← Back to feed
Location
🇺🇸 US
ASN
AS398324 · Censys, Inc.
Cloud Provider
—
Total Events
2
Below average by volume
Agent Count
2
First / Last Seen
2026-06-13 06:49 — 2026-06-17 02:51
Attack Types
MITRE ATT&CK Techniques
External Corroboration
Not flagged by any external feeds
Campaigns
Multi-Agent Scan
SCAN
Active
medium
172 IPs
194823 events
2026-03-28 — ongoing · 172 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Linode. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
4 IPs
797 events
2026-03-28 — ongoing · 4 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
45 IPs
112445 events
2026-03-28 — ongoing · 45 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
150 IPs
220555 events
2026-03-28 — ongoing · 150 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Linode. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
76 IPs
183142 events
2026-03-28 — ongoing · 76 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Subnet 66.132.195.0/24
SUBNET
Active
high
🇺🇸 US
16 IPs
89 events
http:scanssh:bruteforce
2026-03-23 — ongoing · 16 IPs from the same /24 subnet (66.132.195.0/24) were observed attacking our sensors within the same time window. …
Multi-Agent Scan
SCAN
Active
medium
72 IPs
30780 events
2026-03-21 — ongoing · 72 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Linode. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
73 IPs
180628 events
2026-03-21 — ongoing · 73 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Linode. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
77 IPs
184388 events
2026-03-19 — ongoing · 77 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
39 IPs
56490 events
2026-03-02 — ongoing · 39 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Session Forensics
Sessions
2
Avg Depth Score
0.25
Commands Executed
0
Files Downloaded
0
Evidence Timeline
Web Probe
9a6e231609ba797b
25%
Loading events...
Web Probe
b0bfd89c1eceaa97
25%
Loading events...
Non-Session Events
| Timestamp | Port | Proto | Event | Source | Location |
|---|---|---|---|---|---|
| 2026-06-17 02:51:47 | :80 | http | HTTP GET request | opencanary | sea |
| 2026-06-13 06:49:55 | :80 | http | HTTP GET request | opencanary | ewr |