Looking up IP
Check an IP Address, Domain Name, Subnet, or ASN
80.243.224.84 has a threat confidence score of 93%. This IP address from Germany (AS211582, ecomDATA GmbH) has been observed in 73 honeypot sessions targeting SSH protocols. Detected attack patterns include ssh base64 payload decode stage and validation. First observed on April 13, 2026, most recently active April 14, 2026.
Identifies SSH sessions where an actor decodes a base64-encoded payload, writes it to a hidden file (commonly in /tmp or /var), and validates its presence. This pattern indicates post-compromise payload staging prior to execution or persistence.