54.193.24.32 Threat Intelligence and Host Information

Sep 11, 2024 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 54.193.24.32 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 15/100

Host and Network Information

View other sources: Spamhaus VirusTotal

Country: United States
Network: AS16509 amazon.com inc
Noticed: 1 times
Protocols Attacked: Anonymous Proxy
Passive DNS Results: 03536310716a013125ea1231381401ec.yottaa.net www.7forallmankind.com 08c1e2c0798d0132f6ee12313d08f879.yottaa.net 81c851701f46013223d912313d08f98b.yottaa.net 65638920e32c012fc67812313d18e9a2.yottaa.net 3656e0c047270132283812313d08f98b.yottaa.net 62085110fd2f0130f97312313d08f98b.yottaa.net b73eee4042cb0131036a12313d08f98b.yottaa.net a704dd104b360132f1c912313d08f879.yottaa.net 96de8b409b0801312b401231381401ec.yottaa.net 979d63d0ee0b0131e5e012313d08f879.yottaa.net 97a8c070d711012e652d12313d145ceb.yottaa.net 3e4ed8a0674d013124dd1231381401ec.yottaa.net 5a782f70ee0b0131037f123138151fb1.yottaa.net fdac23f0370b012f058512313b031c06.yottaa.net 265a0fd0fd410130c2ae12313d08f879.yottaa.net 6a7223b0c5620130bace12313d08f879.yottaa.net 9cdd2d30ac520130ee4d12313d08f98b.yottaa.net 52dd1330eca10130c04912313d08f879.yottaa.net 3ff8fcf01e7e0131c76a12313d08f879.yottaa.net 92f06640674c0131f1b3123138151fb1.yottaa.net 3f41d2e0933f01312a1c1231381401ec.yottaa.net 00eab060d7640130f3ff12313d08f98b.yottaa.net www.yottaa.com c609982042ff0130c248123138151fb1.yottaa.net

Open Ports Detected

10443 1337 1414 19200 2062 21379 22 22001 22069 22070 23424 27017 3221 3542 3551 37 41800 4443 4482 4500 49152 5001 5006 5007 5432 5555 6080 80 8000 8237 9048 9151 9160 9302 9398 9761 9999

CVEs Detected

CVE-2012-6708 CVE-2015-9251 CVE-2017-7656 CVE-2017-7657 CVE-2017-7658 CVE-2017-9735 CVE-2019-10247 CVE-2019-11358 CVE-2019-17632 CVE-2020-11022 CVE-2020-11023 CVE-2020-27216 CVE-2020-27218 CVE-2020-27223 CVE-2020-7656 CVE-2021-28165 CVE-2021-28169 CVE-2021-34428 CVE-2022-2047 CVE-2022-2048 CVE-2023-26048 CVE-2023-26049 CVE-2023-36478 CVE-2023-36479 CVE-2023-40167 CVE-2023-41900 CVE-2023-44487

