Feed matches
1 source match
- Honeypot infrastructure watch · last seen Oct 22, 2026
AS201021 · OnurBilisim-AS - Ahmet Onur Guney trading as Onur Bilisim Ve Yazilim Hizmetleri, TR · 185.28.61.0/24 · TR registry
1 source match
1 observed relationship
AS201021 · 185.28.61.0/24
Snapshot pending
Not present in the current list
Popularity is neutral context, not threat evidence.
Observed relationships and popularity do not establish maliciousness.
Observed 5 times. Targeted ports: 6170. Country: Türkiye. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM Packet with broken ack.
| Indicator | Type | Tag | Source | Last seen |
|---|---|---|---|---|
| 185.28.61.20 | ip | honeypot, historical | 2026-10-22 16:48:55 | |
Honeypot infrastructure watch: Observed 5 times. Targeted ports: 6170. Country: Türkiye. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA STREAM Packet with broken ack. | ||||
Observed relationships do not establish maliciousness.
| Hostname | IP | Last seen | Hits | Provenance |
|---|---|---|---|---|
| 20.61.28.185.ekxi.net | 185.28.61.20 | Oct 2026First seen: Oct 2026 | 1 | CTIDAO DNS |
BGP origin and registry data from Team Cymru.
OnurBilisim-AS - Ahmet Onur Guney trading as Onur Bilisim Ve Yazilim Hizmetleri, TR
Registry country is RIR assignment data, not IP geolocation.
Checked 10/22/2026, 4:49:41 PM
Daily link and hosting prominence from top1m.org; not a security verdict or traffic estimate.
Not present in the current Top 1M lists.
Current scanner state. Times mean last observed open, not open now.
Exposure data is being refreshed.
1 public pDNS relationships are available. Account research adds exact timing, focused pivots, and matching paid-feed intelligence.