Critical Alert
Security alert: 85.11.167.212 rated 10/10 based on 268 verified incidents.
Threat profile indicates sustained malicious activity with 98% confidence rating.
More threatening than 100% of monitored IPs
IP Address
85.11.167.212
IPv4
Public
NL
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
The Netherlands
Location
TechTies Inc.
ASN 197170
268
Reports
Honeypot
Data Source
Threat Categories
Hacking
30
SSH
3
Exploited Host
1
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Behavioral Analysis
Activity Pattern:
Declining
Activity has decreased recently, suggesting remediation or threat actor migration.
First Observed
28. August 2026
Last Activity
8. September 2026
Recent (7 days)
0 incidents
Reputable Network
This IP is hosted on a network (ASN 197170) with generally good reputation. The ISP TechTies Inc. maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Continue monitoring the positive trend.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
8/10
High
Confidence Score
98%
Verified
Confidence History
30. Aug 2026 - 8. Sep 2026
98%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Hacking Exploited Host | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 85.11.167.212
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
NL
- ASN
- AS197170
- ISP
- TechTies Inc.
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 268
- First Reported
- 28 Aug 2026
- Last Reported
- 8 Sep 2026, 00:25
Comparative Analysis
How this IP compares to others in our threat intelligence database
100
%
Global Threat Ranking
This IP is more threatening than 100% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 767,076 reported IPs worldwide
Threat Level
10/10
avg: 5.8
++
Total Reports
268
avg: 9
++
Network Comparison
Compared against 313 IPs in ASN 197170
Threat Level
10/10
network avg: 8.6
+
Total Reports
268
network avg: 23
++
Geographic Comparison
Compared against 16,467 IPs in NL
Threat Level
10/10
country avg: 5.9
++
Total Reports
268
country avg: 32
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
29 Aug 2026
97 reports
Daily Average
8.9
reports/day
Most Active
Saturday
97 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
267
SSH
4
Exploited Host
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 13:00 with 13 reports
Weekly Activity
Geographic Threat Distribution
697,768 threat incidents tracked globally • Last 24h: 22,495 Logs
FEED
Top Threat Sources
-
01
United States134,745 19.3% -
02
Brazil109,407 15.7%
-
03
India75,759 10.9%
-
04
China43,092 6.2%
-
05
SC29,183 4.2%
-
06
Netherlands16,462 2.4%
-
07
Argentina16,066 2.3%
-
08
Germany15,800 2.3%
-
09
Pakistan15,189 2.2%
-
10
Colombia15,075 2.2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.1/10
Avg Threat
98%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
91.92.40.173
8/10
Confidence
100%
Reports
199
Location
BG
BG
2a0f:ca80:b00b:1dc7::5
8/10
Confidence
100%
Reports
93
Location
DE
DE
85.11.167.132
10/10
Confidence
100%
Reports
32
Location
NL
NL
93.152.221.64
8/10
Confidence
100%
Reports
31
Location
DE
DE
2a0f:ca80:b00b:28d8::5
8/10
Confidence
100%
Reports
28
Location
DE
DE
85.11.167.175
8/10
Confidence
100%
Reports
20
Location
NL
NL
93.152.221.76
8/10
Confidence
99%
Reports
31
Location
DE
DE
91.92.47.67
8/10
Confidence
99%
Reports
24
Location
NL
NL
2a0f:ca80:b00b:5ade::5
10/10
Confidence
99%
Reports
12
Location
DE
DE
91.92.40.236
10/10
Confidence
98%
Reports
17
Location
NL
NL
109.160.32.64
10/10
Confidence
98%
Reports
17
Location
BG
BG
91.92.40.14
10/10
Confidence
98%
Reports
13
Location
NL
NL
91.92.40.239
10/10
Confidence
98%
Reports
12
Location
NL
NL
45.153.34.171
8/10
Confidence
97%
Reports
33
Location
NL
NL
94.26.106.143
8/10
Confidence
97%
Reports
22
Location
DE
DE
2a0f:ca80:b00b:ce63::5
10/10
Confidence
97%
Reports
13
Location
DE
DE
91.92.40.233
10/10
Confidence
96%
Reports
137
Location
NL
NL
91.92.40.10
10/10
Confidence
96%
Reports
76
Location
BG
BG
91.92.40.12
10/10
Confidence
96%
Reports
72
Location
BG
BG
91.92.40.240
10/10
Confidence
96%
Reports
46
Location
BG
BG
IPs from the same subnet range, likely same network segment.
20
Related IPs
9.2/10
Avg Threat
91%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
85.11.167.118
8/10
Confidence
100%
Reports
288
Location
BG
BG
85.11.167.132
10/10
Confidence
100%
Reports
32
Location
NL
NL
85.11.167.175
8/10
Confidence
100%
Reports
20
Location
NL
NL
85.11.167.7
10/10
Confidence
96%
Reports
2,571
Location
BG
BG
85.11.167.127
10/10
Confidence
96%
Reports
11
Location
BG
BG
85.11.167.191
10/10
Confidence
94%
Reports
61
Location
NL
NL
85.11.167.89
10/10
Confidence
94%
Reports
21
Location
BG
BG
85.11.167.109
10/10
Confidence
94%
Reports
19
Location
BG
BG
85.11.167.16
10/10
Confidence
94%
Reports
17
Location
NL
NL
85.11.167.203
8/10
Confidence
94%
Reports
14
Location
NL
NL
85.11.167.11
10/10
Confidence
91%
Reports
2,027
Location
BG
BG
85.11.167.237
8/10
Confidence
91%
Reports
11
Location
NL
NL
85.11.167.30
7/10
Confidence
90%
Reports
207
Location
BG
BG
85.11.167.2
10/10
Confidence
90%
Reports
150
Location
BG
BG
85.11.167.85
10/10
Confidence
90%
Reports
10
Location
NL
NL
85.11.167.8
10/10
Confidence
88%
Reports
12
Location
BG
BG
85.11.167.28
8/10
Confidence
82%
Reports
10
Location
NL
NL
85.11.167.19
10/10
Confidence
81%
Reports
9
Location
BG
BG
85.11.167.108
8/10
Confidence
79%
Reports
42
Location
BG
BG
85.11.167.121
8/10
Confidence
76%
Reports
9
Location
NL
NL
IPs from the same country with similar threat profiles.
15
Related IPs
9.2/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
185.242.3.195
10/10
Confidence
100%
Reports
601
ISP
Netiface Limited
45.148.10.204
8/10
Confidence
100%
Reports
509
ISP
Techoff Srv Lim...
188.166.95.31
10/10
Confidence
100%
Reports
81
ISP
DigitalOcean, LLC
94.154.43.203
8/10
Confidence
100%
Reports
69
ISP
Storm Industrie...
213.176.16.100
10/10
Confidence
100%
Reports
54
ISP
Global Connecti...
77.239.124.102
10/10
Confidence
100%
Reports
50
ISP
Banatsync Srl
45.148.10.51
10/10
Confidence
100%
Reports
48
ISP
Techoff Srv Lim...
185.70.185.130
8/10
Confidence
100%
Reports
41
ISP
Hostkey B.v.
85.11.167.132
10/10
Confidence
100%
Reports
32
ISP
TechTies Inc.
213.111.144.104
8/10
Confidence
100%
Reports
29
ISP
SOLLUTIUM EU Sp...
45.148.10.249
10/10
Confidence
100%
Reports
27
ISP
Techoff Srv Lim...
83.83.112.125
10/10
Confidence
100%
Reports
27
ISP
Vodafone Libert...
20.224.168.82
10/10
Confidence
100%
Reports
24
ISP
Microsoft Corpo...
194.26.192.89
8/10
Confidence
100%
Reports
22
ISP
1337 Services GmbH
85.11.167.175
8/10
Confidence
100%
Reports
20
ISP
TechTies Inc.
IPs with similar threat level and confidence scores.
15
Related IPs
9/10
Avg Threat
98%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
87.251.64.146
10/10
Confidence
98%
Reports
4,012
Location
US
US
213.209.159.236
10/10
Confidence
98%
Reports
1,041
Location
TW
TW
193.32.162.35
10/10
Confidence
98%
Reports
992
Location
RO
RO
213.209.159.11
10/10
Confidence
98%
Reports
970
Location
DE
DE
213.209.159.238
10/10
Confidence
98%
Reports
963
Location
TW
TW
213.209.159.226
8/10
Confidence
98%
Reports
960
Location
TW
TW
213.209.159.241
8/10
Confidence
98%
Reports
928
Location
TW
TW
192.253.248.229
7/10
Confidence
98%
Reports
854
Location
IR
IR
89.42.231.200
8/10
Confidence
98%
Reports
808
Location
NL
NL
208.109.188.137
8/10
Confidence
98%
Reports
560
Location
US
US
213.209.159.108
10/10
Confidence
98%
Reports
473
Location
TW
TW
103.189.234.69
8/10
Confidence
98%
Reports
445
Location
ID
ID
20.89.17.172
10/10
Confidence
98%
Reports
400
Location
JP
JP
94.154.43.254
8/10
Confidence
98%
Reports
245
Location
NL
NL
146.148.26.145
10/10
Confidence
98%
Reports
229
Location
BE
BE
Analyzed high-risk IP addresses
- 51.68.207.118
- 66.132.172.175
- 66.132.172.165
- 66.132.172.164
- 66.132.172.172
- 66.132.172.174
- 66.132.172.173
- 66.132.172.170
- 207.90.244.11
- 176.65.148.84
- 193.32.162.28
- 80.94.92.183
- 18.116.101.220
- 192.161.49.2
- 18.218.118.203
- 3.129.187.38
- 85.215.239.226
- 46.151.178.13
- 45.198.224.18
- 87.251.64.146
- 45.205.1.5
- 5.61.209.224
- 5.187.35.26
- 3.130.168.2