← Back to feed

66.132.195.92

Threat Confidence
54%
Location
🇺🇸 US
ASN
AS398324 · Censys, Inc.
Cloud Provider
Total Events
21
Average by volume
Agent Count
3
First / Last Seen
2026-06-17 13:48 — 2026-08-22 04:05
Attack Types
http:scan ssh:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
Initial Access
Credential Access
Discovery
External Corroboration
DShield Top Attackers
Reported 2026-09-01 06:01
dshield:top_attacker
Campaigns
Multi-Agent Scan SCAN Active medium
30 IPs 13378 events
2026-08-04 — ongoing · 30 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan SCAN Active medium
102 IPs 401734 events
2026-07-27 — ongoing · 102 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan SCAN Active medium
57 IPs 216275 events
2026-07-12 — ongoing · 57 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
3 IPs 817 events
2026-06-17 — ongoing · 3 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
97 IPs 424517 events
2026-05-22 — ongoing · 97 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
65 IPs 224228 events
2026-05-22 — ongoing · 65 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
84 IPs 434551 events
2026-05-19 — ongoing · 84 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
82 IPs 309130 events
2026-05-13 — ongoing · 82 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
83 IPs 260444 events
2026-03-18 — ongoing · 83 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
96 IPs 397967 events
2026-03-18 — ongoing · 96 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
111 IPs 410139 events
2026-03-18 — ongoing · 111 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan SCAN Active medium
68 IPs 236525 events
2026-03-16 — ongoing · 68 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
66 IPs 269297 events
2026-03-16 — ongoing · 66 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
86 IPs 378493 events
2026-03-16 — ongoing · 86 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
38 IPs 92375 events
2026-03-16 — ongoing · 38 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Vultr. Scanning the same …
Multi-Agent Scan SCAN Active medium
62 IPs 88828 events
2026-03-10 — ongoing · 62 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
78 IPs 378694 events
2026-02-24 — ongoing · 78 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Session Forensics
scanner ×5 web_probe ×1
Sessions
6
Avg Depth Score
0.17
Commands Executed
0
Files Downloaded
0
Fingerprints
SSH-2.0-Go
Evidence Timeline
Scanner 6febe8bc774c newark_01 · 2026-08-22 04:05
15%
Loading events...
Scanner cbbdc9157739 w4m_singapore_01 · 2026-08-10 16:32
15%
Loading events...
Scanner e869b0e273df newark_01 · 2026-08-06 02:59
15%
Loading events...
Web Probe 84a457211297b94f newark_01 · 2026-08-05 21:04
25%
Loading events...
Scanner c1cdad32fb03 w4m_seattle_01 · 2026-07-27 13:43
15%
Loading events...
Scanner ee7c579e070d newark_01 · 2026-06-17 13:48
15%
Loading events...
Non-Session Events
Timestamp Port Proto Event Source Location
2026-08-05 21:04:58 :80 http HTTP GET request opencanary ewr
{# Cloudflare Web Analytics — cookieless, public pages only. The context processor withholds the token from authenticated requests. #}