IP address


--85.8.149.156
Shodan(more info)
Passive DNS
Tags:

Threat categories

TLRoleCategoryDetails
25 dst cc malware_family: elf.inc, win.netc

Origin AS
AS25693 - VIRMACH
BGP Prefix
85.8.149.0/24
geo
United States, Los Angeles
🕑 America/Los_Angeles
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
85.8.148.0 - 85.8.151.255
last_activity
2026-08-12 00:00:00
reserved_range
0
Shodan's InternetDB
Open ports: 444, 3389
Tags: self-signed, c2
CPEs:
ts_added
2026-09-13 08:30:37.244000
ts_last_update
2026-09-13 16:11:44.550000

Warden event timeline

DShield event timeline