41.61.249.30 Threat Intelligence and Host Information

Jul 30, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 41.61.249.30 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Possibly Malicious Host 🟢 20/100

Host and Network Information

  • Country: South Africa
  • Network:
  • Noticed: 1 times
  • Protocols Attacked: SSH
  • Passive DNS Results: www.1-grid-mx04.com 1-grid-mx04.com

Malware Detected on Host

Count: 4 5b20ed646362a2c6cdc5ca0a79850c7d816248c7fd5f5203ce598a4acd509f6b 2a82589f24886e7510a6fda705879626e01548a05023563513ac54bfb117472b ef7871aef5af58bcc7e9e0312d4380fbc6ced91418297a3e9a523f1d21f159c2 cdb6cbf6075b3c84ef1e899eb19450ba7cbae31cd41744724e8d3003b0dfa4c9

Open Ports Detected

123 22 25 443 5432 9100

CVEs Detected

CVE-2007-2768 CVE-2008-3844 CVE-2021-36368 CVE-2023-38408 CVE-2023-48795 CVE-2023-51385 CVE-2023-51767 CVE-2024-6387 CVE-2025-26465 CVE-2025-32728

Map

Whois Information

  • inetnum: 41.61.128.0 - 41.61.255.255
  • netname: gridhost
  • descr: Gridhost Services
  • country: ZA
  • admin-c: SG43-AFRINIC
  • tech-c: SG43-AFRINIC
  • status: ASSIGNED PA
  • mnt-by: KAL1-MNT
  • mnt-lower: KAL1-MNT
  • parent: 41.61.0.0 - 41.61.255.255
  • person: Services Gridhost
  • nic-hdl: SG43-AFRINIC
  • address: 360 Business Park
  • address: 8 Wessex Road
  • address: Paarden Eiland
  • address: Cape Town 7405
  • address: South Africa
  • phone: tel:+27-2001200
  • mnt-by: GENERATED-KIRTAT9RXZJXLT0UFWDACFOAI0ICPTKD-MNT
  • route: 41.61.128.0/17
  • descr: 1-Grid Route Object
  • origin: AS36943
  • mnt-by: KAL1-MNT

Links to attack logs

****** ****** ******

Share on: