50.63.13.3 Threat Intelligence and Host Information

Aug 10, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 50.63.13.3 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Known Malicious Host 🔴 75/100

Host and Network Information

Mitre ATT&CK IDs: T1023 - Shortcut Modification, T1031 - Modify Existing Service, T1036.004 - Masquerade Task or Service, T1036 - Masquerading, T1045 - Software Packing, T1055 - Process Injection, T1057 - Process Discovery, T1060 - Registry Run Keys / Startup Folder, T1070 - Indicator Removal on Host, T1071.001 - Web Protocols, T1071.004 - DNS, T1071 - Application Layer Protocol, T1083 - File and Directory Discovery, T1105 - Ingress Tool Transfer, T1122 - Component Object Model Hijacking, T1129 - Shared Modules, T1143 - Hidden Window, T1498 - Network Denial of Service, T1499.002 - Service Exhaustion Flood, T1499 - Endpoint Denial of Service, T1553.002 - Code Signing, T1553 - Subvert Trust Controls, T1568.002 - Domain Generation Algorithms, T1568 - Dynamic Resolution, T1583.001 - Domains, T1583.005 - Botnet, T1583 - Acquire Infrastructure, T1584 - Compromise Infrastructure
Tags: 4624, aaaa, accept, admin country, a domains, adversaries, algorithm, all scoreblue, apple, apple ios, as20940, as21499 host, as44273 host, as54113, as7018 att, ascii text, asnone germany, attack ddos, avast avg, b59bn timestamp, b715, body, botnet, ca issuers, cambridge, cc50689e0a, cc.py, centos, ck id, ck techniques, click, cname, code, command, command decode, contacted, copy, country, creation date, cus olet, cybercrime, Cyclops, danger, data, date, ddos, DDoS, DDOS, de execution, default, delphi, delphi generic, development att, digicert inc, digicert tls, dns, dns replication, dock, domain, domain id, domain related, domains, dos exe, drweb, dynadot inc, dynamicloader, emails, encrypt, encrypt cnr3, entries, et tor, facebook, false, files, files domain, files location, files related, file type, flywheel, for privacy, found, fraud, full name, Gamardeon, gandi sas, general, germany, glox, gmtn, gmt server, HEAD Floods, HermeticWiper, hiddentear, hide, high, historical ssl, hosting, http, hybrid, iana id, icons library, inetsim http, info header, informative, intel, ip address, ip detections, ipv4, IsaacWiper, jekyll, june, key algorithm, key info, Killnet, KillNet, learn, link library, list ips, local, location united, log id, mailpass mixed, malicious, malware, massachusetts, medium, meta, metro, mitre att, module load, moved, ms windows, name md5, name servers, name tactics, next, norad tracking, nuance china, number, nxdomain, object, organization, overlay, parents, PartyTicket, passive dns, pattern match, pe32, pe32 linker, phishing, png image, postal code, post http, powershell, privacy tech, pulse pulses, pulses, pulses otx, pulse submit, pykspa, qaeaav12, qbeipbdii, ransom, read c, record type, record value, redacted for, referrer, registrar abuse, related nids, related tags, renos, revil, rgba, rsa sha256, russia, russian, samsung, scan endpoints, script urls, search, sea x, server, sha1, show, showing, singapore, size, skynet, social engineering, speakez securus, stalking, status, strings, subject public, suricata stream, suspicious, t1129, T1498, T1499, tags, text, timestamp, title, tls web, tracker, tracking, trojan, trojan downloader, ttl value, twitter, type name, typosquat infra, ukraine, united, unknown, url analysis, url http, urls, v3 serial, validity, west domains, WhisperGate, whitelisted, win16 ne, win32, win32 dynamic, win32 exe, win32heur mar, windows, write, x fw
View other sources: Spamhaus VirusTotal
Contained within other IP sets: blocklist_net_ua, socks_proxy_1d, socks_proxy_30d, socks_proxy_7d, stopforumspam_180d, stopforumspam_365d, stopforumspam_90d, stopforumspam

Country: United States
Network:
Noticed: 29 times
Protocols Attacked: Anonymous Proxy
Countries Attacked: Russian Federation, United States of America
Passive DNS Results: payyanur.relents.in mail.crescentknr.com 3.13.63.50.host.secureserver.net snowaymarine.com peacetrikaripur.in crescentknr.com thunchathacharya.com malabarenglishschoolchakkarakkal.com mpskoyilandy.com sirajulhudacampusnadapuram.com crescentschool-taliparamba.com amruthapublicschool.org relents.in sirajulhuda.in

Map

Whois Information

NetRange: 50.62.0.0 - 50.63.255.255
CIDR: 50.62.0.0/15
NetName: GO-DADDY-COM-LLC
NetHandle: NET-50-62-0-0-1
Parent: NET50 (NET-50-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: GoDaddy.com, LLC (GODAD)
RegDate: 2011-02-02
Updated: 2014-02-25
Comment: Please send abuse complaints to abuse@godaddy.com
Ref: https://rdap.arin.net/registry/ip/50.62.0.0
OrgName: GoDaddy.com, LLC
OrgId: GODAD
Address: 2155 E GoDaddy Way
City: Tempe
StateProv: AZ
PostalCode: 85284
Country: US
RegDate: 2007-06-01
Updated: 2024-11-25
Comment: Please send abuse complaints to abuse@godaddy.com
Ref: https://rdap.arin.net/registry/entity/GODAD
OrgTechHandle: NOC124-ARIN
OrgTechName: Network Operations Center
OrgTechPhone: +1-480-505-8809
OrgTechEmail: noc@godaddy.com
OrgTechRef: https://rdap.arin.net/registry/entity/NOC124-ARIN
OrgAbuseHandle: ABUSE51-ARIN
OrgAbuseName: Abuse Department
OrgAbusePhone: +1-480-624-2505
OrgAbuseEmail: abuse@godaddy.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE51-ARIN
OrgNOCHandle: NOC124-ARIN
OrgNOCName: Network Operations Center
OrgNOCPhone: +1-480-505-8809
OrgNOCEmail: noc@godaddy.com
OrgNOCRef: https://rdap.arin.net/registry/entity/NOC124-ARIN
RNOCHandle: NOC124-ARIN
RNOCName: Network Operations Center
RNOCPhone: +1-480-505-8809
RNOCEmail: noc@godaddy.com
RNOCRef: https://rdap.arin.net/registry/entity/NOC124-ARIN
RAbuseHandle: ABUSE51-ARIN
RAbuseName: Abuse Department
RAbusePhone: +1-480-624-2505
RAbuseEmail: abuse@godaddy.com
RAbuseRef: https://rdap.arin.net/registry/entity/ABUSE51-ARIN
RTechHandle: NOC124-ARIN
RTechName: Network Operations Center
RTechPhone: +1-480-505-8809
RTechEmail: noc@godaddy.com
RTechRef: https://rdap.arin.net/registry/entity/NOC124-ARIN

Links to attack logs

Share on: