Cyberbro - Analysis Results
Analysis start time: 2026-03-23 19:41:30
Analysis duration: 0 minutes, 8.42 seconds
173.239.8.164
IPv4
IPinfo
IP: 173.239.8.164
Geoloc: New York City, New York
Country: United States
Hostname: icsvm3.webair.com
ASN: AS27257 Webair Internet Development Company Inc.
URLscan
Scan count: 10000
Top related domains:
- ww9.salck.com (13)
- ww38.ouroborosbrowse.com (8)
- ww9.420herbalsupplystore.com (5)
- ouroborosbrowse.com (4)
- ww9.itworkforme.com (4)
Shodan
Ports: 80, 443, 53, 22
Criminal IP
Abuse Record Count: 3296
Score
Inbound: Low
Outbound: Low
Issues
- is_anonymous_vpn: False
- is_cloud: False
- is_darkweb: False
- is_hosting: True
- is_mobile: False
- is_proxy: False
- is_scanner: False
- is_snort: False
- is_tor: False
- is_vpn: False
IDS
- Classification: pua-adware
Confirmed Time: 2021-09-24 03:35:30
Message: PUA-ADWARE Adware malware destructor 4.5 runtime detection - order request
Source System: snort-2.9.0 29181
Url: ca.com/us/securityadvisor/pest/pest.aspx?id=453116773
Current Open Ports
- Port: 80
Vulnerability: False
Product Name: nginx
Protocol: HTTP
Socket Type: tcp
- Port: 53
Vulnerability: False
Product Name: Unknown
Protocol: DNS
Socket Type: tcp
- Port: 443
Vulnerability: False
Product Name: nginx
Protocol: HTTPS
Socket Type: tcp
- Port: 22
Vulnerability: False
Product Name: OpenSSH
Protocol: SSH
Socket Type: tcp
Alienvault
Pulses Count: 50Spam “Broken Seal” DocuSign-themed Delivery w/Fileless Process Hollowing (Zeppelin/Bloat-A) by msudosos
Distributed Credential Exhaustion & C2 Orchestration via Golang-Based StealthWorker (ELF.Agent-VW)
Double Umbrella AS15169/AS21928: This evaluates a critical structural convergence between Google (AS15169) and T-Mobile USA (AS21928) within the global Tier-1 routing backbone
Cyber Crime - Emotet | Tofsee CnC | Targeting • Streaming • Stealing
UCHealth - Live Extraordinary (Ransom • Cycbot other vulnerabilities plague Medical Campus)
Link: See on Alienvault