Help RSS API Feed Maltego Contact                        

IP > 85.13.138.158

More information on this IP is in AlienVault OTX

Is this malicious?

Malware
MD5A/V
23ad6fc6ddb25a0974b90d9ec2df7757[W32.Clod252.Trojan.98ee] [TrojanDownloader.Cutwail] [PWSZbot-FLN!23AD6FC6DDB2] [Trojan.Zbot] [Trojan.Win32.Pushdo.cqvcjs] [WS.Reputation.1] [Kryptik.CDBA] [TROJ_MOSERAN.BMC] [Backdoor.Win32.Pushdo.rhv] [Backdoor.Pushdo!L+OZLlbJVJk] [UnclassifiedMalware] [BackDoor.Bulknet.1299] [TR/Cutwail.A.26] [Backdoor/Pushdo.aku] [Win32.Hack.Pushdo.r.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Spyware/Win32.Zbot] [Backdoor.Pushdo] [PE:Trojan.Crypto!1.9E0F] [Trojan-PWS.Win32.Zbot] [W32/Pushdo.BQRL!tr.bdr] [Crypt2.CBRR] [Trojan.Win32.Downloader.77]
27ae181fba6059cadf994cf478ec2445
58d7917e004d65a1294bc93814a7cee0
5b88188ee5306549b12d14aabea25e4f[Cutwail-FCWE!5B88188EE530] [Trojan.Downloader] [Backdoor.Trojan] [Kryptik.CCOH] [TROJ_SPNV.01J013] [BackDoor.Bulknet.1150] [TR/Dldr.Cutwail.BS.274] [Trj/Ransom.BB] [TrojanDownloader:Win32/Cutwail.BS] [Backdoor/Win32.Trojan] [Win32/Wigon.PH] [Trojan-Downloader.Win32.Cutwail] [W32/Kryptik.BMDF] [Trojan.Win32.Kryptik.BMDF]
81d7d12a07126a4133597d79dd993a5e[W32.TapuroJ.Trojan] [Trojan-PWS/W32.Fareit.68096] [TrojanPSW.Fareit.alyo] [RDN/Downloader.a!no] [Trojan.PWS.Zbot] [Riskware] [Trojan.FakeAV] [Injector.FKCD] [Trojan-PSW.Win32.Fareit.alyo] [UnclassifiedMalware] [Win32.Malware!Drop] [Heuristic.BehavesLike.Win32.Suspicious-BAY.K] [Win32.PSWTroj.Fareit.al.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Spyware/Win32.Zbot] [W32/FakeAV.SJHU-5285] [W32/Injector.DET!tr] [Crypt2.BNSM] [Trojan.Win32.Kryptik.BMQP]
9b4fb397980d6ede289a82e0435da81d[Trojan.Win32.Cutwail.cfy] [BackDoor.Bulknet.1150] [W32/Kryptik.BRRX!tr] [Trojan.Win32.Cutwail.AB]
ded55f58a5734b05b67d68a2b99b7e61[Artemis!DED55F58A573] [Kryptik.CCHF] [TROJ_KRYPTIK.SGQ] [UnclassifiedMalware] [Win32.Malware!Drop] [TrojanDownloader:Win32/Cutwail.BS] [SScope.Malware-Cryptor.Fareit.2813] [Trojan.Crypt2] [W32/Kryptik.BIXX] [Crypt2.AXYM]
ea6b412d37c6c3abc5b5b59b421cddcb[Downloader-FVO!EA6B412D37C6] [Trojan.Downloader] [TR/Yarwi.B.19] [Heuristic.LooksLike.Win32.Suspicious.J!81] [Mal/EncPk-ZC]

IP Whois
PropertyValue
Country Germany

Reverse DNS
DomainDate
a.mx.salzburgcb.com2025-10-27
www.veroniquebarthe.at2025-09-27
veroniquebarthe.at2025-09-25
basarium.com2025-09-05
cs.salzburgcb.com2025-08-16
www.nookinteriors.at2025-07-24
mariahusch.com2025-07-18
nookinteriors.at2025-05-31
basarium.de2025-05-27
blumenegg-apotheke.at2024-10-30
blumenegg-kosmetik.at2024-10-02
breslau-medizin.de2024-10-02
www.blumenegg-kosmetik.at2024-09-26
ferienlandhaus-dahlweg.de2024-09-21
flattwin.de2024-09-14
www.familiebauer.at2024-08-22
mokila.com2024-08-16
www.essentiell.co.at2024-08-15
www.blumenegg-apotheke.at2024-08-03
blog-archiv.com2024-06-08
essentiell.co.at2024-01-09
kiziberlin.de2023-11-11
familiebauer.at2023-11-09
kartoffelauflauf.org2015-03-15
www.basortu.net2015-02-12
cocuk.ravda.net2014-10-16
dinibilgiler.ravda.net2014-10-13
ravda.net2014-07-13
cesitlibilgiler.ravda.net2014-04-09
kuran.ravda.net2014-04-06
austriansurfing.at2014-01-28
www.dinibilgiler.ravda.net2014-01-28
www.ravda.net2014-01-28
aschaffenburg-abkm.com2014-01-09

Server Build

Build Hashf47be1c95241f165a1cd9faa80cd42b8

DNS Resolutions

SSL Certficate

SSL MD5 2e5368ebe2e66491ed67157796ab756c
SSL SHA1 25b6073ade781c8f4efefe9597fbd57e09996c58

IP Classes
85.13.138..x=Browse , 85.13.138..x.x=Browse | View on ThreatMiner








Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]



� Copyright 2019 AlienVault, Inc. | Legal| Status| Do Not Sell My Personal Information