52.84.125.253

server-52-84-125-253.iad16.r.cloudfront.net

IP Address Information

The Internet Service Provider (ISP) that owns the network address of 52.84.125.253 is Amazon Technologies Inc. and located in Washington within the United States. The IP Address resolves to the DNS record of server-52-84-125-253.iad16.r.cloudfront.net. Currently there are 91 domain names that utilize this address. This IP is part of Amazon's Cloudfront Content Delivery Network which distributes content for a number of domains.
Scanner detections:
Detections  (98% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Optional.Installer.BeijingAmazGameAgeInternetTechnologyCo.X, PUP.Optional.Installer.BeijingAmazGameAgeInternetTechnologyCo.W, PUP.Optional.Installer.X, PUP.Optional.Installer.BeijingAmazGameAgeInternetTechnologyCo.V, PUP.Optional.BeijingAmazGameAgeInternetTechnologyCo.L, PUP.Optional.Installer.W, PUP.Optional.Installer.Z, PUP.Optional.Installer.DD, PUP.Optional.BeijingA.Installer, PUP.Optional.Installer.Y
97.92%

Dr.Web
Trojan.Siggen6.685, Adware.NextLive.2, Adware.Mobogenie.7, Adware.Mobogenie.14, Adware.Mobogenie.21, Adware.Mobogenie.41
25.00%

ESET NOD32
Win32/NextLive, Win32/Mobogenie, Win32/Mobogenie (variant), Android/Mobserv (variant)
22.92%

IKARUS anti.virus
Virus.Win32.Heur, Nsis, Virus.Win32.Dropper
20.83%

avast!
NSIS:NextLive-A [Adw], Win32:Mobogenie-O [Adw], Win32:Mobogenie-J [Adw], Adware-gen [Adw]
16.67%

Trend Micro House Call
TROJ_GEN.F47V0109, TROJ_GEN.F47V0203, TROJ_GEN.F47V0408, TROJ_GEN.F47V0324, TROJ_GEN.F47V0418, Suspicious_GEN.F47V0626
12.50%

VIPRE Antivirus
Adware.Agent, Trojan.Win32.Generic!SB.0, Threat.4150696
10.42%

NANO AntiVirus
Trojan.Win32.NextLive.csjhvj
8.33%

McAfee
Artemis!579FB275EA7B, Artemis!9EEEA3B146EE, Artemis!9940667030F7, Artemis!0E64812A3508
8.33%

McAfee Web Gateway
Artemis!579FB275EA7B, Artemis!9EEEA3B146EE, Artemis!9940667030F7, Artemis!0E64812A3508
8.33%

The following domains resolved to the IP address 52.84.125.253.

Latest 50 of 91 domains

File URLs download from 52.84.125.253.

1 / 68      (PUP)

2 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (PUP)

5 / 68      (PUP)

2 / 68      (PUP)

1 / 68      (PUP)

2 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (PUP)

2 / 68      (PUP)
http://upload.mobogenie.com/mu/.../Mobogenie_Setup_2.1.17_21.exe  (mobogenie_setup_server2_你知道網路上有 90% 的電腦都遭到了間諜軟體感染了嗎?只要你在沒有任何防護的情形下連上網際網路,哪怕只是瀏覽幾張網頁都有可能被間諜軟體所感染。.exe)

1 / 68      (PUP)

1 / 68      (PUP)

5 / 68      (PUP)

1 / 68      (PUP)

4 / 68      (PUP)

1 / 68      (PUP)

7 / 68      (PUP)

1 / 68      (PUP)

3 / 68      (PUP)

3 / 68      (PUP)

7 / 68      (PUP)
http://upload.mobogenie.com/mu/.../Mobogenie_Setup_2.2.5_21.exe  (7e9197902c9c5f9e0ddf788c4a7ea50f.exe)

1 / 68      (PUP)

21 / 68    (PUP)

2 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (PUP)

 
Latest 30 of 136,757 download URLs

The following file have been seen to comunicate with this IP address in live environments.

The geographical location of this IP address.

Country:
United States (US)

Region:
Washington

City:
Seattle

Coordinates:
47.6275, -122.346

The ARIN network assigned organization for IP address 52.84.125.253.

Org name:
Amazon Technologies Inc.

Org identifier:
AT-88-Z

Org country:
United States (US)

Org region:
Washington

Org city:
Seattle

Org address:
410 Terry Ave N.

ARIN WHOIS:

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#


#
# The following results may also be obtained via:
# https://whois.arin.net/rest/nets;q=52.84.125.253?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2
#

NetRange: 52.84.0.0 - 52.95.255.255
CIDR: 52.84.0.0/14, 52.88.0.0/13
NetName: AT-88-Z
NetHandle: NET-52-84-0-0-1
Parent: NET52 (NET-52-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Amazon Technologies Inc. (AT-88-Z)
RegDate: 1991-12-19
Updated: 2015-03-20
Ref: https://whois.arin.net/rest/net/NET-52-84-0-0-1



OrgName: Amazon Technologies Inc.
OrgId: AT-88-Z
Address: 410 Terry Ave N.
City: Seattle
StateProv: WA
PostalCode: 98109
Country: US
RegDate: 2011-12-08
Updated: 2014-10-20
Comment: All abuse reports MUST include:
Ref: https://whois.arin.net/rest/org/AT-88-Z


OrgAbuseHandle: AEA8-ARIN
OrgAbuseName: Amazon EC2 Abuse
OrgAbusePhone: +1-206-266-4064
OrgAbuseEmail: abuse@amazonaws.com
OrgAbuseRef: https://whois.arin.net/rest/poc/AEA8-ARIN

OrgNOCHandle: AANO1-ARIN
OrgNOCName: Amazon AWS Network Operations
OrgNOCPhone: +1-206-266-4064
OrgNOCEmail: amzn-noc-contact@amazon.com
OrgNOCRef: https://whois.arin.net/rest/poc/AANO1-ARIN

OrgTechHandle: ANO24-ARIN
OrgTechName: Amazon EC2 Network Operations
OrgTechPhone: +1-206-266-4064
OrgTechEmail: amzn-noc-contact@amazon.com
OrgTechRef: https://whois.arin.net/rest/poc/ANO24-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/public/whoisinaccuracy/index.xhtml
#


Autonomous System Assignment
ASNumber:
16509

ASName:
AMAZON-02 - Amazon.com, Inc., US

ASHandle:
AS16509

Remove Malware from 52.84.125.253 - Powered by Reason Core Security