The Infrastructure Entity category includes Entities that are related to computer network infrastructure.
Banner
Entity Meta
Display Name
Banner
Entity Name
maltego.Banner
Short Description
Banner
Entity Category
Infrastructure
Base Entity
maltego.Phrase
Entity Properties
Display Name
Property Name
Data Type
Short Description
Sample Value
Text
text
string
A hash entity
Some phrase
Website Title
Entity Meta
Display Name
Website Title
Entity Name
maltego.WebTitle
Short Description
Title of a website
Entity Category
Infrastructure
Base Entity
maltego.Unknown
Entity Properties
Display Name
Property Name
Data Type
Short Description
Sample Value
Title
title
string
Paterva (Pty) Ltd
Domain
Entity Meta
Display Name
Domain
Entity Name
maltego.Domain
Short Description
An internet domain
Entity Category
Infrastructure
Base Entity
maltego.Unknown
Entity Properties
Property Name
Type
Display name
Fqdn
string
Domain name
whois-info
string
WHOIS info
Entity Description
A domain is the 'editioncnn.com' part of ' http://www.cnn.comhttps://edition.cnn.com/. It is the 'google.com' part of 'www.google.com'. A domain has to be registered by a person or an organisation. A domain is registered in a TLD (top level domain), and might have a SLD (sub level domain). Consider the web site 'www.abc.org.uk'. The top level domain (TLD) is 'uk'. The sub level domain is 'org.uk'. The domain itself is 'abc.org.uk'. A domain contains whois information - this information contains (at least) the details of who registered the domain.
Related Entities
IPv4 Address
DNS Name
MX Record
Entity Meta
Display Name
MX Record
Entity Name
maltego.MXRecord
Short Description
A DNS mail exchange record
Entity Category
Infrastructure
Base Entity
maltego.DNSName
Entity Properties
Property Name
Type
Display name
fqdn
string
MX Record
mxrecord.priority
integer
Priority
Entity Description
The MX (mail exchange) records contains information about where mail should be sent for email addresses at the domain (for example mail for anyone@abc.com should be sent to mx1.abc.com). You should understand the relationship between Domain, DNS Name and IP number as this system is one of the main building blocks of Internet.
Related Entities
IPv4 Address
Domain
NS record
DNS Name
IPv4 Address
Entity Meta
Display Name
IPv4 Address
Entity Name
maltego.IPv4Address
Short Description
An IP version 4 address
Entity Category
Infrastructure
Base Entity
maltego.Unknown
Entity Properties
Property Name
Type
Display name
ipv4-address
string
IP Address
ipaddress.internal
boolean
Internal
Entity Description
An IP (Internet protocol) address is like the telephone number of a computer on the Internet. In IP version 4 (which is most common on the Internet today) this 'telephone' number is made up of 4 numbers, separated by a dot. The numbers range from 0-255. An IP number thus could be 192.168.0.1 or 196.25.1.1. In order for a computer to speak to another machine over an IP network it has to know the IP number of the remote machine.
Because people are better at remembering names than remembering numbers we have DNS. DNS is the "whitepages" of the internet. It looks up (or resolves) the IP address for a DNS name. Thus the DNS name http://www.abc.co.ukwww.abc.org.uk resolves to the IP number 85.91.32.29. Just like domains IP addresses also needs to be registered.
They are normally grouped in a block of IP addresses and blocks are assigned to organizations such as ISPs. The information of the organisation is contained in whois information of the IP block.
Related Entities
Netblock
AS Number
DNS NameSave
URL
Entity Meta
Display Name
URL
Entity Name
maltego.URL
Short Description
An internet Uniform Resource Locator (URL)
Entity Category
Infrastructure
Base Entity
maltego.Unknown
Entity Properties
Property Name
Type
Display name
short-title
string
Short Title
url
URL
Value
title
string
Title
Maltego does not keep URL as the main value in this Entity because rendering a URL looks untidy. Where possible the URL's truncated title is kept in the value. If the title is not available, the truncated URL is stored in the main value. The actual URL is kept in the (Actual URL) field. Additionally the full title is kept in the (Full Title) field.
Entity Description
(Uniform Resource Locator) http://www.abc.com/main.html is a URL. Even ftp://ftp.abc.sub.co.za/ is a URL. In Maltego URLs are (usually) collected when executing search engine Transforms on Entities such as phrases, persons etc. The URLs are collected in the output entities (websites, email addresses etc).
