← Back to feed

130.12.180.117

TAGGED SUSPICIOUS how we decide →

Why: Network is on the Spamhaus ASN-DROP list, with 16 events seen by our sensors · certainty: inferred

Threat Confidence

47%

Assessment

Part of a 287-IP campaign probing the same targets.

Generated from the counts on this page by fixed rules; each line cites the number it rests on.

Location

🇳🇱 NL / Amsterdam

ASN

AS202412 · Omegatech LTD

Cloud Provider

—

Total Events

Above average by volume

Agent Count

First / Last Seen

2026-10-19 13:50 — 2026-10-20 22:48

Attack Types

http:scan

MITRE ATT&CK Techniques

Reconnaissance

T1595.002

Initial Access

T1190

External Corroboration

Blocklist.de

Reported 2026-10-20 23:01

blocklist_de:reported

Campaigns

Multi-Agent Scan SCAN Active medium

76 IPs 122978 events

2026-09-18 — ongoing · 76 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …

Multi-Agent Scan SCAN Active medium

4 IPs 59293 events

2026-07-02 — ongoing · 4 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …

Multi-Agent Scan SCAN Active medium

287 IPs 901670 events

2026-04-21 — ongoing · 287 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …

Multi-Agent Scan SCAN Active medium

209 IPs 829381 events

2026-03-24 — ongoing · 209 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Linode. Scanning the same …

Multi-Agent Scan SCAN Active medium

175 IPs 369974 events

2026-03-24 — ongoing · 175 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Linode. Scanning the same …

Multi-Agent Scan SCAN Active medium

157 IPs 608882 events

2026-03-02 — ongoing · 157 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …

Multi-Agent Scan SCAN Active medium

182 IPs 661963 events

2026-02-26 — ongoing · 182 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …

Multi-Agent Scan SCAN Active medium

188 IPs 688137 events

2026-02-26 — ongoing · 188 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …

Subnet 130.12.180.0/24 SUBNET Active high 🇳🇱 NL

5 IPs 14015 events

http:scanssh:bruteforcessh:connectionssh:intrusionssh:malwaretelnet:bruteforcetelnet:connectiontelnet:intrusiontelnet:malware

2026-02-16 — ongoing · 5 IPs from the same /24 subnet (130.12.180.0/24) were observed attacking our sensors within the same time window. …

Session Forensics

web_probe ×86

Sessions

Avg Depth Score

0.25

Commands Executed

Files Downloaded

Evidence Timeline

Web Probe d54ef7fcc0b75122 w4m_seattle_01 · 2026-10-20 22:48

25%

Loading events...

Web Probe 7f494b0e53efc6e5 w4m_seattle_01 · 2026-10-20 22:48

25%

Loading events...

Web Probe dd19b637f11daa27 w4m_seattle_01 · 2026-10-20 22:48

25%

Loading events...

Web Probe 87694deb43bd1ae0 w4m_seattle_01 · 2026-10-20 22:48

25%

Loading events...

Web Probe 23846c29f3921a54 w4m_seattle_01 · 2026-10-20 22:48

25%

Loading events...

Web Probe 62b0148094154dd4 w4m_seattle_01 · 2026-10-20 22:48

25%

Loading events...

Web Probe d846ce2c2dd3a099 w4m_seattle_01 · 2026-10-20 22:48

25%

Loading events...

Web Probe 8c9528e410484440 w4m_seattle_01 · 2026-10-20 22:48

25%

Loading events...

Web Probe 1f65d6e54ba7f848 w4m_seattle_01 · 2026-10-20 22:48

25%

Loading events...

Web Probe f842a43da88d4a5b w4m_seattle_01 · 2026-10-20 22:48

25%

Loading events...

Web Probe 16175d8491464c6b w4m_seattle_01 · 2026-10-20 22:48

25%

Loading events...

Web Probe 1b211f6313ef513e w4m_seattle_01 · 2026-10-20 22:48

25%

Loading events...

Web Probe bde5432db3aaa898 w4m_seattle_01 · 2026-10-20 22:48

25%

Loading events...

Web Probe 826dc1b504815c58 w4m_seattle_01 · 2026-10-20 22:48

25%

Loading events...

Web Probe 328b261676b69b57 w4m_seattle_01 · 2026-10-20 22:48

25%

Loading events...

Web Probe ae63dd03d1a4f134 w4m_seattle_01 · 2026-10-20 22:48

25%

Loading events...

Web Probe b7bf48815f99b7ab w4m_seattle_01 · 2026-10-20 22:48

25%

Loading events...

Web Probe 0b034c07cc771757 w4m_seattle_01 · 2026-10-20 22:48

25%

Loading events...

Web Probe 43a7644c804718b7 w4m_seattle_01 · 2026-10-20 22:48

25%

Loading events...

Web Probe 28a70ccbf1602efc w4m_seattle_01 · 2026-10-20 22:48

25%

Loading events...

Web Probe 8f66d449c98079db w4m_seattle_01 · 2026-10-20 22:48

25%

Loading events...

Web Probe fddded639aaa824d w4m_seattle_01 · 2026-10-20 22:48

25%

Loading events...

Web Probe 0ebaf8ec15e0bc29 w4m_seattle_01 · 2026-10-20 22:47

25%

Loading events...

Web Probe 3b65a217b7afb4cd w4m_seattle_01 · 2026-10-20 22:47

25%

Loading events...

Web Probe 880b84507d75b378 w4m_seattle_01 · 2026-10-20 22:47

25%

Loading events...

Web Probe 49a24f07763a3756 w4m_seattle_01 · 2026-10-20 22:47

25%

Loading events...

Web Probe a094ec28ed2dd6c0 w4m_seattle_01 · 2026-10-20 22:47

25%

Loading events...

Web Probe 3bed94c4fec2fea5 w4m_seattle_01 · 2026-10-20 22:47

25%

Loading events...

Web Probe 2360f800baabb26b w4m_seattle_01 · 2026-10-20 22:47

25%

Loading events...

Web Probe d098cfa5f1fda297 w4m_seattle_01 · 2026-10-20 22:47

25%

Loading events...

Web Probe 6e8a40ab834c83bc w4m_seattle_01 · 2026-10-20 22:47

25%

Loading events...

Web Probe f9db073c8fd72271 w4m_seattle_01 · 2026-10-20 22:47

25%

Loading events...

Web Probe 313cb13d54d40876 w4m_seattle_01 · 2026-10-20 22:47

25%

Loading events...

Web Probe ea9448f5f33fab77 w4m_seattle_01 · 2026-10-20 22:47

25%

Loading events...

Web Probe 02ba245a09129d49 w4m_seattle_01 · 2026-10-20 22:47

25%

Loading events...

Web Probe 83c5cf46a81e819a w4m_seattle_01 · 2026-10-20 22:47

25%

Loading events...

Web Probe 1bd1d8e9a2fcbafd w4m_seattle_01 · 2026-10-20 22:47

25%

Loading events...

Web Probe 3468753e67fc4fc4 w4m_seattle_01 · 2026-10-20 22:47

25%

Loading events...

Web Probe 174408922f54d89e w4m_seattle_01 · 2026-10-20 22:47

25%

Loading events...

Web Probe 424d4c460a312985 w4m_seattle_01 · 2026-10-20 22:47

25%

Loading events...

Web Probe 1fb091dadcb49a27 w4m_seattle_01 · 2026-10-20 22:47

25%

Loading events...

Web Probe e7bfd2440abcd6ae w4m_seattle_01 · 2026-10-20 22:47

25%

Loading events...

Web Probe 1207ee186e1fce53 w4m_seattle_01 · 2026-10-20 22:47

25%

Loading events...

Web Probe c5455f11b068a21a w4m_seattle_01 · 2026-10-20 22:47

25%

Loading events...

Web Probe 03263e4c3074ff91 w4m_seattle_01 · 2026-10-20 22:47

25%

Loading events...

Web Probe 5c02f85431693d75 w4m_seattle_01 · 2026-10-20 22:47

25%

Loading events...

Web Probe 31bd3bc2086dc2bb w4m_seattle_01 · 2026-10-20 22:47

25%

Loading events...

Web Probe db0e7c8edd43edd4 w4m_seattle_01 · 2026-10-20 22:47

25%

Loading events...

Web Probe 9af06882927b649d w4m_seattle_01 · 2026-10-20 22:47

25%

Loading events...

Web Probe bb57950f970971d7 w4m_seattle_01 · 2026-10-20 22:46

25%

Loading events...

Non-Session Events

Timestamp	Port	Proto	Event	Source	Location
2026-10-20 22:48:48	:80	http	HTTP GET request	opencanary	sea
2026-10-20 22:48:46	:80	http	HTTP GET request	opencanary	sea
2026-10-20 22:48:44	:80	http	HTTP GET request	opencanary	sea
2026-10-20 22:48:42	:80	http	HTTP GET request	opencanary	sea
2026-10-20 22:48:40	:80	http	HTTP GET request	opencanary	sea
2026-10-20 22:48:37	:80	http	HTTP GET request	opencanary	sea
2026-10-20 22:48:35	:80	http	HTTP GET request	opencanary	sea
2026-10-20 22:48:33	:80	http	HTTP GET request	opencanary	sea
2026-10-20 22:48:31	:80	http	HTTP GET request	opencanary	sea
2026-10-20 22:48:28	:80	http	HTTP GET request	opencanary	sea
2026-10-20 22:48:26	:80	http	HTTP GET request	opencanary	sea
2026-10-20 22:48:24	:80	http	HTTP GET request	opencanary	sea
2026-10-20 22:48:22	:80	http	HTTP GET request	opencanary	sea
2026-10-20 22:48:19	:80	http	HTTP GET request	opencanary	sea
2026-10-20 22:48:18	:80	http	HTTP GET request	opencanary	sea
2026-10-20 22:48:15	:80	http	HTTP GET request	opencanary	sea
2026-10-20 22:48:12	:80	http	HTTP GET request	opencanary	sea
2026-10-20 22:48:11	:80	http	HTTP GET request	opencanary	sea
2026-10-20 22:48:08	:80	http	HTTP GET request	opencanary	sea
2026-10-20 22:48:06	:80	http	HTTP GET request	opencanary	sea
2026-10-20 22:48:03	:80	http	HTTP GET request	opencanary	sea
2026-10-20 22:48:01	:80	http	HTTP GET request	opencanary	sea
2026-10-20 22:47:59	:80	http	HTTP GET request	opencanary	sea
2026-10-20 22:47:56	:80	http	HTTP GET request	opencanary	sea
2026-10-20 22:47:55	:80	http	HTTP GET request	opencanary	sea
2026-10-20 22:47:52	:80	http	HTTP GET request	opencanary	sea
2026-10-20 22:47:50	:80	http	HTTP GET request	opencanary	sea
2026-10-20 22:47:48	:80	http	HTTP GET request	opencanary	sea
2026-10-20 22:47:45	:80	http	HTTP GET request	opencanary	sea
2026-10-20 22:47:43	:80	http	HTTP GET request	opencanary	sea
2026-10-20 22:47:40	:80	http	HTTP GET request	opencanary	sea
2026-10-20 22:47:39	:80	http	HTTP GET request	opencanary	sea
2026-10-20 22:47:36	:80	http	HTTP GET request	opencanary	sea
2026-10-20 22:47:33	:80	http	HTTP GET request	opencanary	sea
2026-10-20 22:47:32	:80	http	HTTP GET request	opencanary	sea
2026-10-20 22:47:29	:80	http	HTTP GET request	opencanary	sea
2026-10-20 22:47:27	:80	http	HTTP GET request	opencanary	sea
2026-10-20 22:47:25	:80	http	HTTP GET request	opencanary	sea
2026-10-20 22:47:22	:80	http	HTTP GET request	opencanary	sea
2026-10-20 22:47:20	:80	http	HTTP GET request	opencanary	sea
2026-10-20 22:47:18	:80	http	HTTP GET request	opencanary	sea
2026-10-20 22:47:16	:80	http	HTTP GET request	opencanary	sea
2026-10-20 22:47:14	:80	http	HTTP GET request	opencanary	sea
2026-10-20 22:47:12	:80	http	HTTP GET request	opencanary	sea
2026-10-20 22:47:10	:80	http	HTTP GET request	opencanary	sea
2026-10-20 22:47:07	:80	http	HTTP GET request	opencanary	sea
2026-10-20 22:47:06	:80	http	HTTP GET request	opencanary	sea
2026-10-20 22:47:03	:80	http	HTTP GET request	opencanary	sea
2026-10-20 22:47:01	:80	http	HTTP GET request	opencanary	sea
2026-10-20 22:46:59	:80	http	HTTP GET request	opencanary	sea