72.52.10.14 Threat Intelligence and Host Information

Dec 08, 2023 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 72.52.10.14 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Likely Malicious Host 🟠 60/100

Host and Network Information

  • Mitre ATT&CK IDs: T1052.001 - Exfiltration over USB, T1052 - Exfiltration Over Physical Medium, T1401 - Device Administrator Permissions

  • Tags: accept, analysis, ansi, apt, click, close, cyber security, data, date, decrypted ssl, download, general, hosts, http://ftp.tandberg.com/pub/software/endpoints/movi/movi4/S85000, hybrid, indonesia, ioc, local, malicious, malware, Nextray, online, patch, path, pcap, pcap processing, phishing, runtime data, sample, sandbox, sha256, size, strings, submit, suspicious, threat level, trojan, voice, vxstream

  • View other sources: Spamhaus VirusTotal

  • Contained within other IP sets: cleanmx_phishing, hphosts_ats, hphosts_emd, hphosts_fsa, hphosts_psh

Malware Detected on Host

Count: 137 e5d1397fd318531ba1f482be00b1d200472eec94f724faca246709588e91fb49 b43eec3f5d89c12cb7827249621145e4e50f1e1aa81c82341b47a22f4b880c23 96cf01629e6fc853ed4faa13c1e5e71fc1ba30e247dfbc70449759b66d7888a6 7bbb2da34c2fe24d6c1acf78f19acc218600fc85f04a885d89edf886d8710386 b5be06c4210cce05b32e62ab9b09da4f5849582a6340901b2853ad7a840429f9 58b8822ff401c3bb49331f159dc592264268f6721a69584300bd6ebf47e26f13 712c3f90b4d5486a602efae1936157f2d61ce192412234ff6dc42009a24acc66 54e3c93584be2e95f76452fcdb0db8531ad309df0dd91e464544027eb9343cc5 e81d984a6e4d97024a25638b9d58c8e0b6ddb396dccafe08756fbd830030a756 791ff760f7b1c44ed4643457105f0c5c931319a7060872fa6d7bbc8330b3d160

Open Ports Detected

80

Map

Whois Information

  • NetRange: 72.52.0.0 - 72.52.63.255
  • CIDR: 72.52.0.0/18
  • NetName: PROLEXIC
  • NetHandle: NET-72-52-0-0-1
  • Parent: NET72 (NET-72-0-0-0-0)
  • NetType: Direct Allocation
  • OriginAS:
  • Organization: Akamai Technologies, Inc. (AKAMAI)
  • RegDate: 2005-07-11
  • Updated: 2019-10-21
  • Comment: —–BEGIN CERTIFICATE—–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—–END CERTIFICATE—–
  • Ref: https://rdap.arin.net/registry/ip/72.52.0.0
  • OrgName: Akamai Technologies, Inc.
  • OrgId: AKAMAI
  • Address: 145 Broadway
  • City: Cambridge
  • StateProv: MA
  • PostalCode: 02142
  • Country: US
  • RegDate: 1999-01-21
  • Updated: 2023-10-24
  • Ref: https://rdap.arin.net/registry/entity/AKAMAI
  • OrgAbuseHandle: NUS-ARIN
  • OrgAbuseName: NOC United States
  • OrgAbusePhone: +1-617-444-2535
  • OrgAbuseEmail: abuse@akamai.com
  • OrgAbuseRef: https://rdap.arin.net/registry/entity/NUS-ARIN
  • OrgTechHandle: IPADM11-ARIN
  • OrgTechName: ipadmin
  • OrgTechPhone: +1-617-444-0017
  • OrgTechEmail: ip-admin@akamai.com
  • OrgTechRef: https://rdap.arin.net/registry/entity/IPADM11-ARIN
  • OrgTechHandle: SJS98-ARIN
  • OrgTechName: Schecter, Steven Jay
  • OrgTechPhone: +1-617-274-7134
  • OrgTechEmail: ip-admin@akamai.com
  • OrgTechRef: https://rdap.arin.net/registry/entity/SJS98-ARIN

Links to attack logs

****** ****** ******

Share on: