200.69.141.210 Threat Intelligence and Host Information

Apr 10, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 200.69.141.210 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Likely Malicious Host 🟠 55/100

Host and Network Information

Mitre ATT&CK IDs: T1078 - Valid Accounts, T1083 - File and Directory Discovery, T1098.004 - SSH Authorized Keys, T1105 - Ingress Tool Transfer, T1110.004 - Credential Stuffing, T1110 - Brute Force
Tags: attack, Bruteforce, Brute-Force, cowrie, cyber security, ioc, login, malicious, Nextray, phishing, scanner, ssh, SSH, Telnet
View other sources: Spamhaus VirusTotal
Contained within other IP sets: haley_ssh

Country: Argentina
Network:
Noticed: 50 times
Protocols Attacked: ssh
Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America

Malware Detected on Host

Count: 1 f34bb152a27854fd0f5a28f4af3970611454a2d373cf9888600e35b2c6b0249e

Map

Whois Information

inetnum: 200.69.128.0/19
status: allocated
aut-num: N/A
owner: Techtel LMDS Comunicaciones Interactivas S.A.
ownerid: AR-TLCI-LACNIC
responsible: Administrador de Direcciones IP - CLARO
address: Garay, 34,
address: C1063AB - Buenos Aires -
country: AR
phone: +54 11 4000-3000 [3270]
owner-c: ADL82
tech-c: SAD3
abuse-c: CAT66
inetrev: 200.69.136.0/21
nserver: NS1.TELMEX.NET.AR
nsstat: 20250408 AA
nslastaa: 20250408
nserver: NS2.TELMEX.NET.AR
nsstat: 20250408 AA
nslastaa: 20250408
inetrev: 200.69.132.0/24
nserver: NS1.TELMEX.NET.AR
nsstat: 20250409 AA
nslastaa: 20250409
nserver: NS2.TELMEX.NET.AR
nsstat: 20250409 AA
nslastaa: 20250409
inetrev: 200.69.144.0/23
nserver: NS1.TELMEX.NET.AR
nsstat: 20250409 AA
nslastaa: 20250409
nserver: NS2.TELMEX.NET.AR
nsstat: 20250409 AA
nslastaa: 20250409
inetrev: 200.69.149.0/24
nserver: NS1.TELMEX.NET.AR
nsstat: 20250409 AA
nslastaa: 20250409
nserver: NS2.TELMEX.NET.AR
nsstat: 20250409 AA
nslastaa: 20250409
inetrev: 200.69.152.0/22
nserver: NS1.TELMEX.NET.AR
nsstat: 20250407 AA
nslastaa: 20250407
nserver: NS2.TELMEX.NET.AR
nsstat: 20250407 AA
nslastaa: 20250407
inetrev: 200.69.159.0/24
nserver: NS1.CITARELLA.COM.AR
nsstat: 20250408 AA
nslastaa: 20250408
inetrev: 200.69.131.0/24
nserver: NS1.TECHTEL.COM.AR
nsstat: 20250408 AA
nslastaa: 20250408
nserver: NS2.TECHTEL.COM.AR
nsstat: 20250408 AA
nslastaa: 20250408
inetrev: 200.69.147.0/24
nserver: NS1.TECHTEL.COM.AR
nsstat: 20250408 AA
nslastaa: 20250408
nserver: NS2.TECHTEL.COM.AR
nsstat: 20250408 AA
nslastaa: 20250408
inetrev: 200.69.135.0/24
nserver: NS1.TECHTEL.COM.AR
nsstat: 20250406 AA
nslastaa: 20250406
nserver: NS2.TECHTEL.COM.AR
nsstat: 20250406 AA
nslastaa: 20250406
inetrev: 200.69.129.0/24
nserver: NS1.TELMEX.NET.AR
nsstat: 20250407 AA
nslastaa: 20250407
nserver: NS2.TELMEX.NET.AR
nsstat: 20250407 AA
nslastaa: 20250407
created: 20010530
changed: 20220608
nic-hdl: ADL82
person: Administrador Lacnic
e-mail: adm_lacnic@claro.com.ar
address: Av de Mayo, 878,
address: C1084AAQ - Buenos Aires -
country: AR
phone: +54 1140003246
created: 20220602
changed: 20220602
nic-hdl: SAD3
person: IP Addressing AR
e-mail: ipaddressing.ar@claro.com.ar
address: Av. de Mayo, 878, -
address: C1084AAQ - Bs.As, - CF
country: AR
phone: +54 1140011300 [34179]
created: 20060511
changed: 20211221
nic-hdl: CAT66
person: Abuse Claro AR
e-mail: abuse@claro.com.ar
address: Av. de Mayo, 878, -
address: 1425 - Capital Federal - Other
country: AR
phone: +54 1141098823 [0000]
created: 20210217
changed: 20210313

Links to attack logs

Share on: