topic Trying to understand what is wrong with my servers ip 5.182.39.34 in VirusTotal

Trying to understand what is wrong with my servers ip 5.182.39.34

roma — Sun, 23 Feb 2025 12:04:51 GMT

Hi everyone,

I have server (for last 6 months) with ip 5.182.39.34 (for internal purposes, no public services at all) partially used as proxy for accessing services with region restrictions, but some of them warns me that my reputation on virustotal is bad (or just denies usage at all), so had to start investigation.

for now I have this situation

https://www.virustotal.com/gui/ip-address/5.182.39.34

SOCRadar - tried all provided tools at https://socradar.io - looks like this ip is clean and there should not be any issues, but virustotal thinks that ip is flagged by this provider

CyRadar - is not providing any tools for investigation, contacted them via website contact form without any luck, don't have any facebook account to use "report a false positive" button on cyradar.com =(

Can someone from virustotal help me with this?

Thanks.

Re: Trying to understand what is wrong with my servers ip 5.182.39.34

roma — Mon, 24 Feb 2025 12:26:54 GMT

writed letter directly to socradar, looks like they tuned something and now I'm not flagged at virustotal, thanks everyone here)

Re: Trying to understand what is wrong with my servers ip 5.182.39.34

kiwi — Mon, 24 Feb 2025 13:26:48 GMT

Hi @roma ,

Thanks for the heads up !

Kind regards,

-Kim.

Re: Trying to understand what is wrong with my servers ip 5.182.39.34

roma — Wed, 26 Feb 2025 12:42:40 GMT

Have another question regarding about "relations" -> Communicating Files

There are some malicious software on virustotal on relations tab that "communicates" with my ip. I can't believe that this files speaking directly to ip address without any outdated domain name resolution.

Is it possible to clean this records? Rescanning ony of that file is not helping at all =(