Threat LevelHIGH60/1003 rule types across 2 attack categories
5 incidents on record · 3 rule types · active attacker + blocklisted · persistent 22-day campaign · last seen 2d ago · known internet scanner
| PTR | 24.159.132.66.censys-scanner.com |
| Org / ASN | Censys, Inc. |
| Country | 🇺🇸 United States |
| City | Ann Arbor, Michigan |
| Timezone | America/Detroit |
Internet ScannerCensys
Censys — academic/commercial internet scanner from University of Michigan that maps the entire IPv4 address space. Operates continuous internet-wide ZMap scans. All unsolicited scanning probes are treated as hostile traffic on this network regardless of stated purpose.
Attack Analysis
Suricata IDS Alert
Suricata intrusion detection flagged this IP for malicious network behaviour — including port scanning, exploit attempts, botnet activity, or known attack signatures. The specific signature is shown in the report list below.
Identified Vulnerability Scanner
This request's User-Agent self-identified as an automated vulnerability scanner or security-research bot (rather than a browser). Genuine security researchers and monitoring tools that announce themselves this way are still uninvited probing from this site's point of view — the traffic is automated reconnaissance, not a human visitor.
IDS: Blocklist — Dshield
This IP was reported to the DShield community blocklist by multiple independent security sensors worldwide. DShield aggregates firewall logs from thousands of contributors; IPs on this list are confirmed active attackers observed across many networks.
Reports (5)
| Date | Severity | Description |
|---|---|---|
| 3 Nov 2026 - 21:42 | high | IDS: Blocklist — Dshield listed IP |
| 3 Nov 2026 - 21:42 | high | IDS: Blocklist — Dshield listed IP — ET DROP Dshield Block Listed Source group 1 |
| 31 Oct 2026 - 11:45 | high | IDS: Blocklist — Dshield listed IP |
| 28 Oct 2026 - 07:19 | low | Query Guard — Ua Known Scanner |
| 13 Oct 2026 - 04:39 | high | IDS: Suricata alert — GPL DNS named version attempt |
EagleEye Intelligence