194.109.206.212
Classification: Neutral
194.109.206.212 is a neutral IP address. Reported by 3 threat sources, last seen 2022-01-23. Network: AS3265 KPN B.V..
MITRE ATT&CK associations
Malware families: TOR (S0183)
Blacklist sightings showing the 100 most recent of 124
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| malicious.abfad7 | Hybrid-Analysis | 2022-01-23 18:00:18 | 2022-01-23 18:00:18 | ||
| Malware | Hybrid-Analysis | 2019-01-31 14:00:12 | 2021-12-13 15:17:35 | ||
| Trojan.Generic | Hybrid-Analysis | 2018-05-08 11:00:30 | 2021-11-26 12:45:28 | ||
| 64.Trojan.Ransom | Hybrid-Analysis | 2021-11-24 10:30:25 | 2021-11-24 10:30:25 | ||
| Gen:Variant.Ulise | Hybrid-Analysis | 2021-10-11 10:45:43 | 2021-10-11 10:45:43 | ||
| Trojan.BRMon.Gen | Hybrid-Analysis | 2021-09-13 01:15:42 | 2021-09-13 01:15:42 | ||
| Ransom_WCRY.SM3 | Hybrid-Analysis | 2021-06-23 23:01:07 | 2021-06-23 23:01:07 | ||
| AIT:Trojan.Nymeria | Hybrid-Analysis | 2021-04-01 08:01:58 | 2021-06-23 22:45:59 | ||
| Kryptik.HLDB | Hybrid-Analysis | 2021-06-01 01:30:08 | 2021-06-01 01:30:08 | ||
| Trojan.Agard | Hybrid-Analysis | 2021-04-07 07:15:24 | 2021-04-07 07:15:24 | ||
| Gen:Trojan.Heur.TP | Hybrid-Analysis | 2021-04-04 18:00:19 | 2021-04-04 18:00:19 | ||
| Gen:Variant.Boigy | Hybrid-Analysis | 2021-04-04 17:45:57 | 2021-04-04 17:45:57 | ||
| Generic.Malware | Hybrid-Analysis | 2018-04-24 06:45:18 | 2021-04-04 17:15:51 | ||
| Gen:Variant.Barys | Hybrid-Analysis | 2021-04-04 17:15:12 | 2021-04-04 17:15:12 | ||
| Gen:Variant.Strictor | Hybrid-Analysis | 2021-04-03 12:45:53 | 2021-04-03 12:45:53 | ||
| Gen:Variant.Mikey | Hybrid-Analysis | 2021-04-03 11:46:39 | 2021-04-03 12:33:15 | ||
| Ransom_Cryptoff.R011C0PLU20 | Hybrid-Analysis | 2021-04-03 12:32:22 | 2021-04-03 12:32:22 | ||
| Malware site | Hybrid-Analysis | 2021-02-01 06:45:37 | 2021-02-01 06:45:37 | ||
| Gen:Variant.Razy | Hybrid-Analysis | 2018-09-09 14:30:17 | 2020-12-19 18:45:32 | ||
| Unsafe.AI_Score_99% | Hybrid-Analysis | 2020-09-18 18:31:30 | 2020-09-18 18:31:30 | ||
| Trojan.Cridex | Hybrid-Analysis | 2020-09-17 18:31:05 | 2020-09-17 18:31:05 | ||
| Application.Hacktool.KMSAuto | Hybrid-Analysis | 2020-08-05 10:30:08 | 2020-08-05 10:30:08 | ||
| Kryptik.API.gen | Hybrid-Analysis | 2020-07-31 09:45:18 | 2020-07-31 09:45:18 | ||
| NetTool.TorTool | Hybrid-Analysis | 2020-07-14 14:30:10 | 2020-07-14 14:30:10 | ||
| Trojan.Shade | Hybrid-Analysis | 2019-01-19 23:15:04 | 2020-06-09 00:45:13 | ||
| Ransom.SHADE.SME | Hybrid-Analysis | 2020-02-29 19:45:05 | 2020-02-29 19:45:05 | ||
| Gen:Variant.Graftor | Hybrid-Analysis | 2018-12-21 17:00:06 | 2020-02-12 08:15:04 | ||
| Possible_HPGen | Hybrid-Analysis | 2018-10-11 09:15:06 | 2019-11-22 08:15:19 | ||
| Trojan.Fsysna | Hybrid-Analysis | 2019-08-27 01:45:05 | 2019-11-21 22:00:05 | ||
| BehavesLike.PWSZbot | Hybrid-Analysis | 2019-11-18 11:45:13 | 2019-11-18 11:45:13 | ||
| Nemucod.EJZ | Hybrid-Analysis | 2019-11-12 07:00:05 | 2019-11-18 06:15:05 | ||
| DangerousObject.Multi | Hybrid-Analysis | 2018-05-15 21:01:12 | 2019-11-15 11:30:11 | ||
| W32.HfsAutoB | Hybrid-Analysis | 2019-11-08 11:00:07 | 2019-11-08 11:00:07 | ||
