ONYPHE
datascan ctl threatlist sniffer vulnscan riskscan

Returning 1 result(s) out of 1 in 0.002 second(s)

  • hxxp://154.9.254.227:30000/02.08.2022.exe - last seen on 2024-10-29 at 17:30:17 UTC

    • URL

      hxxp://154.9.254.227:30000/02.08.2022.exe

      Threat List
      Urlhaus - malware URLs
      IP
      154.9.254.227
      Network
      154.9.254.0/24
      ASN
      AS979
      Organization
      NETLAB-SDN
      Source
      urlhaus

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • {
   "@category" : "threatlist",
   "@timestamp" : "2024-10-29T17:30:17.000Z",
   "asn" : "AS979",
   "city" : "Los Angeles",
   "country" : "US",
   "geolocus" : {
      "asn" : "AS979",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "cogentco.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "PSINET-B2-9",
      "organization" : "Performance Systems International",
      "subnet" : "154.9.254.0/23"
   },
   "ip" : "154.9.254.227",
   "ipv6" : "false",
   "latitude" : "34.0544",
   "location" : "34.0544,-118.2441",
   "longitude" : "-118.2441",
   "organization" : "NETLAB-SDN",
   "port" : "30000",
   "seen_date" : "2024-10-29",
   "source" : "urlhaus",
   "subnet" : "154.9.254.0/24",
   "tag" : "<enterprise field>: tag",
   "threatlist" : "Urlhaus - malware URLs",
   "tls" : "false",
   "transport" : "tcp",
   "type" : "ip",
   "url" : "/02.08.2022.exe"
}