200.7.216.10 Threat Intelligence and Host Information

General

This page contains threat intelligence information for the IPv4 address 200.7.216.10 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

🟠 Elevated — 65/100

Geographic Location

Host and Network Information

  • View other sources: Spamhaus VirusTotal Shodan AbuseIPDB
  • Country: Ecuador
  • Network: AS19114 otecel s.a.
  • Noticed: 8 times
  • Protocols Attacked: ssh
  • Countries Attacked: Australia, France, Spain
  • Open Ports: 80
  • Tor Node: No

Tags

  • blacklist
  • brute force
  • bruteforce
  • Bruteforce
  • Brute-Force
  • cowrie
  • Malicious IP
  • scan
  • scanners
  • ssh
  • SSH
  • tcp
  • vultr

MITRE ATT&CK TTPs

  • T1078 - Valid Accounts
  • T1083 - File and Directory Discovery
  • T1098.004 - SSH Authorized Keys
  • T1105 - Ingress Tool Transfer
  • T1110.004 - Credential Stuffing
  • T1110 - Brute Force

Associated CVEs

  • CVE-2006-20001

Attack Log References

Whois Information

inetnum: 200.7.192.0/19 status: allocated aut-num: N/A owner: Otecel S.A. ownerid: EC-OTSA-LACNIC responsible: Diana Talavera address: Av. Simon Bolívar y Via a Nayon Torre 3, -, - address: 170503 - Quito - PI country: EC phone: +593 022227700 [8986] owner-c: AOD tech-c: AOD abuse-c: AOD inetrev: 200.7.204.0/24 nserver: DNS1GYE.CYBERWEB.NET.EC nsstat: 20240701 AA nslastaa: 20240701 nserver: DNS2GYE.CYBERWEB.NET.EC [lame - not published] nsstat: 20240701 TIMEOUT nslastaa: 20140120 nserver: DNS1UIO.CYBERWEB.NET.EC nsstat: 20240701 AA nslastaa: 20240701 nserver: DNS2UIO.CYBERWEB.NET.EC [lame - not published] nsstat: 20240701 TIMEOUT nslastaa: 20140218 inetrev: 200.7.194.0/24 nserver: DNS1GYE.CYBERWEB.NET.EC nsstat: 20240701 AA nslastaa: 20240701 nserver: DNS2GYE.CYBERWEB.NET.EC [lame - not published] nsstat: 20240701 TIMEOUT nslastaa: 20140119 nserver: DNS1UIO.CYBERWEB.NET.EC nsstat: 20240701 AA nslastaa: 20240701 nserver: DNS2UIO.CYBERWEB.NET.EC [lame - not published] nsstat: 20240701 TIMEOUT nslastaa: 20140218 inetrev: 200.7.193.0/24 nserver: DNS1GYE.CYBERWEB.NET.EC nsstat: 20240701 AA nslastaa: 20240701 nserver: DNS2GYE.CYBERWEB.NET.EC [lame - not published] nsstat: 20240701 TIMEOUT nslastaa: 20140120 nserver: DNS1UIO.CYBERWEB.NET.EC nsstat: 20240701 AA nslastaa: 20240701 nserver: DNS2UIO.CYBERWEB.NET.EC [lame - not published] nsstat: 20240701 TIMEOUT nslastaa: 20140218 inetrev: 200.7.219.0/24 nserver: DNS1UIO.CYBERWEB.NET.EC nsstat: 20240701 AA nslastaa: 20240701 nserver: DNS2UIO.CYBERWEB.NET.EC [lame - not published] nsstat: 20240701 TIMEOUT