5.NEASE.NET, NS6.NEASE.NET, NS8.166.COM, ns5.nease.net, ns3.nease.net, ns1.nease.net, ns2.166.com, ns6.nease.net, ns4.nease.net, ns8.166.com
- Whois server
- whois.markmonitor.com
- Registrant
- MarkMonitor Information Technology (Shanghai) Co., Ltd.
- Address
- No. 16, Keyun Road, Tianhe District,
- City
- Guangzhou
- State
- Guangdong
- Country
- CN — China 🇨🇳
- Contact email
- [email protected], [email protected]
- Domain created
- 1998-02-28 05:00:00
- Domain expires
- 2028-02-28 05:00:00
- First indexed
- 2017-12-18 07:17:32
- Last updated
- 2025-05-24 09:52:56