Substantial Risk
Threat level 8/10 for 85.217.149.17 based on 230 documented incidents.
Consistent suspicious behavior patterns. 73% confidence rating.
More threatening than 90% of monitored IPs
IP Address
85.217.149.17
IPv4
Public
BG
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
BG
Location
NetIX Communications JSC
ASN 52055
230
Reports
Honeypot
Data Source
Threat Categories
Hacking
29
Email Spam
1
Exploited Host
1
IoT Targeted
1
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 2 weeks indicates persistent threat actor operations.
First Observed
6. September 2026
Last Activity
25. September 2026
Recent (7 days)
4 incidents
Reputable Network
This IP is hosted on a network (ASN 52055) with generally good reputation. The ISP NetIX Communications JSC maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Configure firewall rules and intrusion detection alerts.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
2/10
Very Low
Confidence Score
73%
High Confidence
Confidence History
10. Aug 2026 - 25. Sep 2026
73%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Exploited Host Email Spam | Honeypot x2 | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| IoT Targeted Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 85.217.149.17
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
BG
- ASN
- AS52055
- ISP
- NetIX Communications JSC
DNS Information
- Reverse DNS
- o018.scanner.modat.io
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 230
- First Reported
- 10 Jan 2026
- Last Reported
- 25 Sep 2026, 03:11
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS52055
NetIX Communications JSC
BG
Network Threat Assessment
0/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
3
Total IPs Monitored
110
Total Reports
36.7
Reports per IP
Network Context
This IP address belongs to NetIX Communications JSC (AS52055), which manages 3 IP addresses in our monitoring system. Out of these, 110 have been reported for suspicious activities, resulting in a network-wide threat level of 0/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
90
%
Global Threat Ranking
This IP is more threatening than 90% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 806,402 reported IPs worldwide
Threat Level
8/10
avg: 6.3
+
Total Reports
230
avg: 9
++
Network Comparison
Compared against 3 IPs in ASN 52055
Threat Level
8/10
network avg: 8.7
=
Total Reports
230
network avg: 258
=
Network NetIX Communications JSC has overall threat level 0/10
Geographic Comparison
Compared against 2,204 IPs in BG
Threat Level
8/10
country avg: 6.5
+
Total Reports
230
country avg: 57
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
24 Sep 2026
2 reports
Daily Average
0.3
reports/day
Most Active
Sunday
39 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
225
Exploited Host
5
IoT Targeted
1
Email Spam
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 05:00 with 18 reports
Weekly Activity
Geographic Threat Distribution
733,290 threat incidents tracked globally • Last 24h: 28,733 Logs
FEED
Top Threat Sources
-
01
United States143,209 19.5% -
02
Brazil110,734 15.1%
-
03
India82,112 11.2%
-
04
China44,742 6.1%
-
05
SC29,233 4%
-
06
Germany17,479 2.4%
-
07
Netherlands17,464 2.4%
-
08
Pakistan16,634 2.3%
-
09
Argentina16,189 2.2%
-
10
Colombia15,132 2.1%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
2
Related IPs
9/10
Avg Threat
73%
Avg Confidence
2
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same subnet range, likely same network segment.
20
Related IPs
9.4/10
Avg Threat
74%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
85.217.149.28
8/10
Confidence
76%
Reports
208
Location
CA
CA
85.217.149.2
10/10
Confidence
75%
Reports
218
Location
CA
CA
85.217.149.5
8/10
Confidence
74%
Reports
262
Location
CA
CA
85.217.149.8
10/10
Confidence
74%
Reports
246
Location
CA
CA
85.217.149.16
10/10
Confidence
74%
Reports
231
Location
CA
CA
85.217.149.33
10/10
Confidence
74%
Reports
230
Location
CA
CA
85.217.149.24
8/10
Confidence
74%
Reports
226
Location
BG
BG
85.217.149.11
8/10
Confidence
74%
Reports
223
Location
CA
CA
85.217.149.18
10/10
Confidence
74%
Reports
220
Location
CA
CA
85.217.149.10
10/10
Confidence
74%
Reports
216
Location
CA
CA
85.217.149.32
8/10
Confidence
74%
Reports
209
Location
CA
CA
85.217.149.3
10/10
Confidence
74%
Reports
209
Location
CA
CA
85.217.149.0
10/10
Confidence
74%
Reports
208
Location
CA
CA
85.217.149.60
10/10
Confidence
74%
Reports
180
Location
CA
CA
85.217.149.46
10/10
Confidence
74%
Reports
148
Location
CA
CA
85.217.149.7
8/10
Confidence
73%
Reports
263
Location
CA
CA
85.217.149.6
10/10
Confidence
73%
Reports
262
Location
CA
CA
85.217.149.19
10/10
Confidence
73%
Reports
243
Location
CA
CA
85.217.149.30
10/10
Confidence
73%
Reports
216
Location
CA
CA
85.217.149.34
10/10
Confidence
73%
Reports
211
Location
CA
CA
IPs from the same country with similar threat profiles.
15
Related IPs
9.6/10
Avg Threat
97%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
195.178.110.227
10/10
Confidence
100%
Reports
402
ISP
Techoff Srv Lim...
46.10.201.90
10/10
Confidence
100%
Reports
65
ISP
Vivacom Bulgari...
46.10.201.91
10/10
Confidence
100%
Reports
65
ISP
Vivacom Bulgari...
195.178.110.50
10/10
Confidence
100%
Reports
29
ISP
Techoff Srv Lim...
109.160.32.64
10/10
Confidence
100%
Reports
18
ISP
TechTies Inc.
185.218.86.24
8/10
Confidence
100%
Reports
13
ISP
Tc Datacenter L...
217.174.50.183
8/10
Confidence
99%
Reports
16
ISP
Comnet Bulgaria...
195.178.110.217
10/10
Confidence
97%
Reports
413
ISP
Techoff Srv Lim...
45.139.104.172
8/10
Confidence
97%
Reports
10
ISP
49.3 Networking...
195.178.110.228
10/10
Confidence
96%
Reports
368
ISP
Techoff Srv Lim...
195.178.110.232
10/10
Confidence
96%
Reports
308
ISP
Techoff Srv Lim...
195.178.110.247
10/10
Confidence
95%
Reports
18
ISP
Techoff Srv Lim...
94.26.68.90
10/10
Confidence
94%
Reports
475
ISP
MEVSPACE sp. z ...
79.124.56.242
10/10
Confidence
94%
Reports
254
ISP
Tamatiya EOOD
93.123.109.6
10/10
Confidence
94%
Reports
178
ISP
Techoff Srv Lim...
IPs with similar threat level and confidence scores.
15
Related IPs
8.4/10
Avg Threat
73%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
207.90.244.25
8/10
Confidence
73%
Reports
20,360
Location
US
US
207.90.244.21
8/10
Confidence
73%
Reports
18,724
Location
US
US
207.90.244.2
8/10
Confidence
73%
Reports
18,596
Location
US
US
207.90.244.3
8/10
Confidence
73%
Reports
18,471
Location
US
US
207.90.244.22
8/10
Confidence
73%
Reports
18,374
Location
US
US
146.190.149.252
8/10
Confidence
73%
Reports
15,697
Location
US
US
147.182.225.86
8/10
Confidence
73%
Reports
14,151
Location
US
US
147.182.241.81
8/10
Confidence
73%
Reports
12,420
Location
US
US
147.182.202.179
8/10
Confidence
73%
Reports
12,070
Location
US
US
143.198.238.87
8/10
Confidence
73%
Reports
11,612
Location
US
US
143.198.225.197
8/10
Confidence
73%
Reports
10,939
Location
US
US
94.154.35.215
10/10
Confidence
73%
Reports
10,281
Location
NL
NL
165.227.172.206
8/10
Confidence
73%
Reports
7,670
Location
DE
DE
176.65.149.27
10/10
Confidence
73%
Reports
6,410
Location
NL
NL
176.65.149.30
10/10
Confidence
73%
Reports
6,274
Location
NL
NL