54.230.38.68

server-54-230-38-68.jfk1.r.cloudfront.net

IP Address Information

The Internet Service Provider (ISP) that owns the network address of 54.230.38.68 is Amazon Technologies Inc. and located in Virginia within the United States. The IP Address resolves to the DNS record of server-54-230-38-68.jfk1.r.cloudfront.net. Currently there are 75 domain names that utilize this address. This IP is part of Amazon's Cloudfront Content Delivery Network which distributes content for a number of domains.
Scanner detections:
Detections  (98% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.BetterInstaller.Somoto.g, PUP.BetterInstaller.Somoto.d, PUP.BetterInstaller.Somoto.b, PUP.BetterInstaller.Somoto.j, PUP.BetterInstaller.Somoto.k, PUP.BetterInstaller.Somoto.?, PUP.BetterInstaller.Somoto.c, PUP.BetterInstaller.Somoto.m, PUP.BetterInstaller.Somoto.f, PUP.BetterInstaller.Somoto.t, PUP.BetterInstaller.Somoto.l, PUP.BetterInstaller.Somoto.EE, PUP.BetterInstaller.Somoto.FF, PUP.BetterInstaller.Somoto.n, PUP.BetterInstaller.Somoto.r, PUP.BetterInstaller.Somoto.q, PUP.BetterInstaller.Somoto.s, PUP.BetterInstaller.Somoto.p
97.92%

Clam AntiVirus
Adware.Somoto-1, Win.Adware.Somoto
91.67%

Sophos
Somoto BetterInstaller
91.67%

Dr.Web
Adware.Somoto.17, Adware.Somoto.8, Adware.Downware.1184
91.67%

VIPRE Antivirus
BetterInstaller, Trojan.Win32.Generic
91.67%

ESET NOD32
Win32/Somoto, Win32/Somoto (variant)
91.67%

SUPERAntiSpyware
Adware.Somoto/Variant
91.67%

avast!
Win32:Somoto-F [PUP], Win32:Somoto-K [PUP], Win32:PUP-gen [PUP], Win32:Somoto-B [PUP]
89.58%

F-Prot
W32/SomotoBetterInstaller.A
89.58%

Malwarebytes
PUP.Optional.Somoto, PUP.Optional.Somoto.A
87.50%

The following domains resolved to the IP address 54.230.38.68.

Latest 50 of 75 domains

File URLs download from 54.230.38.68.

25 / 68    (Adware)

27 / 68    (Adware)

1 / 68      (Adware)

 
Latest 30 of 140,511 download URLs

The following 4 files have been seen to comunicate with this IP address in live environments.

TCP port 80

TCP port 80

TCP port 80

TCP port 443

The geographical location of this IP address.

Country:
United States (US)

Region:
Virginia

City:
Ashburn

Coordinates:
39.0437, -77.4875

The ARIN network assigned organization for IP address 54.230.38.68.

Org name:
Amazon Technologies Inc.

ARIN WHOIS:
Amazon Technologies Inc. AMAZON-2011L (NET-54-224-0-0-1) 54.224.0.0 - 54.239.255.255
Amazon.com, Inc. AMAZO-ZL4 (NET-54-230-0-0-1) 54.230.0.0 - 54.231.255.255



Autonomous System Assignment
ASNumber:
16509

ASName:
AMAZON-02 - Amazon.com, Inc.

ASHandle:
AS16509

Remove Malware from 54.230.38.68 - Powered by Reason Core Security