IP > 194.228.3.204

More information on this IP is in AlienVault OTX

Is this malicious?

Reports

http://www.malware-traffic-analysis.net/2016/04/05...

https://blogs.sophos.com/2016/01/06/the-current-st...

Malware

MD5	A/V
06fbbe54ff699d90197e4bcd730571d2	[Ransom.TeslaCrypt] [Win32.Trojan.WisdomEyes.151026.9950.9998] [Trojan-Ransom.Win32.Bitman.wlu] [Trojan.Win32.Locky.ebjpty] [Troj/Ransom-CRC] [Trojan.AVKill.61206] [BehavesLike.Win32.Expiro.dc] [TR/Locky.jhs] [Ransom:Win32/Tescrypt] [Troj.Ransom.W32.Bitman!c] [Ransomware-FHS!06FBBE54FF69] [Win32.Trojan.Bp-dropperv.Bzmy] [Trojan.Win32.Crypt] [Ransom_r.HD]
097176160d09f9c07a1cdf9d5570f112	[HEUR.JS.Trojan.b] [Js.Trojan.Raas.Auto] [trojan.js.downloader.1]
0a917cee28026664e39fa210720a88ac	[HEUR.JS.Trojan.b] [Js.Trojan.Raas.Auto] [trojan.js.downloader.1]
1086fd107f8137f5e2103208352ee16a	[JS:Trojan.Script.DDG] [JS:Trojan.Script.DDL] [JS/TrojanDownloader.Nemucod.PA] [JS_NEMUCOD.DLDRV] [JS:Trojan.Script.DDL] [JS:Trojan.Script.DDL] [JS_NEMUCOD.DLDRV] [TrojanDownloader:JS/Swabfex.H] [JS:Trojan.Script.DDL] [Js.Troj.Script!c] [JS:Trojan.Script.DDL] [Js.Trojan.Raas.Auto] [Win32.Outbreak] [trojan.js.downloader.1]
1191434f03376b60eefccebef5fd63e4	[JS:Trojan.Script.DDL] [JS:Trojan.Script.DDL] [JS/TrojanDownloader.Nemucod.PA] [JS.S.Downloader.5021.Y[h]] [JS:Trojan.Script.DDL] [Troj/JSDldr-HD] [JS:Trojan.Script.DDL] [JS_CRYPTESLA.AC] [TrojanDownloader:JS/Swabfex.H] [JS:Trojan.Script.DDL] [Js.Troj.Script!c] [JS:Trojan.Script.DDL] [Js.Trojan.Raas.Auto] [Win32.Outbreak] [trojan.js.downloader.1]
12952fbc5872230e3d17ab728bd734a3
17c76b4c81ab83198cdf2e4e0c821e71	[Variant.Zusy] [Ransomware-FFK!17C76B4C81AB]
295e327ae3e2c4fb36c0e747bd7b2b87	[JS:Trojan.Script.DDL] [Js.Troj.Script!c] [JS/TrojanDownloader.Nemucod.PA] [Ransom_CRYPTESLA.CC] [JS:Trojan.Script.DDL] [JS:Trojan.Script.DDL] [JS:Trojan.Script.DDL] [JS:Trojan.Script.DDL] [JS_CRYPTESLA.AC] [Troj/JSDldr-HD] [JS:Trojan.Script.DDL] [JS.S.Downloader.5020.CG[h]] [TrojanDownloader:JS/Swabfex.H] [Js.Trojan.Raas.Auto] [Win32.Outbreak] [trojan.js.downloader.1]
29cc93e11fe8a34d5423e86251eb8cf7	[Ransomware-FHS!29CC93E11FE8] [Ransom.TeslaCrypt] [Win32.Trojan.WisdomEyes.151026.9950.9990] [Suspicious.Cloud.5] [BehavesLike.Win32.Fujacks.fh]
2a0db7860b252340161056a32354d126
2ead1a9245daac11e1a041111f1b7909
387f7c957ddac8ed73e466c58eeaf084
39d29ecceac8c799304004f8edd2bece
3b37fa5aa4a7fb944a6e504fe56f738d
414444f6708d043197a41b10dd05bde3
43ae902f95cd48f77a744758b8e0b32e
4657d06c15ea69218a6f3530641bd11e
467237715babbdc17d400f486c8a5222
486373d84a6ad3cbd053a7ee3f1db22f
4d93fa2270b31acea407a786ce412c21
4f23969d75337a17156dc141671fee82
546f923bdea9f07e9bcc7b658e6f4266
5588b1766d60d4a54db77181df6800c2
5d5b6c2ef3a7b934ed657681f09abe5e
60ee8e1767d03c71e21a5a1368e267f6
61feca06fea7bb1c6db89b7e5907426f
669d35f807477ce46861968d4d4c50ed
6bdbfa1cde59a0189116ca91760d9328
6bf8e35e517465863ae6f02d03c257d2
6fcefcb7561267219822a1b0ecea6cae
72a274607db7605b3d22283f15686073
73f519caf24cfbb2bcc131906ee4ce04
78085c2c325c9271c1cc46ab31767968
782fd062523f2c41c63d85fc6983464d
7968b47dbc98549db5204913d677c80f
7bef5cfb592e6cfa35fbeae5acaa15d0
7ec16ee2a1a53d82df8fd631b60875d8
81d13894e626827035c771f3f1b24fbf
89b14b6eccf58083abf4557dc42ecc08
8f611804a7bc2d04eb8923e55399eeb6
90f041789a16dfc857cb4ec7008cafc3
91cffec67fb5a8d6fd024b5e08fc7bbb
96469329287b7e2cd7fdfd916addc1a2
97bf29e4ca62f6dcd5bc475c675f2e51
a21f0dede5ef472164284a1522597e04
a3291ad870661c7c91c7e4b107efc2a9
a783bbc6d6f484c3d5f847667ce01de7
a8a46c3be304ddcb9622ee54c0dfe0ec
a9776dd8d0f280c2227e8f2e06626650
ad7e0f698147bef023abd4cc30b8c61d
aedede9ff5fe5891623b10aa7d8a4f34
af1b0f937175b89bd91b2652995225a2
b224003f6331017396c720fbef906a19
b3c00819cc192c93b295e53cc5df37ce
b86483fc79c40d4463ae6cb7b08e4911
bc2ed64cb7d0243c7b3c131263077293
bd3a5c7189bdec785901a928eccbbfb8
c19785720bf48352428be86664734362
c2224f9512dd2cadc59f177ff7b6fd2f
c36443edc84779fbc567f4884ed6543f
c78c1be8fd3d297a77ed6e8037be28ab
c7d55930fe74ba52810a4b87598a271c
c8b740f55655dd89ff11b40a774355d2
cb17f3cf88115be1414c6cf489a59867
cc54391455dd1ed7fc9c7310395dcef4
cf6051ca8dab5c6809a91cb290a69656
d79d46621fe7b9fbbf1bbefba9c52a5f
d7a72a833bbca58196537a6345b9f4ed
d848f6b6d1823ecc0285cd0f8494adb8
d93269241809e43c3e12decbd9a52240
da0f578d8a4315f1c1cac2fa34482d77
dfeaad399baf04b1edebf5ea6597665c
e058ecc0e3853de1f8b727f3cf34dce4
e14d288c20f29d262f415c1e6ae6769c
e4244094bbd61c37428364a3c582a1bb
e6abb54a726112f114bf051c11264e97
ea7d9f62e3d92d2d63b171dc013e8da4
f01592ebde5890bb0dd4961e0bf5d09f
f5e2b9befc9718ecf1f213a9fe16ea63
f95357eba914597d265b95f58ae20d88
fb9b2f683a9707d46391e71eb97d9e19
ffd28567a209e9bede53e79d6f25010b

IP Whois

Property	Value
Country	Czech Republic

Reverse DNS

Domain	Date
opravnatramvaji.cz	2025-03-20
erika-as.cz	2024-08-08

IP Classes

194.228.3..x=Browse , 194.228.3..x.x=Browse | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]