← Back to feed
Location
🇺🇸 US / Las Vegas
ASN
AS14956 · RouterHosting LLC
Cloud Provider
—
Total Events
63
Above average by volume
Agent Count
3
First / Last Seen
2026-08-22 13:47 — 2026-08-27 12:21
Attack Types
MITRE ATT&CK Techniques
External Corroboration
Not flagged by any external feeds
Campaigns
Multi-Agent Scan
SCAN
Active
medium
62 IPs
130160 events
2026-08-23 — ongoing · 62 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Subnet 45.61.170.0/24
SUBNET
Active
high
🇺🇸 US
3 IPs
714 events
ftp:bruteforce
2026-08-22 — ongoing · 3 IPs from the same /24 subnet (45.61.170.0/24) were observed attacking our sensors within the same time window. …
Multi-Agent Scan
SCAN
Active
medium
36 IPs
64604 events
2026-08-22 — ongoing · 36 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
100 IPs
259919 events
2026-08-15 — ongoing · 100 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
47 IPs
13708 events
2026-08-11 — ongoing · 47 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
67 IPs
84000 events
2026-07-31 — ongoing · 67 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
51 IPs
92904 events
2026-07-31 — ongoing · 51 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
29 IPs
32936 events
2026-07-24 — ongoing · 29 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
57 IPs
99202 events
2026-07-22 — ongoing · 57 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
73 IPs
143104 events
2026-07-22 — ongoing · 73 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
114 IPs
356777 events
2026-07-22 — ongoing · 114 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
54 IPs
11515 events
2026-07-22 — ongoing · 54 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
94 IPs
258949 events
2026-07-22 — ongoing · 94 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
67 IPs
233557 events
2026-07-22 — ongoing · 67 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
109 IPs
347981 events
2026-07-22 — ongoing · 109 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
61 IPs
163811 events
2026-07-15 — ongoing · 61 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
58 IPs
105793 events
2026-07-15 — ongoing · 58 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
15 IPs
34212 events
2026-07-02 — ongoing · 15 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
36 IPs
13982 events
2026-07-01 — ongoing · 36 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
69 IPs
53758 events
2026-06-09 — ongoing · 69 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
77 IPs
181674 events
2026-06-09 — ongoing · 77 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
72 IPs
126494 events
2026-05-27 — ongoing · 72 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
13 IPs
107686 events
2026-05-25 — ongoing · 13 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
61 IPs
196746 events
2026-05-10 — ongoing · 61 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
61 IPs
220193 events
2026-05-03 — ongoing · 61 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
35 IPs
28345 events
2026-05-02 — ongoing · 35 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
42 IPs
35178 events
2026-05-01 — ongoing · 42 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
23 IPs
23954 events
2026-04-27 — ongoing · 23 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
55 IPs
13512 events
2026-04-18 — ongoing · 55 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
61 IPs
14478 events
2026-04-15 — ongoing · 61 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
68 IPs
189385 events
2026-04-14 — ongoing · 68 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
37 IPs
15048 events
2026-04-13 — ongoing · 37 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
79 IPs
195858 events
2026-04-07 — ongoing · 79 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
125 IPs
392949 events
2026-04-01 — ongoing · 125 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
39 IPs
6262 events
2026-03-30 — ongoing · 39 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
42 IPs
7665 events
2026-03-28 — ongoing · 42 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
115 IPs
249644 events
2026-03-28 — ongoing · 115 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
103 IPs
309465 events
2026-03-28 — ongoing · 103 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
91 IPs
288101 events
2026-03-28 — ongoing · 91 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
68 IPs
17179 events
2026-03-28 — ongoing · 68 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
101 IPs
263917 events
2026-03-28 — ongoing · 101 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
55 IPs
18612 events
2026-03-28 — ongoing · 55 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
96 IPs
271636 events
2026-03-28 — ongoing · 96 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
61 IPs
21270 events
2026-03-28 — ongoing · 61 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Cloudflare. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
83 IPs
97334 events
2026-03-28 — ongoing · 83 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
108 IPs
281127 events
2026-03-28 — ongoing · 108 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
97 IPs
277543 events
2026-03-28 — ongoing · 97 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
67 IPs
194472 events
2026-03-28 — ongoing · 67 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
56 IPs
38215 events
2026-03-25 — ongoing · 56 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
67 IPs
205358 events
2026-03-14 — ongoing · 67 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
63 IPs
131180 events
2026-03-12 — ongoing · 63 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
AS14956 RouterHosting LLC
ASN
Active
medium
🇺🇸 US
5 IPs
2788 events
ftp:bruteforcessh:bruteforce
2026-03-11 — 2026-07-28 · 5 IPs from the same network (RouterHosting LLC, AS14956) were active during overlapping time periods. Temporal correlation across …
Multi-Agent Scan
SCAN
Active
medium
86 IPs
196296 events
2026-03-09 — ongoing · 86 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
59 IPs
25146 events
2026-03-09 — ongoing · 59 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
62 IPs
163059 events
2026-03-09 — ongoing · 62 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
56 IPs
69919 events
2026-03-08 — ongoing · 56 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
55 IPs
38876 events
2026-03-04 — ongoing · 55 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
60 IPs
21755 events
2026-03-04 — ongoing · 60 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
70 IPs
124661 events
2026-03-03 — ongoing · 70 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
4 IPs
1088 events
2026-03-03 — ongoing · 4 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
52 IPs
165271 events
2026-03-02 — ongoing · 52 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
42 IPs
60399 events
2026-03-02 — ongoing · 42 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
50 IPs
75965 events
2026-03-02 — ongoing · 50 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Cloudflare. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
44 IPs
38955 events
2026-03-01 — ongoing · 44 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
114 IPs
341301 events
2026-02-27 — ongoing · 114 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
64 IPs
193798 events
2026-02-26 — ongoing · 64 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
80 IPs
179226 events
2026-02-26 — ongoing · 80 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
102 IPs
274474 events
2026-02-26 — ongoing · 102 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
119 IPs
286760 events
2026-02-26 — ongoing · 119 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
62 IPs
200238 events
2026-02-26 — ongoing · 62 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
61 IPs
177261 events
2026-02-26 — ongoing · 61 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
64 IPs
191423 events
2026-02-26 — ongoing · 64 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
63 IPs
51771 events
2026-02-24 — ongoing · 63 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
96 IPs
334604 events
2026-02-24 — ongoing · 96 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
62 IPs
223072 events
2026-02-24 — ongoing · 62 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
66 IPs
206238 events
2026-02-24 — ongoing · 66 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
59 IPs
205558 events
2026-02-24 — ongoing · 59 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
71 IPs
281821 events
2026-02-24 — ongoing · 71 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
74 IPs
199185 events
2026-02-24 — ongoing · 74 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
32 IPs
6562 events
2026-02-23 — ongoing · 32 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
84 IPs
241488 events
2026-02-22 — ongoing · 84 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Session Forensics
Sessions
63
Avg Depth Score
0.2
Commands Executed
0
Files Downloaded
0
Evidence Timeline
FTP Probe
647fbbbebb93eec1
1
20%
Loading events...
FTP Probe
b66bc217ec475264
1
20%
Loading events...
FTP Probe
679e1735aaecca7c
1
20%
Loading events...
FTP Probe
39193fed9ed6390d
1
20%
Loading events...
FTP Probe
30a9d0dac1187df4
1
20%
Loading events...
FTP Probe
f97e13bf7d115c0c
1
20%
Loading events...
FTP Probe
1026d224e5856032
1
20%
Loading events...
FTP Probe
fe1605d8fbba51bb
1
20%
Loading events...
FTP Probe
9c5b87bebb7e53bd
1
20%
Loading events...
FTP Probe
f39104e1f98f23f6
1
20%
Loading events...
FTP Probe
a203967f2e6320ee
1
20%
Loading events...
FTP Probe
fd276e9c9db02eaa
1
20%
Loading events...
FTP Probe
071e8e93f5d6a20a
1
20%
Loading events...
FTP Probe
2a106a3a10812e41
1
20%
Loading events...
FTP Probe
ddbc36646a7ba89a
1
20%
Loading events...
FTP Probe
8483ea90d4455002
1
20%
Loading events...
FTP Probe
51c7893f7062aded
1
20%
Loading events...
FTP Probe
8065e82cd0d54735
1
20%
Loading events...
FTP Probe
c75f43d34f11a0ef
1
20%
Loading events...
FTP Probe
d4589077798bab17
1
20%
Loading events...
FTP Probe
2e52c8a3b085d7d2
1
20%
Loading events...
FTP Probe
541fa1c7818890a0
1
20%
Loading events...
FTP Probe
20541892304cf798
1
20%
Loading events...
FTP Probe
05d837b5c648e852
1
20%
Loading events...
FTP Probe
d475fa1a5364e606
1
20%
Loading events...
FTP Probe
da1313eda0c2416a
1
20%
Loading events...
FTP Probe
6378b86fde983a61
1
20%
Loading events...
FTP Probe
fdb9a8ea5cb6b556
1
20%
Loading events...
FTP Probe
5c5e7ea5ff97823f
1
20%
Loading events...
FTP Probe
eaa0dc5a747dc97e
1
20%
Loading events...
FTP Probe
f8e808cc69718648
1
20%
Loading events...
FTP Probe
3903391531c7536b
1
20%
Loading events...
FTP Probe
2b622ef4b8f64fe2
1
20%
Loading events...
FTP Probe
8dd04809a1b5cd68
1
20%
Loading events...
FTP Probe
86cd3db51cf2776e
1
20%
Loading events...
FTP Probe
d68327ec8cd45255
1
20%
Loading events...
FTP Probe
68d67b7ca0be9bb3
1
20%
Loading events...
FTP Probe
4235204bcdd6ab6e
1
20%
Loading events...
FTP Probe
21e9c15f22543cc6
1
20%
Loading events...
FTP Probe
a6c79a9305f8d78f
1
20%
Loading events...
FTP Probe
d6342944fbedceb2
1
20%
Loading events...
FTP Probe
8ea81e2dabca7419
1
20%
Loading events...
FTP Probe
41fedce2cae4a86e
1
20%
Loading events...
FTP Probe
c9b3727f3b6fcc49
1
20%
Loading events...
FTP Probe
351cf2b6fa2eaf76
1
20%
Loading events...
FTP Probe
aecfeef2b9498f3e
1
20%
Loading events...
FTP Probe
cbcc1b87515ab73b
1
20%
Loading events...
FTP Probe
3f7c5cf3dd51bcc2
1
20%
Loading events...
FTP Probe
17fe186dd05e0c8e
1
20%
Loading events...
FTP Probe
63d640ab16b5164a
1
20%
Loading events...
Non-Session Events
| Timestamp | Port | Proto | Event | Source | Location |
|---|---|---|---|---|---|
| 2026-08-27 12:21:20 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-27 11:59:19 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-27 11:37:22 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-27 11:15:30 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-27 10:53:45 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-27 10:31:47 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-27 10:09:50 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-27 09:47:53 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-27 09:26:06 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-27 09:04:14 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-27 08:42:17 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-27 08:20:22 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-27 07:58:30 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-27 07:36:34 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-27 07:14:45 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-27 06:52:51 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-27 06:31:15 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-27 06:09:59 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-27 05:48:10 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-27 05:26:19 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-27 05:04:23 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-27 04:42:27 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-27 04:20:30 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-27 03:58:33 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-27 03:36:40 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-27 03:14:43 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-27 02:52:47 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-27 02:30:56 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-27 02:09:08 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-27 01:47:14 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-27 01:25:19 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-27 01:03:23 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-27 00:41:38 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-27 00:19:53 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-26 23:58:03 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-26 23:36:18 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-26 23:14:28 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-26 22:52:53 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-26 22:31:08 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-26 22:09:18 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-26 21:47:33 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-26 17:44:22 | :21 | ftp | FTP connection | opencanary | sea |
| 2026-08-26 17:22:51 | :21 | ftp | FTP connection | opencanary | sea |
| 2026-08-26 17:01:11 | :21 | ftp | FTP connection | opencanary | sea |
| 2026-08-26 16:39:33 | :21 | ftp | FTP connection | opencanary | sea |
| 2026-08-26 16:17:45 | :21 | ftp | FTP connection | opencanary | sea |
| 2026-08-26 15:56:00 | :21 | ftp | FTP connection | opencanary | sea |
| 2026-08-26 15:34:13 | :21 | ftp | FTP connection | opencanary | sea |
| 2026-08-26 15:11:23 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-26 10:32:52 | :21 | ftp | FTP connection | opencanary | ewr |