avsvmcloud.com
Classification: Malicious
avsvmcloud.com is a malicious hostname. Linked to Sunburst malware. 1,888 sightings from 3 threat sources (Malicious site), last seen 2026-10-18.
Current activity
- Offline — no longer resolving. Last online 2026-10-18 08:02:07.
MITRE ATT&CK associations
Malware families: SUNBURST (S0559)
Where it has been seen
Observed by Maltiverse Threat Observatory sensors in BR, CL, FR and JP, across healthcare, manufacturing, retail and technology networks.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Sunburst | Maltiverse Threat Observatory | 2024-12-24 06:41:07 | 2026-10-18 06:50:59 | country_code:br country_code:cl country_code:fr country_code:jp industry:healthcare-and-pharmaceutical industry:manufacturing industry:retail-and-hospitality industry:technology-and-telecommunications malicious-activity | S0559 SUNBURST |
| Top Popularity Site | Cisco Umbrella | 2022-07-19 00:51:47 | 2025-01-06 12:22:04 | benign | |
| Alexa Top 1 Million | Alexa | 2020-12-20 14:40:46 | 2021-01-17 15:07:59 | benign | |
| Malicious site | Hybrid-Analysis | 2020-12-29 17:45:13 | 2020-12-29 17:45:13 | ||
| SolarWinds C2 | Maltiverse Research Team | 2020-12-16 08:01:03 | 2020-12-16 08:01:03 | ||
| Malware site | Hybrid-Analysis | 2020-12-14 06:00:17 | 2020-12-14 06:00:17 |
Tags
apt fireeye attack c2 apt29 cozy bearIP addresses resolved by this hostname
- 107.161.23.204 (2019-11-27 23:53:57)
- 13.65.251.83 (2020-04-13 19:57:07)
- 13.84.134.105 (2020-04-13 19:57:06)
- 13.90.103.231 (2020-04-13 19:57:06)
- 13.92.233.22 (2020-04-13 19:57:06)
- 192.161.187.200 (2019-11-27 23:53:56)
- 209.141.38.71 (2019-11-27 23:53:56)
- 52.170.43.150 (2020-04-13 19:57:07)
- 52.171.135.15 (2020-04-13 19:57:07)
- 52.171.141.69 (2020-04-13 19:57:07)
- 62.212.82.215 (2022-12-31 15:06:47)
- 178.162.217.109 (2026-04-16 00:00:13)
- 95.211.179.37 (2026-04-16 00:00:13)
- 178.162.203.225 (2026-04-16 00:00:13)
- 20.140.0.1 (2026-09-24 13:12:21)
Whois information
- AS name
- AS28753 Leaseweb Deutschland GmbH
- Domain
- avsvmcloud.com
- TLD
- com
- First indexed
- 2020-12-14 06:00:17
- Last updated
- 2026-10-18 08:02:07