13.36.107.63 Threat Intelligence and Host Information

General

This page contains threat intelligence information for the IPv4 address 13.36.107.63 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 10/100

Host and Network Information

• View other sources: Spamhaus VirusTotal

• Country: France
• Network: AS16509 amazon.com inc
• Noticed: 1 times
• Protocols Attacked: SSH
• Passive DNS Results: shaf.shop techbelive.com mx2.improvmx.com

Malware Detected on Host

Count: 675 2f0852ebc8eda704e19c5fa5369b8661da83d3694207d96b41eb0d5b5dbbb9cb ac1527e095fb8f5735d865d164b534ac7ec5ebc9d05840ab0de06a4a506c21e6 4ad3c84343cc13105a0cb1e45b1f34f0ded69af3dfeeef2397305939eca11006 1d3002ebe4b2232b8f41fc32d3aaa4f0c5f6e2184583740ded7f7d28367d4a83 7dd62d7ff47a2c9c139391f0e95ef8855294b3bb0ba5e1589a963b404ea1762d 5bd72532df0b0d522aa94144dc0d55f4e1937c8dde7f5746e702952224c1fd41 eb18c3f90aa22de2c6bc596aca2d29c940b2142f12f0e3e61f9b9dfe9e9a8ffc f8aa781c507632b6c7d68787b79911cec777681a5a6a3f1a2d106dc9e7338942 319a0abb6395258fafaa33bb8b16719e8c042ea87531eb2381ffebd5fbd84732 e7c2d0d46a6773217941ed1b35bcb0f297af0d3fdfc3291e183e4ea3000282e4

Open Ports Detected

25 465 587

Map

Whois Information

• NetRange: 13.24.0.0 - 13.59.255.255
• CIDR: 13.56.0.0/14, 13.24.0.0/13, 13.32.0.0/12, 13.48.0.0/13
• NetName: AT-88-Z
• NetHandle: NET-13-24-0-0-1
• Parent: NET13 (NET-13-0-0-0-0)
• NetType: Direct Allocation
• OriginAS:
• Organization: Amazon Technologies Inc. (AT-88-Z)
• RegDate: 2020-08-05
• Updated: 2021-02-10
• Ref: https://rdap.arin.net/registry/ip/13.24.0.0
• OrgName: Amazon Technologies Inc.
• OrgId: AT-88-Z
• Address: 410 Terry Ave N.
• City: Seattle
• StateProv: WA
• PostalCode: 98109
• Country: US
• RegDate: 2011-12-08
• Updated: 2024-01-24
• Comment: All abuse reports MUST include:
• Comment: * src IP
• Comment: * dest IP (your IP)
• Comment: * dest port
• Comment: * Accurate date/timestamp and timezone of activity
• Comment: * Intensity/frequency (short log extracts)
• Comment: * Your contact details (phone and email) Without these we will be unable to identify the correct owner of the IP address at that point in time.
• Ref: https://rdap.arin.net/registry/entity/AT-88-Z
• OrgRoutingHandle: ARMP-ARIN
• OrgRoutingName: AWS RPKI Management POC
• OrgRoutingPhone: +1-206-555-0000
• OrgRoutingEmail: aws-rpki-routing-poc@amazon.com
• OrgRoutingRef: https://rdap.arin.net/registry/entity/ARMP-ARIN
• OrgNOCHandle: AANO1-ARIN
• OrgNOCName: Amazon AWS Network Operations
• OrgNOCPhone: +1-206-555-0000
• OrgNOCEmail: amzn-noc-contact@amazon.com
• OrgNOCRef: https://rdap.arin.net/registry/entity/AANO1-ARIN
• OrgRoutingHandle: IPROU3-ARIN
• OrgRoutingName: IP Routing
• OrgRoutingPhone: +1-206-555-0000
• OrgRoutingEmail: aws-routing-poc@amazon.com
• OrgRoutingRef: https://rdap.arin.net/registry/entity/IPROU3-ARIN
• OrgAbuseHandle: AEA8-ARIN
• OrgAbuseName: Amazon EC2 Abuse
• OrgAbusePhone: +1-206-555-0000
• OrgAbuseEmail: abuse@amazonaws.com
• OrgAbuseRef: https://rdap.arin.net/registry/entity/AEA8-ARIN
• OrgTechHandle: ANO24-ARIN
• OrgTechName: Amazon EC2 Network Operations
• OrgTechPhone: +1-206-555-0000
• OrgTechEmail: amzn-noc-contact@amazon.com
• OrgTechRef: https://rdap.arin.net/registry/entity/ANO24-ARIN
• NetRange: 13.36.0.0 - 13.39.255.255
• CIDR: 13.36.0.0/14
• NetName: AMAZON-CDG
• NetHandle: NET-13-36-0-0-1
• Parent: AT-88-Z (NET-13-24-0-0-1)
• NetType: Reallocated
• OriginAS: AS16509
• Organization: Amazon Data Services France (ADSF)
• RegDate: 2020-10-22
• Updated: 2021-02-10
• Ref: https://rdap.arin.net/registry/ip/13.36.0.0
• OrgName: Amazon Data Services France
• OrgId: ADSF
• Address: 67 Boulevard du General Leclerc
• City: Clichy
• StateProv:
• PostalCode: 92110
• Country: FR
• RegDate: 2017-08-23
• Updated: 2019-08-02
• Ref: https://rdap.arin.net/registry/entity/ADSF
• OrgNOCHandle: AANO1-ARIN
• OrgNOCName: Amazon AWS Network Operations
• OrgNOCPhone: +1-206-555-0000
• OrgNOCEmail: amzn-noc-contact@amazon.com
• OrgNOCRef: https://rdap.arin.net/registry/entity/AANO1-ARIN
• OrgAbuseHandle: AEA8-ARIN
• OrgAbuseName: Amazon EC2 Abuse
• OrgAbusePhone: +1-206-555-0000
• OrgAbuseEmail: abuse@amazonaws.com
• OrgAbuseRef: https://rdap.arin.net/registry/entity/AEA8-ARIN
• OrgTechHandle: ANO24-ARIN
• OrgTechName: Amazon EC2 Network Operations
• OrgTechPhone: +1-206-555-0000
• OrgTechEmail: amzn-noc-contact@amazon.com
• OrgTechRef: https://rdap.arin.net/registry/entity/ANO24-ARIN

Links to attack logs

****** ****** ******