home

cluster011.ovh.net

OVH Sas

Domain Information

The domain cluster011.ovh.net registered by OVH Sas was initially registered in June of 1998 through OVH. The hosted servers are located in Roubaix, Nord-Pas-De-Calais within France which resides on the RIPE Network Coordination Centre network.
Registrar:
OVH

Server location:
Nord-Pas-De-Calais, France (FR)

Create date:
Monday, June 8, 1998

Expires date:
Saturday, June 7, 2025

Updated date:
Monday, January 11, 2016

ASN:
AS16276 OVH OVH SAS

Root domain:
ovh.net

Whois:
2 ovh.net records

The domain cluster011.ovh.net has been seen to resolve to the following IP address.

213.186.33.40
cluster011.ovh.net
May 6, 2015

File downloads found at URLs served by cluster011.ovh.net.

0 / 68
http://cluster011.ovh.net/~pobierzntf/.../Microsoft_PowerPoint_Setup.exe  (ff789b053f9c115d28d702614b31b316)

0 / 68
http://cluster011.ovh.net/~pobierzntf/.../Project_Cars.exe  (5a8b37d57a744a0ade9c079712488cda)

0 / 68
http://cluster011.ovh.net/~pobierzntf/.../Call_of_Duty_Advanced_Warfare.exe  (9b3360d668e471e7781f6536c470c8d4)

9 / 68      (inconclusive)
http://cluster011.ovh.net/~pobierzntf/.../Goat_Simulator.exe  (02542cc96b9053485109c38052e446fa)

0 / 68
http://cluster011.ovh.net/~pobierzntf/.../The_Sims_4.exe  (1d4e6c49abb63d91d329af245c1ab80e)

7 / 68      (Malware)
http://cluster011.ovh.net/~pobierzntf/.../FIFA14.exe  (1acba8b0dcd9142edb0992d6348cf588)

21 / 68    (Malware)
http://cluster011.ovh.net/~pobierzntf/.../SPINTIRES.exe  (09125c7a2bd3b5c533c4c91716621bc5)

0 / 68
http://cluster011.ovh.net/~pobierzntf/.../Grand_Theft_Auto_V.exe  (cc29439c190f583e2e07a0606e340f59)

0 / 68
http://cluster011.ovh.net/~pobierzntf/.../The_Sims_3.exe  (eaa30261f673022fef3cf5461426a756)

0 / 68
http://cluster011.ovh.net/~pobierzntf/.../Pro_Evolution_Soccer_2015.exe  (412fa595204de61a8bc97d602a6ed22c)

0 / 68
http://cluster011.ovh.net/~pobierzntf/.../Wiedzmin_3_Dziki_Gon.exe  (0d6788247486d88d17b83159dfbc35fa)

7 / 68      (Malware)
http://cluster011.ovh.net/~pobierzntf/.../FIFA14.exe  (1acba8b0dcd9142edb0992d6348cf588)

0 / 68
http://cluster011.ovh.net/~pobierzntf/.../FIFA_15.exe  (524e81e5ddf19b756718dd17883fa1fc)

0 / 68
http://cluster011.ovh.net/~pobierzntf/.../Farming_Simulator_2015.exe  (da6be32d697f7113f410a6eba9de28a9)

18 / 68    (Malware)
http://cluster011.ovh.net/~pobierzntf/.../Construction_Simulator_2015.exe  (25ebaab543241c3e56a1c4fd456ed609)

20 / 68    (Malware)
http://cluster011.ovh.net/~pobierzntf/.../Grand_Theft_Auto_San_Andreas.exe  (a298a2b0062d34b3f459cc56a873b963)

0 / 68
http://cluster011.ovh.net/~pobierzntf/.../Symulator_Farmy_2015.exe  (8eef95cfb4f10f59d26997b143e342b9)

1 / 68      (PUP)
http://cluster011.ovh.net/~pobierzntf/.../Minecraft.exe  (273965a315fada142f270fdb75328e3b)

13 / 68    (Malware)
http://cluster011.ovh.net/~pobierzntf/.../Grand_Theft_Auto_V.exe  (d5ec4240f65853d7f187762a529da838)

The following 37 files have been seen to comunicate with cluster011.ovh.net in live environments.

TCP » 213.186.33.40:80
kb799693963.exe

TCP » 213.186.33.40:80
online-guardian-v2.0.9.exe

TCP » 213.186.33.40:80
produpd.exe (produpd.exe by Vested Development, Inc)

TCP » 213.186.33.40:80
6b4.tmp.exe

TCP » 213.186.33.40:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 213.186.33.40:80
femjannacafe.exe

TCP » 213.186.33.40:443
citrio.exe (Citrio by CatalinaGroup)

TCP » 213.186.33.40:80
guacuilanmog.exe

TCP » 213.186.33.40:80
febacpacjofe.exe

TCP » 213.186.33.40:80
online-guardian-v2.0.9.exe

TCP » 213.186.33.40:443
apptrailers.exe

TCP » 213.186.33.40:80
messengertime.exe

TCP » 213.186.33.40:587
wrk.exe

TCP » 213.186.33.40:80
onlineguardian-v2.exe

TCP » 213.186.33.40:80
Notation.exe (Notation by Advernet)

TCP » 213.186.33.40:80
browserair.exe (BrowserAir by Goobzo)

TCP » 213.186.33.40:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 213.186.33.40:80
produpd.exe (produpd.exe by Vested Development, Inc)

TCP » 213.186.33.40:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 213.186.33.40:80
browser.exe (Browser)

 
Latest 20 of 39 files

URL:
http://cluster011.ovh.net/

Title:
“webmail http://webmail.ovh.net”

Web server:
Apache

Facebook:
Shares:  2

Statistics are for the previous month.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.