85.11.187[.]8IP address
Reported by 2 independent sources · first reported by Recorded Future · last reported
Last reported 17 days ago
What the reports say
2 reports, newest first · the exact sentence from each-
FortiBleed Is Still Active, Locking Organizations Out“85.11.187[.]8 – Facilitating the chain (Hashtopolis)”
-
FortiBleed Campaign Exposing Credentials for 73,932 FortiGate Systems“Insikt Group analysts identified malicious activity originating from the IP address 85.11.187[.]8, which is linked to the FortiBleed attacks, during internal analysis and associated it with AS211486 within the 85.11.187.0/24 range.”
Indicators reported together
named in the same reports- 45.154.12[.]132in 1 report
- 154.202.59[.]169in 1 report
- 103.27.186[.]156in 1 report
- 45.155.250[.]158in 1 report
- 193.8.187[.]2in 1 report
- 193.8.187[.]42in 1 report
- 104.28.155[.]27in 1 report
- 185.136.15[.]43in 1 report
- 185.136.15[.]66in 1 report
- 185.199.199[.]56in 1 report
- 193.8.186[.]33in 1 report
- 45.227.254[.]210in 1 report
- 77.91.118[.]10in 1 report
- 80.75.212[.]113in 1 report
- 87.251.64[.]13in 1 report
- 87.251.64[.]16in 1 report
- 87.251.64[.]17in 1 report
- 87.251.64[.]44in 1 report
- 66.175.220[.]111in 1 report
Copy these 19 indicators · defanged
Thanks — we review every report.