76.76.21.98 Threat Intelligence and Host Information

Dec 14, 2023 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 76.76.21.98 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 35/100

Host and Network Information

  • Mitre ATT&CK IDs: T1043 - Commonly Used Port, T1071 - Application Layer Protocol

  • Tags: analysis, api key, apt, cyber security, download, home wifi, hybrid analysis, ioc, malicious, malware, Nextray, online, phishing, please, please note, sample, sandbox, submit, TarD5B7.tmp, trojan, vetting process, vxstream

  • View other sources: Spamhaus VirusTotal

  • Contained within other IP sets: coinbl_hosts

Malware Detected on Host

Count: 10 0a34c53724c228967121d66ffa372088e7aae16caa9f1b119630ba07ab733c93 11e02e34c57f3d866c03f8f029b8981c867b8e99fe9bc49f15b92fc9a89be950 48b26bd35e86182d9e0f14d7aa2d5d891ee25639fc3007a633e128aae039aeda f21c8218f2769258147423f57c36fba9446c7b047430cabb8e9c274748da7146 8379ad46496f9b8872edab3cdd4c9ba01377d82ceb1756bb925011d20e7e6414 1a51e60bcd22a914949578895c2a2483430d8b859ff235538b8c83711a346d38 c62da2e915bb3a85a1477fa8e2b24a1e0389bdac059dd80627a1dd49713a819f e12ad8832cacc34ad0c4c096343cff47c447e07d974a41e20a58181430e6d767 e167dd9367a59c7d170f6adb020c6182d39eb256f2a62ccd73fff212fce28378 6b2c782f7b70c43a8af2833a026beb731ec0143d878dc633f795b40875461e3e

Open Ports Detected

443 80

Map

Whois Information

  • NetRange: 76.76.21.0 - 76.76.21.255
  • CIDR: 76.76.21.0/24
  • NetName: VERCEL-01
  • NetHandle: NET-76-76-21-0-1
  • Parent: NET76 (NET-76-0-0-0-0)
  • NetType: Direct Allocation
  • OriginAS:
  • Organization: Vercel, Inc (ZEITI)
  • RegDate: 2020-05-08
  • Updated: 2020-06-05
  • Comment: —–BEGIN CERTIFICATE—–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—–END CERTIFICATE—–
  • Ref: https://rdap.arin.net/registry/ip/76.76.21.0
  • OrgName: Vercel, Inc
  • OrgId: ZEITI
  • City: Walnut
  • StateProv: CA
  • PostalCode: 91789
  • Country: US
  • RegDate: 2020-03-26
  • Updated: 2020-06-05
  • Comment: https://vercel.com
  • Ref: https://rdap.arin.net/registry/entity/ZEITI
  • OrgAbuseHandle: ABUSE7926-ARIN
  • OrgAbuseName: Abuse
  • OrgAbusePhone: +1-415-980-8007
  • OrgAbuseEmail: abuse@vercel.com
  • OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE7926-ARIN
  • OrgTechHandle: MFV2-ARIN
  • OrgTechName: Vieira, Matheus Fernandez
  • OrgTechPhone: +1-415-980-8007
  • OrgTechEmail: m@vercel.com
  • OrgTechRef: https://rdap.arin.net/registry/entity/MFV2-ARIN

Links to attack logs

****** awsindia-ntp-bruteforce-ip-list-2022-03-21 ****** ******

Share on: