home

nikatel.ir

Domain Information

Server location:
Bayern, Germany (DE)

ASN:
AS24940 HETZNER-AS Hetzner Online GmbH,DE

The domain nikatel.ir has been seen to resolve to the following 2 IP addresses.

137.74.151.210
210.151.74.137.fr.axspace.com
August 22, 2016

176.9.136.26
static.26.136.9.176.clients.your-server.de
October 29, 2015

The following 10 files have been seen to comunicate with nikatel.ir in live environments.

TCP » 137.74.151.210:80
userinit.exe (honey)

TCP » 137.74.151.210:80
SolvusoftTray.exe (Solvusoft by Solvusoft)

TCP » 137.74.151.210:80
services.exe

TCP » 137.74.151.210:80
updates.exe

TCP » 137.74.151.210:80
regsvr.exe

TCP » 137.74.151.210:80
winseven.exe

TCP » 137.74.151.210:80
new folder.exe

TCP » 137.74.151.210:80
updates.exe

TCP » 137.74.151.210:80
lsass.exe

TCP » 137.74.151.210:80
msn.exe

October 29, 2015
dl.nikatel.ir

m32.ir

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.