IP > 89.42.39.81

More information on this IP is in AlienVault OTX

Is this malicious?

Malware

MD5	A/V
07a2a1db786cf23a8f056f83e6adb2b8	[JS.Trojan-Downloader.Nemucod.hm] [JS_NEMUCOD.SMK2] [Trojan.Script.Heuristic-js.iacgm] [Mal/JSDldr-M] [JS_NEMUCOD.SMK2]
17958800ff09d57bcb83ac8c42b750cc	[JS.Trojan-Downloader.Nemucod.hm] [JS_NEMUCOD.SMK2] [Trojan.Script.Heuristic-js.iacgm] [JS_NEMUCOD.SMK2] [Mal/JSDldr-M] [Js.Nemucod.Smk2!c]
57778e8a37f5667ac077ec9a2fb80148
789802cd1ea1482835fae4d39464fde7	[Trojan.Script.Heuristic-js.iacgm] [Mal/JSDldr-M] [JS/Locky.AY!Eldorado] [Js.Trojan.Raas.Auto] [JS/Nemucod.5489!tr.dldr]
ab866db941693ad350c18ec8ff889a62	[W97M/Downloader.bhf] [W97M.Downloader] [W97M.Downloader.EBB] [Trojan-Downloader.MSWord.Cryptoload.i] [W97M.Downloader.EBB] [W97M.Downloader.EBB] [W97M.Downloader.EBB] [W97M.MulDrop.124] [W2KM_HA.27FCE4F1] [Troj/DocDl-DZF] [W97M.Downloader.EBB] [W97M/Downloader] [Macro.Trojan.Dropperd.Auto] [Win32.SuspectCrc] [W97M/Downloader] [VBS/Jenxcus.A] [virus.office.obfuscated.1]
cd7b19aa0f4fe9993aafe5cb63b54ba9	[Js.Nemucod.Smk2!c] [JS.Trojan-Downloader.Nemucod.hm] [JS_NEMUCOD.SMK2] [Trojan.Script.Heuristic-js.iacgm] [Mal/JSDldr-M] [JS_NEMUCOD.SMK2]
e01f26ebc0249ae9d87fad6463a56cf6	[Trojan.Downloader.JS.WZ] [Trojan.Downloader.JS.WZ] [JS.Trojan-Downloader.Nemucod.hm] [JS/Nemucod.CA1] [JS.Downloader] [JS/TrojanDownloader.Nemucod.ASF] [JS_NEMUCOD.SMK2] [Trojan.Downloader.JS.WZ] [Trojan.Downloader.JS.WZ] [Trojan.Script.Heuristic-js.iacgm] [Js.Nemucod.Smk2!c] [Trojan.Downloader.JS.WZ] [Trojan.Downloader.JS.WZ] [JS.DownLoader.2019] [JS_NEMUCOD.SMK2] [Mal/JSDldr-M] [JS/Nemucod.CA1] [JS/Dldr.Locky.71187] [Trojan.Downloader.JS.WZ] [TrojanDownloader:JS/Swabfex.P] [JS/Nemucod.mt] [Trojan-Downloader.JS.Nemucod]
ed76334b8cc767e2f21de876b54d976d	[Trojan.Downloader.JS.WZ] [JS.Locky.DF] [JS/Nemucod.mt] [JS.Trojan-Downloader.Nemucod.hm] [JS/Nemucod.CA1] [JS.Downloader] [JS/TrojanDownloader.Nemucod.ASF] [JS_NEMUCOD.SMK2] [Trojan.Downloader.JS.WZ] [Trojan.Script.Heuristic-js.iacgm] [Trojan.Downloader.JS.WZ] [Trojan.Downloader.JS.WZ] [JS.DownLoader.2019] [JS_NEMUCOD.SMK2] [JS/Nemucod.mt] [Mal/JSDldr-M] [JS/Nemucod.CA1] [JS/Dldr.Locky.71187] [Trojan.Downloader.JS.WZ] [TrojanDownloader:JS/Swabfex.P] [JS/Obfuscated] [Trojan.Downloader.JS.WZ] [Trojan-Downloader.JS.Nemucod] [Trojan.Downloader.JS.WZ]

IP Whois

Property	Value
Country	Romania

Reverse DNS

Domain	Date
dnet.hi2.ro	2025-03-30
site1.hi2.ro	2025-03-28
sex9ro.hi2.ro	2025-03-19
secure-aut0trad3r.hi2.ro	2025-03-12
mobiwap.hi2.ro	2025-01-29
radionavodari.hi2.ro	2025-01-22
failblog.hi2.ro	2025-01-21
vip-cstrike.hi2.ro	2025-01-17
www.sms-it.hi2.ro	2025-01-17
gogogo-gogogo.hi2.ro	2025-01-15
t.m.u.radio.hi2.ro	2025-01-06
emuzica.hi2.ro	2025-01-01
italodisco.hi2.ro	2025-01-01
shain2metin2.hi2.ro	2025-01-01
testhgl.hi2.ro	2025-01-01
sexpartner.hi2.ro	2024-09-19
natur.hi2.ro	2024-04-20
radio21-alyna-fm-vip.hi2.ro	2024-04-16
hi2.ro	2015-03-26

IP Classes

89.42.39..x=Browse , 89.42.39..x.x=Browse | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]