nslastaa: 20140218 nserver: DNS1GYE.CYBERWEB.NET.EC nsstat: 20240701 AA nslastaa: 20240701 nserver: DNS2GYE.CYBERWEB.NET.EC [lame - not published] nsstat: 20240701 TIMEOUT nslastaa: 20130826 inetrev: 200.7.195.0/24 nserver: DNS1GYE.CYBERWEB.NET.EC nsstat: 20240701 AA nslastaa: 20240701 nserver: DNS1UIO.CYBERWEB.NET.EC nsstat: 20240701 AA nslastaa: 20240701 inetrev: 200.7.196.0/24 nserver: DNS1GYE.CYBERWEB.NET.EC nsstat: 20240630 AA nslastaa: 20240630 nserver: DNS2GYE.CYBERWEB.NET.EC [lame - not published] nsstat: 20240630 TIMEOUT nslastaa: 20140116 nserver: DNS1UIO.CYBERWEB.NET.EC nsstat: 20240630 AA nslastaa: 20240630 nserver: DNS2UIO.CYBERWEB.NET.EC [lame - not published] nsstat: 20240630 TIMEOUT nslastaa: 20140218 inetrev: 200.7.199.0/24 nserver: DNS1GYE.CYBERWEB.NET.EC nsstat: 20240701 AA nslastaa: 20240701 nserver: DNS2GYE.CYBERWEB.NET.EC [lame - not published] nsstat: 20240701 TIMEOUT nslastaa: 20140120 nserver: DNS2UIO.CYBERWEB.NET.EC [lame - not published] nsstat: 20240701 TIMEOUT nslastaa: 20140218 inetrev: 200.7.197.0/24 nserver: DNS1GYE.CYBERWEB.NET.EC nsstat: 20240701 AA nslastaa: 20240701 nserver: DNS2GYE.CYBERWEB.NET.EC [lame - not published] nsstat: 20240701 TIMEOUT nslastaa: 20140116 nserver: DNS2UIO.CYBERWEB.NET.EC [lame - not published] nsstat: 20240701 TIMEOUT nslastaa: 20140218 inetrev: 200.7.198.0/24 nserver: DNS1GYE.CYBERWEB.NET.EC nsstat: 20240701 AA nslastaa: 20240701 nserver: DNS1UIO.CYBERWEB.NET.EC nsstat: 20240701 AA nslastaa: 20240701 inetrev: 200.7.203.0/24 nserver: DNS1GYE.CYBERWEB.NET.EC nsstat: 20240627 AA nslastaa: 20240627 nserver: DNS1UIO.CYBERWEB.NET.EC nsstat: 20240627 AA nslastaa: 20240627 inetrev: 200.7.207.0/24 nserver: DNS1GYE.CYBERWEB.NET.EC nsstat: 20240630 AA nslastaa: 20240630 nserver: DNS2GYE.CYBERWEB.NET.EC [lame - not published] nsstat: 20240630 TIMEOUT nslastaa: 20140119 nserver: DNS2UIO.CYBERWEB.NET.EC [lame - not published] nsstat: 20240630 TIMEOUT nslastaa: 20140218 inetrev: 200.7.223.0/24 nserver: DNS1GYE.CYBERWEB.NET.EC nsstat: 20240701 AA nslastaa: 20240701 nserver: DNS2GYE.CYBERWEB.NET.EC [lame - not published] nsstat: 20240701 TIMEOUT nslastaa: 20140119 inetrev: 200.7.209.0/24 nserver: DNS1UIO.CYBERWEB.NET.EC nsstat: 20240702 AA nslastaa: 20240702 nserver: DNS1GYE.CYBERWEB.NET.EC nsstat: 20240702 AA nslastaa: 20240702 nserver: DNS2GYE.CYBERWEB.NET.EC [lame - not published] nsstat: 20240702 TIMEOUT nslastaa: 20140118 nserver: DNS2UIO.CYBERWEB.NET.EC [lame - not published] nsstat: 20240702 TIMEOUT nslastaa: 20140218 inetrev: 200.7.214.0/24 nserver: DNS1UIO.CYBERWEB.NET.EC