IntrusionLabs IntrusionLabs
← Back to feed

164.52.24.185

TAGGED SUSPICIOUS how we decide →
Threat Confidence
37%
Location
🇯🇵 JP
ASN
AS63199 · CDS Global Cloud Co., Ltd
Cloud Provider
—
Total Events
6
Below average by volume
Agent Count
2
First / Last Seen
2026-02-27 13:09 — 2026-05-09 05:23
Attack Types
http:scan
MITRE ATT&CK Techniques
Reconnaissance
T1595.002
Initial Access
T1190
External Corroboration
Not flagged by any external feeds
Campaigns
Multi-Agent Scan SCAN Active medium
134 IPs 8156 events
2026-03-30 — ongoing · 134 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
44 IPs 18700 events
2026-03-16 — ongoing · 44 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
22 IPs 4115 events
2026-03-16 — ongoing · 22 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Linode. Scanning the same …
Multi-Agent Scan SCAN Active medium
63 IPs 27737 events
2026-03-16 — ongoing · 63 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
18 IPs 3013 events
2026-03-14 — ongoing · 18 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
24 IPs 2102 events
2026-03-13 — ongoing · 24 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Linode. Scanning the same …
Multi-Agent Scan SCAN Active medium
19 IPs 3648 events
2026-03-06 — ongoing · 19 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
61 IPs 14130 events
2026-03-05 — ongoing · 61 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
74 IPs 117979 events
2026-02-27 — ongoing · 74 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
247 IPs 23632 events
2026-02-25 — ongoing · 247 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
196 IPs 22524 events
2026-02-23 — ongoing · 196 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Session Forensics
web_probe ×6
Sessions
6
Avg Depth Score
0.25
Commands Executed
0
Files Downloaded
0
Evidence Timeline
Web Probe deb8d83d0b11527b w4m_seattle_01 · 2026-05-09 05:23
25%
Loading events...
Web Probe 2e84712c5216757a newark_01 · 2026-05-02 09:53
25%
Loading events...
Web Probe 76719cf578655a9b w4m_seattle_01 · 2026-04-13 06:09
25%
Loading events...
Web Probe 761a1d4147ac1d85 w4m_seattle_01 · 2026-03-20 08:16
25%
Loading events...
Web Probe 0739f5c0ff96220d w4m_seattle_01 · 2026-03-09 06:44
25%
Loading events...
Web Probe fdf77117ad53b106 w4m_seattle_01 · 2026-02-27 13:09
25%
Loading events...
Non-Session Events
Timestamp Port Proto Event Source Location
2026-05-09 05:23:32 :80 http HTTP GET request opencanary sea
2026-05-02 09:53:32 :80 http HTTP GET request opencanary ewr
2026-04-13 06:09:23 :80 http HTTP GET request opencanary sea
2026-03-20 08:16:42 :80 http HTTP GET request opencanary sea
2026-03-09 06:44:34 :80 http HTTP GET request opencanary sea
2026-02-27 13:09:48 :80 http HTTP GET request opencanary sea