159.253.22.85
159.253.22.85 is a threat-intelligence indicator (IPv4 address) classified as Suspicious, corroborated across 5 independent feeds. It is aggregated and de-duplicated from many open and commercial threat feeds, with confidence scoring and decay over time.
Indicator facts
- Type
- IPv4 address
- Indicator
159.253.22.85- Classification
- Suspicious
- Confidence
- 90 / 100
- Corroboration
- 5 independent sources
- First seen
- Last seen
- Network (ASN)
- AS198068 — PAGM-AS
- Country
- EE
Tags
- brute-force
- ssh
- aggregate-source
- attacker
- sshpwauth
- honeypot
- scanner
Related CVEs (228)
- CVE-2025-23419
- CVE-2023-44487
- CVE-2023-22028
- CVE-2023-22026
- CVE-2023-22015
- CVE-2023-22007
- CVE-2023-21980
- CVE-2023-21977
- CVE-2022-21444
- CVE-2022-21417
- CVE-2021-3618
- CVE-2021-2356
- CVE-2021-23017
- CVE-2021-22570
- CVE-2021-2060
- CVE-2021-2022
- CVE-2021-2010
- CVE-2021-2007
- CVE-2021-2001
- CVE-2020-2922
- CVE-2020-2901
- CVE-2020-2814
- CVE-2020-2812
- CVE-2020-2804
- CVE-2020-2780
- CVE-2020-2779
- CVE-2020-2763
- CVE-2020-2752
- CVE-2020-2579
- CVE-2020-2574
- CVE-2020-1971
- CVE-2020-1967
- CVE-2020-15358
- CVE-2020-14867
- CVE-2020-14852
- CVE-2020-14846
- CVE-2020-14845
- CVE-2020-14839
- CVE-2020-14837
- CVE-2020-14830
- CVE-2020-14814
- CVE-2020-14812
- CVE-2020-14793
- CVE-2020-14769
- CVE-2020-14765
- CVE-2020-14760
- CVE-2020-14672
- CVE-2020-14559
- CVE-2020-14550
- CVE-2020-14539
← Threat intelligence command center · Explore the indicator corpus