← Back to feed

66.132.186.161

Threat Confidence
24%
Location
🇺🇸 US
ASN
AS398324 · Censys, Inc.
Cloud Provider
Total Events
4
Below average by volume
Agent Count
1
First / Last Seen
2026-06-06 16:41 — 2026-06-06 16:41
Attack Types
ssh:bruteforce
MITRE ATT&CK Techniques
Credential Access
External Corroboration
Not flagged by any external feeds
Campaigns
Multi-Agent Scan SCAN Active medium
151 IPs 153636 events
2026-06-01 — ongoing · 151 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
32 IPs 46203 events
2026-05-25 — ongoing · 32 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
24 IPs 81385 events
2026-04-27 — ongoing · 24 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Subnet 66.132.186.0/24 SUBNET Active high 🇺🇸 US
7 IPs 33 events
http:scanssh:bruteforce
2026-03-23 — ongoing · 7 IPs from the same /24 subnet (66.132.186.0/24) were observed attacking our sensors within the same time window. …
Multi-Agent Scan SCAN Active medium
36 IPs 111573 events
2026-03-18 — ongoing · 36 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
115 IPs 255197 events
2026-03-12 — ongoing · 115 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
110 IPs 76738 events
2026-02-28 — ongoing · 110 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
89 IPs 67240 events
2026-02-28 — ongoing · 89 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
2 IPs 717 events
2026-02-28 — ongoing · 2 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
70 IPs 282910 events
2026-02-24 — ongoing · 70 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
29 IPs 53314 events
2026-02-23 — ongoing · 29 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Evidence Timeline
No evidence events recorded for this actor