← Back to feed
Location
🇺🇸 US / Las Vegas
ASN
AS14956 · RouterHosting LLC
Cloud Provider
—
Total Events
611
Top 10% by volume
Agent Count
3
First / Last Seen
2026-08-22 13:54 — 2026-08-26 19:28
Attack Types
MITRE ATT&CK Techniques
External Corroboration
Not flagged by any external feeds
Campaigns
Subnet 45.61.170.0/24
SUBNET
Active
high
🇺🇸 US
3 IPs
714 events
ftp:bruteforce
2026-08-22 — ongoing · 3 IPs from the same /24 subnet (45.61.170.0/24) were observed attacking our sensors within the same time window. …
Multi-Agent Scan
SCAN
Active
medium
36 IPs
64604 events
2026-08-22 — ongoing · 36 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
100 IPs
259919 events
2026-08-15 — ongoing · 100 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
27 IPs
62038 events
2026-08-13 — ongoing · 27 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
67 IPs
84000 events
2026-07-31 — ongoing · 67 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
51 IPs
92904 events
2026-07-31 — ongoing · 51 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
55 IPs
95085 events
2026-07-26 — ongoing · 55 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
63 IPs
256621 events
2026-07-26 — ongoing · 63 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
83 IPs
352559 events
2026-07-25 — ongoing · 83 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
29 IPs
32936 events
2026-07-24 — ongoing · 29 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
114 IPs
356777 events
2026-07-22 — ongoing · 114 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
54 IPs
11515 events
2026-07-22 — ongoing · 54 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
109 IPs
347981 events
2026-07-22 — ongoing · 109 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
94 IPs
258949 events
2026-07-22 — ongoing · 94 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
61 IPs
163811 events
2026-07-15 — ongoing · 61 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
58 IPs
105793 events
2026-07-15 — ongoing · 58 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
64 IPs
253999 events
2026-07-05 — ongoing · 64 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
89 IPs
335366 events
2026-07-02 — ongoing · 89 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
92 IPs
326172 events
2026-07-02 — ongoing · 92 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
84 IPs
352802 events
2026-07-02 — ongoing · 84 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
87 IPs
281919 events
2026-07-02 — ongoing · 87 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
87 IPs
257914 events
2026-07-02 — ongoing · 87 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
85 IPs
340484 events
2026-07-02 — ongoing · 85 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
36 IPs
13982 events
2026-07-01 — ongoing · 36 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
59 IPs
102815 events
2026-07-01 — ongoing · 59 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
82 IPs
294533 events
2026-06-25 — ongoing · 82 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
77 IPs
181674 events
2026-06-09 — ongoing · 77 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
76 IPs
265256 events
2026-06-09 — ongoing · 76 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
111 IPs
375789 events
2026-05-06 — ongoing · 111 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
60 IPs
287928 events
2026-05-06 — ongoing · 60 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
96 IPs
389444 events
2026-05-06 — ongoing · 96 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
61 IPs
220193 events
2026-05-03 — ongoing · 61 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
35 IPs
28345 events
2026-05-02 — ongoing · 35 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
42 IPs
35178 events
2026-05-01 — ongoing · 42 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
36 IPs
104595 events
2026-04-25 — ongoing · 36 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
68 IPs
189385 events
2026-04-14 — ongoing · 68 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
79 IPs
195858 events
2026-04-07 — ongoing · 79 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
39 IPs
54816 events
2026-04-06 — ongoing · 39 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
49 IPs
66707 events
2026-04-01 — ongoing · 49 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
39 IPs
6262 events
2026-03-30 — ongoing · 39 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
38 IPs
92221 events
2026-03-30 — ongoing · 38 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
97 IPs
277543 events
2026-03-28 — ongoing · 97 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
42 IPs
7665 events
2026-03-28 — ongoing · 42 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
61 IPs
21270 events
2026-03-28 — ongoing · 61 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Cloudflare. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
108 IPs
281127 events
2026-03-28 — ongoing · 108 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
83 IPs
97334 events
2026-03-28 — ongoing · 83 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
56 IPs
38215 events
2026-03-25 — ongoing · 56 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
67 IPs
205358 events
2026-03-14 — ongoing · 67 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
63 IPs
131180 events
