Ransomware IP address :: 52.4.209.250

IP Information

IP address:52.4.209.250
Hostname:ec2-52-4-209-250.compute-1.amazonaws.com
AS number:AS14618
AS name:AMAZON-02 - Amazon.com, Inc., US
Country:- United States (US)
Spamhaus SBL:Not listed

Associated Ransomware Infrastructure

The table below shows all Ransomware infrastructure that is associated with the IP address 52.4.209.250.

Firstseen (UTC)HostActive (?This row indicates whether the domain name's A record is currently pointing to an IP address or whether the record is historic (e.g. because the A record has been moved to a different IP address).

yes = Active A record
no = Historical record
)
RegistrarThreatMalware
2016-12-21 10:05:31kungfumasterwang.comnoMONIKER ONLINE SERVICES LLCDistribution SiteLocky
2016-12-20 19:34:40kungfumasterwang.comnoMONIKER ONLINE SERVICES LLCDistribution SiteLocky
2016-12-19 14:00:42factoryfreeapparel.comno1&1 INTERNET SEDistribution SiteLocky
2016-12-16 11:55:09obccllc.comnoGODADDY.COM, LLCDistribution SiteLocky
2016-12-16 08:09:25obccllc.comnoGODADDY.COM, LLCDistribution SiteLocky
2016-12-14 11:49:46obccllc.comnoGODADDY.COM, LLCDistribution SiteLocky
2016-12-12 13:02:55sinanagirman.comnoIHS TELEKOM, INC.Distribution SiteLocky
2016-12-09 06:38:49mondegraphic.comnoENOM, INC.Distribution SiteLocky
2016-12-09 06:24:44vilalusa.comnoPDR LTD. D/B/A PUBLICDOMAINREGISTRY.COMDistribution SiteLocky
2016-12-06 13:40:46www.glutax-ori.comnoENOM, INC.Distribution SiteLocky
2016-12-01 08:26:41sinanagirman.comnoIHS TELEKOM, INC.Distribution SiteLocky
2016-11-09 06:08:03baseballtivy.comnoDYNADOT3 LLCDistribution SiteLocky
2016-11-04 06:28:01baseballtivy.comnoDYNADOT3 LLCDistribution SiteLocky
2016-11-04 06:20:44reactivetargetsports.comnoENOM, INC.Distribution SiteLocky
2016-11-03 15:12:26baseballtivy.comnoDYNADOT3 LLCDistribution SiteLocky
2016-10-31 11:45:40ditjenp2p.infonoCV. Rumahweb IndonesiaDistribution SiteLocky
2016-10-04 18:04:49gururmetal.comnoDYNADOT, LLCDistribution SiteLocky
2016-10-04 08:49:31gururmetal.comnoDYNADOT, LLCDistribution SiteLocky
2016-08-23 09:04:09vilalusa.comnoPDR LTD. D/B/A PUBLICDOMAINREGISTRY.COMDistribution SiteLocky
2016-08-03 12:42:39vilalusa.comnoPDR LTD. D/B/A PUBLICDOMAINREGISTRY.COMDistribution SiteLocky
2016-03-08 13:55:19ministerepuissancejesus.comnoDYNADOT, LLCDistribution SiteLocky

Ransomware infrastructure associated with this IP address: 21