IOC Radar
IPMediumSignal 38/100

149.102.243.23

Location
United StatesUnited States
Los Angeles, California
ASN
AS212238
Datacamp Limited
First Seen
Jan 23, 2025
Last Seen
Jun 12, 2026
Jan 23
First Seen
518d ago
Jun 12
Last Seen
14d ago
11
Reports
source reports
38%
Confidence
medium
Found in 11 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
38%
Signal Score
38 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

39 techniques

Network Information

CountryUSUnited States
RegionLos Angeles, California
ASNAS212238
OrganizationDatacamp Limited

IP Category

⊕
VPN
VPN exit node

Feed Intelligence Summary

11 reports38% confidence
11
Source reports
38%
Confidence score
Category tags
active scanactive scanningbad web botbotnetbotnet activitybrute forcebrute force attackbrute-forcecommand and controlcredential accesscredential stuffingdata exfiltrationdata store exposureddosddos attackdenial of servicedistributed attackseuropeexploitation activityfinlandfrancefraud ordersftp brute forcegermanyhackinghoneynet connecthttp brute forceidentity & access exploitationimapimap attackinjection activityit infrastructurelateral movementlogin attemptlogin attemptsmalicious softwaremalwarenetworknetwork enumerationnetwork intrusionnetwork scanningnetwork securitynetwork traffic analysisnorth americapassword attackpassword attacksphishingpolandprocess injectionprotocol exploitationproxyreconnaissanceremote accessremote servicesresearchedscams & fraudscannerscanning activitysmb brute forcesmtpsmtp attackersmtp brute forcesoftware developmentspamsshssh attackt1021t1021.001t1021.002t1021.003t1021.004t1021.005t1040t1046t1055t1059t1059.001t1059.003t1059.004t1068t1071.001t1076t1078t1078.001t1105t1110t1110.001t1110.002t1110.003t1110.004t1190t1203t1486t1496t1497.001t1499.001t1499.002t1499.003t1563t1565t1592t1595t1595.001t1595.002t1595.003tcp scantelnet threatudp scanunauthorized access attemptunited statesusvpnvulnerability scanweb app attackweb application attackweb exploitation

Activity Timeline

1 total obs
Jun 12Jun 12

Threat Activity Heatmap

· Peak: 2026-06-12
Less
More
Mon
Wed
Fri
Jun
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Threat ScoreLow Risk
38
SIGNAL
Signal Score
38%
Confidence
11
Reports
First seenJan 23, 2025
Last seenJun 12, 2026
GeolocationUS
CountryUnited States
LocationLos Angeles, California
ASNAS212238
OrgDatacamp Limited
Coords37.7510, -97.8220
VPN

VirusTotal

Not checked

WHOIS

raw
Cogent Communications, LLC COGENT-149-102-16 (NET-149-102-0-0-1) 149.102.0.0 - 149.102.255.255 CDN77 DATACAMP-CGNT-NET-4 (NET-149-102-224-0-1) 149.102.224.0 - 149.102.255.255 Datacamp Limited CDNEXT-NYC-CG (NET-149-102-243-0-1) 149.102.243.0 - 149.102.243.255
references
https://malware-filter.gitlab.io/malware-filter/botnet-filter.txt

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 1 year ago · Last seen 14 days ago
Appeared in 11 threat reports