IntrusionLabs IntrusionLabs
← Back to feed

20.113.56.22

Threat Confidence
27%
Location
🇩🇪 DE / Frankfurt am Main
ASN
AS8075 · Microsoft Corporation
Cloud Provider
Microsoft Azure
Total Events
30
Average by volume
Agent Count
2
First / Last Seen
2026-07-26 09:51 — 2026-08-03 01:11
Attack Types
http:scan
MITRE ATT&CK Techniques
Reconnaissance
T1595.002
Initial Access
T1190
External Corroboration
Not flagged by any external feeds
Campaigns
Multi-Agent Scan SCAN Active medium
3 IPs 192 events
2026-07-04 — ongoing · 3 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan SCAN Active medium
101 IPs 306053 events
2026-07-04 — ongoing · 101 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
18 IPs 6321 events
2026-07-04 — ongoing · 18 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
125 IPs 292886 events
2026-06-28 — ongoing · 125 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
46 IPs 70902 events
2026-06-24 — ongoing · 46 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
93 IPs 382054 events
2026-04-24 — ongoing · 93 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Cloudflare. Scanning the same …
Multi-Agent Scan SCAN Active medium
14 IPs 5998 events
2026-04-09 — ongoing · 14 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
47 IPs 32120 events
2026-03-30 — ongoing · 47 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
10 IPs 5848 events
2026-03-30 — ongoing · 10 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
117 IPs 215939 events
2026-03-09 — ongoing · 117 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
127 IPs 242354 events
2026-03-09 — ongoing · 127 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
113 IPs 248566 events
2026-03-09 — ongoing · 113 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
109 IPs 241446 events
2026-03-09 — ongoing · 109 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
152 IPs 286001 events
2026-03-09 — ongoing · 152 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
73 IPs 287421 events
2026-03-07 — ongoing · 73 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
75 IPs 313781 events
2026-03-07 — ongoing · 75 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
111 IPs 216935 events
2026-03-07 — ongoing · 111 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
78 IPs 323933 events
2026-03-07 — ongoing · 78 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
60 IPs 155147 events
2026-03-07 — ongoing · 60 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
84 IPs 342131 events
2026-03-07 — ongoing · 84 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
33 IPs 161740 events
2026-03-07 — ongoing · 33 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Cloudflare. Scanning the same …
Multi-Agent Scan SCAN Active medium
103 IPs 453255 events
2026-03-07 — ongoing · 103 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
84 IPs 220470 events
2026-03-07 — ongoing · 84 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
134 IPs 564552 events
2026-03-05 — ongoing · 134 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
113 IPs 236907 events
2026-03-04 — ongoing · 113 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
123 IPs 330671 events
2026-03-04 — ongoing · 123 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
99 IPs 264105 events
2026-03-04 — ongoing · 99 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
116 IPs 216614 events
2026-03-04 — ongoing · 116 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
109 IPs 315117 events
2026-03-04 — ongoing · 109 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
84 IPs 140275 events
2026-03-04 — ongoing · 84 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
104 IPs 217551 events
2026-03-04 — ongoing · 104 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
120 IPs 241630 events
2026-02-28 — ongoing · 120 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
79 IPs 116844 events
2026-02-28 — ongoing · 79 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
98 IPs 333830 events
2026-02-27 — ongoing · 98 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
105 IPs 238280 events
2026-02-27 — ongoing · 105 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
103 IPs 216523 events
2026-02-24 — ongoing · 103 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
30 IPs 10558 events
2026-02-23 — ongoing · 30 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
20 IPs 58233 events
2026-02-23 — ongoing · 20 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
66 IPs 190115 events
2026-02-22 — ongoing · 66 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Session Forensics
web_probe ×30
Sessions
30
Avg Depth Score
0.25
Commands Executed
0
Files Downloaded
0
Evidence Timeline
Web Probe 8d2ee0c19a478764 w4m_singapore_01 · 2026-08-03 01:11
25%
Loading events...
Web Probe 78fa380242c1765f w4m_singapore_01 · 2026-08-03 01:11
25%
Loading events...
Web Probe 83d2e15e1b308860 w4m_singapore_01 · 2026-08-03 01:11
25%
Loading events...
Web Probe 2bf3e35129a7e252 newark_01 · 2026-08-02 13:18
25%
Loading events...
Web Probe 1ef38ba6f6e6f890 newark_01 · 2026-08-02 13:18
25%
Loading events...
Web Probe 83d81af5879620d8 newark_01 · 2026-08-02 13:18
25%
Loading events...
Web Probe db12b7d1e7cf3c25 w4m_singapore_01 · 2026-08-01 18:15
25%
Loading events...
Web Probe cd7c2e761b915575 w4m_singapore_01 · 2026-08-01 18:15
25%
Loading events...
Web Probe 8fc23d71ffc995e9 w4m_singapore_01 · 2026-08-01 18:15
25%
Loading events...
Web Probe 2dbeab7420cdee77 w4m_singapore_01 · 2026-08-01 18:02
25%
Loading events...
Web Probe 067e421f9abf61ec w4m_singapore_01 · 2026-08-01 18:02
25%
Loading events...
Web Probe a5dddc5940bcb144 w4m_singapore_01 · 2026-08-01 18:02
25%
Loading events...
Web Probe 7b526d610dee6e31 newark_01 · 2026-07-26 09:51
25%
Loading events...
Web Probe 0d3eb0aca840791b newark_01 · 2026-07-26 09:51
25%
Loading events...
Web Probe 34eaefde939af5aa newark_01 · 2026-07-26 09:51
25%
Loading events...
Web Probe 0fee8a019d974e85 newark_01 · 2026-07-26 09:51
25%
Loading events...
Web Probe 18892d8dcb8b12fa newark_01 · 2026-07-26 09:51
25%
Loading events...
Web Probe 72a2b6276dea294c newark_01 · 2026-07-26 09:51
25%
Loading events...
Web Probe 302f063d3b5f6ece newark_01 · 2026-07-26 09:51
25%
Loading events...
Web Probe 514752eca2ee5760 newark_01 · 2026-07-26 09:51
25%
Loading events...
Web Probe 2df2fd446a9f9ec7 newark_01 · 2026-07-26 09:51
25%
Loading events...
Web Probe 07f7cb6e9f0128e2 newark_01 · 2026-07-26 09:51
25%
Loading events...
Web Probe ea37434409b5db24 newark_01 · 2026-07-26 09:51
25%
Loading events...
Web Probe 26a83625450da3c0 newark_01 · 2026-07-26 09:51
25%
Loading events...
Web Probe 1e57dcf07fe4496b newark_01 · 2026-07-26 09:51
25%
Loading events...
Web Probe 254af7ef8aea9d6d newark_01 · 2026-07-26 09:51
25%
Loading events...
Web Probe 8ee530286818ca86 newark_01 · 2026-07-26 09:51
25%
Loading events...
Web Probe e752f2362579b25f newark_01 · 2026-07-26 09:51
25%
Loading events...
Web Probe 7ca89c7a134ca076 newark_01 · 2026-07-26 09:51
25%
Loading events...
Web Probe f76cccfbc5bd47a6 newark_01 · 2026-07-26 09:51
25%
Loading events...
Non-Session Events
Timestamp Port Proto Event Source Location
2026-08-03 01:11:32 :80 http HTTP GET request opencanary sin
2026-08-03 01:11:27 :80 http HTTP GET request opencanary sin
2026-08-03 01:11:27 :80 http HTTP GET request opencanary sin
2026-08-02 13:18:18 :80 http HTTP GET request opencanary ewr
2026-08-02 13:18:16 :80 http HTTP GET request opencanary ewr
2026-08-02 13:18:15 :80 http HTTP GET request opencanary ewr
2026-08-01 18:15:13 :80 http HTTP GET request opencanary sin
2026-08-01 18:15:07 :80 http HTTP GET request opencanary sin
2026-08-01 18:15:06 :80 http HTTP GET request opencanary sin
2026-08-01 18:02:55 :80 http HTTP GET request opencanary sin
2026-08-01 18:02:49 :80 http HTTP GET request opencanary sin
2026-08-01 18:02:49 :80 http HTTP GET request opencanary sin
2026-07-26 09:51:33 :80 http HTTP GET request opencanary ewr
2026-07-26 09:51:33 :80 http HTTP GET request opencanary ewr
2026-07-26 09:51:33 :80 http HTTP GET request opencanary ewr
2026-07-26 09:51:31 :80 http HTTP GET request opencanary ewr
2026-07-26 09:51:31 :80 http HTTP GET request opencanary ewr
2026-07-26 09:51:30 :80 http HTTP GET request opencanary ewr
2026-07-26 09:51:28 :80 http HTTP GET request opencanary ewr
2026-07-26 09:51:27 :80 http HTTP GET request opencanary ewr
2026-07-26 09:51:26 :80 http HTTP GET request opencanary ewr
2026-07-26 09:51:26 :80 http HTTP GET request opencanary ewr
2026-07-26 09:51:26 :80 http HTTP GET request opencanary ewr
2026-07-26 09:51:25 :80 http HTTP GET request opencanary ewr
2026-07-26 09:51:25 :80 http HTTP GET request opencanary ewr
2026-07-26 09:51:25 :80 http HTTP GET request opencanary ewr
2026-07-26 09:51:24 :80 http HTTP GET request opencanary ewr
2026-07-26 09:51:24 :80 http HTTP GET request opencanary ewr
2026-07-26 09:51:23 :80 http HTTP GET request opencanary ewr
2026-07-26 09:51:22 :80 http HTTP GET request opencanary ewr
{# Cloudflare Web Analytics — cookieless, public pages only. The context processor withholds the token from authenticated requests. #}