213.96.11.230 has a moderate threat confidence level of 48%, originating from Barcelona, Spain, on the Telefonica De Espana S.a.u. network (3352). It has been observed across 144 sessions targeting SSH, First observed on January 20, 2026, most recently active March 5, 2026.