← Back to feed
Location
🇺🇸 US / Ogden
ASN
AS14956 · RouterHosting LLC
Cloud Provider
—
Total Events
409
Top 10% by volume
Agent Count
2
First / Last Seen
2026-08-22 14:00 — 2026-08-23 17:53
Attack Types
MITRE ATT&CK Techniques
External Corroboration
Not flagged by any external feeds
Campaigns
Multi-Agent Scan
SCAN
Active
medium
6 IPs
5937 events
2026-08-18 — ongoing · 6 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
55 IPs
95085 events
2026-07-26 — ongoing · 55 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
83 IPs
352559 events
2026-07-25 — ongoing · 83 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
84 IPs
352802 events
2026-07-02 — ongoing · 84 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
85 IPs
340484 events
2026-07-02 — ongoing · 85 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
87 IPs
281919 events
2026-07-02 — ongoing · 87 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
87 IPs
257914 events
2026-07-02 — ongoing · 87 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
82 IPs
294533 events
2026-06-25 — ongoing · 82 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
76 IPs
265256 events
2026-06-09 — ongoing · 76 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
111 IPs
375789 events
2026-05-06 — ongoing · 111 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
96 IPs
389444 events
2026-05-06 — ongoing · 96 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
39 IPs
54816 events
2026-04-06 — ongoing · 39 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
49 IPs
66707 events
2026-04-01 — ongoing · 49 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
6 IPs
1730 events
2026-03-31 — ongoing · 6 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
76 IPs
267973 events
2026-03-04 — ongoing · 76 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
88 IPs
309218 events
2026-03-04 — ongoing · 88 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
78 IPs
307699 events
2026-03-04 — ongoing · 78 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
66 IPs
67515 events
2026-03-04 — ongoing · 66 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
65 IPs
318919 events
2026-03-03 — ongoing · 65 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
60 IPs
279761 events
2026-03-02 — ongoing · 60 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
63 IPs
321909 events
2026-03-02 — ongoing · 63 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
103 IPs
360225 events
2026-03-01 — ongoing · 103 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
42 IPs
80210 events
2026-02-24 — ongoing · 42 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
67 IPs
320684 events
2026-02-24 — ongoing · 67 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
68 IPs
325963 events
2026-02-24 — ongoing · 68 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
56 IPs
111526 events
2026-02-23 — ongoing · 56 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Session Forensics
Sessions
409
Avg Depth Score
0.2
Commands Executed
0
Files Downloaded
0
Evidence Timeline
FTP Probe
8e3ccce47988fe2f
1
20%
Loading events...
FTP Probe
5b1ba1ee3a41657e
1
20%
Loading events...
FTP Probe
c6ede8c6254ae5a0
1
20%
Loading events...
FTP Probe
2c7d9fa86166f57c
1
20%
Loading events...
FTP Probe
aa571656f95c9c5a
1
20%
Loading events...
FTP Probe
d91442192369fbc0
1
20%
Loading events...
FTP Probe
84886c9e441e22b9
1
20%
Loading events...
FTP Probe
ffbbc7c4cf29b29d
1
20%
Loading events...
FTP Probe
a2ec2e8bb2fa4004
1
20%
Loading events...
FTP Probe
0dd7834800724886
1
20%
Loading events...
FTP Probe
efbb8b0ced31f530
1
20%
Loading events...
FTP Probe
f65bcc252135a90a
1
20%
Loading events...
FTP Probe
e3e6eb318c6c8107
1
20%
Loading events...
FTP Probe
fea76efa5f48865e
1
20%
Loading events...
FTP Probe
8be9c3f2db8d205e
1
20%
Loading events...
FTP Probe
9e2112f49c19e343
1
20%
Loading events...
FTP Probe
69f7c2ee3998e65c
1
20%
Loading events...
FTP Probe
ff3f1f547f44ed9c
1
20%
Loading events...
FTP Probe
98e4ceb7a253fccb
1
20%
Loading events...
FTP Probe
c8be77e00adb7f6d
1
20%
Loading events...
FTP Probe
ee87f10a192e50b6
1
20%
Loading events...
FTP Probe
bce9f8634f1253b5
1
20%
Loading events...
FTP Probe
1663891b5b91e01c
1
20%
Loading events...
FTP Probe
095bfde3704f099e
1
20%
Loading events...
FTP Probe
c4cebf20c6a02f14
1
20%
Loading events...
FTP Probe
99d695cb0d4d7633
1
20%
Loading events...
FTP Probe
bd0c578519c5ff0a
1
20%
Loading events...
FTP Probe
d2d631ef2cd2dffd
1
20%
Loading events...
FTP Probe
bd14afdbc83f61e2
1
20%
Loading events...
FTP Probe
5a405fde2a168a7b
1
20%
Loading events...
FTP Probe
7c306f5e9b939304
1
20%
Loading events...
FTP Probe
f5ec1f05b2ef1958
1
20%
Loading events...
FTP Probe
1b49bcfd811e1218
1
20%
Loading events...
FTP Probe
9c4a1f683a07aa54
1
20%
Loading events...
FTP Probe
f7747d664910326e
1
20%
Loading events...
FTP Probe
79408f062a5afabd
1
20%
Loading events...
FTP Probe
41ccdc6443841e0e
1
20%
Loading events...
FTP Probe
286896af4909cef3
1
20%
Loading events...
FTP Probe
bb647bc7d3b4f21d
1
20%
Loading events...
FTP Probe
743964c41205409f
1
20%
Loading events...
FTP Probe
b974b2b28beee424
1
20%
Loading events...
FTP Probe
648a2a454bd181d3
1
20%
Loading events...
FTP Probe
b5203a01ca309349
1
20%
Loading events...
FTP Probe
6ee2f538dd375dde
1
20%
Loading events...
FTP Probe
5528623b3bc84f21
1
20%
Loading events...
FTP Probe
7e6c0b9cf620e912
1
20%
Loading events...
FTP Probe
5e5471fc150b3d6e
1
20%
Loading events...
FTP Probe
b5cd2c86c6966567
1
20%
Loading events...
FTP Probe
8b78e93b38c4332a
1
20%
Loading events...
FTP Probe
c7f6a9e019177225
1
20%
Loading events...
Non-Session Events
| Timestamp | Port | Proto | Event | Source | Location |
|---|---|---|---|---|---|
| 2026-08-23 17:53:50 | :21 | ftp | FTP connection | opencanary | ewr |
| 2026-08-23 17:38:09 | :21 | ftp | FTP connection | opencanary | ewr |
| 2026-08-22 18:28:40 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-22 18:27:59 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-22 18:27:19 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-22 18:26:39 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-22 18:25:59 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-22 18:25:19 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-22 18:24:39 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-22 18:23:59 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-22 18:23:20 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-22 18:22:39 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-22 18:21:59 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-22 18:21:19 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-22 18:20:41 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-22 18:20:00 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-22 18:19:20 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-22 18:18:41 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-22 18:18:01 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-22 18:17:21 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-22 18:16:42 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-22 18:16:04 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-22 18:15:24 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-22 18:14:44 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-22 18:14:05 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-22 18:13:25 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-22 18:12:45 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-22 18:12:05 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-22 18:11:26 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-22 18:10:46 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-22 18:10:06 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-22 18:09:26 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-22 18:08:46 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-22 18:08:07 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-22 18:07:27 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-22 18:06:47 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-22 18:06:07 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-22 18:05:27 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-22 18:04:47 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-22 18:04:07 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-22 18:03:29 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-22 18:02:49 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-22 18:02:09 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-22 18:01:30 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-22 18:00:50 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-22 18:00:10 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-22 17:59:30 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-22 17:58:52 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-22 17:58:12 | :21 | ftp | FTP connection | opencanary | sin |
| 2026-08-22 17:57:32 | :21 | ftp | FTP connection | opencanary | sin |