Critical Threat
IP 200.89.69.247, an address originating from Universidad de Chile's network infrastructure in Chile, presents a critical security threat with a maximum threat level of 10/10 and a 94% confidence rating. This IP has accumulated 307 abuse reports from automated honeypot sensors since first detection in April 2026, with activity continuing through May 2026, indicating a sustained and aggressive threat campaign.
Analysis of the detection data reveals this address has been flagged exclusively for SSH brute-force attacks and general hacking activity across all recent reported categories. The activity frequency rating of 8/10 demonstrates consistent, persistent scanning behaviour against target systems. Network attribution confirms the Chilean academic sector origin (AS23140, Universidad de Chile), while Suricata alert signatures specifically document SSH brute-force attempts targeting expected SSH ports, confirming the systematic nature of the intrusion campaign.
The dominant threat category, SSH brute-force activity, represents an attempt to gain unauthorized server access through systematic password guessing against exposed SSH services. This attack pattern exploits weak or default credentials and misconfigured authentication settings on publicly accessible servers. The concrete risk includes complete server compromise, data exfiltration, lateral movement within networks, and potential deployment of secondary attack infrastructure such as botnets or cryptominers.
Site operators with exposed SSH services should immediately block this IP address at the firewall level and implement rate-limiting controls to mitigate repeated connection attempts. Switching to key-based authentication, changing the default SSH port, and disabling root login significantly reduce vulnerability to these attacks. Deploying automated threat-response tools such as fail2ban can dynamically block repeat offenders. Regular auditing of authentication logs and enforcing strong password policies remain essential complementary measures for defence in depth.
RO 
MX