← Back to feed

66.27.155.98

syn-066-027-155-098.res.spectrum.com (spectrum.com) ✗ FCrDNS
Threat Confidence
56%
Assessment
Port and service scanner
  • Ran 11 commands on the host.
  • Part of a 347-IP campaign probing the same targets.
Generated from the counts on this page by fixed rules; each line cites the number it rests on.
Location
🇺🇸 US / Twentynine Palms
ASN
AS20001 · Charter Communications Inc
Cloud Provider
—
Total Events
20
Average by volume
Agent Count
2
First / Last Seen
2026-10-24 18:50 — 2026-10-26 15:50
Attack Types
telnet:connection telnet:intrusion
MITRE ATT&CK Techniques
Reconnaissance
Initial Access
Execution
Discovery
External Corroboration
Not flagged by any external feeds
Campaigns
Multi-Agent Scan SCAN Active medium
316 IPs 999851 events
2026-10-22 — ongoing · 316 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
347 IPs 1097983 events
2026-09-23 — ongoing · 347 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
4 IPs 4088 events
2026-05-28 — ongoing · 4 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
337 IPs 1056460 events
2026-05-24 — ongoing · 337 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
230 IPs 679955 events
2026-03-21 — ongoing · 230 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
3 IPs 2724 events
2026-03-19 — ongoing · 3 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
209 IPs 500107 events
2026-03-02 — ongoing · 209 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
4 IPs 19713 events
2026-03-01 — ongoing · 4 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Session Forensics
scanner ×1 interactive_operator ×1
Sessions
2 (1 with login)
Avg Depth Score
0.53
Commands Executed
11
Files Downloaded
0
Notable Commands
  • sh
  • shell
  • shell
  • enable
  • enable
  • system
  • system
  • ping; sh
  • CMD:
  • /bin/busybox HISILICON
Evidence Timeline
Scanner 0e0270e43603 w4m_singapore_01 · 2026-10-26 15:50
15%
Loading events...
Interactive Operator 9d1ea35a214a greencloud_phx_01 · 2026-10-24 18:50
11 1 90%
Loading events...