Public threat report powered by InfinitSec honeypot and firewall sensors. Compare community reports on AbuseIPDB or sign in for full pivot tools (ranges, ASN, country, raw evidence).
85/ 100
Critical Risk

🇧🇬 IP Report: 85.11.167.132

12 events · 8 firewall · 4 honeypot · Confidence 50%

Country🇧🇬 BG
ISP / ASN
CitySofia
First SeenAug 30, 2026
Last SeenSep 10, 2026, 1:07 AM
Attack Categories
port_scanhoneypot_interactionssh_bruteforcecommand_execution
Targeted Ports
2222 ×48080 ×48081 ×285 ×18000 ×1
Event Types
closed_port_probe ×8honeypot_interaction ×2command_execution ×1ssh_bruteforce ×1

Recent Security Events

TimeSourceTypeProtoPort
Sep 10, 2026, 1:07 AM UFW closed_port_probe TCP 8000
Sep 9, 2026, 10:31 AM other honeypot_interaction TCP 2222
Sep 9, 2026, 10:30 AM other command_execution TCP 2222
Sep 9, 2026, 10:30 AM other ssh_bruteforce TCP 2222
Sep 9, 2026, 10:30 AM other honeypot_interaction TCP 2222
Sep 8, 2026, 4:08 PM UFW closed_port_probe TCP 8080
Sep 4, 2026, 8:22 AM UFW closed_port_probe TCP 8080
Sep 3, 2026, 8:49 AM UFW closed_port_probe TCP 8081
Sep 2, 2026, 1:29 PM UFW closed_port_probe TCP 8081
Sep 1, 2026, 6:32 PM UFW closed_port_probe TCP 8080
Aug 31, 2026, 2:46 AM UFW closed_port_probe TCP 85
Aug 30, 2026, 7:26 PM UFW closed_port_probe TCP 8080