209.54.52.59 Threat Intelligence and Host Information
General
This page contains threat intelligence information for the IPv4 address 209.54.52.59 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.
Possibly Malicious Host 🟢 20/100
Host and Network Information
-
JARM: 2ad2ad20d2ad2ad22c2ad2ad2ad2ad15a110e3e079cba2b9e84d88fe6e1939
-
View other sources: Spamhaus VirusTotal
- Country: United States
- Network:
- Noticed: 1 times
- Protocols Attacked: SSH
- Passive DNS Results: happylife365.xyz dajasua2023ad.com www.betchannel-football.com p3sae.site g5pfe.shop v3kpu.click n8rkt.xyz www.okaneagemasu.xyz okaneagemasu.xyz www.blackcaching.com www.amzac.xyz www.casino-sports.org www.obi.style www.rakuama.com stg.bqomed.com www.takushoku-univ-fc.jp www.toucolle.site xn–f9jhj4h3b8by699bedkcml.com www.leafull-cash.com obi.style hoge.in soleilweb.net adarutohikaku.info gtindex.net betchannel-football.com nurumayu.info hakutyo.info xn–3ckwa2bz29zjcg.com digi-tentshkk.com tmtm.exchange www.tmtm.exchange paraphyslabo.info adujhdvo2021ad.com polekaguruguru.com hololivesub.com bqomed.com ange-en-iris.info tdoti.net brin-da.net www.amatajp-kh.com amatajp-kh.com www.elon-technology.com elon-technology.com deaikeitaikendan.net my-japan-av.com www.donbays.com donbays.com tdoti.com brin-da.com www.katikati7.work lowfc.com www.coco-ero.com top-infopage.com ft-info.net ft-official.com www.vibpower-en-kanazawa-u.com www.raczac.xyz www.racook.xyz www.casi-casi.com www.amcook.xyz s-blackbank.com green-backs.com www.monetaime.com monetaime.com adaruto777.net uma.horse nice-dvd.com busupan.com www.atobarai-zyouhoukan.com rarugo.com lovepeco.net rakurakuf.com partnergift.com www.partnergift.com www.tppg.info www.kana0.com atobarai-zyouhoukan.com nonbirisoft.com season-114.com flow-finance.com star-yell.com katikati7.work coco-ero.com vibpower-en-kanazawa-u.com jridol-iv.xyz ro-caz.com morohentai.com mymy-souko.com softgood2.com tokiwa-33.com bsc-inc-site.com ainet-base.com sagae-kentaro.net gori-ero.xyz goru-ero.xyz y7pk.xyz casino-sports.org c8qv.xyz d39y.xyz b8f3.xyz f35r.xyz daruma-cash.com point-cash.net xadulthosts.com myerotube.com belinefinance.com inet-base.com genkinka.tppg.info royjapan.com racook.xyz raczac.xyz tppg.info credithelp4u.org takushoku-univ-fc.jp toucolle.site amzac.xyz rakuama.com casi-casi.com amcook.xyz kana0.com joyroyalclassic.jp casi-casi.net leafull-cash.com loversgoods.xyz shared15.friend-server.com woman-ex.com japorn.info erokensaku.com onadepa.com sma-a.work shemaleporn.work 24hrs7days.com mt-business.net happylending.net xvideos-pornhub.work oppaich.xyz ero-anime.club adultkingdom.xyz blackcaching.com app.japanbox.net shiroutodouga-club.com minkan.net feti-navi.net ranmemo.net mmd-r18.com likelit.org bizinmontana.com apple-gift.net jedecouvrelemaroc.com thegioimay.net kyonyuudougakurui.com blog.yomone.jp ephedrainjury.com physical-support.com a05yr.hakutyo.info oomiya.yomone.jp jimmynorman.net kayano.yomone.jp gay.madi-son.net ns1.mamhost.com mail.mezimages.net aitraining.tokyo omanko-adaruto.com
Malware Detected on Host
