85.192.48.80
IPv4AS215730 · H2NEXUS-AS - H2NEXUS CLOUD SERVICES - FZCO, AE · 85.192.48.0/24 · RU registry
Observed 2 times. Targeted ports: 23. Country: Finland. Reputation: bad reputation. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA TCPv4 invalid checksum.
| Indicator | Type | Tag | Source | Last seen |
|---|---|---|---|---|
| 85.192.48.80 | ip | honeypot, historical | 2026-10-10 09:48:22 | |
Honeypot infrastructure watch: Observed 2 times. Targeted ports: 23. Country: Finland. Reputation: bad reputation. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA TCPv4 invalid checksum. | ||||
Passive DNS relationships
Observed relationships do not establish maliciousness.
| Hostname | IP | Last seen | Hits | Provenance |
|---|---|---|---|---|
| 114293.h2.nexus | 85.192.48.80 | Oct 2026First seen: Oct 2026 | 1 | CTIDAO DNS |
Network ownership
BGP origin and registry data from Team Cymru.
H2NEXUS-AS - H2NEXUS CLOUD SERVICES - FZCO, AE
Registry country is RIR assignment data, not IP geolocation.
Checked 10/9/2026, 7:38:12 PM
Popularity
Daily link and hosting prominence from top1m.org; not a security verdict or traffic estimate.
Not present in the current Top 1M lists.
Internet exposure
Current scanner state. Times mean last observed open, not open now.
| Port | Transport | Service | Product | Last observed open |
|---|---|---|---|---|
| 22 | tcp | ssh | OpenSSH | Oct 8, 2026 |
| 80 | tcp | http | nginx | Oct 8, 2026 |
| 3306 | tcp | mysql | MySQL | Oct 9, 2026 |
22/tcpssh
OpenSSH
Last observed open Oct 8, 2026
80/tcphttp
nginx
Last observed open Oct 8, 2026
3306/tcpmysql
MySQL
Last observed open Oct 9, 2026
Public preview is limited to five services and excludes banners.
Search full Exposure dataTake this investigation further
1 public pDNS relationships are available. Account research adds exact timing, focused pivots, and matching paid-feed intelligence. Eligible logged-in entity visits cost 1 CTIDAO, including pivots, refreshes and returns.