199.27.76.249

Fastly

IP Address Information

The Internet Service Provider (ISP) that owns the network address of 199.27.76.249 is Fastly and located in California within the United States. Currently there are 1134 domain names that utilize this address. The primary domain hosted by this IP is ccleaner.soft32.com along with 1133 other domains which are known adware distribution web sites.
Scanner detections:
Detections  (89% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.ITNTSRL.d, PUP.ITNTSRL.AA, PUP.ITNTSRL.v, (M), PUP.Installer.ZuluSoftSRL.DD, PUP.Installer.ZuluSoftSRL.S, PUP.Installer.ZuluSoftSRL.M, PUP.Installer.ZuluSoftSRL.Q, PUP.Installer.ITNTSRL.O, PUP.Installer.ITNTSRL.M, PUP.Installer.ZuluSoftSRL.U, PUP.Downloader.Bundler.Soft32.Installer (M)
97.62%

Malwarebytes
PUP.Optional.Soft32.A, PUP.AdBundle, PUP.Soft32Downloader, PUP.Optional.AdBundle
85.71%

NANO AntiVirus
Riskware.Nsis.Downloader.cvxhzw, Riskware.Win32.Downloader.cvxhzw
85.71%

Dr.Web
Adware.Downware.2152, Adware.Downware.412, Threat.Undefined, Adware.Downware.2875, Adware.Downware.971, Worm.Siggen.9965
83.33%

VIPRE Antivirus
Soft32Downloader, Threat.4783370, Threat.4150696
83.33%

ESET NOD32
MSIL/Soft32Downloader (variant), Win32/Soft32Downloader (variant)
66.67%

ESET NOD32
Win32/Soft32Downloader.C potentially unwanted application, Win32/Soft32Downloader.D potentially unwanted application, MSIL/Soft32Downloader.A potentially unwanted application
19.05%

Comodo Security
Application.Win32.Agent.S, Application.Win32.Soft32Downloader.S, UnclassifiedMalware
16.67%

Avira AntiVirus
TR/Trash.Gen, APPL/Downloader.Gen
16.67%

F-Prot
W32/Soft32Download.A.gen, W32/Soft32Download.C.gen
14.29%

The following domains resolved to the IP address 199.27.76.249.

Latest 50 of 1,134 domains

File URLs download from 199.27.76.249.

10 / 68    (Adware)

23 / 68    (Adware)

 
Latest 30 of 21,196 download URLs

The following file have been seen to comunicate with this IP address in live environments.

The geographical location of this IP address.

Country:
United States (US)

Region:
California

City:
San Francisco

Coordinates:
37.7757, -122.395

The ARIN network assigned organization for IP address 199.27.76.249.

Org name:
Fastly

Org identifier:
SKYCA-3

Org country:
United States (US)

Org region:
California

Org city:
San Francisco

Org address:
PO Box 78266

ARIN WHOIS:

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# http://www.arin.net/public/whoisinaccuracy/index.xhtml
#


#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=199.27.76.249?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2
#

NetRange: 199.27.72.0 - 199.27.79.255
CIDR: 199.27.72.0/21
NetName: FASTLY
NetHandle: NET-199-27-72-0-1
Parent: NET199 (NET-199-0-0-0-0)
NetType: Direct Assignment
OriginAS: AS54113
Organization: Fastly (SKYCA-3)
RegDate: 2011-10-17
Updated: 2012-03-02
Ref: http://whois.arin.net/rest/net/NET-199-27-72-0-1


OrgName: Fastly
OrgId: SKYCA-3
Address: PO Box 78266
City: San Francisco
StateProv: CA
PostalCode: 94107
Country: US
RegDate: 2011-09-16
Updated: 2014-10-07
Ref: http://whois.arin.net/rest/org/SKYCA-3


OrgTechHandle: FRA19-ARIN
OrgTechName: Fastly RIR Administrator
OrgTechPhone: +1-415-404-9374
OrgTechEmail: rir-admin@fastly.com
OrgTechRef: http://whois.arin.net/rest/poc/FRA19-ARIN

OrgAbuseHandle: ABUSE4771-ARIN
OrgAbuseName: Abuse Account
OrgAbusePhone: +1-415-496-9353
OrgAbuseEmail: abuse@fastly.com
OrgAbuseRef: http://whois.arin.net/rest/poc/ABUSE4771-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# http://www.arin.net/public/whoisinaccuracy/index.xhtml
#


Autonomous System Assignment
ASNumber:
54113

ASName:
FASTLY - Fastly,US

ASHandle:
AS54113

Remove Malware from 199.27.76.249 - Powered by Reason Core Security