IntrusionLabs IntrusionLabs
← Back to feed

185.234.9.112

miskapeplax2
Threat Confidence
41%
Assessment
  • Part of a 241-IP campaign probing the same targets.
Generated from the counts on this page by fixed rules; each line cites the number it rests on.
Location
🇳🇱 NL / Amsterdam
ASN
AS200019 · Alexhost Srl
Cloud Provider
—
Total Events
2
Below average by volume
Agent Count
2
First / Last Seen
2026-10-21 21:08 — 2026-10-22 00:11
Attack Types
http:scan
MITRE ATT&CK Techniques
Reconnaissance
T1595.002
Initial Access
T1190
External Corroboration
CINS Army
Reported 2026-10-22 00:01
cins:bad_reputation
Campaigns
Multi-Agent Scan SCAN Active medium
132 IPs 526545 events
2026-04-10 — ongoing · 132 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
241 IPs 944770 events
2026-04-10 — ongoing · 241 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
40 IPs 33654 events
2026-04-10 — ongoing · 40 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
208 IPs 898922 events
2026-03-21 — ongoing · 208 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Session Forensics
web_probe ×2
Sessions
2
Avg Depth Score
0.25
Commands Executed
0
Files Downloaded
0
Evidence Timeline
Web Probe b21a54d722bde99c newark_01 · 2026-10-22 00:11
25%
Loading events...
Web Probe 1b00c65df267c888 greencloud_phx_01 · 2026-10-21 21:08
25%
Loading events...
Non-Session Events
Timestamp Port Proto Event Source Location
2026-10-22 00:11:04 :80 http HTTP GET request opencanary ewr
2026-10-21 21:08:15 :80 http HTTP GET request opencanary phx