← Back to feed
Location
🇺🇸 US
ASN
AS398324 · Censys, Inc.
Cloud Provider
—
Total Events
1
Below average by volume
Agent Count
1
First / Last Seen
2026-06-02 14:54 — 2026-06-02 14:54
Attack Types
MITRE ATT&CK Techniques
External Corroboration
Blocklist.de
blocklist_de:reported
Campaigns
Subnet 66.132.195.0/24
SUBNET
Active
high
🇺🇸 US
11 IPs
53 events
http:scanssh:bruteforce
2026-03-23 — ongoing · 11 IPs from the same /24 subnet (66.132.195.0/24) were observed attacking our sensors within the same time window. …
Multi-Agent Scan
SCAN
Active
medium
37 IPs
10796 events
2026-03-07 — ongoing · 37 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Linode. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
69 IPs
195881 events
2026-03-05 — ongoing · 69 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
189 IPs
307709 events
2026-03-03 — ongoing · 189 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
69 IPs
192919 events
2026-03-03 — ongoing · 69 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
194 IPs
294880 events
2026-03-03 — ongoing · 194 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Session Forensics
Sessions
2
Avg Depth Score
0.2
Commands Executed
0
Files Downloaded
0
Fingerprints
HASSH
SSH Client
Evidence Timeline
Web Probe
46a1baf1e0413457
25%
Loading events...
Non-Session Events
| Timestamp | Port | Proto | Event | Source | Location |
|---|---|---|---|---|---|
| 2026-06-02 14:54:11 | :80 | http | HTTP GET request | opencanary | ewr |