IOC Radar
IPMediumSignal 100/100

94.102.61.42

Location
The NetherlandsThe Netherlands
Amsterdam, North Holland
ASN
AS202425
IP Volume inc
First Seen
Mar 23, 2022
Last Seen
Feb 12, 2026
Mar 23
First Seen
1553d ago
Feb 12
Last Seen
130d ago
14
Reports
source reports
99%
Confidence
medium
Found in 14 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
99%
Signal Score
100 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

42 techniques

Network Information

CountryNLThe Netherlands
RegionAmsterdam, North Holland
ASNAS202425
OrganizationIP Volume inc

Feed Intelligence Summary

14 reports99% confidence
14
Source reports
99%
Confidence score
Category tags
active scanningapplication layer protocolauthentication abusebotnetbrute forcebrute force attackcommand and controlcommon password attackscommunication protocolcredential accesscredential bruteforcingcredential stuffingcriminal_ip-benigndata encryptiondata exfiltrationddos attackdecoy systemdenial of servicedistributed attacksfin port scanfin scanfirewall detectionftpftp brute forcehttp brute forcehttp probehttp scannerhttpsindicatorinformation gatheringinvalid login attemptskfsensor honeypotlateral movementmalicious softwaremalwaremalware capturemassive scanningnetworknetwork attacksnetwork discoverynetwork intrusion detectionnetwork mappingnetwork probingnetwork protocolnetwork reconnaissancenetwork scanningnetwork securitynetwork service scanningnull port scannull scanopen port detectionoperating system detectionos credential dumpingos fingerprintingpassword attackpassword attackspotential vulnerability probingprocess injectionprotocol exploitationreconnaissancereconnaissance activityremote accessremote servicesresearchedservice discoveryservice enumerationservice version detectionsmb brute forcessh attacksweep scansyn port scansyn scansystem discoveryt1016t1018t1021t1021.001t1021.002t1021.003t1040t1046t1053t1055t1059t1059.001t1059.004t1068t1071.001t1076t1077t1078t1087t1110t1110.001t1110.002t1110.003t1110.004t1133t1190t1486t1496t1499.002t1499.003t1563t1565t1588t1588.002t1589t1589.002t1590.001t1592t1595t1595.001t1595.002t1595.003tcp protocoltcp scanningtelnet threatthreat intelligencetsecudp port scanunauthorized accessunauthorized access attemptunauthorized access attemptsvalid accountsverified-benignweb trafficxmas port scanxmas scan

Activity Timeline

1 total obs
Feb 12Feb 12

Threat Activity Heatmap

· Peak: 2026-02-12
Less
More
Mon
Wed
Fri
Jun
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Threat ScoreHigh Risk
100
SIGNAL
Signal Score
99%
Confidence
14
Reports
First seenMar 23, 2022
Last seenFeb 12, 2026
GeolocationNL
CountryThe Netherlands
LocationAmsterdam, North Holland
ASNAS202425
OrgIP Volume inc
Coords52.3676, 4.9041

VirusTotal

Not checked

WHOIS

description
Port Scan 2024-02-02T23:50:35.221Z -> 94.102.61.42 scanned port 10554 on one of our servers

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 4 years ago · Last seen 4 months ago
Appeared in 14 threat reports