66.29.141.2 Threat Intelligence and Host Information

Dec 13, 2023 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 66.29.141.2 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 25/100

Host and Network Information

  • Tags: phishing, scam

  • JARM: 3fd3fd15d3fd3fd00042d42d000000038eaaf490bec8dc33757f165ce01762

  • View other sources: Spamhaus VirusTotal

  • Contained within other IP sets: blocklist_net_ua

Malware Detected on Host

Count: 7 c0ee9081b32ff23d18766ac37630bf9d352b28ff2e3057ff4048e1b6830713ad 419819eaaef0c9aaff3b6a4eae78ddfb9269ac0209ba96ed6179c9431b8bf3a2 4733ad57a5cff9bd9cf46820590babd75900945a34ebae3631111d0b9124bed3 3f1f4a422cca724bf8fe95556323ec490fe61c3e55e1e1302bee4d2848b394bc 8ad9df6e599851cb2bce47d14ffd04baf06e2cf18a1e23e2fd791e2a30fa843d b093e05077752435dc7fedb9710fe2ca5d65c1add9d4dfb715326bba192185e7 99544057a5215e756b67aa47815e27dc157eb850792e5eacda6796922bb9a50b

Open Ports Detected

2082 2083 21 443 80

CVEs Detected

CVE-2016-10735 CVE-2018-14040 CVE-2018-14042 CVE-2018-20676 CVE-2018-20677 CVE-2019-8331 CVE-2022-31628 CVE-2022-31629 CVE-2022-37454

Map

Whois Information

  • NetRange: 66.29.128.0 - 66.29.159.255
  • CIDR: 66.29.128.0/19
  • NetName: NAMEC-4
  • NetHandle: NET-66-29-128-0-1
  • Parent: NET66 (NET-66-0-0-0-0)
  • NetType: Direct Allocation
  • OriginAS:
  • Organization: Namecheap, Inc. (NAMEC-4)
  • RegDate: 2021-03-05
  • Updated: 2021-03-05
  • Ref: https://rdap.arin.net/registry/ip/66.29.128.0
  • OrgName: Namecheap, Inc.
  • OrgId: NAMEC-4
  • Address: 11400 W. Olympic Blvd. Suite 200
  • City: Los Angeles
  • StateProv: CA
  • PostalCode: 90064
  • Country: US
  • RegDate: 2011-01-28
  • Updated: 2017-01-28
  • Ref: https://rdap.arin.net/registry/entity/NAMEC-4
  • OrgAbuseHandle: ABUSE2885-ARIN
  • OrgAbuseName: Abuse team
  • OrgAbusePhone: +1-323-375-2822
  • OrgAbuseEmail: abuse@namecheaphosting.com
  • OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE2885-ARIN
  • OrgTechHandle: EFIME-ARIN
  • OrgTechName: Efimenko, Igor
  • OrgTechPhone: +1-323-375-2822
  • OrgTechEmail: igor.e@namecheap.com
  • OrgTechRef: https://rdap.arin.net/registry/entity/EFIME-ARIN
  • OrgTechHandle: TECHT4-ARIN
  • OrgTechName: Tech team
  • OrgTechPhone: +1-323-375-2822
  • OrgTechEmail: tech@namecheaphosting.com
  • OrgTechRef: https://rdap.arin.net/registry/entity/TECHT4-ARIN
  • network:Class-Name:network
  • network:Auth-Area:66.29.141.0/24
  • network:ID:NET-190974.66.29.141.2
  • network:IP-Network:66.29.141.2
  • network:IP-Network-Block:66.29.141.2
  • network:Org-Name:Web-hosting.com
  • network:Street-Address:3402 East University Drive
  • network:City:Phoenix
  • network:State:AZ
  • network:Postal-Code:85034
  • network:Country-Code:US
  • network:Tech-Contact:MAINT-190974.66.29.141.2
  • network:Created:20210629174657000
  • network:Updated:20210629175535000
  • network:Updated-By:net-admin@namecheap.com
  • contact:POC-Name:Network team
  • contact:POC-Email:net-admin@namecheap.com
  • contact:POC-Phone:
  • contact:Tech-Name:Network team
  • contact:Tech-Email:net-admin@namecheap.com
  • contact:Tech-Phone:
  • contact:Abuse-Name:Abuse team
  • contact:Abuse-Email:abuse@namecheaphosting.com

Links to attack logs

****** ****** ******

Share on: