75.125.125.226

server.rawhumor.com

IP Address Information

The Internet Service Provider (ISP) that owns the network address of 75.125.125.226 is ThePlanet.com Internet Services, Inc. and located in Texas within the United States. The IP Address resolves to the DNS record of server.rawhumor.com. Currently there are 57 domain names that utilize this address. The primary domain hosted by this IP is www.fixanyfile.com along with 56 other domains which are known adware distribution web sites.
Scanner detections:
Detections  (95% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.PCCleaner.Installer.Meta (M), PUP.Systweak.Installer.Meta (L), PUP.Installer.DownloadManager.U, PUP.Installer.DownloadManager.L, PUP.Installer.DownloadManager.T, PUP.Installer.DownloadManager.N, DownloadManager.AirSoftware.a, PUP.Systweak.TUNEUPPR.Installer.Meta (L), PUP.PCCleaner.cPCClean.Meta (L)
95.45%

Dr.Web
Trojan.SMSSend.4979, Trojan.SMSSend.4790, Trojan.SMSSend.5348, Trojan.Crossrider1.1621, riskware program Program.Unwanted.493
36.36%

Agnitum Outpost
PUA.AirAdInstaller, Riskware.Agent
31.82%

Malwarebytes
PUP.Optional.AirAdInstaller, PUP.Optional.AirInstaller, PUP.Optional.ReImageRepair.A
27.27%

avast!
Win32:PUP-gen [PUP], Win32:Malware-gen, Win32:Rootkit-gen [Rtk]
27.27%

ESET NOD32
Win32/AirAdInstaller (variant), Win32/ReImageRepair.E potentially unwanted (variant)
27.27%

AhnLab V3 Security
PUP/Win32.AirAdInstaller, Trojan/Win32.FakeAV
27.27%

McAfee Web Gateway
Heuristic.BehavesLike.Win32.ModifiedUPX.C, Heuristic.BehavesLike.Win32.Suspicious-BAY.G, Artemis
22.73%

Comodo Security
Application.Win32.AirAdInstaller.B, Application.Win32.AirAdInstaller.A
22.73%

VIPRE Antivirus
Iminent, AirAdInstaller
22.73%

The following domains resolved to the IP address 75.125.125.226.

Latest 50 of 57 domains

File URLs download from 75.125.125.226.

11 / 68    (PUP)

1 / 68      (PUP)

1 / 68      (PUP)

11 / 68    (PUP)

8 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (PUP)

30 / 68    (Adware)

1 / 68      (PUP)

1 / 68      (PUP)

25 / 68    (Adware)

1 / 68      (PUP)

30 / 68    (Adware)

1 / 68      (PUP)
http://www.fixerror.com/download.php  (app3_install_eng.exe)

1 / 68      (PUP)

 
Latest 30 of 536 download URLs

The geographical location of this IP address.

Country:
United States (US)

Region:
Texas

City:
Houston

Coordinates:
29.7609, -95.3625

The ARIN network assigned organization for IP address 75.125.125.226.

Org name:
ThePlanet.com Internet Services, Inc.

Org identifier:
TPCM

Org country:
United States (US)

Org region:
Texas

Org city:
Houston

Org address:
315 Capitol

ARIN WHOIS:
NetRange: 75.125.0.0 - 75.125.255.255
CIDR: 75.125.0.0/16
OriginAS: AS36420, AS30315, AS13749, AS21844, AS13884
NetName: NETBLK-THEPLANET-BLK-EV1-17
NetHandle: NET-75-125-0-0-1
Parent: NET-75-0-0-0-0
NetType: Direct Allocation
RegDate: 2007-06-11
Updated: 2012-02-24
Ref: http://whois.arin.net/rest/net/NET-75-125-0-0-1

OrgName: ThePlanet.com Internet Services, Inc.
OrgId: TPCM
Address: 315 Capitol
Address: Suite 205
City: Houston
StateProv: TX
PostalCode: 77002
Country: US
RegDate: 1999-08-31
Updated: 2010-10-13
Ref: http://whois.arin.net/rest/org/TPCM

ReferralServer: rwhois://rwhois.theplanet.com:4321

OrgTechHandle: TECHN33-ARIN
OrgTechName: Technical Support
OrgTechPhone: +1-281-714-3000
OrgTechEmail: admins@theplanet.com
OrgTechRef: http://whois.arin.net/rest/poc/TECHN33-ARIN

OrgNOCHandle: THEPL-ARIN
OrgNOCName: The Planet NOC
OrgNOCPhone: +1-281-714-3000
OrgNOCEmail: noc@theplanet.com
OrgNOCRef: http://whois.arin.net/rest/poc/THEPL-ARIN

OrgAbuseHandle: ABUSE271-ARIN
OrgAbuseName: The Planet Abuse
OrgAbusePhone: +1-281-714-3560
OrgAbuseEmail: abuse@softlayer.com
OrgAbuseRef: http://whois.arin.net/rest/poc/ABUSE271-ARIN


Autonomous System Assignment
ASNumber:
21844

ASName:
THEPLANET-AS - ThePlanet.com Internet Services, Inc.

ASHandle:
AS21844

Remove Malware from 75.125.125.226 - Powered by Reason Core Security