Back to IOCs

IOC Details

IP

Indicator

185.226.197.50

Tag

honeypot

Source

4

First seen

2026-02-25 10:48:35

Last seen

2026-05-19 03:27:43

Hits

25

Comment history

  • 2026-05-19

    Observed 15 times. Targeted ports: 9001. Country: Portugal. Reputation: known attacker. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Unusual Port.

  • 2026-05-15

    Observed 15 times. Targeted ports: 8649. Country: Turkey.

  • 2026-05-14

    Observed 3 times. Targeted ports: 6666. Country: Portugal. Reputation: known attacker.

  • 2026-05-12

    Observed 26 times. Targeted ports: 8834. Country: Portugal.

  • 2026-05-11

    Observed 26 times. Targeted ports: 8334. Country: Portugal.

  • 2026-05-10

    Observed 6 times. Targeted ports: 5353. Country: Portugal.

  • 2026-05-09

    Observed 15 times. Targeted ports: 4242. Country: Portugal.

  • 2026-05-04

    Observed 10 times. Targeted ports: 389. Country: Portugal. Reputation: known attacker. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Mismatch protocol both directions, SURICATA TLS invalid record type.

  • 2026-04-30

    Observed 7 times. Targeted ports: 16993. Country: Portugal.

  • 2026-04-29

    Observed 2 times. Targeted ports: 902. Country: Portugal.

  • 2026-03-24

    Observed 19 times. Targeted ports: 16993. Country: Portugal. Reputation: known attacker. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Unusual Port.

  • 2026-03-20

    Observed 13 times. Targeted ports: 13579. Country: Portugal.

  • 2026-03-14

    Observed 15 times. Targeted ports: 5353. Country: Turkey. Reputation: known attacker.

  • 2026-03-08

    Observed 19 times. Targeted ports: 389. Country: Turkey. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Mismatch protocol both directions, SURICATA TLS invalid record type.

  • 2026-03-07

    Observed 28 times. Targeted ports: 18245. Country: Portugal. Reputation: known attacker. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Unusual Port.

  • 2026-03-06

    Observed 35 times. Targeted ports: 8112. Country: Portugal. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Unusual Port.

Actions

Open Indicator Page Search for this indicator View pDNS Records View all ip IOCs View all honeypot IOCs View all from 4

Related IOCs

ID Indicator Type Tag Source Last seen Actions
346298
159.223.119.46
IP honeypot 4 2026-05-20 18:39:31 IOC Record
346297
47.251.125.7
IP honeypot 4 2026-05-20 18:39:31 IOC Record
315029
87.251.64.158
IP honeypot 4 2026-05-20 18:39:31 IOC Record
295142
66.132.172.212
IP honeypot 4 2026-05-20 18:39:31 IOC Record
295002
66.132.195.29
IP honeypot 4 2026-05-20 18:39:31 IOC Record