mail.indiarailways.net
Classification: Malicious
mail.indiarailways.net is a malicious hostname. Linked to Ke3Chang, Backdoordiplomacy activity. Reported by 1 threat source, last seen 2023-01-21.
Current activity
- Offline — no longer resolving. Last online 2025-10-02 00:05:41.
MITRE ATT&CK associations
Intrusion sets: KE3CHANG (G0004) BACKDOORDIPLOMACY (G0135)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Mirage | Maltiverse | 2023-01-20 04:14:49 | 2023-01-21 17:52:05 | malicious-activity | G0004 Ke3chang |
| Backdoordiplomacy | Maltiverse | 2023-01-20 04:14:49 | 2023-01-21 17:52:02 | malicious-activity | G0135 BackdoorDiplomacy |
Tags
aptIP addresses resolved by this hostname
- 72.52.178.23 (2024-03-03 00:39:08)
- 153.237.50.201 (2024-01-21 00:30:11)
- 122.29.242.130 (2023-12-20 20:03:15)
- 60.43.119.238 (2023-11-28 20:02:19)
- 114.155.253.105 (2023-11-27 04:09:38)
- 153.234.7.46 (2023-11-15 13:55:33)
- 118.22.180.251 (2023-11-13 01:26:04)
- 153.248.30.172 (2023-03-06 06:12:41)
- 153.148.125.190 (2023-04-09 21:14:11)
- 153.234.77.155 (2023-05-19 20:27:36)
- 153.148.80.156 (2023-06-06 09:29:53)
- 153.148.33.207 (2023-06-21 00:41:18)
- 153.148.11.245 (2023-06-28 18:21:22)
- 153.148.112.36 (2023-07-02 09:45:55)
- 153.148.114.212 (2023-07-11 12:33:07)
- 153.148.88.198 (2023-07-25 15:52:11)
- 153.148.47.134 (2023-08-28 09:03:32)
- 153.148.91.206 (2023-09-04 08:12:39)
- 153.148.113.150 (2023-09-15 13:39:03)
- 114.157.160.191 (2023-09-16 17:50:30)
- 114.149.206.142 (2023-09-25 17:00:39)
- 153.235.100.73 (2023-10-01 23:04:47)
- 153.237.137.146 (2023-10-31 15:55:52)
- 210.65.117.171 (2025-10-02 00:05:41)
Whois information
- AS name
- AS4713 NTT Communications Corporation
- Domain
- indiarailways.net
- TLD
- net
- DNSSEC
- ['unsigned, Unsigned']
- Nameservers
- PARKING1.NET-CHINESE.COM.TW, PARKING2.NET-CHINESE.COM.TW
- Registrant
- Net-Chinese Co., Ltd.
- Address
- REDACTED FOR PRIVACY
- City
- REDACTED FOR PRIVACY
- State
- Taiwan
- Country
- TW — Taiwan, Province of China 🇹🇼
- Contact email
- [email protected], [email protected]
- Domain created
- 2024-09-25 03:30:10
- Domain expires
- 2026-09-25 11:30:10
- First indexed
- 2023-01-21 17:52:02
- Last updated
- 2025-10-25 18:21:34