85[.]11[.]167[.]218

Posts referencing this indicator

• MyBait: Why We Lured Attackers To Encrypt Our Cloud MySQL

  Varonis

  Primary attacker IP address used to connect to the database after successful brute-force.

  2026-06-19