64.40.96.140 Threat Intelligence and Host Information

General

This page contains threat intelligence information for the IPv4 address 64.40.96.140 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

🟡 Low Risk — 35/100

Geographic Location

Host and Network Information

  • View other sources: Spamhaus VirusTotal Shodan AbuseIPDB
  • Country: Canada
  • Network: AS14280 netnation communications inc
  • Noticed: 1 time
  • Open Ports: 25, 53, 80
  • Tor Node: No

Tags

  • 1518500249
  • 4294967295
  • a1732584193
  • accept
  • activexobject
  • addcookiedomain
  • afsh
  • afunction
  • algorithm
  • angular
  • angularjs
  • array
  • attr
  • bearer
  • bf7e56f2f3
  • binnerheightc
  • bomboraconsent
  • boolean
  • browserinfo
  • bulk domain search
  • business email accounts
  • business web hosting services
  • buy domains
  • call
  • ccpa
  • cfunction
  • child
  • class
  • classes
  • click
  • code
  • comscore
  • copyright
  • dataview
  • date
  • demo
  • domain hosting
  • domain name
  • domain name registration
  • domain name search
  • domainpeople
  • domain registration
  • driftconductor
  • ecommerce hosting services
  • efunction
  • ember
  • error
  • event
  • firefox
  • function
  • function code
  • gdpr
  • gtmng3vqql
  • hubspot
  • ieproto
  • iframe
  • image
  • imgurl
  • infinity
  • inte
  • jquery
  • lookup alerts
  • meteor
  • mfunction
  • mozinnerscreenx
  • nthis
  • null
  • number
  • object
  • oiqaddpagecat
  • oiqdotag
  • oiqfpsjs
  • patch
  • path
  • promise
  • pseudo
  • quora pixel
  • reflect
  • regexp
  • register domain names
  • registrar
  • registration
  • registrations
  • registry
  • rights reserved
  • s271733878
  • script
  • secure hash
  • sfunction
  • sha1
  • shareaholic
  • shockwave flash
  • string
  • sufeffxa0
  • support login
  • symbol
  • track
  • trackevent
  • typeerror
  • typeof
  • typeof b
  • typeof e
  • typeof module
  • typeof n
  • typeof o
  • typeof proxy
  • typeof r
  • typeof symbol
  • typeof t
  • u2640u2642
  • ud83d
  • ud83e
  • udc66udc67
  • udc68udc69
  • udd74udd75
  • uddb0uddb3
  • udfcbudfcc
  • ufe0f
  • uint32array
  • uint8array
  • us contact
  • uspapi
  • us whois
  • utma
  • utmb
  • utmz
  • vd
  • verification
  • viewcontent
  • void
  • weakmap
  • web hosting
  • web hosting provider
  • web site hosting
  • websites
  • whois
  • widgetrootqa
  • wpbruiserclient
  • xmlhttprequest
  • year discount
  • zcluidkrs
  • zepto
  • zpbcat

MITRE ATT&CK TTPs

  • T1059 - Command and Scripting Interpreter

Associated CVEs

  • CVE-2006-20001

Passive DNS

  • us2.domainpeople.com

Attack Log References

Whois Information

NetRange: 64.40.96.0 - 64.40.127.255 CIDR: 64.40.96.0/19 NetName: NETNATION NetHandle: NET-64-40-96-0-1 Parent: NET64 (NET-64-0-0-0-0) NetType: Direct Allocation OriginAS: Organization: Ntirety, Inc. (WCP32) RegDate: 2000-02-25 Updated: 2023-01-23 Ref: https://rdap.arin.net/registry/ip/64.40.96.0 OrgName: Ntirety, Inc. OrgId: WCP32 Address: 2901 Via Fortuna, Suite 175 City: Austin StateProv: TX PostalCode: 78746 Country: US RegDate: 2009-07-02 Updated: 2023-02-10 Ref: https://rdap.arin.net/registry/entity/WCP32 OrgAbuseHandle: ABUSE1072-ARIN OrgAbuseName: Abuse OrgAbusePhone: +1-302-731-4948 OrgAbuseEmail: abuse@hostmysite.com OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE1072-ARIN OrgTechHandle: IPADM271-ARIN OrgTechName: IP Admin OrgTechPhone: +1-302-731-4948 OrgTechEmail: ipadmin@ntirety.com OrgTechRef: https://rdap.arin.net/registry/entity/IPADM271-ARIN