← Back to feed

159.198.77.184

TAGGED SUSPICIOUS how we decide →

Threat Confidence

47%

Location

🇺🇸 US

ASN

AS22612 · Namecheap, Inc.

Cloud Provider

—

Total Events

Average by volume

Agent Count

First / Last Seen

2026-05-19 16:59 — 2026-05-27 12:41

Attack Types

ftp:bruteforce ssh:bruteforce

MITRE ATT&CK Techniques

Reconnaissance

T1595.002

Initial Access

T1078

Credential Access

T1110 T1110.001

Discovery

T1016 T1082

External Corroboration

Blocklist.de

Reported 2026-05-30 21:02

blocklist_de:reported

Campaigns

AS22612 Namecheap, Inc. ASN Active medium 🇺🇸 US

5 IPs 623 events

ftp:bruteforcehttp:scanssh:bruteforce

2026-05-19 — ongoing · 5 IPs from the same network (Namecheap, Inc., AS22612) were active during overlapping time periods. Temporal correlation across …

Session Forensics

ftp_probe ×9 reconnaissance ×1 credential_probe ×3

Sessions

13 (1 with login)

Avg Depth Score

0.23

Commands Executed

Files Downloaded

Notable Commands

uname -a

Fingerprints

HASSH

16443846184eafde36765c9bab2f4397

SSH Client

SSH-2.0-Go

Evidence Timeline

FTP Probe 7211da9a47810d68 newark_01 · 2026-05-27 12:41

1 20%

Loading events...

FTP Probe 3826f7b582e74530 newark_01 · 2026-05-27 00:52

1 20%

Loading events...

FTP Probe 03b79f325b3a7c7e newark_01 · 2026-05-26 06:50

1 20%

Loading events...

FTP Probe 9cc8b3b2aec30d50 newark_01 · 2026-05-26 04:03

1 20%

Loading events...

FTP Probe 01c7a09a60210f09 newark_01 · 2026-05-25 13:30

1 20%

Loading events...

FTP Probe cd4636e6894d1908 newark_01 · 2026-05-25 11:24

1 20%

Loading events...

FTP Probe d52d9b7ee44b7917 newark_01 · 2026-05-25 10:00

1 20%

Loading events...

FTP Probe 3846ba1a9dd31416 newark_01 · 2026-05-25 06:31

1 20%

Loading events...

FTP Probe ac81fea1687f36f6 newark_01 · 2026-05-25 05:48

1 20%

Loading events...

Reconnaissance eabdb13f6e7f newark_01 · 2026-05-20 08:22

1 1 60%

Loading events...

Credential Probe 2c83da6e856a newark_01 · 2026-05-20 03:03

1 20%

Loading events...

Credential Probe 98308c1a4610 newark_01 · 2026-05-19 21:57

1 20%

Loading events...

Credential Probe 5fd121efefce newark_01 · 2026-05-19 16:59

1 20%

Loading events...

Non-Session Events

Timestamp	Port	Proto	Event	Source	Location
2026-05-27 12:41:10	:21	ftp	FTP connection	opencanary	ewr
2026-05-27 00:52:22	:21	ftp	FTP connection	opencanary	ewr
2026-05-26 06:50:31	:21	ftp	FTP connection	opencanary	ewr
2026-05-26 04:03:50	:21	ftp	FTP connection	opencanary	ewr
2026-05-25 13:30:04	:21	ftp	FTP connection	opencanary	ewr
2026-05-25 11:24:25	:21	ftp	FTP connection	opencanary	ewr
2026-05-25 10:00:36	:21	ftp	FTP connection	opencanary	ewr
2026-05-25 06:31:07	:21	ftp	FTP connection	opencanary	ewr
2026-05-25 05:48:39	:21	ftp	FTP connection	opencanary	ewr