Feed matches
1 source match
- Honeypot infrastructure watch · last seen Oct 13, 2026
167.250.160.139
IPv4AS265207 · AS265207 - PLUS PROVEDOR DE INTERNET LTDA - ME, BR · 167.250.160.0/22 · BR registry
DNS history
Full relationships unavailable for this view
Network
AS265207 · 167.250.160.0/22
Exposure
7 observed services · stale
Newest observation Oct 2, 2026
Popularity
Not present in the current list
Popularity is neutral context, not threat evidence.
Observed relationships and popularity do not establish maliciousness.
Public feed matches
Honeypot infrastructure watch10/13/2026, 4:28:16 PM
Observed 11 times. Targeted ports: 22. Country: Brazil. Reputation: ssh abuse. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Expected Port. Usernames: test101.
| Indicator | Type | Tag | Source | Last seen |
|---|---|---|---|---|
| 167.250.160.139 | ip | honeypot, historical | 2026-10-13 16:28:16 | |
Honeypot infrastructure watch: Observed 11 times. Targeted ports: 22. Country: Brazil. Reputation: ssh abuse. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Expected Port. Usernames: test101. | ||||
DNS history
0 observations
Observed relationships do not establish maliciousness.
| Hostname | IP | Last seen | Hits | Provenance |
|---|
No DNS history matches this value.
Network ownership
BGP origin and registry data from Team Cymru.
Origin ASN
AS265207
BGP prefix
167.250.160.0/22
Registry country
BR
AS265207 - PLUS PROVEDOR DE INTERNET LTDA - ME, BR
Registry country is RIR assignment data, not IP geolocation.
Checked 10/13/2026, 8:05:28 PM
Popularity
Daily link and hosting prominence from top1m.org; not a security verdict or traffic estimate.
Not present in the current Top 1M lists.
Internet exposure
Current scanner state. Times mean last observed open, not open now.
The last good scanner snapshot is stale; a refresh is queued.
7 observed servicesNewest observation Oct 2, 2026
| Port | Transport | Service | Product | Last observed open |
|---|---|---|---|---|
| 22 | tcp | ssh | OpenSSH | Sep 9, 2026 |
| 80 | tcp | http | Apache httpd | Sep 9, 2026 |
| 110 | tcp | pop3 | Cyrus pop3d | Sep 9, 2026 |
| 993 | tcp | imaps | — | Oct 2, 2026 |
| 995 | tcp | pop3s | — | Oct 2, 2026 |
22/tcpssh
OpenSSH
Last observed open Sep 9, 2026
80/tcphttp
Apache httpd
Last observed open Sep 9, 2026
110/tcppop3
Cyrus pop3d
Last observed open Sep 9, 2026
993/tcpimaps
Last observed open Oct 2, 2026
995/tcppop3s
Last observed open Oct 2, 2026
Public preview is limited to five services and excludes banners. Account research on this IP entity includes every cached service, exact timestamps, banners, and enrichment summaries.
Account research
Take this investigation further
1 public feed match. Account searches stay out of Latest searches.