94.102.49.193📋 Copy

IP Intelligence Briefing: 94.102.49.193

Date: 2026-06-01

---

**1. Core Profile**

• Risk Score: 80 (High Risk)
• Ownership: Registered to IPV (ASN 202425) under RIPE.
• Geolocation: Amsterdam, North Holland, Netherlands (52.13°N, 5.29°E).
• Network Role: Single-service host running SSH (port 22) with OpenSSH_7.6p1.
• Threat Indicators: No active malware, phishing, or exploit activity detected.

---

**2. Historical Observations (Last 30 Days)**

• Threat Listings:

- Listed in 4/8 threat feeds (high severity) on 2026-06-01.

- No persistent malicious activity or campaign associations.

• Service Activity:

- SSH service detected with banner "SSH-2.0-OpenSSH_7.6p1" on 2026-05-30.

- No HTTP/TLS services or banners observed.

---

**3. Network Relationships**

• DNS Associations:

- Linked to cloud.census.shodan.io (PTR record).

• Subnet: Part of 94.102.49.0/24 (NET-4-49).
• Neighboring IPs (94.102.49.0/24):

- 94.102.49.125: Low risk (score 0).

- 94.102.49.155: Medium risk (score 70).

---

**4. Subnet Analysis**

• Abuse Density: 0 (clean).
• Neighbor Risk Distribution: 1 low-risk, 1 medium-risk IP.
• Stability: Subnet shows no recent route changes (stable).

---

**5. Recommendations**

• Monitor SSH Activity: Investigate the SSH service for unauthorized access attempts.
• Track Threat Feed Listings: Monitor the IP for reappearances in threat feeds.
• Subnet-Level Monitoring: Focus on 94.102.49.155 due to higher risk score.
• DNS Validation: Verify "cloud.census.shodan.io" for potential spoofing or misconfiguration.

---

End of Briefing

*Generated via IPDebrief threat intelligence analysis.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.