52.55.187.113 Threat Intelligence and Host Information

Oct 21, 2023 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 52.55.187.113 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 40/100

Host and Network Information

  • Tags: all search, author avatar, domain, hours ago, malware, network created, otx ellenmmm, report spam, scan endpoints, white domain

  • View other sources: Spamhaus VirusTotal

  • Country: United States
  • Network: AS14618 amazon.com inc.
  • Noticed: 1 times
  • Protcols Attacked: SSH
  • Passive DNS Results: ns2.wowservers.ru ns2.uoaeogauhduadhug.in ns2.sevgikresi.net ns2.meliknakis.com ns2.designscapeuk.com ns2.eoufaoeuhoauengi.net ns2.apple-pie.in ns2.booomaahuuoooapl.in ns2.noralvasanchez.com ns2.plpoiupakludkosa.in ns2.morphed.ru ns2.aparlorbkp.com ns2.dksadjsahnfaskmsa.com ns2.mtsoexdphaqliva.com ns2.qxkdgngp.com ns2.imuwobulok.biz ns2.bfagzzezgaegzgfaid.io ns2.biphysics.com ns2.lb4bs.com ns2.lumkanda.xyz ns2.hzmksreiuojy.in ns2.barberink.biz ns2.fiernearlist.com ns2.pojfdfpmgb.com ns2.csof.net ns2.rjoowoaetaqatin.com ns2.plpoiupakludkosa.net ns2.ashihsijaediaehf.net ns2.plpanaifheaighai.net ns2.booomaahuuoooapl.com ns2.drippingstrawberry.com

Malware Detected on Host

Count: 8 14106a48c00e6cd428c6984837c9f8877ee576f2b7c8d60b1abe2b556d9908a9 2c84654ed678dced305bcc2fe4d8aaa5601d9dff435de569328434c9acbb4b8c f764f57cbcf3ce9b2d624f44c1d8286ca73dd270a2f9b69bef72d68e9dc64833 9fa60d44fbcde54bd58e0d759edd1e2929148b22e9ae1c0b1a9bd6509288e21c 7bcf1ca62eb3ebdb0af91a99cec39747d678f0af975d6d36fbc38ab6727c7549 6b6374ede0c26a085c7c3ae7a26d8fda3f249f3991b8f7533121dadf2ffd837b 61538836e90254f3aac13d45ac5623bc5f08ffa0a38795ad4af0e19d69e6134d 0e14182d5015f777094165ec665dba13f2acd726cead41f4d0448cb31d837f2a

Open Ports Detected

22

CVEs Detected

CVE-2016-20012 CVE-2017-15906 CVE-2018-15473 CVE-2018-15919 CVE-2018-20685 CVE-2019-6109 CVE-2019-6110 CVE-2019-6111 CVE-2020-14145 CVE-2020-15778 CVE-2021-36368 CVE-2021-41617 CVE-2023-38408

Map

Whois Information

Share on: