IOC Radar
IPMediumSignal 100/100

50.116.26.235

Location
United StatesUnited States
Richardson, Texas
ASN
AS63949
Linode
First Seen
Nov 27, 2024
Last Seen
Feb 23, 2026
Nov 27
First Seen
564d ago
Feb 23
Last Seen
112d ago
15
Reports
source reports
99%
Confidence
medium
2/91
VirusTotal
detections
Found in 15 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
99%
Signal Score
100 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

40 techniques

Network Information

CountryUSUnited States
RegionRichardson, Texas
ASNAS63949
OrganizationLinode

IP Category

⬢
Hosting
Hosting provider

Feed Intelligence Summary

15 reports99% confidence
15
Source reports
99%
Confidence score
Category tags
abuseactive scanningasiaattackauto-generated securitybankingbotnetbrute forcebrute force attackcommand and controlcommunication protocolcowrie honeypotcredential accesscredential harvestingcredential stuffingcredit card servicesctadata exfiltrationdecoy systemdenial of servicedistributed attacksfinancefinance and insurancefinancial servicesfinancial technologyftpftp brute forcehoneytrap honeypothttp brute forceindicatorinfrastructure acquisitionreconnaissanceinitial accesskazakhstankaznetlampmalicious activitymalicious softwaremalwaremanualnetworknetwork attacksnetwork probingnetwork protocolnetwork scanningnetwork traffic analysisnorth americapassword attackspayment processingphishing attackpossible botnet activitypossible reconnaissance activityprocess injectionreconnaissanceremote accessremote servicesresearchedscannerscanning activitysftp attackslugsmtp brute forcesocial engineeringssh attackssh monitoringsurface webt1018t1021t1021.001t1040t1041t1046t1053t1055t1059t1059.004t1071.001t1076t1083t1110t1110.001t1110.002t1110.003t1110.004t1190t1203t1486t1496t1499.001t1499.002t1499.003t1563t1565t1566t1566.001t1566.002t1566.003t1583t1583.001t1583.002t1587.001t1590.001t1595t1595.001t1595.002t1595.003tcp protocoltelecommunicationsthreat actorthreat detectionunauthorized access attemptunited statesunited states of americauswealth managementweb application attackweb exploitationweb scanner

Activity Timeline

1 total obs
Feb 23Feb 23

Threat Activity Heatmap

· Peak: 2026-02-23
Less
More
Mon
Wed
Fri
Jun
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Threat ScoreHigh Risk
100
SIGNAL
Signal Score
99%
Confidence
15
Reports
First seenNov 27, 2024
Last seenFeb 23, 2026
GeolocationUS
CountryUnited States
LocationRichardson, Texas
ASNAS63949
OrgLinode
Coords32.9482, -96.7297
Hosting

VirusTotal

2/ 91vendors flagged
2% detection rateJun 8, 2026

WHOIS

description
Information from proprietary sensors in the KazNET
raw
Akamai Technologies, Inc. LINODE-US (NET-50-116-0-0-1) 50.116.0.0 - 50.116.63.255 Linode LINODE (NET-50-116-0-0-2) 50.116.0.0 - 50.116.63.255
references
https://threats.kz, https://github.com/telekom-security/tpotce

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 1 year ago · Last seen 3 months ago
Appeared in 15 threat reports