IPMediumSignal 45/100
45.79.0.93
Location
United StatesRichardson, TX
ASN
AS63949
Linode
First Seen
Mar 24, 2025
Last Seen
Apr 19, 2026
Found in 21 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
45%
Signal Score
45 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Network Information
CountryUnited States
United StatesRegionRichardson, TX
ASNAS63949
OrganizationLinode
Feed Intelligence Summary
21 reports45% confidence
21
Source reports
45%
Confidence score
Category tags
abuseactive scanactive scanningattackbad reputationbankingbinaryedge-benignbotnetbotnet activitybrute forcebrute force attackbrute force attemptbrute force attemptsbruteforcec2 communicationc2 serverciscocisco devicecommand & controlcommand and controlcommunication protocolcompromised credentialscompromised hostcompromised hostscowriecowrie honeypotcredential accesscredential harvestingcredential stuffingcredit card servicesdata encryptiondata exfiltrationdata store exposuredata theftdatabase attackddosddos attackdecoy systemdenial of servicedevice managementdionaeadionaea honeypotdistributed attacksemailencryptionenterprise networkingeuropeexploitation activityexploited hostfinancefinance and insurancefinancial servicesfinancial technologyfinlandfranceftpftp brute forcegermanyhackinghoneynet connecthoneytrap honeypothttp brute forcehttp scanninghttps scanningidentity & access exploitationinjection activityiockfsensor honeypotlamplamp attacklamp stack attacklateral movementlogin attemptmailoney honeypotmalicious activitymalicious network activitymalicious softwaremalwaremalware behaviourmalware capturemalware distributionnetworknetwork enumerationnetwork infrastructurenetwork intrusionnetwork probingnetwork protocolnetwork scanningnetwork securitynetwork traffic analysisnorth americapassword attackpassword attackspayment processingphishingphishing attackphishing trapphp exploitation attemptspolandpossible botnet activityprobingprocess injectionprotocol exploitationproxyransomwarerdpreconnaissanceremote accessremote servicesresearchedresource hijackingsansscannerscanningscanning activityscripting attackssentrypeer botnetsftpsftp attacksipsmb brute forcesmtp brute forcesocial engineeringsocradar honeypotspamsql injection attemptssshssh attackssh monitoringt1005t1021t1021.001t1021.002t1021.003t1021.004t1021.005t1040t1041t1046t1055t1059t1059.001t1059.003t1059.004t1059.007t1068t1071t1071.001t1076t1077t1078t1105t1110t1110.001t1110.002t1110.003t1110.004t1133t1189t1190t1203t1204t1204.002t1486t1496t1499.001t1499.002t1499.003t1563t1565t1566.001t1566.002t1566.003t1566.004t1573t1573.001t1592t1595t1595.001t1595.002t1595.003tannertargeting databasetcp scantelecommunicationstelnet threatthreat actorthreat detectionthreat intelligencetor nodetpotceudp scanunauthorized access attemptunited statesverified-benignvoipvoip attackvulnerability scanwealth managementweb app attackweb application attackweb attackweb exploitationweb scannerwebscanwebscanner
Activity Timeline
Apr 19Apr 19
Threat Activity Heatmap
· Peak: 2026-04-19LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Threat ScoreMedium Risk
45
SIGNAL
Signal Score
45%
Confidence
21
Reports
First seenMar 24, 2025
Last seenApr 19, 2026
GeolocationUS
CountryUnited States
LocationRichardson, TX
ASNAS63949
OrgLinode
Coords32.9473, -96.7028
VirusTotal
Not checked
WHOIS
- description
- 2025-07-01T00:41:05.000Z Honeypot : Honeytrap : Source: 45.79.0.93 : Port: 5901 Message: {'protocol': 'tcp', 'payload': {'data_hex': '4f5054494f4e53207369703a6e6d205349502f322e300d0a5669613a205349502f322e302f544350206e6d3b6272616e63683d666f6f0d0a46726f6d3a203c7369703a6e6d406e6d3e3b7461673d726f6f740d0a546f3a203c7369703a6e6d32406e6d323e0d0a43616c6c2d49443a2035303030300d0a435365713a203432204f5054494f4e530d0a4d61782d466f7277617264733a2037300d0a436f6e74656e742d4c656e6774683a20300d0a436f6e746163743a203c7369703a6e6d406e6d3e0d0a4163636570743a206170706c69636174696f6e2f7364700d0a0d0a', 'md5_hash': '8997d4a991ea8faa3bbdf5a5705fadc0', 'sha512_hash': 'f45c9cdb4d5036c86b32a6ed664c70466ed093d44010420bbdb03f3ddd17a9720114d73cd3a126ff4366b8f24823fe61cf45e53f91438dc7633effb395bb3194', 'length': 223}}
- raw
- Akamai Technologies, Inc. LINODE-US (NET-45-79-0-0-1) 45.79.0.0 - 45.79.255.255 Linode LINODE (NET-45-79-0-0-2) 45.79.0.0 - 45.79.255.255
- references
- https://github.com/telekom-security/tpotce, https://malware-filter.gitlab.io/malware-filter/botnet-filter.txt
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
mediumFirst detected 1 year ago · Last seen 1 month ago
Appeared in 21 threat reports