196.189.124.218 Threat Intelligence and Host Information

ipinfopage

General

This page contains threat intelligence information for the IPv4 address 196.189.124.218 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

🟠 Elevated — 61/100

Geographic Location

Host and Network Information

  • View other sources: Spamhaus VirusTotal Shodan AbuseIPDB
  • Country: Ethiopia
  • Network: AS24757 ethionet
  • Noticed: 20 times
  • Protocols Attacked: SSH
  • Countries Attacked: Australia, Belgium, United States of America
  • Open Ports: 80
  • Tor Node: No

Tags

  • bruteforce
  • Bruteforce
  • cowrie
  • port 22
  • ssh
  • SSH
  • tcp/22

MITRE ATT&CK TTPs

  • T1046 - Network Service Scanning
  • T1110.001 - Password Guessing
  • T1110.003 - Password Spraying
  • T1110 - Brute Force
  • T1583.005 - Botnet

Associated CVEs

  • CVE-2021-23017

Attack Log References

Whois Information

inetnum: 196.188.0.0 - 196.191.255.255 netname: Ethiotelecom descr: Ethio Telecom country: ET org: ORG-ETC2-AFRINIC admin-c: NB13-AFRINIC admin-c: ET4-AFRINIC tech-c: WD4-AFRINIC tech-c: AM190-AFRINIC tech-c: AL65-AFRINIC tech-c: BG16-AFRINIC tech-c: ET4-AFRINIC tech-c: ETA1-AFRINIC tech-c: ETND1-AFRINIC tech-c: MM113-AFRINIC tech-c: MG61-AFRINIC tech-c: TN50-AFRINIC tech-c: HG14-AFRINIC status: ALLOCATED PA mnt-by: AFRINIC-HM-MNT mnt-lower: ETC-MNT mnt-routes: ETC-MNT parent: 196.0.0.0 - 196.255.255.255 organisation: ORG-ETC2-AFRINIC org-name: Ethio Telecom org-type: LIR country: ET address: Churchill Road, P.O.box 1047 address: Addis Ababa phone: tel:+251-11-551-5777 phone: tel:+251-91-150-0137 phone: tel:+251-91-122-7040 phone: tel:+251-91-125-4629 phone: tel:+251-91-151-0433 phone: tel:+251-91-151-0096 admin-c: NB13-AFRINIC admin-c: ET4-AFRINIC tech-c: ETA1-AFRINIC tech-c: MM113-AFRINIC tech-c: ET4-AFRINIC tech-c: ETND1-AFRINIC tech-c: WD4-AFRINIC tech-c: AL65-AFRINIC tech-c: AM190-AFRINIC tech-c: HG14-AFRINIC tech-c: MG61-AFRINIC tech-c: TN50-AFRINIC tech-c: BG16-AFRINIC mnt-ref: AFRINIC-HM-MNT mnt-ref: ETC-MNT mnt-by: AFRINIC-HM-MNT person: Abdulhafiz Leulseged address: Bole Wolo Sefer address: Addis Ababa address: Ethiopia phone: tel:+251-91-151-1887 nic-hdl: AL65-AFRINIC mnt-by: GENERATED-QEIVEQ6YOJPZZX90IJTUWV1CXC8JPMAL-MNT person: Akrem Mohammed address: Bole Wolo Sefer address: Addis Ababa address: Ethiopia phone: tel:+251-91-150-2746 nic-hdl: AM190-AFRINIC mnt-by: GENERATED-KYTK3P6VALRRFNHEYMDW2Y9KNKAG6L71-MNT person: Beza Getachew address: Old Airport address: Addis Ababa address: Ethiopia phone: tel:+251-91-151-9965 nic-hdl: BG16-AFRINIC mnt-by: GENERATED-RJQFN0O87MSIRI8UQWJOIKTPE7DQ5HLC-MNT person: Ethio Telecom nic-hdl: ET4-AFRINIC address: Churchill Road address: Addis Ababa 1047 address: Ethiopia phone: tel:+251-93-001-1682 phone: tel:+251-91-110-7398 phone: tel:+251-91-124-3521 phone: tel:+251-91-121-7654 phone: tel:+251-11-531-7220 phone: tel:+251-91-151-0433 mnt-by: GENERATED-GRXPERJUPKL2DTQEXFFNEHRZHJZDFRJ7-MNT person: Ethio Telecom Abuse address: Churchill Road address: Addis Ababa 1047 address: Ethiopia phone: tel:+251-11-531-7220 nic-hdl: ETA1-AFRINIC mnt-by: GENERATED-6PSCAZUIOKFDRJ3ENK9AHQ6UM9VEJDG5-MNT person: Ethio telecom network division nic-hdl: ETND1-AFRINIC address: Churchill Road, P.O.box 1047 address: Addis Ababa address: Ethiopia address: Addis Ababa address: Ethiopia phone: tel:+251-91-111-3094 mnt-by: GENERATED-0GMSZEZJLESMCAXHKKIZFOKMLQJZUGLK-MNT person: Hailemariam Getachew address: Bole Wolo Sefer address: Addis Ababa address: Ethiopia phone: tel:+251-93-001-1801 nic-hdl: HG14-AFRINIC mnt-by: GENERATED-L71M19XOCEAFVHJOV0EGGR5ZATEY53SP-MNT person: Muluken Gebremariam address: Bole Wolo Sefer address: Addis Ababa address: Ethiopia phone: tel:+251-91-151-0173 nic-hdl: MG61-AFRINIC mnt-by: GENERATED-Q6LLDYBIKXOWKMXKAX6COGCGOKJ9ST2Y-MNT person: Michael Melaku address: Churchill Road, P.O.box 1047 address: Addis Ababa address: Ethiopia phone: tel:+251-91-151-0096 nic-hdl: MM113-AFRINIC mnt-by: GENERATED-TIGSC5PZCC0VO3ASR4WGJCANZMXJBQ69-MNT person: Nebiyate Belete address: ET4-AFRINIC phone: tel:+251-91-125-6562 nic-hdl: NB13-AFRINIC mnt-by: GENERATED-JBQPUS0YPN8ZTLPD6YCGNFQHT1XTFZZY-MNT person: Tesfamariam Negussie address: Old Airport address: Addis Ababa address: Ethiopia phone: tel:+251-91-151-6467 nic-hdl: TN50-AFRINIC mnt-by: GENERATED-805VC655PLN7I6F4TK153WKBMPHXDH5I-MNT person: Wondwossen Demissie address: Churchill Road, P.O.box 1047 address: Addis Ababa address: Ethiopia phone: tel:+251-91-122-0859 nic-hdl: WD4-AFRINIC mnt-by: GENERATED-MUEKUOYPKHZHWSLFMLAK9FFG45OB4HFL-MNT route: 196.189.124.0/24 origin: AS24757 descr: Ethiotelecom mnt-by: ETC-MNT