196.44.176.55 Threat Intelligence and Host Information

Oct 26, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 196.44.176.55 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Likely Malicious Host 🟠 65/100

Host and Network Information

  • Tags: cyber security, ioc, malicious, Nextray, phishing

  • JARM: 2ad2ad16d2ad2ad0002ad2ad2ad2ad487dfc3734968073f786f66dcf4de1b2

  • View other sources: Spamhaus VirusTotal

  • Contained within other IP sets: cruzit_web_attacks, gpf_comics, hphosts_emd, hphosts_psh

Malware Detected on Host

Count: 281 903c53686285a0cfd89d89ed600b209551168458b95899ff553caf7a7f09c1ac 33492595e001450ac6df1d6c110cc13c63c8a73cc691ae1e40d8cc1ea81a2edb ae904dbae0cfb0dd2a1153f9e8c3191d0bf7d1407f2cd31cb0b2d4a12b785a9c 4c4628e80eb4b514716e0564eb26cfa600c269b2baca542c4499641f895f5eda 0dcced795edac76325d0aeb3c08da5917d010309c3f6bbd39fcb24faf1cc90c9 871a40fb7438bb0c4952e720f9926a208c7a962254de34b04ec6b4637b4a2578 28ff572486d4a7c913af335b8b833ee0568471a60feded00f03e12eeaf572b9a e02fa28cbe2f6efe4d7c66a728ba9786d84c9bfbd29599a706099b26a1c4c427 c46d7578fe5104790684e50d4c573907aa09f455171768a46ead0468a6feec8a 043adac4448cb83d9006529313bfe5cd623b16cf2ad1f33d85642c4df287a4e1

Open Ports Detected

110 143 21 3306 443 80 8080 8081 993 995

CVEs Detected

CVE-2007-3205 CVE-2013-2220 CVE-2017-8923 CVE-2022-31628 CVE-2022-31629 CVE-2022-37454 CVE-2022-4900 CVE-2024-25117 CVE-2024-3566

Map

Whois Information

  • inetnum: 196.44.176.0 - 196.44.176.255
  • netname: YoAfrica_Servers_Network_Block
  • descr: Assignment to YO!AFRICA Servers for Email, Web Hosting, Cloud Computing, DNS, File servers at the Headquarters Data Centre
  • country: ZW
  • admin-c: CM97-AFRINIC
  • tech-c: CM97-AFRINIC
  • status: ASSIGNED PA
  • mnt-by: YOAFRICA-MNT
  • parent: 196.44.176.0 - 196.44.191.255
  • person: Charles Mashamba
  • address: 1193 Sunningdale3, 263
  • address: Harare
  • address: Zimbabwe
  • phone: tel:+263-77-881-8958
  • nic-hdl: CM97-AFRINIC
  • mnt-by: GENERATED-UZWM7CWHK3WSB8WAD1TWWCT5MDFOQVM8-MNT
  • route: 196.44.176.0/24
  • descr: YoAHRE-MAIN-Route
  • origin: AS31856
  • mnt-by: YOAFRICA-MNT

Links to attack logs

****** ****** ******

Share on: