85.198.19.217
IPv4AS60077 · AT-CLOUD - Asre Dadeha Asiatech, IR · 85.198.19.0/24 · IR registry
Observed 12 times. Targeted ports: 22. Country: Iran. Reputation: ssh abuse. Alert categories: Generic Protocol Command Decode, Misc activity. Signatures: ET INFO SSH session in progress on Expected Port, SURICATA STREAM spurious retransmission. Usernames: user.
| Indicator | Type | Tag | Source | Last seen |
|---|---|---|---|---|
| 85.198.19.217 | ip | honeypot, historical | 2026-10-09 16:59:45 | |
Honeypot infrastructure watch: Observed 12 times. Targeted ports: 22. Country: Iran. Reputation: ssh abuse. Alert categories: Generic Protocol Command Decode, Misc activity. Signatures: ET INFO SSH session in progress on Expected Port, SURICATA STREAM spurious retransmission. Usernames: user. | ||||
Passive DNS relationships
Observed relationships do not establish maliciousness.
| Hostname | IP | Last seen | Hits | Provenance |
|---|---|---|---|---|
| 85.198.19.217.asiatech.cloud | 85.198.19.217 | Oct 2026First seen: Oct 2026 | 1 | CTIDAO DNS |
Record details
A · First seen Oct 2026
Network ownership
BGP origin and registry data from Team Cymru.
AT-CLOUD - Asre Dadeha Asiatech, IR
Registry country is RIR assignment data, not IP geolocation.
Checked 10/9/2026, 5:00:40 PM
Popularity
Daily link and hosting prominence from top1m.org; not a security verdict or traffic estimate.
Not present in the current Top 1M lists.
Internet exposure
Current scanner state. Times mean last observed open, not open now.
The last good scanner snapshot is stale; a refresh is queued.
| Port | Transport | Service | Product | Last observed open |
|---|
Public preview is limited to five services and excludes banners.
Search full Exposure dataTake this investigation further
1 public pDNS relationships are available. Account research adds exact timing, focused pivots, and matching paid-feed intelligence. Eligible logged-in entity visits cost 1 CTIDAO, including pivots, refreshes and returns.