76.76.21.93 Threat Intelligence and Host Information

Dec 14, 2023 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 76.76.21.93 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 35/100

Host and Network Information

  • Mitre ATT&CK IDs: T1043 - Commonly Used Port, T1071 - Application Layer Protocol

  • Tags: analysis, api key, apt, cyber security, download, hybrid analysis, ioc, malicious, malware, Nextray, online, phishing, please, please note, sample, sandbox, scam, submit, TarD5B7.tmp, trojan, vetting process, vxstream

  • View other sources: Spamhaus VirusTotal

  • Contained within other IP sets: coinbl_hosts

Malware Detected on Host

Count: 18 0e37705b07def87dca997dcb9234c94f46689a80b660fc280634e52d2554f7cc af58f88d873a62f0f81cb41786cc788ba243edbaaba360fe4fe84d7b6eeb25a4 43f145045dbc38b120b36d31cdaa48addd376280c23c8629abc45a2263c54501 c3c0860c97e68acb4640e21d51ee1f4ef0f1f705e4a0b356b554213722a49fd6 2c3980af20a88e1b02e6fc7dbca947e4f626b7013c29571de51d0a1e13818911 11647400f16b8c87976d1daf02c6ecc2db239c6b55c5c8393d6b39c9a9f59837 a631f85c700e457e471de7401aeab745ec7fd25b8318ae25729d2cb27e21e627 e8b892cccc06d6205196874978ccd94b00ba37672810870130171c560d4a0b9a 3d605c2364753e53b79f19dc24a4cacda195b77cbaf59a7e4f04289f00203bfe d83c85d23a54d7f135a238067095729ec27b708e103d7ea5159a8e4511ce1ea1

Open Ports Detected

443 80

Map

Whois Information

  • NetRange: 76.76.21.0 - 76.76.21.255
  • CIDR: 76.76.21.0/24
  • NetName: VERCEL-01
  • NetHandle: NET-76-76-21-0-1
  • Parent: NET76 (NET-76-0-0-0-0)
  • NetType: Direct Allocation
  • OriginAS:
  • Organization: Vercel, Inc (ZEITI)
  • RegDate: 2020-05-08
  • Updated: 2020-06-05
  • Comment: —–BEGIN CERTIFICATE—–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—–END CERTIFICATE—–
  • Ref: https://rdap.arin.net/registry/ip/76.76.21.0
  • OrgName: Vercel, Inc
  • OrgId: ZEITI
  • City: Walnut
  • StateProv: CA
  • PostalCode: 91789
  • Country: US
  • RegDate: 2020-03-26
  • Updated: 2020-06-05
  • Comment: https://vercel.com
  • Ref: https://rdap.arin.net/registry/entity/ZEITI
  • OrgTechHandle: MFV2-ARIN
  • OrgTechName: Vieira, Matheus Fernandez
  • OrgTechPhone: +1-415-980-8007
  • OrgTechEmail: m@vercel.com
  • OrgTechRef: https://rdap.arin.net/registry/entity/MFV2-ARIN
  • OrgAbuseHandle: ABUSE7926-ARIN
  • OrgAbuseName: Abuse
  • OrgAbusePhone: +1-415-980-8007
  • OrgAbuseEmail: abuse@vercel.com
  • OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE7926-ARIN

Links to attack logs

****** ****** ******

Share on: