Multi-Agent Scan
SCAN Active mediumWhy this campaign was detected
11 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on AWS. Scanning the same targets in close succession indicates shared reconnaissance tooling or a coordinated scan list.
Primary ASN
—
Subnet
—
Country
—
Cloud Provider
AWS
Member Count
11 IPs
Below average
Total Events
489
Below average by volume
Started / Ended
2026-02-23 15:58 — ongoing
Member Actors
| IP Address | Confidence | Flags | Events | Agents | Attack Types | Hostname | Last Seen |
|---|---|---|---|---|---|---|---|
| 103.179.56.44 | 64% | 1x OSINT | 69 | 2 | ssh:bruteforce | ip103-179-56-44.cloudhost.web.id | 2026-04-03 01:36 |
| 83.118.24.18 | 64% | 1x OSINT | 46 | 2 | ssh:bruteforce | — | 2026-04-03 03:01 |
| 36.89.252.58 | 53% | 1x OSINT | 40 | 2 | ssh:bruteforce | — | 2026-04-03 02:18 |
| 3.130.168.2 | 53% | 1x OSINT | 152 | 2 | http:scanssh:bruteforce | scan.visionheight.com | 2026-04-03 04:11 |
| 45.129.185.7 | 49% | 1x OSINT | 73 | 1 | ssh:bruteforce | 115461.ip-ptr.tech | 2026-03-30 19:42 |
| 180.167.96.50 | 48% | 1x OSINT | 45 | 2 | ssh:bruteforce | — | 2026-03-30 23:54 |
| 165.154.20.214 | 48% | 1x OSINT | 23 | 1 | ssh:bruteforce | — | 2026-03-30 22:33 |
| 101.126.155.86 | 41% | 1x OSINT | 33 | 1 | ssh:bruteforce | — | 2026-03-20 21:31 |
| 202.111.173.175 | 40% | 1x OSINT | 6 | 1 | ssh:bruteforce | — | 2026-03-27 22:17 |
| 212.132.127.66 | 37% | 1x OSINT | 2 | 2 | mysql:bruteforce | — | 2026-04-02 23:43 |
| 43.134.141.244 | 16% | 1 | 1 | http:scan | — | 2026-03-30 17:33 |
VPN Known VPN or proxy provider
DROP ASN on Spamhaus DROP list
Nx OSINT Corroborated by N external threat feeds