IPMediumSignal 81/100
96.126.101.72
Location
Fremont, California
ASN
AS63949
Linode
First Seen
May 16, 2026
Last Seen
Jun 4, 2026
Found in 10 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
81%
Signal Score
81 / 100
IDS Rule
No
Threat Context
Tags
Network Information
Country
United States
RegionFremont, California
ASNAS63949
OrganizationLinode
Feed Intelligence Summary
10 reports81% confidence
10
Source reports
81%
Confidence score
Category tags
abuseactive scanbad reputationbad web botbotnet activitybrute forcebrute force attackerbrute-forcecowriedionaeaexploitexploitation activityexploited hostfatthackingindicatornetworknorth americap0fportscanresearchresearchedscannerscannerssensor-taggedservice scanssh-brutetannerthreat actortpotunited statesusvulnerability scanvulnerability-exploitationvultrweb app attack
Activity Timeline
Jun 4Jun 4
Threat Activity Heatmap
· Peak: 2026-06-04LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Threat ScoreHigh Risk
81
SIGNAL
Signal Score
81%
Confidence
10
Reports
First seenMay 16, 2026
Last seenJun 4, 2026
GeolocationUS
CountryUnited States
LocationFremont, California
ASNAS63949
OrgLinode
Coords37.5485, -121.9890
VirusTotal
Not checked
WHOIS
- description
- Observed on T-Pot within last 24h; sensors=p0f; threshold?1; private IPs excluded. geo=US; ports=2443 Location=Sydney, Australia.
- raw
- Akamai Technologies, Inc. LINODE-US (NET-96-126-96-0-1) 96.126.96.0 - 96.126.127.255 Linode LINODE (NET-96-126-96-0-2) 96.126.96.0 - 96.126.127.255
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
mediumFirst detected 1 month ago · Last seen 20 days ago
Appeared in 10 threat reports