94.180.139.162
IPv4AS41668 · ERTH-KAZAN-AS, RU · 94.180.128.0/17 · RU registry
Observed 11 times. Targeted ports: 22. Country: Russia. Reputation: ssh abuse. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Expected Port. Usernames: frappe.
| Indicator | Type | Tag | Source | Last seen |
|---|---|---|---|---|
| 94.180.139.162 | ip | honeypot, historical | 2026-10-11 16:46:13 | |
Honeypot infrastructure watch: Observed 11 times. Targeted ports: 22. Country: Russia. Reputation: ssh abuse. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Expected Port. Usernames: frappe. | ||||
Passive DNS relationships
Observed relationships do not establish maliciousness.
| Hostname | IP | Last seen | Hits | Provenance |
|---|---|---|---|---|
| 94x180x139x162.dynamic.kzn.ertelecom.ru | 94.180.139.162 | Oct 2026First seen: Oct 2026 | 1 | CTIDAO DNS |
Record details
A · First seen Oct 2026
Network ownership
BGP origin and registry data from Team Cymru.
ERTH-KAZAN-AS, RU
Registry country is RIR assignment data, not IP geolocation.
Checked 10/11/2026, 4:47:02 PM
Popularity
Daily link and hosting prominence from top1m.org; not a security verdict or traffic estimate.
Popularity data is temporarily unavailable.
Internet exposure
Current scanner state. Times mean last observed open, not open now.
Exposure data is being refreshed.
Public preview is limited to five services and excludes banners.
Search full Exposure dataTake this investigation further
1 public pDNS relationships are available. Account research adds exact timing, focused pivots, and matching paid-feed intelligence. Eligible logged-in entity visits cost 1 CTIDAO, including pivots, refreshes and returns.