75.2.115.196

Classification: Whitelisted

75.2.115.196 is a whitelisted (trusted) IP address. Reported by 5 threat sources, last seen 2026-07-17. Network: AS16509 Amazon.com, Inc..

Current activity

  • Content Delivery Network — Belongs to a CDN with many allocated resources.
  • Hosting provider — Shared hosting infrastructure.

MITRE ATT&CK associations

Malware families: AZORULT (S0344)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Hosting Provider Maltiverse 2026-07-17 17:16:43 2026-07-17 17:16:43 benign hosting
virut Maltiverse Research Team 2022-02-17 00:57:45 2022-06-30 01:01:53 malicious-activity
Azorult ThreatFox Abuse.ch 2022-06-19 21:18:29 2022-06-19 21:18:29 malicious-activity S0344 Azorult
Phishing Development Bank of Singapore Phishtank 2022-06-08 13:20:25 2022-06-08 13:20:25 compromised malicious-activity
Malicious site Hybrid-Analysis 2022-01-07 19:30:11 2022-01-07 19:30:11
Malware Hybrid-Analysis 2021-12-18 13:31:07 2021-12-29 03:15:39
Phishing site Hybrid-Analysis 2021-08-15 17:30:50 2021-12-25 13:34:42
Trojan.Generic Hybrid-Analysis 2021-07-21 13:45:27 2021-07-21 13:45:27
Injector.EPMJ Hybrid-Analysis 2021-07-07 19:45:34 2021-07-07 20:30:45
Phishing Phishtank 2021-05-02 20:22:09 2021-05-02 20:22:10 compromised malicious-activity
Social Engineering Phishtank 2021-05-02 20:22:09 2021-05-02 20:22:10 malicious-activity

Tags

c&c c2 dga azorult puffstealer rultazo phishing

Whois information

AS name
AS16509 Amazon.com, Inc.
AS registry
arin
AS date
2018-01-10 00:00:00
AS CIDR
75.2.112.0/20
CIDR
75.2.0.0/17, 75.2.128.0/18
Registrant
Amazon.com, Inc.
Address
Amazon Web Services, Inc. P.O. Box 81226
City
Seattle
State
WA
Postal code
98104
Country
US — United States 🇺🇸
Contact email
[email protected], [email protected], [email protected], [email protected]
First indexed
2021-05-02 20:22:09
Last updated
2026-07-17 17:16:43