← Back to feed

34.77.175.80

Threat Confidence
23%
Location
🇧🇪 BE / Brussels
ASN
AS396982 · Google LLC
Cloud Provider
Total Events
2
Below average by volume
Agent Count
1
First / Last Seen
2026-04-04 20:36 — 2026-04-19 00:05
Attack Types
ftp:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
Credential Access
External Corroboration
Not flagged by any external feeds
Campaigns
Multi-Agent Scan SCAN Active medium
18 IPs 3186 events
2026-03-16 — ongoing · 18 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
70 IPs 83633 events
2026-03-10 — ongoing · 70 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
72 IPs 89128 events
2026-03-09 — ongoing · 72 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
48 IPs 6802 events
2026-03-08 — ongoing · 48 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
73 IPs 89149 events
2026-03-04 — ongoing · 73 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
17 IPs 1342 events
2026-03-02 — ongoing · 17 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
3 IPs 97 events
2026-02-23 — ongoing · 3 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
29 IPs 2482 events
2026-02-22 — ongoing · 29 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
AS396982 Google LLC ASN Active medium 🇧🇪 BE
28 IPs 4486 events
ftp:bruteforcehttp:scanmysql:bruteforcessh:bruteforce
2026-02-18 — ongoing · 28 IPs from the same network (Google LLC, AS396982) were active during overlapping time periods. Temporal correlation across …
Session Forensics
ftp_probe ×3 mysql_probe ×1
Sessions
4
Avg Depth Score
0.2
Commands Executed
0
Files Downloaded
0
Evidence Timeline
FTP Probe 2553ec00bb7cb6ad w4m_seattle_01 · 2026-04-19 00:05
1 20%
Loading events...
FTP Probe e47b9e1a05ed55ff w4m_singapore_01 · 2026-04-18 17:05
1 20%
Loading events...
MySQL Probe 1122494149e46e0d w4m_singapore_01 · 2026-04-18 07:55
1 20%
Loading events...
FTP Probe 0a6a258aa889cc4f w4m_seattle_01 · 2026-04-04 20:36
1 20%
Loading events...
Non-Session Events
Timestamp Port Proto Event Source Location
2026-04-19 00:05:51 :21 ftp FTP connection opencanary sea
2026-04-18 17:05:51 :21 ftp FTP connection opencanary sin
2026-04-18 07:55:11 :3306 mysql MySQL connection opencanary sin
2026-04-04 20:36:11 :21 ftp FTP connection opencanary sea