54.230.103.240

server-54-230-103-240.iad2.r.cloudfront.net

IP Address Information

The IP Address resolves to the DNS record of server-54-230-103-240.iad2.r.cloudfront.net. Currently there are 3 domain names that utilize this address. This IP is part of Amazon's Cloudfront Content Delivery Network which distributes content for a number of domains.
Scanner detections:
Detections  (51% detected)

Scan engine
Details
Detections

Dr.Web
Adware.InstallCore.45, Adware.W3i.9, Trojan.DownLoader9.14179, Trojan.MulDrop4.48137, Adware.InstallCore.58, Adware.OpenCandy.115
80.77%

Malwarebytes
PUP.Optional.InstallIQ.A, PUP.Optional.SafeInstall.A, PUP.Optional.OpenCandy
69.23%

Reason Heuristics
PUP.Installer.Clickrunsoftware.W, PUP.Installer.W3i.H, PUP.Installer.W3i.N, PUP.Installer.InstallX.Z, PUP.Installer.W3i.K, PUP.InstallX.W3i.Installer (M), PUP.InstallX.Installer (M)
61.54%

ESET NOD32
Win32/InstallCore (variant), Win32/InstallIQ (variant), Win32/BitCoinMiner.BF (variant), Win32/InstallCore.BP (variant)
57.69%

AVG
MalSign.InstallCore, AdInstaller.InstallQ, MalSign.InstallX, OpenCandy, Adware MultiBundle.Y, Adware AdInstaller.InstallQ
53.85%

VIPRE Antivirus
Click run software, InstallIQ Installer, Trojan.Win32.Generic
50.00%

Sophos
Install Core Click run software, InstallQ
46.15%

K7 Gateway Antivirus
Unwanted-Program , Trojan
34.62%

K7 AntiVirus
Unwanted-Program , Trojan
34.62%

Comodo Security
Application.Win32.ClickRun.A, UnclassifiedMalware, Application.Win32.InstallIQ.B, ApplicUnwnt.Win32.AdWare.InstallCore.1
34.62%

The following domains resolved to the IP address 54.230.103.240.

File URLs download from 54.230.103.240.

0 / 68

18 / 68    (PUP)
http://download.pdflite.com/setup-pdflite-ic-0.6.exe  (120df9e3bdae078e8f5a215951d40c0c)

6 / 68      (PUP)

1 / 68      (Adware)
http://files.downlogram.com/7zip_13978_7zip.exe  (3738a2022dd6f38e87fdb26cdcecb95e)

0 / 68
http://dl10.frostwire.com/.../frostwire-setup.exe  (frostwire-6.1.5.windows.coc.premium.exe)

6 / 68      (PUP)

0 / 68
http://download.pdflite.com/setup-pdflite-1.2.0.0.exe  (ed89d5b8b6a40828d8bc04b4ea2bf103)

10 / 68    (Adware)
http://files.downlogram.com/dvdburner.exe  (74dbd8a183cebf90de082f56cd49d38e)

2 / 68      (inconclusive)
http://files.downlogram.com/codecs.exe  (94f8a2f23ac9c624a4864e4e3d09add4)

6 / 68      (PUP)

1 / 68      (Adware)
http://files.downlogram.com/ac3filter.exe  (45cc6c57c8aef4d1e7458e95bdf2537c)

1 / 68      (inconclusive)

11 / 68    (PUP)
http://download.pdflite.com/setup-pdflite-ic-0.6.1.exe  (736cd48a61b19aea2d867ebf5e24465e)

6 / 68      (PUP)

5 / 68      (PUP)

0 / 68
http://download.pdflite.com/setup-pdfliteg.exe  (106c6b09893e047d00b50141b97a910c)

0 / 68
http://download.pdflite.com/setup-pdfliteo.exe  (b551cd456c1e5450bba065c480f0e3ce)

8 / 68      (Adware)
http://files.downlogram.com/audioconverter.exe  (667aae184791bc8c6f21478f5534ccc8)

15 / 68    (PUP)

 
Latest 30 of 48 download URLs

The geographical location of this IP address.

Country:
United States (US)

Region:
Washington

City:
Seattle

Coordinates:
47.6062, -122.332

ARIN WHOIS:

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# http://www.arin.net/public/whoisinaccuracy/index.xhtml
#


#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=54.230.103.240?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2
#

Amazon Technologies Inc. AMAZON-2011L (NET-54-224-0-0-1) 54.224.0.0 - 54.239.255.255
Amazon.com, Inc. AMAZO-ZL4 (NET-54-230-0-0-1) 54.230.0.0 - 54.231.255.255



#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# http://www.arin.net/public/whoisinaccuracy/index.xhtml
#


Autonomous System Assignment
ASNumber:
16509

ASName:
AMAZON-02 - Amazon.com, Inc.,US

ASHandle:
AS16509

Remove Malware from 54.230.103.240 - Powered by Reason Core Security