Feed matches
1 source match
- Honeypot infrastructure watch · last seen Oct 12, 2026
1 source match
Full relationships unavailable for this view
Enrichment failed
0 observed services · stale
Not present in the current list
Popularity is neutral context, not threat evidence.
Observed relationships and popularity do not establish maliciousness.
Observed 11 times. Targeted ports: 22. Country: Iran. Reputation: ssh abuse. Alert categories: Generic Protocol Command Decode, Misc activity. Signatures: ET INFO SSH session in progress on Expected Port, SURICATA STREAM spurious retransmission. Usernames: mac.
| Indicator | Type | Tag | Source | Last seen |
|---|---|---|---|---|
| 85.198.19.241 | ip | honeypot, historical | 2026-10-12 15:44:52 | |
Honeypot infrastructure watch: Observed 11 times. Targeted ports: 22. Country: Iran. Reputation: ssh abuse. Alert categories: Generic Protocol Command Decode, Misc activity. Signatures: ET INFO SSH session in progress on Expected Port, SURICATA STREAM spurious retransmission. Usernames: mac. | ||||
Observed relationships do not establish maliciousness.
| Hostname | IP | Last seen | Hits | Provenance |
|---|
No DNS history matches this value.
BGP origin and registry data from Team Cymru.
Daily link and hosting prominence from top1m.org; not a security verdict or traffic estimate.
Not present in the current Top 1M lists.
Current scanner state. Times mean last observed open, not open now.
The last good scanner snapshot is stale; a refresh is queued.
| Port | Transport | Service | Product | Last observed open |
|---|
1 public feed match. Account searches stay out of Latest searches.