Related Entities
Website
DNS Name
Entity Meta
Display Name
DNS Name
Entity Name
maltego.DNSName
Short Description
Domain Name and System server name
Entity Category
Infrastructure
Base Entity
maltego.Unknown
Entity Properties
Property Name
Type
Display name
Fqdn
string
DNS Name
Entity Description
DNS stands for Domain Name System. 'www.google.com' is a DNS name. 'mail.abc.com' is a DNS name. 'mx1.sub.abc.co.uk' is a DNS name. A DNS name becomes an entry in a domain's zone file. The zone file is just a file that contains a list of DNS Names per domain. There are several types of DNS names.
The everyday DNS names (like 'www.abc.com') are called A (or CName) records. The MX (mail exchange) records contains information about where mail should be sent for email addresses at the domain (for example mail for anyone@abc.com should be sent to mx1.abc.com). The NS records (name server) shows which servers are name servers for this domain - in other words who keeps the zone files for the domain. Every DNS name is (or should be) connected to an IP address. In some cases the reverse is also true - an IP address can resolve to a DNS name.
You should understand the relationship between Domain, DNS Name and IP number as this system is one of the main building blocks of the internet.
AS stands for Autonomous System. It is basically a collection of routes (and thus net blocks). Large organizations or ISPs typically have their own AS numbers. The BGP routing protocol makes use of AS numbers.
Related Entities
IPv4 Address
Netblock
Tracking Code
Entity Meta
Display Name
Tracking Code
Entity Name
maltego.UniqueIdentifier
Short Description
Represents a tracking code for a web service.
Entity Category
Infrastructure
Base Entity
maltego.Unknown
Entity Properties
Property Name
Type
Display name
properties.uniqueidentifier
string
UniqueIdentifier
identifierType
string
Identifier Type
Entity Description
This Entity represents a unique code that can be found in the JavaScript of some websites. Services that include such codes include Google Analytics, AdWords, PayPal Donate buttons, etc. These codes can be used to link websites together based on the owner of the tracking code.
Website
Entity Meta
Display Name
Website
Entity Name
maltego.Website
Short Description
An internet website
Entity Category
Infrastructure
Base Entity
maltego.DNSName
Entity Properties
Property Name
Type
Display name
fqdn
string
Website
website.ssl-enabled
boolean
SSL Enabled
ports
int []
Ports
Entity Description
A website is simply an special type of DNS name. Maltego sees these as two different types because there are many website specific Transforms.
Related Entities
DNS Name
NS Record
Entity Meta
Display Name
NS Record
Entity Name
maltego.NSRecord
Short Description
A DNS name server record
Entity Category
Infrastructure
Base Entity
maltego.DNSName
Entity Properties
Property Name
Type
Display name
fqdn
string
MX Record
Entity Description
The NS records (name server) shows which servers are name servers for this domain - in other words who keeps the zone files for the domain. You should understand the relationship between Domain, DNS Name and IP number as this system is one of the main building blocks of the internet.
No Color (Unknown CVSS) or Grey #7f7f7f; Green #78d663 (low): 0.1-3.9; Yellow #e5e500 (Medium): 4.0-6.9; Orange #f86000 (High): 7.0-8.9; Red #c2171d (Critical): 9.0-10.0;
#f86000
CVE
text
string
CVE-2019-19781
Entity Description
Represents common vulnerabilities and exposures
IPv6 Address
Entity Meta
Information
Value
Display Name
IPv6 Address
Entity Name
maltego.IPv6Address
Short Description
An IP version 6 address
Entity Category
Infrastructure
Base Entities
(none)
Entity Properties
Display Name
Property Name
Data Type
Short Description
Sample Value
IP Address
ipv6-address
string
2600:3c03::f03c:91ff:fe08:809b
Internal
ipaddress.internal
boolean
false
Entity Description
An IP version 6 address
AAAA Record
Entity Meta
Information
Value
Display Name
AAAA Record
Entity Name
maltego.AAAARecord
Short Description
DNS AAAA Record
Entity Category
Infrastructure
Base Entities
maltego.DNSName
Entity Properties
Display Name
Property Name
Data Type
Short Description
Sample Value
IPv6 Address
ipv6-address
string
The IPv6 address the AAAA record points to.
0:0:0:0:0:ffff:2d4f:692d
Time to Live (TTL)
time-to-live
int
The time-to-live in seconds. This is the amount of time the record is allowed to be cached by a resolver.
3600
Entity Description
DNS AAAA record
A Record
Entity Meta
Information
Value
Display Name
A Record
Entity Name
maltego.ARecord
Short Description
DNS A Record
Entity Category
Infrastructure
Base Entities
maltego.DNSName
Entity Properties
Display Name
Property Name
Data Type
Short Description
Sample Value
IPv4 Address
ipv4-address
string
The IPv4 address the A record points to.
45.79.105.45
Time to Live (TTL)
time-to-live
int
The time-to-live in seconds. This is the amount of time the record is allowed to be cached by a resolver.
