217.11.29.164:44303

ip not resolving

Tracked by C2 Tracker · Whois queried 2026-10-04T17:31:07

Network

Network: darosazi-modava
CIDR: 217.11.29.160/29
Country: IR

Contact

Handle: 217.11.29.160 - 217.11.29.167
Abuse: abuse@afranet.com

Observed in malware

Family	Sample SHA-256	First seen
AhMyth	d4e16801c46f…	2022-09-23

About AhMyth

Open-source Android RAT whose builder lowered the bar for mobile surveillance; has repeatedly sneaked into the Google Play store disguised inside seemingly legitimate apps.

ESET: First spyware for Android found on Google Play (AhMyth)

Signing certificate

Subject CN: Android Debug
Issuer CN: Android Debug
Valid: 2016-10-23 → 2044-03-10
Fingerprint: 1e08a903aef9c3a721510b64ec764d01d3d094eb954161b62544ea8f187b5953

Other samples signed with this certificate? That's a lead worth checking — but not proof of a shared operator, since signing keys (and the Android debug certificate in particular) are widely reused. See the certificate page for every sample signed with it.