IPMediumSignal 63/100
45.81.23.7
Location
NetherlandsAmsterdam, North Holland
ASN
AS49870
Alsycon B.V
First Seen
Nov 25, 2024
Last Seen
Jun 15, 2026
Found in 18 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
63%
Signal Score
63 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Network Information
CountryNetherlands
NetherlandsRegionAmsterdam, North Holland
ASNAS49870
OrganizationAlsycon B.V
Feed Intelligence Summary
18 reports63% confidence
18
Source reports
63%
Confidence score
Category tags
abuseaccess controlaccount compromiseactive scanactive scanningadbadb_protocoladbhoney honeypotalienvault_ransomwareand exploitation attemptsandroidapacheapplication layer protocolaptasiaattackaustraliaauthentication abuseauthentication attackautomated attacksbad reputationbad web botblog spambotnetbotnet activitybrute forcebrute force attackbrute force attackerbrute force attemptbrute force attemptsbrute-forcebrute_forcebrute_force_attackbruteforcec2canadacisco devicecisco device targetingcisco exploitation attemptscitrix exploitation attemptcitrix securitycloud infrastructurecloud infrastructure attackcloud servicescommand & controlcommand and controlcommunication protocolcowriecowrie honeypotcredential accesscredential harvestingcredential stuffingcredential_accesscredential_guessingcredential_stuffingcvedata encryptiondata exfiltrationdata store exposuredatabase securityddosddos attackdecoy systemdenial of servicedevice managementdigital oceandionaeadionaea honeypotdistributed attacksdownldrdropperelasticpot honeypotelasticsearch monitoringencryptionenterprise networkingenterprise securityeuropeexploitexploitationexploitation activityexploitation_attemptexploited hostexploitsfattfrancefraud voipftpftp brute forceftp brute-forceftp_attackftp_protocolhackinghoneytrap datahoneytrap honeypothttp brute forcehttp scannerhttp_protocolhttpsidentity & access exploitationindicatorinjection activityintrusion detectioniot securityiot targetedipp_protocolipphoney honeypotipv4japanlamplamp stack targetinglateral movementmailoney honeypotmalicious activitymalicious ipmalicious softwaremalicious trafficmalicious_activitymalicious_trafficmalwaremalware behaviourmalware capturemalware_distribution_attemptmeshmiraimobile threatmssqlnetherlandsnetworknetwork devicesnetwork infrastructurenetwork intrusion attemptnetwork intrusion attemptsnetwork probingnetwork protocolnetwork reconnaissancenetwork scanningnetwork securitynetwork service scanningnetwork traffic analysisnetwork_intrusionnetwork_reconnaissancenetwork_services_attacknjwxinlnorth americaoceaniaopenctip0fpassword attackpassword attackspassword crackingphishingphishing attackphishing trapportscanprocess injectionprotocol exploitationransomwarerdp_attackreconnaissancereconnaissance_activityremote accessremote servicesresearchresearchedresource hijackingscams & fraudscanscannerscannersscanning activitysecurity policysensor-taggedsentrypeer botnetsentrypeer detectionservice scansftp attacksftp attackssftp_protocolsipsip attackssip brute forcesip scanningsip_protocolsmb_attacksmb_protocolsmtpsmtp_protocolsocial engineeringsocradar honeypotspamsql_attacksshssh attackssh attacksssh monitoringssh-brutessh_attackssh_protocolt-pott1021t1021.001t1021.002t1021.004t1040t1041t1046t1055t1059t1059.004t1068t1071.001t1072t1076t1077t1078t1078.004t1110t1110.001t1110.002t1110.003t1110.004t1133t1189t1190t1203t1204.002t1486t1496t1499.001t1499.002t1499.003t1563t1565t1566t1566.001t1566.002t1566.003t1566.004t1590t1595t1595.001t1595.002t1595.003tannertargeting databasetcptcp scantelecommunicationstelnet threattelnet_attacktelnet_protocolthreat actorthreat detectionthreat intelligencethreat intelligence feedthreat preventiontokyotor nodetorontotpottpotceudp scanunauthorized access attemptsunited statesvoipvoip attackvoip securityvulnerability scanvultrwannawannacryweb app attackweb application attackweb application attacksweb attacksweb exploitationweb spamweb trafficweb_application_attack
Activity Timeline
Jun 15Jun 15
Threat Activity Heatmap
· Peak: 2026-06-15LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Threat ScoreMedium Risk
63
SIGNAL
Signal Score
63%
Confidence
18
Reports
First seenNov 25, 2024
Last seenJun 15, 2026
GeolocationNL
CountryNetherlands
LocationAmsterdam, North Holland
ASNAS49870
OrgAlsycon B.V
Coords52.4951, 4.7971
VirusTotal
Not checked
WHOIS
- description
- IPv4 hosts detected attempting to brute force SIP on DigitalOcean London (UK) honeypot
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
mediumFirst detected 1 year ago · Last seen 9 days ago
Appeared in 18 threat reports