196.49.0.60 Threat Intelligence and Host Information

May 21, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 196.49.0.60 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Likely Malicious Host 🟠 60/100

Host and Network Information

Mitre ATT&CK IDs: T1078 - Valid Accounts, T1083 - File and Directory Discovery, T1098.004 - SSH Authorized Keys, T1105 - Ingress Tool Transfer, T1110.004 - Credential Stuffing, T1110 - Brute Force, T1595 - Active Scanning
Tags: brute force, bruteforce, Bruteforce, Brute-Force, cowrie, cyber security, ioc, malicious, Nextray, phishing, rdp, scan, scanners, sip, sipvicious, ssh, SSH, vultr
View other sources: Spamhaus VirusTotal

Country: Ivory Coast
Network:
Noticed: 50 times
Protocols Attacked: ssh
Countries Attacked: Australia, Canada, Czechia, Denmark, Estonia, France, Germany, Korea Republic of, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America

Open Ports Detected

22 53

Map

Whois Information

inetnum: 196.49.0.0 - 196.49.0.255
netname: CIVIX-2
descr: Cote d’Ivoire Internet Exchange Point
country: CI
org: ORG-CdIE1-AFRINIC
admin-c: AK27-AFRINIC
admin-c: SV23-AFRINIC
tech-c: KF15-AFRINIC
tech-c: SV23-AFRINIC
status: ASSIGNED PI
mnt-by: AFRINIC-HM-MNT
mnt-lower: CIVIX-mnt
mnt-domains: CIVIX-mnt
parent: 196.49.0.0 - 196.49.255.255
organisation: ORG-CdIE1-AFRINIC
org-name: Cote d’Ivoire Internet Exchange Point
org-type: EU-PI
descr: ———————————————
descr: CIIXP (Cote d’Ivoire Internet Exchange Point)
descr: NIC-CI/CIISPA
descr: ———————————————
country: CI
address: Marcory Anoumabo
address: 18 BP 2203
address: Abidjan 18 00225
phone: tel:+225-20-34-42-54
admin-c: AK27-AFRINIC
admin-c: SV23-AFRINIC
tech-c: KF15-AFRINIC
tech-c: SV23-AFRINIC
mnt-ref: AFRINIC-HM-MNT
mnt-ref: CIVIX-mnt
mnt-by: AFRINIC-HM-MNT
person: Armand KOFFI
nic-hdl: AK27-AFRINIC
address: 18 BP 2203 Abidjan 18
address: Abidjan
address: C�te d’Ivoire
phone: tel:+225-0708368034
phone: tel:+225-2720344254
mnt-by: GENERATED-V8RGJMEA2P2XOUHWEZ44NWJL8IX9EFYL-MNT
person: KOUAME Franck
address: 18 BP 2203 Abidjan 18 - Côte d’Ivoire
phone: tel:+225-07-33-85-37
nic-hdl: KF15-AFRINIC
mnt-by: GENERATED-2TQMUZN556LAWAWDMQCYKWYWLKGXRFSX-MNT
person: Sylvain Vallerot
nic-hdl: SV23-AFRINIC
address: 3 rue Erckmann Chatrian
address: Paris
address: France
address: Paris 75018
address: Other
phone: tel:+33-6-86-38-38-68
mnt-by: MO-MNT
route: 196.49.0.0/24
descr: Route to CIVIX public IPv4 hosting network
origin: AS36946
org: ORG-CVX1-AFRINIC
mnt-by: CIVIX-MNT
organisation: ORG-CVX1-AFRINIC
org-name: Cote d’Ivoire Internet Exchange Point
org-type: OTHER
country: CI
address: CIVIX - ARTCI
address: Marcory Anoumabo
address: 18 BP 2203 Abidjan 18
address: Côte d’Ivoire
tech-c: CVX1-AFRINIC
admin-c: CVX1-AFRINIC
org: ORG-CVX1-AFRINIC
mnt-ref: CIVIX-MNT
mnt-by: CIVIX-MNT

Links to attack logs

Share on: