← Back to feed
44.220.185.237
Location
🇺🇸 US / Ashburn
ASN
AS14618 · Amazon.com, Inc.
Cloud Provider
Amazon Web Services
Total Events
2
Below average by volume
Agent Count
2
First / Last Seen
2026-08-01 05:06 — 2026-08-05 07:09
Attack Types
MITRE ATT&CK Techniques
External Corroboration
Not flagged by any external feeds
Campaigns
Multi-Agent Scan
SCAN
Active
medium
83 IPs
598218 events
2026-03-28 — ongoing · 83 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
143 IPs
799186 events
2026-03-28 — ongoing · 143 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
40 IPs
300766 events
2026-03-27 — ongoing · 40 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Subnet 44.220.185.0/24
SUBNET
Ended
high
🇺🇸 US
3 IPs
6 events
ftp:bruteforcehttp:scanssh:bruteforce
2026-03-24 — 2026-07-05 · 3 IPs from the same /24 subnet (44.220.185.0/24) were observed attacking our sensors within the same time window. …
Multi-Agent Scan
SCAN
Active
medium
77 IPs
258241 events
2026-03-20 — ongoing · 77 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
116 IPs
698474 events
2026-03-17 — ongoing · 116 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
110 IPs
573616 events
2026-03-03 — ongoing · 110 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
84 IPs
377998 events
2026-03-03 — ongoing · 84 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
79 IPs
360197 events
2026-03-02 — ongoing · 79 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
124 IPs
580798 events
2026-02-26 — ongoing · 124 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
111 IPs
669846 events
2026-02-26 — ongoing · 111 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
88 IPs
229318 events
2026-02-26 — ongoing · 88 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
143 IPs
785890 events
2026-02-24 — ongoing · 143 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Session Forensics
Sessions
2
Avg Depth Score
0.23
Commands Executed
0
Files Downloaded
0
Evidence Timeline
FTP Probe
22eb4811abe7a808
1
20%
Loading events...
Web Probe
c67edb04dc78eccc
25%
Loading events...
Non-Session Events
| Timestamp | Port | Proto | Event | Source | Location |
|---|---|---|---|---|---|
| 2026-08-05 07:09:27 | :21 | ftp | FTP connection | opencanary | sea |
| 2026-08-01 05:06:36 | :80 | http | HTTP GET request | opencanary | sin |