2026-03-12 — ongoing · 63 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
AS14956 RouterHosting LLC
ASN
Active
medium
🇺🇸 US
5 IPs
2788 events
ftp:bruteforcessh:bruteforce
2026-03-11 — 2026-07-28 · 5 IPs from the same network (RouterHosting LLC, AS14956) were active during overlapping time periods. Temporal correlation across …
Multi-Agent Scan
SCAN
Active
medium
61 IPs
268303 events
2026-03-09 — ongoing · 61 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
38 IPs
55641 events
2026-03-09 — ongoing · 38 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
25 IPs
58671 events
2026-03-05 — ongoing · 25 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
69 IPs
285782 events
2026-03-05 — ongoing · 69 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
55 IPs
38876 events
2026-03-04 — ongoing · 55 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
24 IPs
79265 events
2026-03-04 — ongoing · 24 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
64 IPs
236614 events
2026-03-04 — ongoing · 64 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
66 IPs
67515 events
2026-03-04 — ongoing · 66 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
76 IPs
267973 events
2026-03-04 — ongoing · 76 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
78 IPs
307699 events
2026-03-04 — ongoing · 78 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
88 IPs
309218 events
2026-03-04 — ongoing · 88 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
73 IPs
220884 events
2026-03-04 — ongoing · 73 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
81 IPs
338955 events
2026-03-04 — ongoing · 81 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
21 IPs
53917 events
2026-03-03 — ongoing · 21 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
55 IPs
139901 events
2026-03-03 — ongoing · 55 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
39 IPs
77674 events
2026-03-03 — ongoing · 39 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
65 IPs
318919 events
2026-03-03 — ongoing · 65 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
60 IPs
279761 events
2026-03-02 — ongoing · 60 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
52 IPs
165271 events
2026-03-02 — ongoing · 52 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
42 IPs
60399 events
2026-03-02 — ongoing · 42 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
63 IPs
321909 events
2026-03-02 — ongoing · 63 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
50 IPs
75965 events
2026-03-02 — ongoing · 50 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Cloudflare. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
54 IPs
192581 events
2026-03-02 — ongoing · 54 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
44 IPs
38955 events
2026-03-01 — ongoing · 44 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
103 IPs
360225 events
2026-03-01 — ongoing · 103 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
62 IPs
200238 events
2026-02-26 — ongoing · 62 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
80 IPs
179226 events
2026-02-26 — ongoing · 80 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
61 IPs
177261 events
2026-02-26 — ongoing · 61 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
42 IPs
80210 events
2026-02-24 — ongoing · 42 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
59 IPs
205558 events
2026-02-24 — ongoing · 59 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
74 IPs
199185 events
2026-02-24 — ongoing · 74 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
96 IPs
334604 events
2026-02-24 — ongoing · 96 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
57 IPs
270668 events
2026-02-24 — ongoing · 57 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
62 IPs
223072 events
2026-02-24 — ongoing · 62 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
68 IPs
325963 events
2026-02-24 — ongoing · 68 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
70 IPs
273814 events
2026-02-24 — ongoing · 70 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
66 IPs
206238 events
2026-02-24 — ongoing · 66 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
71 IPs
281821 events
2026-02-24 — ongoing · 71 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
56 IPs
111526 events
2026-02-23 — ongoing · 56 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
32 IPs
6562 events
2026-02-23 — ongoing · 32 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
84 IPs
241488 events
2026-02-22 — ongoing · 84 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Session Forensics
Sessions
611
Avg Depth Score
0.2
Commands Executed
0
Files Downloaded
0
Evidence Timeline
FTP Probe
c4a14b034bef1256
1
20%
Loading events...
FTP Probe
ef9e5ef9a05e0a36
1
20%
Loading events...
FTP Probe
456a79701feabc97
1
20%
Loading events...
FTP Probe
4813dd4a3a0f294d
1
20%
Loading events...
FTP Probe
40cd605194fcfb22
1
20%
Loading events...
FTP Probe
16c3844a44a50b49
1
20%
Loading events...
FTP Probe
40e023e5c64798c9
1
20%
Loading events...
FTP Probe
14b36b961188c430
1
20%
Loading events...
FTP Probe
0d9a8b50de4be878
1
20%
Loading events...
FTP Probe
fc727b5fb3d89755
1
20%
Loading events...
FTP Probe
d1f1be51dc274422
1
20%
Loading events...
FTP Probe
49c254e875cedd67
1
20%
Loading events...
FTP Probe
3185b00de06b4d2f
1
20%
Loading events...
FTP Probe
c7ec248bb9ac1857
1
20%
Loading events...
FTP Probe
702e03bf3ea4bfd3
1
20%
Loading events...
FTP Probe
ee447048cb876a4d
1
20%
Loading events...
FTP Probe
aec1f37c0f1b33db
1
20%
Loading events...
FTP Probe
ac7a7d7c881a37bc
1
20%
Loading events...
FTP Probe
002476a5626e7a73
1
20%
Loading events...
FTP Probe
a537350980d2fc25
1
20%
Loading events...
FTP Probe
88c9573ad1c43fa3
1
20%
Loading events...
FTP Probe
721b2b9dba3bf6da
1
20%
Loading events...
FTP Probe
b5b02205c8a5c179
1
20%
Loading events...
FTP Probe
3edb40d0e555f538
1
20%
Loading events...
FTP Probe
2f976e242312317c
1
20%
Loading events...
FTP Probe
f2572696090dad61
1
20%
Loading events...
FTP Probe
9bd9062a79da62d1
1
20%
Loading events...
FTP Probe
e2c01ead1e82ef2b
1
20%
Loading events...
FTP Probe
4103ea024fb118aa
1
20%
Loading events...
FTP Probe
f2157bb054927fe0
1
20%
Loading events...
FTP Probe
44fe9d09ba145ad5
1
20%
Loading events...
FTP Probe
d39ac7329c759b2d
1
20%
Loading events...
FTP Probe
ad1e37f93a9d54a4
1
20%
Loading events...
FTP Probe
8d306ff4b4c86d86
1
20%
Loading events...
FTP Probe
90b3688bbc99f623
1
20%
Loading events...
FTP Probe
d68d4f1a9fff8c66
1
20%
Loading events...
FTP Probe
b381479dea432dc6
1
20%
Loading events...
FTP Probe
7a5e2515b272899a
1
20%
Loading events...
FTP Probe
5b0f04d0577a788e
1
20%
Loading events...
FTP Probe
d0dc57df96068bc0
1
20%
Loading events...
FTP Probe
1347698c7f11b63d
1
20%
Loading events...
FTP Probe
a20309bd312510a8
1
20%
Loading events...
FTP Probe
9fa21b823ba4210b
1
20%
Loading events...
FTP Probe
9b9650772a82ddec
1
20%
Loading events...
FTP Probe
d97af3a97e608f5e
1
20%
Loading events...
FTP Probe
36c4f3b15ce4bdf0
1
20%
Loading events...
FTP Probe
c7eeedec44c34871
1
20%
Loading events...
FTP Probe
b480cc4aa5feaf83
1
20%
Loading events...
FTP Probe
916bc2f21c93a3e8
1
20%
Loading events...
FTP Probe
aa6f3f1cf451cd19
1
20%
Loading events...
Non-Session Events
| Timestamp | Port | Proto | Event | Source | Location |
|---|---|---|---|---|---|
| 2026-08-26 19:28:21 | :21 | ftp | FTP connection | opencanary | sea |
| 2026-08-26 18:45:03 | :21 | ftp | FTP connection | opencanary | sea |
| 2026-08-23 16:41:49 | :21 | ftp | FTP connection | opencanary | ewr |
| 2026-08-23 16:18:32 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-23 16:16:56 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-23 16:15:19 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-23 16:13:42 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-23 16:12:05 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-23 16:10:28 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-23 16:08:52 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-23 16:07:15 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-23 16:05:41 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-23 16:04:06 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-23 16:02:30 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-23 16:00:54 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-23 15:59:16 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-23 15:57:39 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-23 15:56:02 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-23 15:54:25 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-23 15:52:50 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-23 15:51:14 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-23 15:49:36 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-23 15:47:59 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-23 15:46:21 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-23 15:44:44 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-23 15:43:08 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-23 15:41:31 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-23 15:39:55 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-23 15:38:18 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-23 15:36:42 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-23 15:35:04 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-23 15:33:28 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-23 15:31:51 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-23 15:30:16 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-23 15:28:38 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-23 15:27:02 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-23 15:25:26 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-23 15:23:48 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-23 15:22:11 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-23 15:20:34 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-23 15:18:58 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-23 15:17:22 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-23 15:15:45 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-23 15:14:09 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-23 15:12:33 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-23 15:10:57 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-23 15:09:20 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-23 15:07:43 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-23 15:06:05 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-23 15:04:28 | :21 | ftp | FTP connection | opencanary | sin |