85.217.140.53
Classification: Malicious
85.217.140.53 is a malicious IP address. Reported by 5 threat sources, last seen 2026-09-10. Network: AS209334 Modat B.V..
Current activity
- Known attacker — Seen launching attacks over the Internet.
- IoT threat — Seen attacking IoT devices.
- VPN node — Provides anonymization that can hide an attacker.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| ET CINS Active Threat Intelligence Poor Reputation IP UDP | Emerging Threats | 2026-03-07 02:12:46 | 2026-09-10 09:08:03 | attacker malicious-activity | |
| ET CINS Active Threat Intelligence Poor Reputation IP TCP | Emerging Threats | 2026-03-07 02:12:43 | 2026-09-10 09:08:01 | attacker malicious-activity | |
| Unauthorized scanning of hosts | Blocklist.net.ua | 2026-09-09 16:04:03 | 2026-09-09 16:04:03 | attacker malicious-activity | |
| Malicious Host | CIArmy | 2026-03-06 15:05:22 | 2026-09-04 20:01:16 | attacker malicious-activity | |
| Malicious Host | AbuseIPDB | 2026-03-04 17:43:07 | 2026-06-04 17:28:14 | compromised malicious-activity | |
| Mail Spammer | Blocklist.de | 2026-03-05 08:06:47 | 2026-05-11 08:04:30 | malicious-activity | |
| IMAP Attacker | Blocklist.de | 2026-05-10 07:02:56 | 2026-05-11 07:03:34 | malicious-activity | |
| Port Scanner | AbuseIPDB | 2026-03-04 13:58:40 | 2026-05-07 06:48:52 | anomalous-activity | |
| HTTP Attacker | AbuseIPDB | 2026-03-05 21:03:39 | 2026-05-07 06:08:20 | malicious-activity | |
| Hacking | AbuseIPDB | 2026-03-04 13:02:31 | 2026-05-07 04:57:27 | malicious-activity | |
| Bruteforce | AbuseIPDB | 2026-03-04 14:00:59 | 2026-05-07 01:17:21 | malicious-activity | |
| HTTP Scrapper | AbuseIPDB | 2026-03-04 18:31:33 | 2026-05-06 08:59:01 | anomalous-activity | |
| DDoS Attacker | AbuseIPDB | 2026-03-04 17:21:24 | 2026-05-06 03:20:08 | malicious-activity | |
| Known Attacker | AbuseIPDB | 2026-03-04 17:21:24 | 2026-05-06 03:20:08 | malicious-activity | |
| SSH Attacker | AbuseIPDB | 2026-03-04 14:02:36 | 2026-05-06 03:16:12 | malicious-activity | |
| Mail Spammer | AbuseIPDB | 2026-03-08 07:16:21 | 2026-05-04 10:37:52 | malicious-activity | |
| VPN | AbuseIPDB | 2026-04-12 22:39:57 | 2026-04-30 14:22:32 | anonymization | |
| Phishing | AbuseIPDB | 2026-03-28 15:00:24 | 2026-04-22 19:00:55 | malicious-activity | |
| SIP Attacker | AbuseIPDB | 2026-04-22 15:32:23 | 2026-04-22 15:32:23 | malicious-activity | |
| IoT Attacker | AbuseIPDB | 2026-04-12 13:44:34 | 2026-04-22 13:08:26 | malicious-activity | |
| IMAP Attacker | AbuseIPDB | 2026-03-08 07:16:21 | 2026-04-19 18:23:37 | malicious-activity | |
| FTP Attacker | AbuseIPDB | 2026-03-08 03:15:01 | 2026-04-19 16:38:04 | malicious-activity | |
| SQL Injection | AbuseIPDB | 2026-03-16 07:36:19 | 2026-04-16 15:41:05 | malicious-activity | |
| DNS Poisoning | AbuseIPDB | 2026-03-23 01:49:19 | 2026-03-23 01:49:19 | compromised |
Tags
mail spam attacker imap pop3 sasl bot abuseWhois information
- AS name
- AS209334 Modat B.V.
- Registrant
- Modat B.V.
- City
- Saint-Ouen
- Postal code
- 93400
- Country
- FR — France 🇫🇷
- First indexed
- 2026-03-05 08:06:47
- Last updated
- 2026-09-10 09:08:26