| Nemucod.IO | Hybrid-Analysis | 2019-10-25 06:00:06 | 2019-10-25 06:00:06 | ||
| virus.js.qexvmc | Hybrid-Analysis | 2019-09-27 06:15:22 | 2019-09-27 06:15:22 | ||
| Nemucod.EIN | Hybrid-Analysis | 2019-09-18 07:00:16 | 2019-09-18 07:00:16 | ||
| Locky.AP | Hybrid-Analysis | 2019-09-17 12:30:05 | 2019-09-17 12:30:05 | ||
| TrojWare.JS.TrojanDownloader.Nemucod | Hybrid-Analysis | 2019-08-12 07:45:08 | 2019-09-04 02:45:04 | ||
| Nemucod.EHI | Hybrid-Analysis | 2019-08-27 17:15:11 | 2019-08-27 17:15:11 | ||
| Trojan.Script.ExpKit | Hybrid-Analysis | 2019-06-19 05:30:10 | 2019-08-22 10:15:10 | ||
| TrojanSpy.TRICKBOT.SMB | Hybrid-Analysis | 2019-08-16 22:00:06 | 2019-08-16 22:00:06 | ||
| Nemucod.EHE | Hybrid-Analysis | 2019-08-13 13:00:08 | 2019-08-14 13:15:15 | ||
| ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic | Emerging Threats | 2017-10-15 14:31:31 | 2019-08-12 08:04:19 | ||
| TrojWare.VBS.TrojanDownloader.Nemucod | Hybrid-Analysis | 2019-08-12 07:45:11 | 2019-08-12 07:45:11 | ||
| Nemucod.EGZ | Hybrid-Analysis | 2019-08-03 22:15:06 | 2019-08-08 12:15:20 | ||
| Trojan.Agent | Hybrid-Analysis | 2019-08-01 14:17:04 | 2019-08-01 14:17:06 | ||
| NetTool.Tor | Hybrid-Analysis | 2019-02-05 09:15:09 | 2019-07-26 00:30:20 | ||
| TrojanDownloader.Nemucod | Hybrid-Analysis | 2019-07-04 15:30:06 | 2019-07-24 18:45:59 | ||
| Trojan.Zamg | Hybrid-Analysis | 2019-07-17 13:15:16 | 2019-07-17 13:15:16 | ||
| Gen:Variant.Ser.Mikey | Hybrid-Analysis | 2019-07-04 08:30:22 | 2019-07-04 08:30:23 | ||
| Downldr.QI | Hybrid-Analysis | 2019-06-17 11:00:17 | 2019-06-28 09:30:07 | ||
| Trojan.RanSerKD | Hybrid-Analysis | 2019-06-24 08:00:14 | 2019-06-24 08:00:14 | ||
| Emotet.TZ.gen | Hybrid-Analysis | 2019-06-07 12:45:25 | 2019-06-07 12:45:25 | ||
| Trojan.JS.Agent.JS | Hybrid-Analysis | 2019-06-07 09:30:07 | 2019-06-07 09:30:08 | ||
| Trojan.JS.Nemucod | Hybrid-Analysis | 2019-03-19 14:17:33 | 2019-06-06 14:30:08 | ||
| Kryptik.GJFG | Hybrid-Analysis | 2019-06-04 06:30:44 | 2019-06-04 11:01:56 | ||
| Nemucod.EFF | Hybrid-Analysis | 2019-05-30 15:16:16 | 2019-05-30 15:16:20 | ||
| Nemucod.EFA | Hybrid-Analysis | 2019-05-24 07:30:33 | 2019-05-24 07:30:33 | ||
| NetTool.TorJok | Hybrid-Analysis | 2019-05-21 20:46:11 | 2019-05-21 20:46:13 | ||
| malicious.e4cbb0 | Hybrid-Analysis | 2019-05-20 14:45:06 | 2019-05-20 14:45:07 | ||
| FileRepMalware | Hybrid-Analysis | 2019-01-18 15:30:13 | 2019-05-15 14:30:14 | ||
| Cerber.F.gen | Hybrid-Analysis | 2019-05-08 20:30:07 | 2019-05-08 20:30:08 | ||
| Nemucod.5918 | Hybrid-Analysis | 2019-04-16 13:21:04 | 2019-04-16 13:21:09 | ||
| Downldr.PO | Hybrid-Analysis | 2019-04-13 17:30:06 | 2019-04-13 17:30:06 | ||
| Nemucod.C9C9 | Hybrid-Analysis | 2019-04-08 13:30:07 | 2019-04-08 13:30:07 | ||
| Emotet.SI.gen | Hybrid-Analysis | 2019-04-08 11:30:15 | 2019-04-08 11:30:15 | ||
| Trojan.Script | Hybrid-Analysis | 2019-03-29 07:46:05 | 2019-04-08 09:15:18 | ||
| Trojan.Kryptik | Hybrid-Analysis | 2019-03-19 17:00:29 | 2019-04-04 08:17:03 | ||
| Tor | Hybrid-Analysis | 2019-03-22 14:01:56 | 2019-03-22 14:01:57 | S0183 Tor | |
| Nemucod.IM | Hybrid-Analysis | 2019-01-24 07:00:04 | 2019-03-18 04:45:06 | ||
