← Back to feed

5.189.169.20

TAGGED SUSPICIOUS how we decide →

Threat Confidence

31%

Location

🇫🇷 FR / Lauterbourg

ASN

AS51167 · Contabo GmbH

Cloud Provider

—

Total Events

Below average by volume

Agent Count

First / Last Seen

2026-09-15 06:50 — 2026-09-15 12:29

Attack Types

ftp:bruteforce

MITRE ATT&CK Techniques

Reconnaissance

T1595.002

Credential Access

T1110 T1110.001

External Corroboration

Blocklist.de

Reported 2026-09-15 17:01

blocklist_de:reported

Campaigns

AS51167 Contabo GmbH ASN Active medium 🇫🇷 FR

12 IPs 75 events

ftp:bruteforcehttp:scanssh:bruteforce

2026-02-18 — ongoing · 12 IPs from the same network (Contabo GmbH, AS51167) were active during overlapping time periods. Temporal correlation across …

Session Forensics

ftp_probe ×5

Sessions

Avg Depth Score

0.2

Commands Executed

Files Downloaded

Evidence Timeline

FTP Probe 013c2928e475be27 newark_01 · 2026-09-15 12:29

1 20%

Loading events...

FTP Probe a6a3aead5c6031d7 newark_01 · 2026-09-15 07:18

1 20%

Loading events...

FTP Probe 00ca61dd3122fef2 newark_01 · 2026-09-15 06:56

1 20%

Loading events...

FTP Probe 1a3a04efc3f50134 newark_01 · 2026-09-15 06:50

1 20%

Loading events...

FTP Probe 2d07cd4d467b0485 newark_01 · 2026-09-14 00:48

1 20%

Loading events...

Non-Session Events

Timestamp	Port	Proto	Event	Source	Location
2026-09-15 12:29:08	:21	ftp	FTP connection	opencanary	ewr
2026-09-15 07:18:13	:21	ftp	FTP connection	opencanary	ewr
2026-09-15 06:56:47	:21	ftp	FTP connection	opencanary	ewr
2026-09-15 06:50:42	:21	ftp	FTP connection	opencanary	ewr
2026-09-14 00:48:14	:21	ftp	FTP connection	opencanary	ewr