IPMediumSignal 52/100
173.255.221.86
Location
United StatesFremont, California
ASN
AS63949
Linode
First Seen
Sep 20, 2024
Last Seen
Jun 8, 2026
Found in 19 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
52%
Signal Score
52 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Network Information
CountryUnited States
United StatesRegionFremont, California
ASNAS63949
OrganizationLinode
Feed Intelligence Summary
19 reports52% confidence
19
Source reports
52%
Confidence score
Category tags
abuseactive scanactive scanningadbhoney honeypotapacheapache attackeraptattackaustraliaautomated-attackbad reputationbad web botblog spambotnetbotnet activitybrute forcebrute force attackbrute force attemptsbrute-forcecanadacisco devicecisco device targetingcisco exploitation attemptscommand and controlcommand injectioncommunication protocolconpot honeypotcowrie honeypotcowrie ssh honeypotcredential accesscredential harvestingcredential stuffingcredential-stuffingdata exfiltrationdata store exposuredatabase attackdatabase attacksdatabase securityddosddos attackdecoy systemdenial of servicedevice managementdigital oceandionaea honeypotdnsdns attackenterprise networkingexploitexploitationexploitation activityexploited hostfattftpftp brute forcehackinghoneytrap datahoneytrap honeypothttp brute forcehttp scannerhttp scanningics securityidentity & access exploitationindicatorindustrial control systemsinformation technologyinitial accessinjection activityinjection attacksintrusion detectioniociot securityiot targetediot/ics attackit infrastructurelamplamp server attacklamp stack attacklamp stack targetinglateral movementlinux-server-attackmailoney honeypotmalicious activitymalicious payload detectionmalicious softwaremalicious-login-attemptsmalwaremalware behaviourmalware capturemalware delivery attemptnetworknetwork attacksnetwork infrastructurenetwork intrusion attemptsnetwork probingnetwork protocolnetwork scanningnetwork securitynetwork traffic analysisnorth americaoceaniaopenctip0fpassword attackpassword attacksphishingphishing attackphishing trapport-scanningpossible botnet activitypossible exploit attemptpossible mirai variantpotential exploit activityprocess injectionprotocol exploitationprotocol-abuseransomwarereconnaissanceremote accessremote servicesresearchedresource hijackingscannerscannersscanning activityscripting attackssensor-taggedsentrypeer botnetsentrypeer detectionservice scansftp activitysftp attacksftp-attacksip scanningsmtpsmtp brute forcesocial engineeringsoftware developmentspamssh attackssh monitoringssh-brute-forcet1021t1021.001t1021.004t1040t1041t1046t1055t1059t1059.003t1059.004t1059.007t1071t1071.001t1076t1078t1110t1110.001t1110.002t1110.003t1110.004t1133t1189t1190t1203t1204.002t1486t1496t1499.001t1499.002t1499.003t1563t1565t1566.001t1566.002t1566.003t1595t1595.001t1595.002t1595.003tannertargeting databasetcp protocoltcp scantelecommunicationstelnet threattelnet-brute-forcethreat actorthreat detectionthreat intelligencetor nodetpotudp port scanudp scanunauthorized accessunauthorized loginunauthorized-access-attemptunited statesunknown threat actorusvoipvoip attackvulnerability scanweb app attackweb application attackweb attackweb attacksweb exploitationweb spamweb trafficweb-application-attack
Activity Timeline
Jun 8Jun 8
Threat Activity Heatmap
LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
1
Minimal
30d
1
Minimal
3mo
1
Minimal
Threat ScoreMedium Risk
52
SIGNAL
Signal Score
52%
Confidence
19
Reports
First seenSep 20, 2024
Last seenJun 8, 2026
GeolocationUS
CountryUnited States
LocationFremont, California
ASNAS63949
OrgLinode
Coords37.5625, -122.0004
VirusTotal
Not checked
WHOIS
- raw
- Akamai Technologies, Inc. LINODE-US (NET-173-255-192-0-1) 173.255.192.0 - 173.255.255.255 Linode LINODE (NET-173-255-192-0-2) 173.255.192.0 - 173.255.255.255
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
mediumFirst detected 1 year ago · Last seen 3 days ago
Appeared in 19 threat reports