IntrusionLabs IntrusionLabs
← Back to feed

71.6.146.130

Threat Confidence
58%
Location
🇺🇸 US
ASN
AS10439 · CariNet, Inc.
Cloud Provider
—
Total Events
12
Average by volume
Agent Count
3
First / Last Seen
2026-04-27 23:25 — 2026-09-07 13:07
Attack Types
ftp:bruteforce http:scan ssh:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
T1595 T1595.002
Initial Access
T1190
Credential Access
T1110 T1110.001
Discovery
T1046
External Corroboration
Blocklist.de
Reported 2026-09-07 16:01
blocklist_de:reported
Campaigns
Multi-Agent Scan SCAN Active medium
50 IPs 71951 events
2026-08-03 — ongoing · 50 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
88 IPs 371291 events
2026-07-05 — ongoing · 88 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
35 IPs 220493 events
2026-03-11 — ongoing · 35 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
3 IPs 1147 events
2026-02-26 — ongoing · 3 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
69 IPs 286241 events
2026-02-26 — ongoing · 69 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
AS10439 CariNet, Inc. ASN Active medium 🇺🇸 US
6 IPs 250 events
ftp:bruteforcehttp:scanssh:bruteforce
2026-02-23 — ongoing · 6 IPs from the same network (CariNet, Inc., AS10439) were active during overlapping time periods. Temporal correlation across …
Multi-Agent Scan SCAN Active medium
72 IPs 134705 events
2026-02-22 — ongoing · 72 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Session Forensics
scanner ×2 ftp_probe ×3 web_probe ×1
Sessions
6
Avg Depth Score
0.19
Commands Executed
0
Files Downloaded
0
Fingerprints
HASSH
a704be057881f0b1d623cd263e477a8b
SSH Client
SSH-2.0-paramiko_2.11.0
Evidence Timeline
FTP Probe 2dc1db8c596c66a5 newark_01 · 2026-09-07 13:07
1 20%
Loading events...
FTP Probe 87d7f27aa15a6f5e w4m_singapore_01 · 2026-09-07 10:46
1 20%
Loading events...
Scanner 714556c5edcc w4m_seattle_01 · 2026-08-26 10:37
15%
Loading events...
Scanner cc92604b8d54 w4m_seattle_01 · 2026-08-26 10:37
15%
Loading events...
FTP Probe bd1f7bd1ac6c247f w4m_singapore_01 · 2026-07-26 20:42
1 20%
Loading events...
Web Probe 5ed2658a7b1ba1fd newark_01 · 2026-04-27 23:25
25%
Loading events...
Non-Session Events
Timestamp Port Proto Event Source Location
2026-09-07 13:07:08 :21 ftp FTP connection opencanary ewr
2026-09-07 10:46:46 :21 ftp FTP connection opencanary sin
2026-07-26 20:42:50 :21 ftp FTP connection opencanary sin
{# Cloudflare Web Analytics — cookieless, public pages only. The context processor withholds the token from authenticated requests. #}