Map

Whois Information

NetRange: 54.144.0.0 - 54.221.255.255
CIDR: 54.160.0.0/11, 54.216.0.0/14, 54.208.0.0/13, 54.220.0.0/15, 54.192.0.0/12, 54.144.0.0/12
NetName: AMAZON
NetHandle: NET-54-144-0-0-1
Parent: NET54 (NET-54-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Amazon Technologies Inc. (AT-88-Z)
RegDate: 2014-10-23
Updated: 2021-02-10
Ref: https://rdap.arin.net/registry/ip/54.144.0.0
OrgName: Amazon Technologies Inc.
OrgId: AT-88-Z
Address: 410 Terry Ave N.
City: Seattle
StateProv: WA
PostalCode: 98109
Country: US
RegDate: 2011-12-08
Updated: 2024-01-24
Comment: All abuse reports MUST include:
Comment: * src IP
Comment: * dest IP (your IP)
Comment: * dest port
Comment: * Accurate date/timestamp and timezone of activity
Comment: * Intensity/frequency (short log extracts)
Comment: * Your contact details (phone and email) Without these we will be unable to identify the correct owner of the IP address at that point in time.
Ref: https://rdap.arin.net/registry/entity/AT-88-Z
OrgRoutingHandle: ARMP-ARIN
OrgRoutingName: AWS RPKI Management POC
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-rpki-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/ARMP-ARIN
OrgAbuseHandle: AEA8-ARIN
OrgAbuseName: Amazon EC2 Abuse
OrgAbusePhone: +1-206-555-0000
OrgAbuseEmail: trustandsafety@support.aws.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/AEA8-ARIN
OrgRoutingHandle: IPROU3-ARIN
OrgRoutingName: IP Routing
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/IPROU3-ARIN
OrgTechHandle: ANO24-ARIN
OrgTechName: Amazon EC2 Network Operations
OrgTechPhone: +1-206-555-0000
OrgTechEmail: amzn-noc-contact@amazon.com
OrgTechRef: https://rdap.arin.net/registry/entity/ANO24-ARIN
OrgNOCHandle: AANO1-ARIN
OrgNOCName: Amazon AWS Network Operations
OrgNOCPhone: +1-206-555-0000
OrgNOCEmail: amzn-noc-contact@amazon.com
OrgNOCRef: https://rdap.arin.net/registry/entity/AANO1-ARIN
NetRange: 54.193.0.0 - 54.193.255.255
CIDR: 54.193.0.0/16
NetName: AMAZO-ZSFO4
NetHandle: NET-54-193-0-0-1
Parent: AMAZON (NET-54-144-0-0-1)
NetType: Reallocated
OriginAS: AS16509
Organization: Amazon.com, Inc. (AMAZO-48)
RegDate: 2013-11-06
Updated: 2021-02-10
Ref: https://rdap.arin.net/registry/ip/54.193.0.0
OrgName: Amazon.com, Inc.
OrgId: AMAZO-48
Address: 1200 12th Ave South
City: Seattle
StateProv: WA
PostalCode: 98144
Country: US
RegDate: 2011-08-11
Updated: 2021-07-22
Comment: The activity you have detected originates from a dynamic hosting environment.
Comment: For fastest response, please submit abuse reports at http://aws-portal.amazon.com/gp/aws/html-forms-controller/contactus/AWSAbuse
Comment: For more information regarding EC2 see:
Comment: http://ec2.amazonaws.com/
Comment: All reports MUST include:
Comment: * src IP
Comment: * dest IP (your IP)
Comment: * dest port
Comment: * Accurate date/timestamp and timezone of activity
Comment: * Intensity/frequency (short log extracts)
Comment: * Your contact details (phone and email) Without these we will be unable to identify the correct owner of the IP address at that point in time.
Ref: https://rdap.arin.net/registry/entity/AMAZO-48
OrgNOCHandle: AANO1-ARIN
OrgNOCName: Amazon AWS Network Operations
OrgNOCPhone: +1-206-555-0000
OrgNOCEmail: amzn-noc-contact@amazon.com
OrgNOCRef: https://rdap.arin.net/registry/entity/AANO1-ARIN
OrgRoutingHandle: ARMP-ARIN
OrgRoutingName: AWS RPKI Management POC
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-rpki-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/ARMP-ARIN
OrgAbuseHandle: AEA8-ARIN
OrgAbuseName: Amazon EC2 Abuse
OrgAbusePhone: +1-206-555-0000
OrgAbuseEmail: trustandsafety@support.aws.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/AEA8-ARIN
OrgRoutingHandle: IPROU3-ARIN
OrgRoutingName: IP Routing
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/IPROU3-ARIN
OrgTechHandle: ANO24-ARIN
OrgTechName: Amazon EC2 Network Operations
OrgTechPhone: +1-206-555-0000
OrgTechEmail: amzn-noc-contact@amazon.com
OrgTechRef: https://rdap.arin.net/registry/entity/ANO24-ARIN

Links to attack logs

anonymous-proxy-ip-list-2024-08-22 anonymous-proxy-ip-list-2024-08-21 anonymous-proxy-ip-list-2024-08-23

Share on: