85.11.167.212
Classification: Malicious
85.11.167.212 is a malicious IP address in Amsterdam, NL. 4,722 sightings from 5 threat sources (SSH Attacker, Bruteforce), last seen 2026-10-18.
Current activity
- Known attacker — Seen launching attacks over the Internet.
- Known scanner — Seen scanning hosts over the Internet.
- IoT threat — Seen attacking IoT devices.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| HTTP Spammer | GPF DNS Blocklist | 2026-10-18 01:02:04 | 2026-10-18 01:02:04 | malicious-activity | |
| SSH Attacker | Blocklist.de | 2026-08-28 14:04:59 | 2026-10-17 14:00:57 | attacker malicious-activity | |
| DDoS Attacker | Blocklist.net.ua | 2026-06-25 16:01:32 | 2026-10-12 16:35:44 | attacker malicious-activity | |
| Bruteforce | AbuseIPDB | 2026-08-28 03:50:39 | 2026-09-17 10:06:21 | attacker malicious-activity | |
| SSH Attacker | AbuseIPDB | 2026-08-28 03:50:39 | 2026-09-17 10:06:21 | attacker malicious-activity | |
| Hacking | AbuseIPDB | 2026-08-28 03:53:23 | 2026-09-17 09:50:04 | attacker malicious-activity | |
| Malicious Host | AbuseIPDB | 2026-08-28 04:01:46 | 2026-09-17 06:34:57 | attacker compromised malicious-activity | |
| HTTP Attacker | AbuseIPDB | 2026-08-28 03:53:23 | 2026-09-17 04:07:23 | attacker malicious-activity | |
| Port Scanner | AbuseIPDB | 2026-08-28 03:53:23 | 2026-09-17 01:33:38 | attacker malicious-activity reconnaissance | |
| FTP Attacker | AbuseIPDB | 2026-08-28 03:53:23 | 2026-09-17 00:57:21 | attacker malicious-activity | |
| HTTP Scrapper | AbuseIPDB | 2026-08-28 03:53:23 | 2026-09-17 00:16:18 | attacker malicious-activity | |
| DDoS Attacker | AbuseIPDB | 2026-08-28 03:58:15 | 2026-09-16 22:48:58 | attacker malicious-activity | |
| Mail Spammer | AbuseIPDB | 2026-09-07 12:04:53 | 2026-09-15 21:24:18 | attacker malicious-activity | |
| Malicious Host | HoneyDB | 2026-09-15 00:00:00 | 2026-09-15 00:00:00 | attacker malicious-activity | |
| Empty reason | Blocklist.net.ua | 2026-09-04 16:32:34 | 2026-09-11 16:31:16 | attacker malicious-activity | |
| IoT Attacker | AbuseIPDB | 2026-09-08 00:00:09 | 2026-09-08 00:00:09 | iot malicious-activity | |
| Suspicious Host | AbuseIPDB | 2026-05-23 11:05:08 | 2026-05-23 11:05:08 | anomalous-activity |
Tags
abuse ssh bruteforce botWhois information
- AS name
- AS197170 TechTies Inc.
- Registrant
- TechTies Inc.
- City
- Amsterdam
- Postal code
- 1012
- Country
- NL — Netherlands 🇳🇱
- First indexed
- 2026-05-24 01:36:31
- Last updated
- 2026-10-18 01:02:04