IOC Radar
IPHighVerifiedSignal 86/100

66.132.172.136

Location
United StatesUnited States
Ann Arbor, Michigan
ASN
AS398324
Censys Inc
First Seen
Mar 20, 2026
Last Seen
Jun 28, 2026
Mar 20
First Seen
103d ago
Jun 28
Last Seen
3d ago
71
Reports
source reports
95%
Confidence
high
Found in 71 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
95%
Signal Score
86 / 100
IDS Rule
Yes
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

48 techniques

Network Information

CountryUSUnited States
RegionAnn Arbor, Michigan
ASNAS398324
OrganizationCensys Inc

IP Category

⟲
Proxy
Proxy server

Feed Intelligence Summary

71 reports95% confidence
AT
Abuse.ch ThreatFox
3d ago
Abuse.ch ThreatFox (3865 indicators)
3292 IOCs in report
AT
Abuse.ch ThreatFox
3d ago
Abuse.ch ThreatFox (3833 indicators)
3271 IOCs in report
AT
Abuse.ch ThreatFox
3d ago
Abuse.ch ThreatFox (3840 indicators)
3276 IOCs in report
AT
Abuse.ch ThreatFox
3d ago
Abuse.ch ThreatFox (3842 indicators)
3278 IOCs in report
AT
Abuse.ch ThreatFox
3d ago
Abuse.ch ThreatFox (3842 indicators)
3278 IOCs in report
AT
Abuse.ch ThreatFox
3d ago
Abuse.ch ThreatFox (3847 indicators)
3281 IOCs in report
AT
Abuse.ch ThreatFox
3d ago
Abuse.ch ThreatFox (3850 indicators)
3282 IOCs in report
AT
Abuse.ch ThreatFox
3d ago
Abuse.ch ThreatFox (3849 indicators)
3280 IOCs in report
AT
Abuse.ch ThreatFox
3d ago
Abuse.ch ThreatFox (3852 indicators)
3279 IOCs in report
AT
Abuse.ch ThreatFox
3d ago
Abuse.ch ThreatFox (3856 indicators)
3283 IOCs in report

Activity Timeline

47 total obs
Jun 28Jun 26

Threat Activity Heatmap

· Peak: 2026-06-27
Less
More
Mon
Wed
Fri
Jun
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
·
24h
0
Dormant
7d
47
Critical
30d
47
Critical
3mo
47
Critical
Threat ScoreHigh Risk
86
SIGNAL
Signal Score
95%
Confidence
71
Reports
First seenMar 20, 2026
Last seenJun 28, 2026
Verified IOC
GeolocationUS
CountryUnited States
LocationAnn Arbor, Michigan
ASNAS398324
OrgCensys Inc
Coords42.2809, -83.7489
Proxy

VirusTotal

Not checked

WHOIS

description
IPv4 hosts detected port scanning DigitalOcean Toronto (CA) honeypot
raw
NetRange: 66.132.172.0 - 66.132.172.255 CIDR: 66.132.172.0/24 NetName: CENSY NetHandle: NET-66-132-172-0-1 Parent: NET66 (NET-66-0-0-0-0) NetType: Direct Allocation OriginAS: Organization: Censys, Inc. (CENSY) RegDate: 2024-05-14 Updated: 2024-05-14 Ref: https://rdap.arin.net/registry/ip/66.132.172.0 OrgName: Censys, Inc. OrgId: CENSY Address: 116 1/2 S Main Street City: Ann Arbor StateProv: MI PostalCode: 48104 Country: US RegDate: 2018-08-06 Updated: 2019-08-03 Comment: https://censys.io Ref: https://rdap.arin.net/registry/entity/CENSY OrgAbuseHandle: CAT20-ARIN OrgAbuseName: Censys Abuse Team OrgAbusePhone: +1-248-629-0125 OrgAbuseEmail: [email protected] OrgAbuseRef: https://rdap.arin.net/registry/entity/CAT20-ARIN OrgNOCHandle: COT12-ARIN OrgNOCName: Censys Operations Team OrgNOCPhone: +1-248-629-0125 OrgNOCEmail: [email protected] OrgNOCRef: https://rdap.arin.net/registry/entity/COT12-ARIN OrgTechHandle: COT12-ARIN OrgTechName: Censys Operations Team OrgTechPhone: +1-248-629-0125 OrgTechEmail: [email protected] OrgTechRef: https://rdap.arin.net/registry/entity/COT12-ARIN

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

high
First detected 3 months ago · Last seen 3 days ago
Appeared in 71 threat reports from 10 sources