Count: 19 72b1a97bbc7ccdb4e1dce2a494acdecd25be2d71c846bff385488caf4c245b47 7412a70a4f8248e649e872b18c30130a5c21b7b4fffcffcf058c4096b4caaa52 f6087311ff333cfcc436f204318c5fa5a1cdde58f460a5c8c034d4373fb5c57f d9373c9bf47812a49e888a08c57591d68f751a6f9c966345b9987848d65c25bc 1f0ca6fb3208beccb72075ff4cb11d637bb78a28b008231f20cd559d23f54599 60687bd472c8e22c380001350f2211e246237ae722fc0bd6b0ad58d07630dc1c deaa8bd161e8f3e7c7b6fc6f698a83f2f8772529eb0d0b596c7be47b29b3d76e b5b3b11a8102211cdc96d8c632632302c7581a2782188bba735064fc79a9dd92 f4222ea98ed930fc2bb5e61b8a6552c7e2d14068e1a8e4e5ca880d8ca7fb84de 7bb902370e4d515163f834fc59508529311503a60257ff22bfa17dc48c75950c
Open Ports Detected
110 143 161 21 25 443 465 53 587 7080 80 8443 8880 993 995
CVEs Detected
CVE-2019-12815 CVE-2019-19269 CVE-2019-19271 CVE-2019-19272 CVE-2020-9272 CVE-2021-46854 CVE-2023-48795 CVE-2023-51713
Map
Whois Information
- NetRange: 209.54.48.0 - 209.54.63.255
- CIDR: 209.54.48.0/20
- NetName: GCA-29
- NetHandle: NET-209-54-48-0-1
- Parent: NET209 (NET-209-0-0-0-0)
- NetType: Direct Allocation
- OriginAS: AS27611
- Organization: Merrick Mirror Hosting, Inc (MMH-78)
- RegDate: 2016-04-13
- Updated: 2021-03-15
- Ref: https://rdap.arin.net/registry/ip/209.54.48.0
- OrgName: Merrick Mirror Hosting, Inc
- OrgId: MMH-78
- Address: 4533 MacArthur Blvd., Ste 318
- City: Newport Beach
- StateProv: CA
- PostalCode: 92660
- Country: US
- RegDate: 2016-12-22
- Updated: 2024-11-25
- Ref: https://rdap.arin.net/registry/entity/MMH-78
- OrgTechHandle: NOC32590-ARIN
- OrgTechName: Network Operations Center
- OrgTechPhone: +1-949-752-7535
- OrgTechEmail: noc@mmh-inc.com
- OrgTechRef: https://rdap.arin.net/registry/entity/NOC32590-ARIN
- OrgAbuseHandle: IRT5-ARIN
- OrgAbuseName: Intrusion Response Team
- OrgAbusePhone: +1-949-752-7051
- OrgAbuseEmail: abuse@mmh-inc.com
- OrgAbuseRef: https://rdap.arin.net/registry/entity/IRT5-ARIN
- OrgNOCHandle: NOC32590-ARIN
- OrgNOCName: Network Operations Center
- OrgNOCPhone: +1-949-752-7535
- OrgNOCEmail: noc@mmh-inc.com
- OrgNOCRef: https://rdap.arin.net/registry/entity/NOC32590-ARIN
- NetRange: 209.54.49.0 - 209.54.63.255
- CIDR: 209.54.56.0/21, 209.54.50.0/23, 209.54.52.0/22, 209.54.49.0/24
- NetName: NH1-V4-MMH1-V4
- NetHandle: NET-209-54-49-0-1
- Parent: GCA-29 (NET-209-54-48-0-1)
- NetType: Reallocated
- OriginAS: AS54782, AS27611
- Organization: GMO-Z.com USA, INC (GCA-29)
- RegDate: 2012-10-08
- Updated: 2022-07-19
- Ref: https://rdap.arin.net/registry/ip/209.54.49.0
- OrgName: GMO-Z.com USA, INC
- OrgId: GCA-29
- Address: 4533 MacArthur Blvd. Ste 318
- City: Newport Beach
- StateProv: CA
- PostalCode: 92660
- Country: US
- RegDate: 2011-06-27
- Updated: 2022-07-19
- Comment: MMH provides cloud and dedicated servers as well as vps hosting.
- Ref: https://rdap.arin.net/registry/entity/GCA-29
- OrgTechHandle: MMH23-ARIN
- OrgTechName: MMH
- OrgTechPhone: +1-949-752-7535
- OrgTechEmail: arin@merrickmirror.com
- OrgTechRef: https://rdap.arin.net/registry/entity/MMH23-ARIN
- OrgNOCHandle: MMH23-ARIN
- OrgNOCName: MMH
- OrgNOCPhone: +1-949-752-7535
- OrgNOCEmail: arin@merrickmirror.com
- OrgNOCRef: https://rdap.arin.net/registry/entity/MMH23-ARIN
- OrgAbuseHandle: MMH23-ARIN
- OrgAbuseName: MMH
- OrgAbusePhone: +1-949-752-7535
- OrgAbuseEmail: arin@merrickmirror.com
- OrgAbuseRef: https://rdap.arin.net/registry/entity/MMH23-ARIN