66.29.146.12 Threat Intelligence and Host Information

General

This page contains threat intelligence information for the IPv4 address 66.29.146.12 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 44/100

Host and Network Information

• Tags: agenttesla, agentteslaexe, arkeistealer, auto-generated security, azorult, azorultexe, danabot, darkrat, dridex, dridexopendir, emotetheodo, formbook, gandcrab, gozi, hancitor, hawkeye, heodo, icedid, kpot, kpotstealer, loader, loki, luminositylink, nanocore, nemty, netwire, phorpiex, pony, qakbot, qealler, quasarrat, raccoonstealer, remcos, remcosrat, servhelper, stealer, systembc, trickbot, troldesh, zloader

• JARM: 3fd3fd15d3fd3fd00042d42d000000038eaaf490bec8dc33757f165ce01762

• View other sources: Spamhaus VirusTotal

• Country: United States
• Network:
• Noticed: 2 times
• Protocols Attacked: SSH
• Passive DNS Results: alfredoledesma.com coindirectly.org venusprimeliving.com dirtfree.store panchosautorepair.com ffpickem.com www.portal.bio4ever.com.ng portal.bio4ever.com.ng sportsco.cc edgeclothing.cc repair-websit.com www.crossroadsrotary.com theathletesfoot.cc thatdaveguy.space apps.econytics.com buildnewcc.com academybrand.cc hoskings.cc elitestar.us zexpress24.com oasiscrossroadsbarandgrill.com hopelinkconsulting.com skinkandy.cc melphix.com maxicarebeautysecrets.cc lockroot.com novapattidownload.net rezyt.com spectrexecables.com heyricardo.com usenergy-solutions.com mt2gold.com seatechengr.com openup.vip 7ngame.org justintime.click taximetreros.com theautomobileservice.com alwaysme.guru zawaarllc.com reallyfun.life pk365games.org jacksonreliabletransport.com timewith.life getwith.guru luck22games.org dxhomeify.com synneria.com elegantsgaragedoor.com upinus.live makingus.blog financialwins.com alwayswith.world thistime.rest cheersessays.com eponasoft.com meeomgmt.com thefoodietahir.com makemeyours.pro readyforyou.blog fastsoltn.com letsgetthis.pro socanwe.live financiacioncolaborativa.com financiacionparticipativa.com financiemonos.com justdous.guru allmenow.blog twofun.pro wethree.blog medicofacil.com negociocircular.com negociocripto.com feriadescuentos.com www.kenyawebsitedevelopers.co.ke kenyawebsitedevelopers.co.ke cometo.wiki weget.rest scoobyshadow.com youngrepublicnetwork.com youdoit.rest gettome.live negociosdecostura.com negocioparajovenes.com negociosfast.com negociojoven.com dimefacil.com bangit.pro touchingus.live recruitment.createdbychris.com youverify.net doingme.club plawith.blog doingyou.rest findus.guru weplay.rest getplay.blog www.jordanscheapshoes.us stuffme.rest hitthis.pro putout.team veryeasy.rest takeme.pro bewithyou.blog getwith.vip feelus.team funday.team upnow.guru nilphamaripratidin.com hiyou.team harrisdesigntechnology.com immersewingco.com mcrenewals.network logi-keys.com jeetcleanwave.com canwedo.network theafricawatch.org theywantto.network thepanda.digital elevateagro.com wecpl.org rezytinternet.com hidupmakmur.store hofaceinternationalmedicalcollege.com www.asons.co.in asons.co.in seetalk.blog feelus.pro juicenation.site bookcover.site webang.pro sejdah.com leenteen.com najamelectronics.com cloudelysia.us cloudelysia.com innocraftit.com www.innocraftit.com www.uncensored-jav.com uncensored-jav.com rtpkeren-topg77.store rtp-primetog77.store togofficertp.site tog77punyartp.site jagonya-rtptog77.fun chembrain.info premium223.web-hosting.com findcheaptrains.co.uk www.toge77-rtpkeren.site destinyonsolana.meme rtpgacor-topgaming.xyz linkrtpwahid.store toge77punyartp.site toge77-rtpkeren.site rtp-toge77.online toktokpro.com rerasgems.com poirierstore.com topgaming77strong.online taaleemtech.com mapleboutique.store boutiquelevando.shop dino169.org www.dino169.org filma24.website www.filma24.website www.digitalizarnegocios.com digitalizarnegocios.com jip.rip www.jip.rip www.jjhomelondon.com jjhomelondon.com na2510allen.site avofant.com avifaze.com avfanty.com avifanz.com pandawa101.com flyfanta.com a1casino.online grandportagecasino.online aci-oil.com cultonape.com www.cultonape.com www.demo.buildnewllc.com demo.buildnewllc.com www.buildnewllc.com buildnewllc.com innovarminds.com thecenterforthesoul.com www.thecenterforthesoul.com decorvills.net encoksatankitaplar.net adage.host loevenichhutkaufen.com seogapakaidomain.xyz petirnagajendral.xyz kasihhadiahpetir.xyz petirnagaunggu.xyz mantanterindahkamu.xyz hujanpetirteros.xyz hujandollarx500.site shoetalkcentral.com humidifiersinfo.com gymequipmentsoutheast.com eyeupdateclinic.com kamusnetizen.com www.earthnewss.com earthnewss.com www.bionerveplus.org bionerveplus.org sipastijprtpini.site gelispisanuhuy.site www.hujanperkalianseribu.xyz hujanperkalianseribu.xyz celticbetuyelik.com causewayalchemy.com jovicuk.com nortoncosetup.com kanzalarb.com authenticbuddhastatues.com www.authenticbuddhastatues.com waarp.website dilanjowo.site alshndaqametal.com myinvestkit.com www.myinvestkit.com sgonlinecasino.net mikalemon.com gillanis.store siemreapgoldenkidsschool.com robinlysne.com elitemediagroups.com vacatrips.com www.c25.nakta2.com c25.nakta2.com fengrunchem.online elitistsmedia.com 54folks.com venusproperti.com gruppocic.com australianumber.store chinanumber.store hongkongnumber.store spectrexe.com investcamproperties.com venushomestay.com kudamas99.com rajameledak.store bestbuymall.store kompastoto.pro emaildatabase.store rtp-rajabet.pro akademikelassatu.com solidkontraktor.com omahaqiqah.com shjiajunbaojie.com alrwafidgroup.com logicprox-windows.com kritasoftware.com insuranceforfinancialfreedom.com totzb.com cfdbarcelona.com crossroadsrotary.com leatherjacketreviews.com nuttwoodworks.com adeyemimeshack.com antikeselclub.store jangankesel.store janganmarah.store kemerdekaanindo.store janganbaper.store timnastobrut.store cicakkawin.store tobrutsange.store gededongo.store gondrongcabul.store benchasteconstruction.com atoutfaire.pro sungai-mekong.store dinar-candy.store biawaksange.store anak-tuyul.store dompet-kulit.store tuyul-tobat.store bisa-janda.store haji-cabul.store lontekhemer.store lapas-martapura.store kawin-kontrak.store wanita-indigo.store cinta-damai.store bocahsange.store bocilkematian.store kesel-ya.store jangan-marah.store ezetrustcargo.com teammabes.store beruksange.store teamrapol.store brokenhome.store kudangaceng.store gajahduduk.store fankuipelakor.store hukumkarma.store nasgursamchan.store prostitusionline.store rastaciben.store gudanggaram.store anticlockservices.com wingslot77.xyz makauslot.xyz idcashslot.xyz posd4.xyz epitoto.xyz rtpharmonibet.xyz rajaslot3033.xyz fifaslot88.xyz fine4d.xyz win88th.store anaklutung.store duniaslot777.store asean4d.store cinabenteng.store botakngehe.store kelasmabes.store cafe777.xyz heroslot777.xyz majudoyantoto.xyz kembarjitu4d.xyz luxury1111.xyz yoktogel176.xyz partaitogel28.xyz kingdomtoto0427.xyz rtpbirutoto.wiki idnscore808.vip gacors4d.vip 5unsur3.vip legowin777.store wdbos28.pro api888.pro lumbungslot138.ink sukaslot.biz bigslot88.art rajaangka2.com graccie.com www.gempa3033.xyz gempa3033.xyz qqturbo88.xyz ampgaspol.store istanaslot789.org gacor888.ink nagahitam.cloud pictureframesvenice.com gembirabet.xyz us-leanbellyjuiceikaria.com mostplayy.com hitsquadproduction.com smartone-llc.com mp24news.com consulticn.com icnglobe.com goyagoya.store smookingroom.store belanjadisini.club ontopoffers.xyz nextgenproductsservices.com togetherforburkinafaso.org jacketster.com aspenconstructionandpainting.com dinutong.com rbt.homes powerautocollision.com cellnumber.store www.cellnumber.store innovatepathway.org jordans-11.us jordanscheapshoes.us squaredminerals.com chateaulausellcables.com glozafrica.com itiffy.com fundhipe.xyz ecommerce.chromitesolutions.com.ng www.ecommerce.chromitesolutions.com.ng techivlo.xyz attacr.com www.attacr.com www.scholaride.xyz scholaride.xyz techoflex.xyz www.macphil.com.ng macphil.com.ng scholartips.xyz apples-online-care.online www.apples-online-care.online interaideas.com www.interaideas.com jsbgroup.co.ke www.jsbgroup.co.ke rajabetlucky.xyz qvphysiotherapy.co www.qvphysiotherapy.co www.combineair.co combineair.co hudsonscoffee.co www.hudsonscoffee.co petbarn.cc www.petbarn.cc collegeur.site www.earnwithme.com.ng earnwithme.com.ng greyinsured.xyz studybiz.online healthplusmeds.com sphinx-travel.top repairs-eg.services elsah.org graccie.com.sempakzeus.us 123accesorios.com www.123accesorios.com www.drjuegos.com drjuegos.com www.techmile.xyz techmile.xyz metalsolmex.website dxtrans.com techyam.online usa-sumatraslimbelly-tonic.us sharoninternationalschool.com www.sharoninternationalschool.com www.zeus89.lol zeus89.lol www.ikariajuicee.com ikariajuicee.com www.sweisgreekcafe.com sweisgreekcafe.com kucingmandi.com procreatewindows.com www.procreatewindows.com origin-pc.com www.origin-pc.com www.garagebandonwindows.com garagebandonwindows.com www.davinciresolve-win.com davinciresolve-win.com playerquicktime.com www.playerquicktime.com www.techycog.com www.retroevent.com mercymegan.com www.mercymegan.com dvdbits.com www.dvdbits.com www.alphasurveysva.com alphasurveysva.com molidh.life bhartienterprise.info mayurconstructioncompany.com blackmaneeng.com globeengineeringltd.com jsiw-infra.com cairoojougboh.com energybillingservice.com stellarcartsolutionsllc.com jamesledlight.com mika88saja.com cricutdesignspace.org ustvsolutions.com downloadaplikasi.net divegear.tech retroevent.com infoasia.site creatifpoints.com chateaulausell.com www.naturalhealthscam.com naturalhealthscam.com jasasensa.lat mimiparty.sparxtechsolutions.com inlandempiredogacademy.com espnservices.com incubux.org usint.net charityfutures.org rayuanmaut.store openmichat.store just-supposeworldfoundation.org patex78.net monolitharena.com hurdensemble.com migmaldives.com rsencuentro.com symbiosiso.com micasocialdesign.com lebar10.com faktychicago.com voyaneo.com thehairinfo.com seguidoreslatinos.com plantasticmedia.com

Malware Detected on Host

Count: 3 d58e4c38477aa73b47d95db329182e18547e79bb2176d32638b1bc03b9788794 daa254410c6c70e706320b5888c6f412cd4b0659e60110fab673bd36b3ce3fb7 b43513acfed22a0112e5037e7f837331575d32f649503cd1bade1ebf486a4759

Open Ports Detected

2077 2096 21 443 80 8889

CVEs Detected

CVE-2016-10735 CVE-2018-14040 CVE-2018-14042 CVE-2018-20676 CVE-2018-20677 CVE-2019-8331

Map

Whois Information

• NetRange: 66.29.128.0 - 66.29.159.255
• CIDR: 66.29.128.0/19
• NetName: NAMEC-4
• NetHandle: NET-66-29-128-0-1
• Parent: NET66 (NET-66-0-0-0-0)
• NetType: Direct Allocation
• OriginAS:
• Organization: Namecheap, Inc. (NAMEC-4)
• RegDate: 2021-03-05
• Updated: 2021-03-05
• Ref: https://rdap.arin.net/registry/ip/66.29.128.0
• OrgName: Namecheap, Inc.
• OrgId: NAMEC-4
• Address: 11400 W. Olympic Blvd. Suite 200
• City: Los Angeles
• StateProv: CA
• PostalCode: 90064
• Country: US
• RegDate: 2011-01-28
• Updated: 2024-11-25
• Ref: https://rdap.arin.net/registry/entity/NAMEC-4
• OrgTechHandle: EFIME-ARIN
• OrgTechName: Efimenko, Igor
• OrgTechPhone: +1-323-375-2822
• OrgTechEmail: igor.e@namecheap.com
• OrgTechRef: https://rdap.arin.net/registry/entity/EFIME-ARIN
• OrgAbuseHandle: ABUSE2885-ARIN
• OrgAbuseName: Abuse team
• OrgAbusePhone: +1-323-375-2822
• OrgAbuseEmail: abuse@namecheaphosting.com
• OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE2885-ARIN
• OrgTechHandle: TECHT4-ARIN
• OrgTechName: Tech team
• OrgTechPhone: +1-323-375-2822
• OrgTechEmail: tech@namecheaphosting.com
• OrgTechRef: https://rdap.arin.net/registry/entity/TECHT4-ARIN
• network:Class-Name:network
• network:Auth-Area:66.29.146.0/24
• network:ID:NET-203107.66.29.146.12
• network:IP-Network:66.29.146.12
• network:IP-Network-Block:66.29.146.12
• network:Org-Name:Web-hosting.com
• network:Street-Address:3402 East University Drive
• network:City:Phoenix
• network:State:AZ
• network:Postal-Code:85034
• network:Country-Code:US
• network:Tech-Contact:MAINT-203107.66.29.146.12
• network:Created:20210907122022000
• network:Updated:20210907122022000
• network:Updated-By:net-admin@namecheap.com
• contact:POC-Name:Network team
• contact:POC-Email:net-admin@namecheap.com
• contact:POC-Phone:
• contact:Tech-Name:Network team
• contact:Tech-Email:net-admin@namecheap.com
• contact:Tech-Phone:
• contact:Abuse-Name:Abuse team
• contact:Abuse-Email:abuse@namecheaphosting.com

Links to attack logs

****** ****** ******