IntrusionLabs IntrusionLabs
← Back to feed

172.213.8.106

Threat Confidence
26%
Location
🇮🇹 IT / Milan
ASN
AS8075 · Microsoft Corporation
Cloud Provider
Microsoft Azure
Total Events
19
Average by volume
Agent Count
2
First / Last Seen
2026-07-26 22:50 — 2026-07-31 23:33
Attack Types
http:scan
MITRE ATT&CK Techniques
Reconnaissance
T1595.002
Initial Access
T1190
External Corroboration
Not flagged by any external feeds
Campaigns
Multi-Agent Scan SCAN Active medium
96 IPs 421829 events
2026-07-29 — ongoing · 96 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
94 IPs 273305 events
2026-07-27 — ongoing · 94 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan SCAN Active medium
36 IPs 98872 events
2026-07-23 — ongoing · 36 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
107 IPs 365511 events
2026-07-02 — ongoing · 107 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
28 IPs 109686 events
2026-06-29 — ongoing · 28 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan SCAN Active medium
22 IPs 35900 events
2026-04-18 — ongoing · 22 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
47 IPs 32120 events
2026-03-30 — ongoing · 47 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
87 IPs 241511 events
2026-03-20 — ongoing · 87 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
73 IPs 287421 events
2026-03-07 — ongoing · 73 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
103 IPs 453255 events
2026-03-07 — ongoing · 103 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
121 IPs 430104 events
2026-03-07 — ongoing · 121 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
87 IPs 279396 events
2026-03-07 — ongoing · 87 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
50 IPs 184362 events
2026-03-07 — ongoing · 50 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
84 IPs 220470 events
2026-03-07 — ongoing · 84 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
96 IPs 289695 events
2026-03-07 — ongoing · 96 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
131 IPs 643095 events
2026-03-07 — ongoing · 131 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
139 IPs 675253 events
2026-03-06 — ongoing · 139 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
134 IPs 564552 events
2026-03-05 — ongoing · 134 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
98 IPs 333830 events
2026-02-27 — ongoing · 98 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
118 IPs 521779 events
2026-02-24 — ongoing · 118 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Session Forensics
web_probe ×19
Sessions
19
Avg Depth Score
0.25
Commands Executed
0
Files Downloaded
0
Evidence Timeline
Web Probe 3cbcdd817cc8e882 w4m_singapore_01 · 2026-07-31 23:33
25%
Loading events...
Web Probe 1cdab881136371e7 w4m_singapore_01 · 2026-07-31 23:33
25%
Loading events...
Web Probe b5ba3d56801457b8 w4m_singapore_01 · 2026-07-31 23:33
25%
Loading events...
Web Probe e27fe0cf72f5576f w4m_singapore_01 · 2026-07-31 23:33
25%
Loading events...
Web Probe 930c420ea9a45984 w4m_singapore_01 · 2026-07-31 23:33
25%
Loading events...
Web Probe 0d410707900e8426 w4m_singapore_01 · 2026-07-31 23:33
25%
Loading events...
Web Probe 84393c1c521dd277 w4m_singapore_01 · 2026-07-31 23:33
25%
Loading events...
Web Probe 42c399f18e0c111a w4m_singapore_01 · 2026-07-31 23:33
25%
Loading events...
Web Probe e1b30994c8e0b50b w4m_singapore_01 · 2026-07-31 23:33
25%
Loading events...
Web Probe 7ab45365640af63f w4m_singapore_01 · 2026-07-31 23:33
25%
Loading events...
Web Probe 684b7aec4ed8133a w4m_singapore_01 · 2026-07-31 23:33
25%
Loading events...
Web Probe aa20859c85a3c688 newark_01 · 2026-07-26 22:50
25%
Loading events...
Web Probe dd9a590b76b755dd newark_01 · 2026-07-26 22:50
25%
Loading events...
Web Probe 9308803ac3a0fd6d newark_01 · 2026-07-26 22:50
25%
Loading events...
Web Probe f298a6a729405af1 newark_01 · 2026-07-26 22:50
25%
Loading events...
Web Probe f9d3809f0fb7f98f newark_01 · 2026-07-26 22:50
25%
Loading events...
Web Probe b5f2cfdf54fe5ccf newark_01 · 2026-07-26 22:50
25%
Loading events...
Web Probe d895146e2cff6d73 newark_01 · 2026-07-26 22:50
25%
Loading events...
Web Probe 1d4383020c7ab5fe newark_01 · 2026-07-26 22:50
25%
Loading events...
Non-Session Events
Timestamp Port Proto Event Source Location
2026-07-31 23:33:27 :80 http HTTP GET request opencanary sin
2026-07-31 23:33:27 :80 http HTTP GET request opencanary sin
2026-07-31 23:33:26 :80 http HTTP GET request opencanary sin
2026-07-31 23:33:26 :80 http HTTP GET request opencanary sin
2026-07-31 23:33:26 :80 http HTTP GET request opencanary sin
2026-07-31 23:33:24 :80 http HTTP GET request opencanary sin
2026-07-31 23:33:24 :80 http HTTP GET request opencanary sin
2026-07-31 23:33:22 :80 http HTTP GET request opencanary sin
2026-07-31 23:33:21 :80 http HTTP GET request opencanary sin
2026-07-31 23:33:15 :80 http HTTP GET request opencanary sin
2026-07-31 23:33:07 :80 http HTTP GET request opencanary sin
2026-07-26 22:50:55 :80 http HTTP GET request opencanary ewr
2026-07-26 22:50:53 :80 http HTTP GET request opencanary ewr
2026-07-26 22:50:52 :80 http HTTP GET request opencanary ewr
2026-07-26 22:50:51 :80 http HTTP GET request opencanary ewr
2026-07-26 22:50:49 :80 http HTTP GET request opencanary ewr
2026-07-26 22:50:47 :80 http HTTP GET request opencanary ewr
2026-07-26 22:50:47 :80 http HTTP GET request opencanary ewr
2026-07-26 22:50:46 :80 http HTTP GET request opencanary ewr
{# Cloudflare Web Analytics — cookieless, public pages only. The context processor withholds the token from authenticated requests. #}