54.88.21.193
Classification: Suspicious
54.88.21.193 is a suspicious IP address. Reported by 3 threat sources, last seen 2019-12-30. Network: AS14618 Amazon.com, Inc..
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Gen:Variant.Razy | Hybrid-Analysis | 2018-10-13 12:15:07 | 2019-12-30 05:45:04 | ||
| Malicious site | Hybrid-Analysis | 2019-04-06 15:45:05 | 2019-12-11 08:00:09 | ||
| Generic.Malware | Hybrid-Analysis | 2018-06-01 20:45:49 | 2019-05-28 14:00:48 | ||
| Gen:Heur.Zamg | Hybrid-Analysis | 2019-03-20 21:00:49 | 2019-03-20 21:00:49 | ||
| GenKryptik.CVLH | Hybrid-Analysis | 2019-02-08 21:00:11 | 2019-02-08 21:00:13 | ||
| Gen:Variant.Symmi | Hybrid-Analysis | 2019-02-07 17:15:10 | 2019-02-07 17:15:10 | ||
| Gen:Variant.Mikey | Hybrid-Analysis | 2019-01-25 16:00:09 | 2019-01-25 16:00:10 | ||
| Trojan.Agent | Hybrid-Analysis | 2018-06-03 10:45:16 | 2019-01-08 10:15:11 | ||
| Malware site | Hybrid-Analysis | 2018-09-15 04:45:10 | 2019-01-02 13:15:03 | ||
| Application.Bundler.iStartSurf | Hybrid-Analysis | 2018-12-11 01:45:10 | 2018-12-11 01:45:10 | ||
| HEUR:AdWare.StartSurf | Hybrid-Analysis | 2018-11-19 22:30:10 | 2018-11-19 22:30:12 | ||
| Suspicious:NewThreat.50 | Hybrid-Analysis | 2018-11-16 20:00:08 | 2018-11-16 20:00:12 | ||
| BScope.AdWare | Hybrid-Analysis | 2018-11-14 05:45:05 | 2018-11-14 05:45:06 | ||
| Kryptik.GIST | Hybrid-Analysis | 2018-11-12 04:00:05 | 2018-11-12 04:00:07 | ||
| Kryptik.GIQX | Hybrid-Analysis | 2018-11-08 19:00:05 | 2018-11-08 19:00:07 | ||
| Malware.Heuristic | Hybrid-Analysis | 2018-11-02 08:00:44 | 2018-11-02 08:00:44 | ||
| Packed.Krap | Hybrid-Analysis | 2018-10-31 20:15:11 | 2018-10-31 20:15:13 | ||
| Adware.Ranapama | Hybrid-Analysis | 2018-10-17 17:45:06 | 2018-10-17 17:45:07 | ||
| Gen:Variant.Midie | Hybrid-Analysis | 2018-10-03 16:45:07 | 2018-10-03 16:45:08 | ||
| Gen:Variant.Application.Bundler.Dlhelper | Hybrid-Analysis | 2018-09-18 00:30:11 | 2018-09-18 00:30:12 | ||
| Kryptik.GKQR | Hybrid-Analysis | 2018-09-12 21:45:20 | 2018-09-12 21:45:22 | ||
| Evo | Hybrid-Analysis | 2018-09-12 21:30:12 | 2018-09-12 21:30:14 | ||
| Gen:Variant.Application.Symmi | Hybrid-Analysis | 2018-08-20 06:15:29 | 2018-08-20 06:15:31 | ||
| Application.Bundler | Hybrid-Analysis | 2018-04-23 06:45:25 | 2018-04-23 06:45:25 | ||
| Trojan.Dropper.Agent | Hybrid-Analysis | 2018-04-17 10:00:15 | 2018-04-17 10:00:15 | ||
| phishing ,ransomware ,wanacrypt0r ,wannacry ,wcry | Maltiverse | 2018-03-14 07:15:37 | 2018-03-14 07:15:37 | ||
| backdoor,gozi,isfb,papras,ursnif | Maltiverse | 2018-01-17 05:28:31 | 2018-01-17 05:28:31 | ||
| adware,backdoor,pup | Maltiverse | 2018-01-17 03:28:53 | 2018-01-17 03:28:53 | ||
| backdoor,pua,pup | Maltiverse | 2018-01-01 13:21:40 | 2018-01-01 13:21:40 | ||
| Malicious host | IBM X-Force Exchange | 2017-12-10 17:47:16 | 2017-12-10 17:47:16 | ||
| backdoor | Maltiverse | 2017-10-25 18:45:58 | 2017-10-25 18:45:58 | ||
| backdoor,pua | Maltiverse | 2017-10-17 22:24:05 | 2017-10-17 22:24:05 |
Tags
backdoor pua phishing ransomware wanacrypt0r wannacry wcryWhois information
- AS name
- AS14618 Amazon.com, Inc.
- AS registry
- arin
- AS date
- 2013-11-25 00:00:00
- AS CIDR
- 54.88.0.0/16
- CIDR
- 54.72.0.0/13, 54.80.0.0/12
- Registrant
- Amazon.com, Inc.
- Address
- 410 Terry Ave N.
- City
- Ashburn
- State
- VA
- Postal code
- 20147
- Country
- US — United States 🇺🇸
- Contact email
- [email protected], [email protected]
- First indexed
- 2017-10-17 22:24:05
- Last updated
- 2025-11-20 00:14:04