IOC Radar
DomainMediumSignal 100/100

advanced-ip-scaner.com

Location
TurkeyTurkey
First Seen
Oct 22, 2022
Last Seen
Feb 19, 2026
Oct 22
First Seen
1336d ago
Feb 19
Last Seen
120d ago
11
Reports
source reports
99%
Confidence
medium
Found in 11 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
Domain Name
Malicious domain used for C2, phishing, or malware distribution.
MISP Category
Network Activity
Confidence
99%
Signal Score
100 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

32 techniques

Feed Intelligence Summary

11 reports99% confidence
11
Source reports
99%
Confidence score
Category tags
active scanningaptbotnetbrute forcebrute force attackcertcommand and controlcommunication protocolcredential accesscredential harvestingcredential stuffingdata exfiltrationdenial of servicedistributed attacksftpftp brute forcehttp brute forceindicatorinfrastructure acquisitionreconnaissancelogin attemptsmalicious softwaremalwaremanualnetworknetwork attacksnetwork probingnetwork protocolnetwork scanningpassword attacksphishing attackpossible reconnaissance activityprocess injectionreconnaissanceremote accessremote servicesresearchedsocial engineeringssh attacksyn scant1016t1021t1021.001t1040t1046t1055t1059t1071.001t1076t1083t1110t1110.001t1110.002t1110.003t1110.004t1190t1486t1496t1499.002t1499.003t1563t1565t1566.001t1566.002t1566.003t1587.001t1589t1590.001t1595t1595.001t1595.002t1595.003tcp protocoltcp scanturkeyudp scan

Activity Timeline

1 total obs
Feb 19Feb 19

Threat Activity Heatmap

· Peak: 2026-02-19
Less
More
Mon
Wed
Fri
Jun
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Intelligence SummaryAI Generated

The domain **advanced-ip-scaner.com**, originating from Turkey, has been identified as a significant indicator of compromise (IOC) associated with botnet and malware activities. First observed on October

Threat ScoreHigh Risk
100
SIGNAL
Signal Score
99%
Confidence
11
Reports
First seenOct 22, 2022
Last seenFeb 19, 2026

VirusTotal

Not checked

WHOIS

registrar
Ultahost, Inc.
creation date
2025-08-29T07:02:05
expiration date
2026-08-29T07:02:05
updated date
2025-08-29T07:02:05
name servers
NS1.ULTAHOST.COM, NS2.ULTAHOST.COM, NS3.ULTAHOST.COM, NS4.ULTAHOST.COM
country
US
emails
[email protected], [email protected], [email protected]
status
ok https://icann.org/epp#ok, ok https://www.icann.org/epp#ok

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 3 years ago · Last seen 4 months ago
Appeared in 11 threat reports