← Back to feed

2.180.15.240

Threat Confidence
36%
Assessment
Port and service scanner
  • Opened tunnels through the host in 1 sessions (1 mail relay attempts).
Generated from the counts on this page by fixed rules; each line cites the number it rests on.
Location
🇮🇷 IR
ASN
AS58224 · Iran Telecommunication Company PJS
Cloud Provider
—
Total Events
8
Average by volume
Agent Count
1
First / Last Seen
2026-10-04 08:07 — 2026-10-04 23:26
Attack Types
smtp:relay ssh:connection
MITRE ATT&CK Techniques
Reconnaissance
Discovery
Command and Control
External Corroboration
Blocklist.de
Reported 2026-10-19 05:01
blocklist_de:reported
Campaigns
Not associated with any campaigns
Session Forensics
scanner ×1 proxy_abuser ×1
Sessions
2 (1 with login)
Avg Depth Score
0.5
Commands Executed
0
Files Downloaded
0
Fingerprints
1 SSH client banner · 1 HASSH fingerprint
SSH-2.0-OpenSSH_7.4
Evidence Timeline
Scanner 42231c8712ba w4m_singapore_01 · 2026-10-04 23:25
15%
Loading events...
Proxy Abuser 3e4bb18d9646 w4m_singapore_01 · 2026-10-04 08:07
1 85%
Loading events...