200.5.228.76 Threat Intelligence and Host Information

Share on:
Dec 17, 2023 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 200.5.228.76 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 31/100

Host and Network Information

  • Tags: blacklist, bruteforce, Bruteforce, Brute-Force, Malicious IP, scan, ssh, SSH, tcp

  • View other sources: Spamhaus VirusTotal

  • Country: Argentina
  • Network: AS10834 telefonica de argentina
  • Noticed: 1 times
  • Protcols Attacked: ssh

Malware Detected on Host

Count: 1 4bbb32fe37755007533b6ff558fa333a13323b49be29d1e312d9e47284acd1e3

Open Ports Detected

443 80 8080

CVEs Detected

CVE-2021-23017 CVE-2021-3618 CVE-2023-44487

Map

Whois Information

  • inetnum: 200.5.192.0/18
  • status: allocated
  • aut-num: N/A
  • owner: Telefonica de Argentina
  • ownerid: AR-TEAR7-LACNIC
  • responsible: Luis Francisco Pérez Sánchez
  • address: Av. Independencia, 169, PB
  • address: 1099 - Buenos Aires - CF
  • country: AR
  • phone: +54 8102220102 [0000]
  • owner-c: TEA
  • tech-c: TEA
  • abuse-c: TEA
  • inetrev: 200.5.197.0/24
  • nserver: UL1.SATLINK.COM
  • nsstat: 20231217 AA
  • nslastaa: 20231217
  • nserver: UN1.SATLINK.COM [lame - not published]
  • nsstat: 20231217 TIMEOUT
  • nslastaa: 20181027
  • inetrev: 200.5.222.0/24
  • nserver: NUSTAL05.ADVANCE.COM.AR
  • nsstat: 20231216 AA
  • nslastaa: 20231216
  • nserver: NUSTAL08.ADVANCE.COM.AR
  • nsstat: 20231216 AA
  • nslastaa: 20231216
  • inetrev: 200.5.228.0/24
  • nserver: UL1.SATLINK.COM
  • nsstat: 20231216 AA
  • nslastaa: 20231216
  • nserver: UN1.SATLINK.COM [lame - not published]
  • nsstat: 20231216 TIMEOUT
  • nslastaa: 20181027
  • inetrev: 200.5.235.0/24
  • nserver: UL1.SATLINK.COM
  • nsstat: 20231215 AA
  • nslastaa: 20231215
  • nserver: UN1.SATLINK.COM [lame - not published]
  • nsstat: 20231215 TIMEOUT
  • nslastaa: 20181026
  • inetrev: 200.5.242.0/24
  • nserver: UL1.SATLINK.COM
  • nsstat: 20231215 AA
  • nslastaa: 20231215
  • nserver: UN1.SATLINK.COM [lame - not published]
  • nsstat: 20231215 TIMEOUT
  • nslastaa: 20181028
  • inetrev: 200.5.245.0/24
  • nserver: UL1.SATLINK.COM
  • nsstat: 20231216 AA
  • nslastaa: 20231216
  • nserver: UN1.SATLINK.COM [lame - not published]
  • nsstat: 20231216 TIMEOUT
  • nslastaa: 20181027
  • inetrev: 200.5.246.0/23
  • nserver: UL1.SATLINK.COM
  • nsstat: 20231216 AA
  • nslastaa: 20231216
  • nserver: UN1.SATLINK.COM [lame - not published]
  • nsstat: 20231216 TIMEOUT
  • nslastaa: 20181029
  • inetrev: 200.5.254.0/24
  • nserver: NUSTAL05.ADVANCE.COM.AR [lame - not published]
  • nsstat: 20231215 NOT SYNC ZONE
  • nslastaa: 20190221
  • nserver: NUSTAL08.ADVANCE.COM.AR
  • nsstat: 20231215 AA
  • nslastaa: 20231215
  • inetrev: 200.5.192.0/23
  • nserver: NUSTAL05.ADVANCE.COM.AR
  • nsstat: 20231216 AA
  • nslastaa: 20231216
  • nserver: NUSTAL08.ADVANCE.COM.AR
  • nsstat: 20231216 AA
  • nslastaa: 20231216
  • inetrev: 200.5.238.0/24
  • nserver: NUSTAL05.ADVANCE.COM.AR
  • nsstat: 20231217 AA
  • nslastaa: 20231217
  • nserver: NUSTAL08.ADVANCE.COM.AR
  • nsstat: 20231217 AA
  • nslastaa: 20231217
  • inetrev: 200.5.196.0/24
  • nserver: NUSTAL05.ADVANCE.COM.AR [lame - not published]
  • nsstat: 20231215 NOT SYNC ZONE
  • nslastaa: 20230927
  • nserver: NUSTAL08.ADVANCE.COM.AR
  • nsstat: 20231215 AA
  • nslastaa: 20231215
  • inetrev: 200.5.232.0/24
  • nserver: UL1.SATLINK.COM
  • nsstat: 20231216 AA
  • nslastaa: 20231216
  • nserver: UN1.SATLINK.COM [lame - not published]
  • nsstat: 20231216 TIMEOUT
  • nslastaa: 20181028
  • inetrev: 200.5.229.0/24
  • nserver: NUSTAL05.ADVANCE.COM.AR
  • nsstat: 20231212 AA
  • nslastaa: 20231212
  • nserver: NUSTAL08.ADVANCE.COM.AR
  • nsstat: 20231212 AA
  • nslastaa: 20231212
  • inetrev: 200.5.251.0/24
  • nserver: UL1.SATLINK.COM
  • nsstat: 20231217 AA
  • nslastaa: 20231217
  • nserver: UN1.SATLINK.COM [lame - not published]
  • nsstat: 20231217 TIMEOUT
  • nslastaa: 20181029
  • inetrev: 200.5.253.0/24
  • nserver: NUSTAL05.ADVANCE.COM.AR
  • nsstat: 20231215 AA
  • nslastaa: 20231215
  • nserver: NUSTAL08.ADVANCE.COM.AR
  • nsstat: 20231215 AA
  • nslastaa: 20231215
  • inetrev: 200.5.230.0/24
  • nserver: NUSTAL05.ADVANCE.COM.AR
  • nsstat: 20231214 AA
  • nslastaa: 20231214
  • nserver: NUSTAL08.ADVANCE.COM.AR
  • nsstat: 20231214 AA
  • nslastaa: 20231214
  • inetrev: 200.5.218.0/24
  • nserver: NUSTAL05.ADVANCE.COM.AR
  • nsstat: 20231215 AA
  • nslastaa: 20231215
  • nserver: NUSTAL08.ADVANCE.COM.AR
  • nsstat: 20231215 AA
  • nslastaa: 20231215
  • inetrev: 200.5.203.0/24
  • nserver: NUSTAL05.ADVANCE.COM.AR
  • nsstat: 20231213 AA
  • nslastaa: 20231213
  • nserver: NUSTAL08.ADVANCE.COM.AR
  • nsstat: 20231213 AA
  • nslastaa: 20231213
  • created: 20010109
  • changed: 20100412
  • nic-hdl: TEA
  • person: Telefonica de Argentina
  • e-mail: [email protected]
  • address: AV. ING. HUERGO, 723,
  • address: 1065 - Capital Federal - BA
  • country: AR
  • phone: +54 11 43335000
  • created: 20030618
  • changed: 20220110

Links to attack logs

digitaloceanfrankfurt-ssh-bruteforce-ip-list-2023-12-15