IP Profile

🖥 85.217.149.10 — Modat B.V.

Modat B.V. · AS209334 · CA · 85.217.149.0/24 · IP Blocklists · threat 0.50 · 12x · 8 sources

reputation 48.2 (ELEVATED) · first seen 1d ago · last seen 1d ago
No special flags ip medium-severity auto-tagged

Reputation

48.2
ELEVATED

Threat Score

0.50
12 sightings

ASN

AS209334
from indicator

Peers on ASN

2
malicious co-tenants

Bad neighborhood

75
85.217.149.0/24

Country

CA
from indicator

🕵 Team Cymru Scout

Team Cymru Scout not configured — add config.scout.php or set cymruscout in API Config.

🌐 Network & Geo (local-first)

IP85.217.149.10
OrganizationModat B.V.
ASNAS209334
Netname
Netblock
Reverse DNS (PTR)
CountryCA country intel

Identity resolves from the indicator's own columns first, then on demand from the local ip_ranges dataset by integer range — complete even before the bulk resolver runs.

🔥 Threat severity (AS209334 neighborhood)

High (.5-.75)
3
Avg threat 0.5 · peak 0.5 across 3 local IPs on AS209334

📁 Categories (ASN neighborhood)

🦠 Malware families (ASN neighborhood)

No local data.

🏷 Tags (ASN neighborhood)

medium-severity
3
ip
3
auto-tagged
3

🔌 Sources (ASN neighborhood)

IPsum Level 1
3
IPsum Level 2
3
IPsum Level 3
3
IPsum Level 4
3
Binary Defense
3
IPsum level 1 (all)
3
stamparm ipsum
3
IPsum level 5
2
FireHOL: ciarmy.ipset
1
ThreatView IP
1
CI Army
1
CINSscore Bad Guys
1
CINS Army list
1

🌎 Geographic spread

📅 First-seen timeline

2026-08
3

Reporting Sources for this IP (8)

IPsum Level 1IP Blocklists
IPsum Level 2IP Blocklists
IPsum Level 3IP Blocklists
IPsum Level 4IP Blocklists
Binary DefenseIP Blocklists
IPsum level 1 (all)IP Reputation
IPsum level 5IP Reputation
stamparm ipsumReputation

Passive DNS — domains resolving here (0)

No passive DNS yet. Run DNS audit.

🏠 Same /24 — 85.217.149.0/24 (75 other malicious IPs)

Other flagged IPs in the same /24 — a concentration here suggests a compromised or abused block.

IPCategoryFamilyThreat
85.217.149.45 IP Blocklists- dossier
85.217.149.25 IP Blocklists- dossier
85.217.149.26 IP Blocklists- dossier
85.217.149.60 IP Blocklists- dossier
85.217.149.62 IP Blocklists- dossier
85.217.149.67 IP Blocklists- dossier
85.217.149.69 IP Blocklists- dossier
85.217.149.70 IP Blocklists- dossier
85.217.149.255 IP Reputation- dossier
85.217.149.0 IP Blocklists- dossier
85.217.149.12 IP Blocklists- dossier
85.217.149.13 IP Blocklists- dossier
85.217.149.17 IP Blocklists- dossier
85.217.149.23 IP Blocklists- dossier
85.217.149.19 IP Blocklists- dossier
85.217.149.24 IP Blocklists- dossier
85.217.149.21 IP Blocklists- dossier
85.217.149.28 IP Blocklists- dossier
85.217.149.30 IP Blocklists- dossier
85.217.149.34 IP Blocklists- dossier
85.217.149.33 IP Blocklists- dossier
85.217.149.35 IP Blocklists- dossier
85.217.149.36 IP Blocklists- dossier
85.217.149.39 IP Blocklists- dossier
85.217.149.40 IP Blocklists- dossier
85.217.149.49 IP Blocklists- dossier
85.217.149.50 IP Blocklists- dossier
85.217.149.51 IP Blocklists- dossier
85.217.149.53 IP Blocklists- dossier
85.217.149.55 IP Blocklists- dossier
85.217.149.56 IP Blocklists- dossier
85.217.149.58 IP Blocklists- dossier
85.217.149.59 IP Blocklists- dossier
85.217.149.61 IP Blocklists- dossier
85.217.149.64 IP Blocklists- dossier
85.217.149.65 IP Blocklists- dossier
85.217.149.27 IP Blocklists- dossier
85.217.149.71 IP Blocklists- dossier
85.217.149.72 IP Blocklists- dossier
85.217.149.73 IP Blocklists- dossier
All in this subnet Bulk takedown

📡 Related indicators on AS209334 (2 total, 2 shown)

IPCategoryCountryThreat
85.217.149.17 IP BlocklistsCA dossier
85.217.149.73 IP BlocklistsCA dossier
Full ASN dossier →

Case & Takedown Links

No cases or takedowns yet.

+ Case Takedown

Enrichments

ipinfo

Stored Enrichment Data Enrich Now

Pulled 1 provider(s) just now.

1 enrichment records on file (history preserved).

📁 Case Management

+ New case from this
Identity resolves local-first: the indicator's own asn/country columns, else on-demand integer-range lookup against the local ip_ranges dataset — so ASN, org and country populate even before the bulk resolver finishes and even for IPs not yet ingested. Analytics, neighborhood and graph render entirely from the local database; live reputation providers augment only when keys and outbound access are available.
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

🔍 Lookup & Enrich

💡 Recommendations

⚙ Automation

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php