nsstat: 20240701 AA nslastaa: 20240701 nserver: DNS1GYE.CYBERWEB.NET.EC nsstat: 20240701 AA nslastaa: 20240701 nserver: DNS2UIO.CYBERWEB.NET.EC [lame - not published] nsstat: 20240701 TIMEOUT nslastaa: 20150511 nserver: DNS2GYE.CYBERWEB.NET.EC [lame - not published] nsstat: 20240701 TIMEOUT nslastaa: 20150511 inetrev: 200.7.208.0/24 nserver: DNS1UIO.CYBERWEB.NET.EC nsstat: 20240701 AA nslastaa: 20240701 nserver: DNS1GYE.CYBERWEB.NET.EC nsstat: 20240701 AA nslastaa: 20240701 inetrev: 200.7.215.0/24 nserver: DNS1GYE.CYBERWEB.NET.EC nsstat: 20240629 AA nslastaa: 20240629 nserver: DNS1UIO.CYBERWEB.NET.EC nsstat: 20240629 AA nslastaa: 20240629 inetrev: 200.7.213.0/24 nserver: DNS1UIO.CYBERWEB.NET.EC nsstat: 20240701 AA nslastaa: 20240701 nserver: DNS1GYE.CYBERWEB.NET.EC nsstat: 20240701 AA nslastaa: 20240701 inetrev: 200.7.206.0/24 nserver: DNS1UIO.CYBERWEB.NET.EC nsstat: 20240629 AA nslastaa: 20240629 nserver: DNS1GYE.CYBERWEB.NET.EC nsstat: 20240629 AA nslastaa: 20240629 inetrev: 200.7.211.0/24 nserver: DNS1UIO.CYBERWEB.NET.EC nsstat: 20240629 AA nslastaa: 20240629 nserver: DNS1GYE.CYBERWEB.NET.EC nsstat: 20240629 AA nslastaa: 20240629 inetrev: 200.7.216.0/24 nserver: DNS1UIO.CYBERWEB.NET.EC nsstat: 20240629 AA nslastaa: 20240629 nserver: DNS1GYE.CYBERWEB.NET.EC nsstat: 20240629 AA nslastaa: 20240629 inetrev: 200.7.217.0/24 nserver: DNS1UIO.CYBERWEB.NET.EC nsstat: 20240629 AA nslastaa: 20240629 nserver: DNS1GYE.CYBERWEB.NET.EC nsstat: 20240629 AA nslastaa: 20240629 inetrev: 200.7.205.0/24 nserver: DNS1UIO.CYBERWEB.NET.EC nsstat: 20240701 AA nslastaa: 20240701 inetrev: 200.7.192.0/24 nserver: DNS1UIO.CYBERWEB.NET.EC nsstat: 20240630 AA nslastaa: 20240630 nserver: DNS1GYE.CYBERWEB.NET.EC nsstat: 20240630 AA nslastaa: 20240630 inetrev: 200.7.200.0/24 nserver: DNS1UIO.CYBERWEB.NET.EC nsstat: 20240630 AA nslastaa: 20240630 nserver: DNS1GYE.CYBERWEB.NET.EC nsstat: 20240630 AA nslastaa: 20240630 inetrev: 200.7.218.0/24 nserver: DNS1UIO.CYBERWEB.NET.EC nsstat: 20240702 AA nslastaa: 20240702 nserver: DNS1GYE.CYBERWEB.NET.EC nsstat: 20240702 AA nslastaa: 20240702 inetrev: 200.7.210.0/24 nserver: DNS1UIO.CYBERWEB.NET.EC nsstat: 20240701 AA nslastaa: 20240701 nserver: DNS1GYE.CYBERWEB.NET.EC nsstat: 20240701 AA nslastaa: 20240701 created: 20050919 changed: 20050919 nic-hdl: AOD person: Diana Talavera e-mail: nsadsm.ec@telefonica.com address: Av. Simon Bolivar y Vía a Nayon, S/N, Centro Corporativo Ekopark, Torre 3 address: 170503 - Quito - PICHINCHA country: EC phone: +593 022227700 [8986] created: 20020925 changed: 20230605