66.33.210.29 Threat Intelligence and Host Information
General
This page contains threat intelligence information for the IPv4 address 66.33.210.29 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.
Potentially Malicious Host 🟡 37/100
Host and Network Information
-
Mitre ATT&CK IDs: T1498 - Network Denial of Service, T1499.002 - Service Exhaustion Flood, T1499 - Endpoint Denial of Service
-
Tags: cc.py, DDoS, HEAD Floods, Killnet, T1498, T1499
-
View other sources: Spamhaus VirusTotal
- Country: United States
- Network:
- Noticed: 1 times
- Protocols Attacked: Anonymous Proxy
- Passive DNS Results: passaparolafilms.tv www.passaparolafilms.tv scissorpitbar.com www.cruce.com.uy readrange.ca cruce.com.uy indetailhomeservices.com mustardandblue.com www.mustardandblue.com pedagogyapparel.com ladyletia.com www.aecidcf.org.uy www.elevatedprimate.com elevatedprimate.com www.moodletest.nutriguia.com.uy moodletest.nutriguia.com.uy www.driveelectricexpo.ie desconectados.uy www.desconectados.uy www.brighter-horizon.org ganaconlubrax.com.uy www.ganaconlubrax.com.uy www.fichas.nutriguia.com.uy fichas.nutriguia.com.uy www.highoaks.digitalpdx.com highoaks.digitalpdx.com este.la www.este.la www.thejjc.org thejjc.org heyhello.co www.heyhello.co www.drymarchon.org drymarchon.org lubrax2018.biplano.info www.lubrax2018.biplano.info charlix.cx www.charlix.cx driveelectricexpo.ie drymarchon.net www.drymarchon.net deloreantech.com www.deloreantech.com 1stdursleyscouts.org.uk www.1stdursleyscouts.org.uk fourfun.org aecidcf.org.uy
Malware Detected on Host
Count: 1 99c868be19aa44c6b01897d03a74dd61304c4343f3c0943bd4d032525dd09bfe
Map
Whois Information
- NetRange: 66.33.192.0 - 66.33.223.255
- CIDR: 66.33.192.0/19
- NetName: DREAMHOST-BLK1
- NetHandle: NET-66-33-192-0-1
- Parent: NET66 (NET-66-0-0-0-0)
- NetType: Direct Allocation
- OriginAS:
- Organization: New Dream Network, LLC (NDN)
- RegDate: 2002-04-26
- Updated: 2015-08-31
- Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
- Comment: ** For abuse issues, please contact abuse@dreamhost.com **
- Ref: https://rdap.arin.net/registry/ip/66.33.192.0
- OrgName: New Dream Network, LLC
- OrgId: NDN
- Address: 417 Associated Rd.
- City: Brea
- StateProv: CA
- PostalCode: 92821
- Country: US
- RegDate: 2001-04-17
- Updated: 2024-11-25
- Comment: Address location was created regardless of geographic location.
- Ref: https://rdap.arin.net/registry/entity/NDN
- OrgTechHandle: NETOP274-ARIN
- OrgTechName: NetOPs
- OrgTechPhone: +1-714-706-4182
- OrgTechEmail: netops@dreamhost.com
- OrgTechRef: https://rdap.arin.net/registry/entity/NETOP274-ARIN
- OrgAbuseHandle: DAT5-ARIN
- OrgAbuseName: DreamHost Abuse Team
- OrgAbusePhone: +1-714-872-9370
- OrgAbuseEmail: domain-abuse@dreamhost.com
- OrgAbuseRef: https://rdap.arin.net/registry/entity/DAT5-ARIN
- OrgNOCHandle: NETOP274-ARIN
- OrgNOCName: NetOPs
- OrgNOCPhone: +1-714-706-4182
- OrgNOCEmail: netops@dreamhost.com
- OrgNOCRef: https://rdap.arin.net/registry/entity/NETOP274-ARIN
- NetRange: 66.33.208.0 - 66.33.215.255
- CIDR: 66.33.208.0/21
- NetName: DH-AMS1-01
- NetHandle: NET-66-33-208-0-1
- Parent: DREAMHOST-BLK1 (NET-66-33-192-0-1)
- NetType: Reassigned
- OriginAS:
- Customer: DreamHost (C11168914)
- RegDate: 2025-04-14
- Updated: 2025-07-03
- Ref: https://rdap.arin.net/registry/ip/66.33.208.0
- CustName: DreamHost
- Address: Cessnalaan 1
- City: Schiphol-Rijk
- StateProv:
- PostalCode: 1119 NJ
- Country: NL
- RegDate: 2025-04-14
- Updated: 2025-04-14
- Ref: https://rdap.arin.net/registry/entity/C11168914
- OrgTechHandle: NETOP274-ARIN
- OrgTechName: NetOPs
- OrgTechPhone: +1-714-706-4182
- OrgTechEmail: netops@dreamhost.com
- OrgTechRef: https://rdap.arin.net/registry/entity/NETOP274-ARIN
- OrgAbuseHandle: DAT5-ARIN
- OrgAbuseName: DreamHost Abuse Team
- OrgAbusePhone: +1-714-872-9370
- OrgAbuseEmail: domain-abuse@dreamhost.com
- OrgAbuseRef: https://rdap.arin.net/registry/entity/DAT5-ARIN
- OrgNOCHandle: NETOP274-ARIN
- OrgNOCName: NetOPs
- OrgNOCPhone: +1-714-706-4182
- OrgNOCEmail: netops@dreamhost.com
- OrgNOCRef: https://rdap.arin.net/registry/entity/NETOP274-ARIN
Links to attack logs
anonymous-proxy-ip-list-2023-08-05 anonymous-proxy-ip-list-2023-08-09 anonymous-proxy-ip-list-2023-07-18 ****** anonymous-proxy-ip-list-2023-08-07 anonymous-proxy-ip-list-2023-06-26 anonymous-proxy-ip-list-2023-08-12 anonymous-proxy-ip-list-2023-08-08 anonymous-proxy-ip-list-2023-07-10 anonymous-proxy-ip-list-2023-08-02 anonymous-proxy-ip-list-2023-07-16 anonymous-proxy-ip-list-2023-07-31 anonymous-proxy-ip-list-2023-07-08 anonymous-proxy-ip-list-2023-07-09 ****** anonymous-proxy-ip-list-2023-06-22 ****** anonymous-proxy-ip-list-2023-07-21
Share on: