209.205.201.66 Threat Intelligence and Host Information

Jun 27, 2026 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 209.205.201.66 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 50/100

Host and Network Information

Tags: Aggressive-Detection, brute-force, bruteforce, Bruteforce, Brute-Force, Connection-Reset, credential-attack, digital ocean, mikrotele, Protocol-Probing, ssh, SSH, threat-intel, tpot
View other sources: Spamhaus VirusTotal

Country: United States
Network:
Noticed: 12 times
Protocols Attacked: ssh
Passive DNS Results: unga.shop

Open Ports Detected

110 143 2082 2083 2086 2087 2222 465 4949 993 995

CVEs Detected

CVE-2007-2768

Similar IP Addresses Detected

209.205.144.95 209.205.154.115 209.205.190.63 209.205.197.202 209.205.200.13 209.205.206.56 209.205.206.58 209.205.206.63 209.205.207.130 209.205.207.131

Map

Whois Information

NetRange: 209.205.192.0 - 209.205.223.255
CIDR: 209.205.192.0/19
NetName: BNS-34
NetHandle: NET-209-205-192-0-1
Parent: NET209 (NET-209-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: B2 Net Solutions Inc. (BNS-34)
RegDate: 2025-06-09
Updated: 2025-06-09
Ref: https://rdap.arin.net/registry/ip/209.205.192.0
OrgName: B2 Net Solutions Inc.
OrgId: BNS-34
Address: 205-1040 South Service Road
City: Stoney Creek
StateProv: ON
PostalCode: L8E 6G3
Country: CA
RegDate: 2011-10-24
Updated: 2024-11-25
Comment: https://servermania.com
Ref: https://rdap.arin.net/registry/entity/BNS-34
OrgAbuseHandle: NOC13339-ARIN
OrgAbuseName: Network Operations Center
OrgAbusePhone: +1-716-745-4678
OrgAbuseEmail: abuse-system@servermania.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/NOC13339-ARIN
OrgNOCHandle: NOC13339-ARIN
OrgNOCName: Network Operations Center
OrgNOCPhone: +1-716-745-4678
OrgNOCEmail: abuse-system@servermania.com
OrgNOCRef: https://rdap.arin.net/registry/entity/NOC13339-ARIN
OrgAbuseHandle: NOC33347-ARIN
OrgAbuseName: Network Operations Center
OrgAbusePhone: +1-716-745-4678
OrgAbuseEmail: abuse-system@servermania.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/NOC33347-ARIN
OrgTechHandle: NOC13339-ARIN
OrgTechName: Network Operations Center
OrgTechPhone: +1-716-745-4678
OrgTechEmail: abuse-system@servermania.com
OrgTechRef: https://rdap.arin.net/registry/entity/NOC13339-ARIN
NetRange: 209.205.192.0 - 209.205.223.255
CIDR: 209.205.192.0/19
NetName: 24SHELLS
NetHandle: NET-209-205-192-0-2
Parent: BNS-34 (NET-209-205-192-0-1)
NetType: Reallocated
OriginAS:
Organization: 24 SHELLS (TS-74)
RegDate: 2026-01-29
Updated: 2026-01-29
Ref: https://rdap.arin.net/registry/ip/209.205.192.0
OrgName: 24 SHELLS
OrgId: TS-74
Address: 30 Knightsbridge Road, Suite 525
City: Piscataway
StateProv: NJ
PostalCode: 08854
Country: US
RegDate: 2012-02-22
Updated: 2024-11-25
Comment: http://www.24shells.net
Ref: https://rdap.arin.net/registry/entity/TS-74
OrgAbuseHandle: ABUSE3950-ARIN
OrgAbuseName: Abuse Department
OrgAbusePhone: +1-732-400-8134
OrgAbuseEmail: abuse@24shells.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE3950-ARIN
OrgNOCHandle: NOC13393-ARIN
OrgNOCName: Network Operations Center
OrgNOCPhone: +1-732-400-8134
OrgNOCEmail: noc@24shells.net
OrgNOCRef: https://rdap.arin.net/registry/entity/NOC13393-ARIN
OrgTechHandle: NOC13393-ARIN
OrgTechName: Network Operations Center
OrgTechPhone: +1-732-400-8134
OrgTechEmail: noc@24shells.net
OrgTechRef: https://rdap.arin.net/registry/entity/NOC13393-ARIN
NetRange: 209.205.192.0 - 209.205.223.255
CIDR: 209.205.192.0/19
NetName: HWNL
NetHandle: NET-209-205-192-0-3
Parent: 24SHELLS (NET-209-205-192-0-2)
NetType: Reallocated
OriginAS:
Organization: Host World Net LLC (HWNL)
RegDate: 2026-02-16
Updated: 2026-02-16
Ref: https://rdap.arin.net/registry/ip/209.205.192.0
OrgName: Host World Net LLC
OrgId: HWNL
Address: 6 KILMER RD STE B PMB 7042
City: Edison
StateProv: NJ
PostalCode: 08817
Country: US
RegDate: 2025-03-05
Updated: 2025-03-07
Ref: https://rdap.arin.net/registry/entity/HWNL
OrgDNSHandle: NOC13393-ARIN
OrgDNSName: Network Operations Center
OrgDNSPhone: +1-732-400-8134
OrgDNSEmail: noc@24shells.net
OrgDNSRef: https://rdap.arin.net/registry/entity/NOC13393-ARIN
OrgAbuseHandle: ABUSE3950-ARIN
OrgAbuseName: Abuse Department
OrgAbusePhone: +1-732-400-8134
OrgAbuseEmail: abuse@24shells.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE3950-ARIN
OrgRoutingHandle: NOC13393-ARIN
OrgRoutingName: Network Operations Center
OrgRoutingPhone: +1-732-400-8134
OrgRoutingEmail: noc@24shells.net
OrgRoutingRef: https://rdap.arin.net/registry/entity/NOC13393-ARIN
OrgNOCHandle: NOC13393-ARIN
OrgNOCName: Network Operations Center
OrgNOCPhone: +1-732-400-8134
OrgNOCEmail: noc@24shells.net
OrgNOCRef: https://rdap.arin.net/registry/entity/NOC13393-ARIN
OrgTechHandle: NOC13393-ARIN
OrgTechName: Network Operations Center
OrgTechPhone: +1-732-400-8134
OrgTechEmail: noc@24shells.net
OrgTechRef: https://rdap.arin.net/registry/entity/NOC13393-ARIN
NetRange: 209.205.192.0 - 209.205.223.255
CIDR: 209.205.192.0/19
NetName: DWNL
NetHandle: NET-209-205-192-0-4
Parent: HWNL (NET-209-205-192-0-3)
NetType: Reallocated
OriginAS:
Organization: Data World Net (DWNL)
RegDate: 2026-05-14
Updated: 2026-05-14
Ref: https://rdap.arin.net/registry/ip/209.205.192.0
OrgName: Data World Net
OrgId: DWNL
Address: 1 Chestnut hill plaza
City: Newark
StateProv: DE
PostalCode: 19713
Country: US
RegDate: 2026-05-09
Updated: 2026-05-14
Ref: https://rdap.arin.net/registry/entity/DWNL
OrgAbuseHandle: MCMAH135-ARIN
OrgAbuseName: McMahon, Kevin
OrgAbusePhone: +1-845-316-0366
OrgAbuseEmail: noc@dataworldnet.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/MCMAH135-ARIN
OrgTechHandle: MCMAH135-ARIN
OrgTechName: McMahon, Kevin
OrgTechPhone: +1-845-316-0366
OrgTechEmail: noc@dataworldnet.com
OrgTechRef: https://rdap.arin.net/registry/entity/MCMAH135-ARIN
OrgNOCHandle: SHAHJ15-ARIN
OrgNOCName: Shah, Jayesh
OrgNOCPhone: +1-845-316-0366
OrgNOCEmail: noc@dataworldnet.com
OrgNOCRef: https://rdap.arin.net/registry/entity/SHAHJ15-ARIN
OrgDNSHandle: SHAHJ15-ARIN
OrgDNSName: Shah, Jayesh
OrgDNSPhone: +1-845-316-0366
OrgDNSEmail: noc@dataworldnet.com
OrgDNSRef: https://rdap.arin.net/registry/entity/SHAHJ15-ARIN
OrgRoutingHandle: SHAHJ15-ARIN
OrgRoutingName: Shah, Jayesh
OrgRoutingPhone: +1-845-316-0366
OrgRoutingEmail: noc@dataworldnet.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/SHAHJ15-ARIN

Links to attack logs

digitaloceanlondon-ssh-bruteforce-ip-list-2026-06-02 digitaloceanlondon-ssh-bruteforce-ip-list-2026-06-01 digitaloceantoronto-ssh-bruteforce-ip-list-2026-06-01 digitaloceantoronto-ssh-bruteforce-ip-list-2026-06-02

Share on: