IntrusionLabs IntrusionLabs
← Back to feed

20.194.17.163

Threat Confidence
44%
Assessment
  • Part of a 274-IP campaign probing the same targets.
Generated from the counts on this page by fixed rules; each line cites the number it rests on.
Location
🇰🇷 KR / Seoul
ASN
AS8075 · Microsoft Corporation
Cloud Provider
Microsoft Azure
Total Events
36
Average by volume
Agent Count
2
First / Last Seen
2026-10-12 16:53 — 2026-10-18 20:02
Attack Types
http:scan
MITRE ATT&CK Techniques
Reconnaissance
T1595.002
Initial Access
T1190
External Corroboration
Blocklist.de
Reported 2026-10-19 05:01
blocklist_de:reported
Campaigns
Multi-Agent Scan SCAN Active medium
90 IPs 458271 events
2026-10-10 — ongoing · 90 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
40 IPs 53058 events
2026-10-07 — ongoing · 40 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
207 IPs 599004 events
2026-10-07 — ongoing · 207 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan SCAN Active medium
240 IPs 882738 events
2026-10-01 — ongoing · 240 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
242 IPs 970140 events
2026-10-01 — ongoing · 242 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
90 IPs 419210 events
2026-10-01 — ongoing · 90 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
188 IPs 628953 events
2026-10-01 — ongoing · 188 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
193 IPs 763077 events
2026-09-29 — ongoing · 193 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
244 IPs 944988 events
2026-09-24 — ongoing · 244 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
11 IPs 36437 events
2026-09-24 — ongoing · 11 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
39 IPs 110599 events
2026-09-24 — ongoing · 39 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
78 IPs 464103 events
2026-09-24 — ongoing · 78 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
131 IPs 360073 events
2026-09-24 — ongoing · 131 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
106 IPs 523888 events
2026-09-20 — ongoing · 106 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
241 IPs 899891 events
2026-09-16 — ongoing · 241 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
125 IPs 188440 events
2026-09-11 — ongoing · 125 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
120 IPs 380050 events
2026-09-10 — ongoing · 120 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
158 IPs 571521 events
2026-07-11 — ongoing · 158 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
10 IPs 2464 events
2026-07-05 — ongoing · 10 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
140 IPs 555662 events
2026-06-24 — ongoing · 140 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
179 IPs 810432 events
2026-06-14 — ongoing · 179 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
179 IPs 811344 events
2026-06-14 — ongoing · 179 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
223 IPs 1038507 events
2026-06-10 — ongoing · 223 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Vultr. Scanning the same …
Multi-Agent Scan SCAN Active medium
180 IPs 383221 events
2026-06-09 — ongoing · 180 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Cloudflare. Scanning the same …
Multi-Agent Scan SCAN Active medium
110 IPs 473472 events
2026-04-20 — ongoing · 110 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
79 IPs 91613 events
2026-03-28 — ongoing · 79 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
180 IPs 727013 events
2026-03-21 — ongoing · 180 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
142 IPs 669352 events
2026-03-21 — ongoing · 142 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
138 IPs 432247 events
2026-03-21 — ongoing · 138 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
205 IPs 983317 events
2026-03-21 — ongoing · 205 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
147 IPs 505500 events
2026-03-21 — ongoing · 147 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
274 IPs 1029231 events
2026-03-19 — ongoing · 274 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
132 IPs 129257 events
2026-03-19 — ongoing · 132 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
130 IPs 277405 events
2026-03-18 — ongoing · 130 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
213 IPs 317639 events
2026-03-09 — ongoing · 213 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
157 IPs 714676 events
2026-03-09 — ongoing · 157 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
256 IPs 868685 events
2026-03-02 — ongoing · 256 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
225 IPs 891880 events
2026-02-26 — ongoing · 225 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
50 IPs 177222 events
2026-02-26 — ongoing · 50 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
168 IPs 888231 events
2026-02-26 — ongoing · 168 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan SCAN Active medium
123 IPs 640462 events
2026-02-23 — ongoing · 123 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Session Forensics
web_probe ×36
Sessions
36
Avg Depth Score
0.25
Commands Executed
0
Files Downloaded
0
Evidence Timeline
Web Probe 3cc6f381cfbfea3d newark_01 · 2026-10-18 20:02
25%
Loading events...
Web Probe 386c3a62ff690e17 newark_01 · 2026-10-18 20:02
25%
Loading events...
Web Probe 6df00995da324640 newark_01 · 2026-10-18 20:02
25%
Loading events...
Web Probe 6c3ff843f9ded5b3 newark_01 · 2026-10-18 20:02
25%
Loading events...
Web Probe d5f3995abe71b445 newark_01 · 2026-10-18 20:02
25%
Loading events...
Web Probe 889c0382d04aaf5a newark_01 · 2026-10-18 20:02
25%
Loading events...
Web Probe a7592583cc6e4756 newark_01 · 2026-10-15 00:38
25%
Loading events...
Web Probe 2b0be1eb410d5e67 newark_01 · 2026-10-15 00:38
25%
Loading events...
Web Probe 9cbe155477d15629 newark_01 · 2026-10-15 00:38
25%
Loading events...
Web Probe 847c1d1a9548c71e newark_01 · 2026-10-15 00:38
25%
Loading events...
Web Probe e3fe141f98d644b1 newark_01 · 2026-10-15 00:38
25%
Loading events...
Web Probe f96f14c0041698fd newark_01 · 2026-10-15 00:38
25%
Loading events...
Web Probe f8926674abe9dfab newark_01 · 2026-10-15 00:38
25%
Loading events...
Web Probe 1347a02ffa41bbba newark_01 · 2026-10-14 21:40
25%
Loading events...
Web Probe 4ea9e9d244d39f9d newark_01 · 2026-10-14 21:40
25%
Loading events...
Web Probe f69c4ce8d6264f7e newark_01 · 2026-10-14 21:40
25%
Loading events...
Web Probe 1f2933b5ce56fad3 newark_01 · 2026-10-14 21:40
25%
Loading events...
Web Probe a9abecf5467e2e14 newark_01 · 2026-10-14 21:40
25%
Loading events...
Web Probe 5b8474fd677302f5 newark_01 · 2026-10-14 21:40
25%
Loading events...
Web Probe f89cdfd2c784cd30 newark_01 · 2026-10-14 21:40
25%
Loading events...
Web Probe 2e04a338c01cd975 greencloud_phx_01 · 2026-10-14 05:02
25%
Loading events...
Web Probe feb88f6040a04f9d greencloud_phx_01 · 2026-10-14 05:02
25%
Loading events...
Web Probe 237e694249ad59d7 greencloud_phx_01 · 2026-10-14 05:02
25%
Loading events...
Web Probe 12e4737231876ab4 greencloud_phx_01 · 2026-10-14 05:02
25%
Loading events...
Web Probe 3449c8be7ba865a7 greencloud_phx_01 · 2026-10-14 05:02
25%
Loading events...
Web Probe 03e7248f4e7b9099 greencloud_phx_01 · 2026-10-14 05:02
25%
Loading events...
Web Probe aed8e748e8da1ff6 greencloud_phx_01 · 2026-10-14 05:02
25%
Loading events...
Web Probe b88255e9030f6791 greencloud_phx_01 · 2026-10-14 05:02
25%
Loading events...
Web Probe f804840fddee026b greencloud_phx_01 · 2026-10-14 05:02
25%
Loading events...
Web Probe 1566cf64eece2c53 greencloud_phx_01 · 2026-10-12 16:54
25%
Loading events...
Web Probe 1086200de751ad92 greencloud_phx_01 · 2026-10-12 16:53
25%
Loading events...
Web Probe 8c51e1bdcbb7aa36 greencloud_phx_01 · 2026-10-12 16:53
25%
Loading events...
Web Probe 694835a03282b65b greencloud_phx_01 · 2026-10-12 16:53
25%
Loading events...
Web Probe d786428c01167784 greencloud_phx_01 · 2026-10-12 16:53
25%
Loading events...
Web Probe 58f6a0cc5e00d18e greencloud_phx_01 · 2026-10-12 16:53
25%
Loading events...
Web Probe 487a8b2d65067e7c greencloud_phx_01 · 2026-10-12 16:53
25%
Loading events...
Non-Session Events
Timestamp Port Proto Event Source Location
2026-10-18 20:02:57 :80 http HTTP GET request opencanary ewr
2026-10-18 20:02:56 :80 http HTTP GET request opencanary ewr
2026-10-18 20:02:55 :80 http HTTP GET request opencanary ewr
2026-10-18 20:02:47 :80 http HTTP GET request opencanary ewr
2026-10-18 20:02:47 :80 http HTTP GET request opencanary ewr
2026-10-18 20:02:45 :80 http HTTP GET request opencanary ewr
2026-10-15 00:38:48 :80 http HTTP GET request opencanary ewr
2026-10-15 00:38:46 :80 http HTTP GET request opencanary ewr
2026-10-15 00:38:46 :80 http HTTP GET request opencanary ewr
2026-10-15 00:38:45 :80 http HTTP GET request opencanary ewr
2026-10-15 00:38:37 :80 http HTTP GET request opencanary ewr
2026-10-15 00:38:36 :80 http HTTP GET request opencanary ewr
2026-10-15 00:38:34 :80 http HTTP GET request opencanary ewr
2026-10-14 21:40:16 :80 http HTTP GET request opencanary ewr
2026-10-14 21:40:15 :80 http HTTP GET request opencanary ewr
2026-10-14 21:40:14 :80 http HTTP GET request opencanary ewr
2026-10-14 21:40:13 :80 http HTTP GET request opencanary ewr
2026-10-14 21:40:06 :80 http HTTP GET request opencanary ewr
2026-10-14 21:40:05 :80 http HTTP GET request opencanary ewr
2026-10-14 21:40:03 :80 http HTTP GET request opencanary ewr
2026-10-14 05:02:55 :80 http HTTP GET request opencanary phx
2026-10-14 05:02:53 :80 http HTTP GET request opencanary phx
2026-10-14 05:02:49 :80 http HTTP GET request opencanary phx
2026-10-14 05:02:48 :80 http HTTP GET request opencanary phx
2026-10-14 05:02:47 :80 http HTTP GET request opencanary phx
2026-10-14 05:02:46 :80 http HTTP GET request opencanary phx
2026-10-14 05:02:40 :80 http HTTP GET request opencanary phx
2026-10-14 05:02:40 :80 http HTTP GET request opencanary phx
2026-10-14 05:02:38 :80 http HTTP GET request opencanary phx
2026-10-12 16:54:00 :80 http HTTP GET request opencanary phx
2026-10-12 16:53:59 :80 http HTTP GET request opencanary phx
2026-10-12 16:53:59 :80 http HTTP GET request opencanary phx
2026-10-12 16:53:58 :80 http HTTP GET request opencanary phx
2026-10-12 16:53:52 :80 http HTTP GET request opencanary phx
2026-10-12 16:53:51 :80 http HTTP GET request opencanary phx
2026-10-12 16:53:50 :80 http HTTP GET request opencanary phx