85.217.149.68
Classification: Malicious
85.217.149.68 is a malicious IP address. Reported by 4 threat sources, last seen 2026-09-02. Network: AS209334 Modat B.V..
Current activity
- Known attacker — Seen launching attacks over the Internet.
- IoT threat — Seen attacking IoT devices.
- Open proxy — Provides anonymization that can hide an attacker.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Malicious Host | CIArmy | 2026-03-05 15:05:53 | 2026-09-02 20:01:39 | attacker malicious-activity | |
| ET CINS Active Threat Intelligence Poor Reputation IP UDP | Emerging Threats | 2026-03-06 02:12:38 | 2026-08-28 09:08:34 | malicious-activity | |
| ET CINS Active Threat Intelligence Poor Reputation IP TCP | Emerging Threats | 2026-03-06 02:12:35 | 2026-08-27 09:07:48 | malicious-activity | |
| Malicious Host | AbuseIPDB | 2026-03-04 13:50:12 | 2026-06-06 22:52:57 | compromised malicious-activity | |
| Cobalt Strike | ThreatFox Abuse.ch | 2026-05-15 08:23:14 | 2026-05-15 08:25:12 | malicious-activity | |
| Port Scanner | AbuseIPDB | 2026-03-04 13:50:02 | 2026-05-05 12:53:52 | anomalous-activity | |
| Bruteforce | AbuseIPDB | 2026-03-04 14:15:42 | 2026-05-05 10:50:40 | malicious-activity | |
| Hacking | AbuseIPDB | 2026-03-04 13:50:12 | 2026-05-05 04:41:10 | malicious-activity | |
| HTTP Scrapper | AbuseIPDB | 2026-03-09 11:37:02 | 2026-05-04 23:57:48 | anomalous-activity | |
| DNS Compromise | AbuseIPDB | 2026-05-04 23:56:05 | 2026-05-04 23:56:05 | compromised | |
| SSH Attacker | AbuseIPDB | 2026-03-04 14:15:42 | 2026-05-04 11:17:45 | malicious-activity | |
| HTTP Attacker | AbuseIPDB | 2026-03-05 02:01:56 | 2026-05-04 01:02:26 | malicious-activity | |
| FTP Attacker | AbuseIPDB | 2026-04-28 18:37:10 | 2026-05-02 06:00:54 | malicious-activity | |
| IoT Attacker | AbuseIPDB | 2026-03-28 19:52:56 | 2026-04-23 18:41:11 | malicious-activity | |
| Mail Spammer | AbuseIPDB | 2026-03-05 03:40:18 | 2026-04-19 06:44:20 | malicious-activity | |
| Proxy | AbuseIPDB | 2026-04-10 23:26:46 | 2026-04-10 23:26:46 | anonymization | |
| DDoS Attacker | AbuseIPDB | 2026-03-28 19:52:56 | 2026-03-28 19:52:56 | malicious-activity |
Tags
port:443 agentemis c2 cobeacon beacon batch wraith-apex cobaltstrikeWhois information
- AS name
- AS209334 Modat B.V.
- Registrant
- Modat B.V.
- City
- Beauharnois
- Postal code
- J6N 1W8
- Country
- CA — Canada 🇨🇦
- First indexed
- 2026-03-05 00:06:16
- Last updated
- 2026-09-02 20:01:39