| Trojan.Agent.JS | Hybrid-Analysis | 2019-03-14 06:45:07 | 2019-03-15 02:30:06 | ||
| Kryptik.GNFS | Hybrid-Analysis | 2019-03-12 10:30:18 | 2019-03-12 10:30:36 | ||
| Trojan.Ransom | Hybrid-Analysis | 2019-03-07 07:15:10 | 2019-03-07 07:15:10 | ||
| Malicious site | Hybrid-Analysis | 2019-02-22 09:00:12 | 2019-02-22 09:00:13 | ||
| Gen:Variant.Cerbu | Hybrid-Analysis | 2019-02-21 07:00:21 | 2019-02-21 07:00:21 | ||
| Gen:Variant.Ransom.Shade | Hybrid-Analysis | 2019-02-15 17:15:19 | 2019-02-15 17:15:19 | ||
| Gen:Variant.Jaik | Hybrid-Analysis | 2018-05-10 12:15:12 | 2019-02-06 07:00:20 | ||
| Kryptik.GOUT | Hybrid-Analysis | 2019-01-25 18:00:06 | 2019-01-31 16:15:09 | ||
| Script:SNH | Hybrid-Analysis | 2019-01-29 20:15:07 | 2019-01-29 20:15:08 | ||
| Kryptik.GOJP | Hybrid-Analysis | 2019-01-28 15:00:11 | 2019-01-28 15:00:11 | ||
| JS:Trojan.Cryxos | Hybrid-Analysis | 2019-01-17 23:15:27 | 2019-01-24 07:16:58 | ||
| QVM20.1.9B6D.Malware | Hybrid-Analysis | 2019-01-18 17:00:11 | 2019-01-18 17:00:11 | ||
| Ransom.Troldesh | Hybrid-Analysis | 2018-11-22 16:45:13 | 2018-12-27 13:30:06 | ||
| HW32.Packed | Hybrid-Analysis | 2018-12-17 04:45:09 | 2018-12-17 04:45:09 | ||
| Malware.Heuristic | Hybrid-Analysis | 2018-11-28 04:30:07 | 2018-11-28 04:30:07 | ||
| Troldesh.A | Hybrid-Analysis | 2018-11-19 10:45:30 | 2018-11-19 10:45:30 | ||
| TROJ_FRS.VSN0FJ18 | Hybrid-Analysis | 2018-10-15 14:17:08 | 2018-10-15 14:17:08 | ||
| Gen:Worm.Zomon | Hybrid-Analysis | 2018-09-13 20:30:12 | 2018-09-13 20:30:13 | ||
| Trojan.Androm.Gen | Hybrid-Analysis | 2018-09-09 14:30:12 | 2018-09-09 14:30:16 | ||
| ET TOR Known Tor Relay/Router (Not Exit) Node UDP Traffic | Emerging Threats | 2017-10-15 14:31:31 | 2018-08-29 07:38:10 | ||
| TrojanPSW.WinCred | Hybrid-Analysis | 2018-06-24 12:45:23 | 2018-06-24 12:45:32 | ||
| Gen:Variant.Ransom.Sigma | Hybrid-Analysis | 2018-05-22 10:00:23 | 2018-05-22 10:00:23 | ||
| Mal_MiliCry | Hybrid-Analysis | 2018-05-08 06:45:21 | 2018-05-08 06:45:22 | ||
| Evo | Hybrid-Analysis | 2018-05-04 15:17:12 | 2018-05-04 15:17:14 | ||
| QVM10.1.9F9B.Malware | Hybrid-Analysis | 2018-04-20 07:15:13 | 2018-04-20 07:15:13 | ||
| ML.Attribute | Hybrid-Analysis | 2018-04-19 07:15:21 | 2018-04-19 07:15:23 | ||
| Trojan.WisdomEyes.16070401.9500 | Hybrid-Analysis | 2018-04-18 10:30:33 | 2018-04-18 10:30:33 | ||
| Nemucod.EB3 | Hybrid-Analysis | 2018-04-18 10:15:35 | 2018-04-18 10:15:35 | ||
| shade ,troldesh ,tvrat | Maltiverse | 2018-03-21 11:17:25 | 2018-03-21 11:17:25 | ||
| evasive ,gozi ,isfb ,miner ,papras ,ursnif | Maltiverse | 2018-03-20 11:06:19 | 2018-03-20 11:06:19 |
Tags
tor ransomware troldesh papras banker ramnit shade tvrat evasive gozi isfb ursnif apt miner anonymizerWhois information
- AS name
- AS3265 KPN B.V.
- AS registry
- ripencc
- AS date
- 1996-05-13 00:00:00
- AS CIDR
- 194.109.0.0/16
- CIDR
- 194.109.206.208/29
- Registrant
- KPN B.V.
- Address
- XS4ALL Internet BV Postbus 1848 1000BV Amsterdam The Netherlands
- City
- Amsterdam
- Postal code
- 1012 JS
- Country
- NL — Netherlands 🇳🇱
- Contact email
- [email protected]
- First indexed
- 2017-10-15 14:31:31
- Last updated
- 2025-04-16 10:45:10