ThreatFox IOC Database

You are viewing the ThreatFox database entry for url http://85.120.255.35/ssh.sh.

Database Entry


IOC ID:1835370
IOC: http://85.120.255.35/ssh.sh
IOC Type :url
Threat Type :payload_delivery
Malware: Unknown malware
Confidence Level : Confidence level is elevated (75%)
Is compromised? : False
ASN:AS3233 ICI-ROTLD
Country:- RO
First seen:2026-06-22 06:22:25 UTC
Last seen:never
UUID:f5fd1006-6df5-11f1-9258-42010aa4000a
Reporter greedybear
Reward 5 credits from ThreatFox
Tags:honeypot
Reference: https://greedybear.honeynet.org

Avatar
greedybear
Seen requesting a payload from Suricata honeypot and collected in Greedybear, the Threat Intel Platform for T-POTs.