← Back to feed

149.19.166.219

Threat Confidence
35%
Location
🇧🇷 BR
ASN
AS14593 · Space Exploration Technologies Corporation
Cloud Provider
Total Events
20
Average by volume
Agent Count
2
First / Last Seen
2026-08-01 22:28 — 2026-08-03 19:52
Attack Types
ssh:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
Initial Access
Credential Access
Discovery
External Corroboration
Not flagged by any external feeds
Campaigns
Multi-Agent Scan SCAN Active medium
61 IPs 189543 events
2026-08-01 — ongoing · 61 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
111 IPs 218164 events
2026-06-16 — ongoing · 111 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan SCAN Active medium
35 IPs 50916 events
2026-06-16 — ongoing · 35 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Vultr. Scanning the same …
Multi-Agent Scan SCAN Active medium
103 IPs 208142 events
2026-06-16 — ongoing · 103 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
126 IPs 237476 events
2026-04-25 — ongoing · 126 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
152 IPs 286001 events
2026-03-09 — ongoing · 152 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
111 IPs 216935 events
2026-03-07 — ongoing · 111 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
70 IPs 62632 events
2026-03-06 — ongoing · 70 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
80 IPs 35864 events
2026-03-04 — ongoing · 80 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
10 IPs 4933 events
2026-02-28 — ongoing · 10 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
90 IPs 184229 events
2026-02-26 — ongoing · 90 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
97 IPs 144223 events
2026-02-26 — ongoing · 97 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
95 IPs 219379 events
2026-02-26 — ongoing · 95 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
137 IPs 266031 events
2026-02-26 — ongoing · 137 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
90 IPs 244974 events
2026-02-26 — ongoing · 90 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on AWS. Scanning the same …
Multi-Agent Scan SCAN Active medium
111 IPs 400402 events
2026-02-22 — ongoing · 111 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on AWS. Scanning the same …
Session Forensics
scanner ×2 reconnaissance ×2
Sessions
4 (2 with login)
Avg Depth Score
0.38
Commands Executed
2
Files Downloaded
0
Notable Commands
  • uname -s -m
Fingerprints
SSH-2.0-Go
Evidence Timeline
Reconnaissance 54793f64d54e w4m_seattle_01 · 2026-08-03 19:52
1 1 60%
Loading events...
Scanner 29f69f0036ae w4m_seattle_01 · 2026-08-03 19:52
15%
Loading events...
Reconnaissance 8dc3bc09cfd2 newark_01 · 2026-08-01 22:28
1 1 60%
Loading events...
Scanner 60c92018d2e2 newark_01 · 2026-08-01 22:28
15%
Loading events...
{# Cloudflare Web Analytics — cookieless, public pages only. The context processor withholds the token from authenticated requests. #}