IP Profile

🖥 85.217.149.73 — Modat B.V.

Modat B.V. · AS209334 · CA · 85.217.149.0/24 · IP Blocklists · threat 0.50 · 18x · 12 sources

reputation 49.2 (ELEVATED) · first seen 2d ago · last seen 2d ago
No special flags ip medium-severity auto-tagged

Reputation

49.2
ELEVATED

Threat Score

0.50
18 sightings

ASN

AS209334
from indicator

Peers on ASN

2
malicious co-tenants

Bad neighborhood

75
85.217.149.0/24

Country

CA
from indicator

🕵 Team Cymru Scout

Team Cymru Scout not configured — add config.scout.php or set cymruscout in API Config.

🌐 Network & Geo (local-first)

IP85.217.149.73
OrganizationModat B.V.
ASNAS209334
Netname
Netblock
Reverse DNS (PTR)
CountryCA country intel

Identity resolves from the indicator's own columns first, then on demand from the local ip_ranges dataset by integer range — complete even before the bulk resolver runs.

🔥 Threat severity (AS209334 neighborhood)

High (.5-.75)
3
Avg threat 0.5 · peak 0.5 across 3 local IPs on AS209334

📁 Categories (ASN neighborhood)

🦠 Malware families (ASN neighborhood)

No local data.

🏷 Tags (ASN neighborhood)

ip
3
auto-tagged
3
medium-severity
3

🔌 Sources (ASN neighborhood)

IPsum Level 1
3
IPsum Level 2
3
IPsum Level 3
3
IPsum Level 4
3
Binary Defense
3
IPsum level 1 (all)
3
stamparm ipsum
3
IPsum level 5
2
FireHOL: ciarmy.ipset
1
ThreatView IP
1
CI Army
1
CINSscore Bad Guys
1
CINS Army list
1

🌎 Geographic spread

📅 First-seen timeline

2026-08
3

Reporting Sources for this IP (12)

FireHOL: ciarmy.ipsetIP Blocklists
ThreatView IPIP Blocklists
IPsum Level 1IP Blocklists
IPsum Level 2IP Blocklists
IPsum Level 3IP Blocklists
IPsum Level 4IP Blocklists
CI ArmyIP Blocklists
Binary DefenseIP Blocklists
CINSscore Bad GuysIP Reputation
IPsum level 1 (all)IP Reputation
CINS Army listScanning
stamparm ipsumReputation

Passive DNS — domains resolving here (0)

No passive DNS yet. Run DNS audit.

🏠 Same /24 — 85.217.149.0/24 (75 other malicious IPs)

Other flagged IPs in the same /24 — a concentration here suggests a compromised or abused block.

IPCategoryFamilyThreat
85.217.149.45 IP Blocklists- dossier
85.217.149.25 IP Blocklists- dossier
85.217.149.26 IP Blocklists- dossier
85.217.149.60 IP Blocklists- dossier
85.217.149.62 IP Blocklists- dossier
85.217.149.67 IP Blocklists- dossier
85.217.149.69 IP Blocklists- dossier
85.217.149.70 IP Blocklists- dossier
85.217.149.255 IP Reputation- dossier
85.217.149.0 IP Blocklists- dossier
85.217.149.10 IP Blocklists- dossier
85.217.149.12 IP Blocklists- dossier
85.217.149.13 IP Blocklists- dossier
85.217.149.17 IP Blocklists- dossier
85.217.149.23 IP Blocklists- dossier
85.217.149.19 IP Blocklists- dossier
85.217.149.24 IP Blocklists- dossier
85.217.149.21 IP Blocklists- dossier
85.217.149.28 IP Blocklists- dossier
85.217.149.30 IP Blocklists- dossier
85.217.149.34 IP Blocklists- dossier
85.217.149.33 IP Blocklists- dossier
85.217.149.35 IP Blocklists- dossier
85.217.149.36 IP Blocklists- dossier
85.217.149.39 IP Blocklists- dossier
85.217.149.40 IP Blocklists- dossier
85.217.149.49 IP Blocklists- dossier
85.217.149.50 IP Blocklists- dossier
85.217.149.51 IP Blocklists- dossier
85.217.149.53 IP Blocklists- dossier
85.217.149.55 IP Blocklists- dossier
85.217.149.56 IP Blocklists- dossier
85.217.149.58 IP Blocklists- dossier
85.217.149.59 IP Blocklists- dossier
85.217.149.61 IP Blocklists- dossier
85.217.149.64 IP Blocklists- dossier
85.217.149.65 IP Blocklists- dossier
85.217.149.27 IP Blocklists- dossier
85.217.149.71 IP Blocklists- dossier
85.217.149.72 IP Blocklists- dossier
All in this subnet Bulk takedown

📡 Related indicators on AS209334 (2 total, 2 shown)

IPCategoryCountryThreat
85.217.149.17 IP BlocklistsCA dossier
85.217.149.10 IP BlocklistsCA dossier
Full ASN dossier →

Case & Takedown Links

No cases or takedowns yet.

+ Case Takedown

Enrichments

ipinfo

Stored Enrichment Data Enrich Now

1 enrichment records on file (history preserved).

📁 Case Management

+ New case from this
Identity resolves local-first: the indicator's own asn/country columns, else on-demand integer-range lookup against the local ip_ranges dataset — so ASN, org and country populate even before the bulk resolver finishes and even for IPs not yet ingested. Analytics, neighborhood and graph render entirely from the local database; live reputation providers augment only when keys and outbound access are available.
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

🔍 Lookup & Enrich

💡 Recommendations

⚙ Automation

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php