76.76.21.164 Threat Intelligence and Host Information

Dec 14, 2023 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 76.76.21.164 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 35/100

Host and Network Information

  • Mitre ATT&CK IDs: T1043 - Commonly Used Port, T1071 - Application Layer Protocol

  • Tags: analysis, anna paula, api key, apt, associated, currc3adculo, cyber security, download, from email, headers, hybrid analysis, ioc, malicious, malspam email, malware, msi file, Nextray, online, phishing, please, please note, sample, sandbox, submit, TarD5B7.tmp, trojan, tuesday, utf8, vetting process, vxstream, zip archive

  • View other sources: Spamhaus VirusTotal

  • Contained within other IP sets: coinbl_hosts

Malware Detected on Host

Count: 15 6aad634cd39d45d3e03c9cd3791b82efc66da624902ac8d9a6dd109c16701694 ccbb9ff792732151e9b57b30cb18bff96e63d5cec17fac1bd937ae5c49271699 676b3fa844d272ebb3603f7656feb5b5706edcb2c62b8ceec7cda9d0d82197d8 6bb1e60d029af9eb965b1ec48278ebf7b778b1d07fa624b70e1a9dc43a67e829 4fcfe3c9358a6ece8fe1406be7790a72db6665206e87dd06cdb17d130498e47a 56cd8b5e7b0a9ddae2951da76468ab33399be7b6c4791fe1c2c6e7f82c9abc53 53897d2ea4a67e897363e305bc4c830f33595565397c2f73311be4fd7903c5dd 5c82caeb458aca9e1641f178e3a78f87ab3b2cf92f25e21ccd006c4773e90fdb ddf8d312dcc2097849f1b58a592cc16f832aa8ddf6d2e4c832b4bc6217e4f69b bef059ec86830bbc542f3d39b5a3b587d627c3ae148f26ff33631396c64b9f81

Open Ports Detected

443 80

Map

Whois Information

  • NetRange: 76.76.21.0 - 76.76.21.255
  • CIDR: 76.76.21.0/24
  • NetName: VERCEL-01
  • NetHandle: NET-76-76-21-0-1
  • Parent: NET76 (NET-76-0-0-0-0)
  • NetType: Direct Allocation
  • OriginAS:
  • Organization: Vercel, Inc (ZEITI)
  • RegDate: 2020-05-08
  • Updated: 2020-06-05
  • Comment: —–BEGIN CERTIFICATE—–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—–END CERTIFICATE—–
  • Ref: https://rdap.arin.net/registry/ip/76.76.21.0
  • OrgName: Vercel, Inc
  • OrgId: ZEITI
  • City: Walnut
  • StateProv: CA
  • PostalCode: 91789
  • Country: US
  • RegDate: 2020-03-26
  • Updated: 2020-06-05
  • Comment: https://vercel.com
  • Ref: https://rdap.arin.net/registry/entity/ZEITI
  • OrgTechHandle: MFV2-ARIN
  • OrgTechName: Vieira, Matheus Fernandez
  • OrgTechPhone: +1-415-980-8007
  • OrgTechEmail: m@vercel.com
  • OrgTechRef: https://rdap.arin.net/registry/entity/MFV2-ARIN
  • OrgAbuseHandle: ABUSE7926-ARIN
  • OrgAbuseName: Abuse
  • OrgAbusePhone: +1-415-980-8007
  • OrgAbuseEmail: abuse@vercel.com
  • OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE7926-ARIN

Links to attack logs

****** ****** ******

Share on: