IP address
Shodan(more info)

Passive DNS

- OTX pulses
-
[67ffb7eba715b936a2c4c2a8] 2025-04-16 14:00:11.178000 | Interlock ransomware evolving under the radar
Author name: AlienVault Pulse modified: 2025-04-16 14:21:42.589000 Indicator created: 2025-04-16 14:00:12 Indicator role: None Indicator title: Indicator expiration: 2025-05-16 14:00:00
- Origin AS
- AS399629 - BLNWX
- BGP Prefix
- 64.95.10.0/24
- geo
- United States, Dallas
- 🕑 America/Chicago
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 64.95.10.0 - 64.95.11.255
- last_activity
- 2025-04-16 16:38:15.796000
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 22, 80, 3389, 8080, 8888, 31337
- Tags: self-signed, c2
- CPEs: cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:8.2p1, cpe:/a:apache:http_server:2.4.41
- ts_added
- 2025-04-16 16:38:15.804000
- ts_last_update
- 2025-04-30 16:38:20.398000
Warden event timeline
DShield event timeline
OTX pulses