IntrusionLabs IntrusionLabs
← Back to feed

20.206.105.145

TAGGED SUSPICIOUS how we decide →
Threat Confidence
47%
Location
🇧🇷 BR / Campinas
ASN
AS8075 · Microsoft Corporation
Cloud Provider
Microsoft Azure
Total Events
99
Agent Count
2
First / Last Seen
2026-07-19 07:03 — 2026-07-23 12:13
Attack Types
http:scan
MITRE ATT&CK Techniques
Reconnaissance
T1595.002
Initial Access
T1190
External Corroboration
Blocklist.de
Reported 2026-07-23 03:02
blocklist_de:reported
Campaigns
Multi-Agent Scan SCAN Active medium
62 IPs 155982 events
2026-07-13 — ongoing · 62 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
35 IPs 29819 events
2026-04-26 — ongoing · 35 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
53 IPs 22865 events
2026-04-24 — ongoing · 53 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
80 IPs 162672 events
2026-04-08 — ongoing · 80 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
26 IPs 2505 events
2026-04-08 — ongoing · 26 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
67 IPs 118459 events
2026-04-01 — ongoing · 67 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
2 IPs 171 events
2026-03-30 — ongoing · 2 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan SCAN Active medium
137 IPs 245787 events
2026-03-16 — ongoing · 137 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
73 IPs 121117 events
2026-03-13 — ongoing · 73 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
55 IPs 48790 events
2026-03-11 — ongoing · 55 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
94 IPs 131477 events
2026-03-03 — ongoing · 94 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
110 IPs 225098 events
2026-03-02 — ongoing · 110 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan SCAN Active medium
31 IPs 86175 events
2026-03-02 — ongoing · 31 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
92 IPs 209731 events
2026-03-02 — ongoing · 92 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
55 IPs 165922 events
2026-03-02 — ongoing · 55 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
92 IPs 136580 events
2026-03-02 — ongoing · 92 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
33 IPs 181368 events
2026-02-28 — ongoing · 33 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
56 IPs 161199 events
2026-02-28 — ongoing · 56 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
4 IPs 195 events
2026-02-27 — ongoing · 4 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
13 IPs 27046 events
2026-02-23 — ongoing · 13 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
21 IPs 1588 events
2026-02-22 — ongoing · 21 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Session Forensics
web_probe ×93
Sessions
93
Avg Depth Score
0.25
Commands Executed
0
Files Downloaded
0
Evidence Timeline
Web Probe 65b1fc6f93eeee7d newark_01 · 2026-07-23 12:13
25%
Loading events...
Web Probe ff65f28442d44c63 newark_01 · 2026-07-23 12:13
25%
Loading events...
Web Probe 474874f4c2d24612 newark_01 · 2026-07-23 12:13
25%
Loading events...
Web Probe 3b60eab1912653e0 newark_01 · 2026-07-23 12:13
25%
Loading events...
Web Probe f3b54d26a57155c5 newark_01 · 2026-07-23 12:13
25%
Loading events...
Web Probe ca9bf1fbd6652a7e newark_01 · 2026-07-23 12:13
25%
Loading events...
Web Probe afe2ad98a102242c newark_01 · 2026-07-23 12:13
25%
Loading events...
Web Probe 7f173084e5fea104 newark_01 · 2026-07-23 12:13
25%
Loading events...
Web Probe 453b88e16209f1c7 newark_01 · 2026-07-23 12:13
25%
Loading events...
Web Probe 1aa79191b6a784c1 newark_01 · 2026-07-20 19:34
25%
Loading events...
Web Probe cded9497aae8bd56 newark_01 · 2026-07-20 19:34
25%
Loading events...
Web Probe 0df080ba76f58924 newark_01 · 2026-07-20 19:34
25%
Loading events...
Web Probe 0c2c98d1ecf31e3e newark_01 · 2026-07-20 19:34
25%
Loading events...
Web Probe 2d9c2e9523b0ed96 newark_01 · 2026-07-20 19:34
25%
Loading events...
Web Probe 5f3c8b4a63166872 newark_01 · 2026-07-20 19:34
25%
Loading events...
Web Probe 239ed9ba253e4a88 newark_01 · 2026-07-20 19:34
25%
Loading events...
Web Probe e7306431cdf3b663 newark_01 · 2026-07-20 19:34
25%
Loading events...
Web Probe 1dec1a6134e2cc98 newark_01 · 2026-07-20 19:34
25%
Loading events...
Web Probe c985c143459173cc newark_01 · 2026-07-20 19:34
25%
Loading events...
Web Probe d9df6b88a269c3b3 newark_01 · 2026-07-20 19:34
25%
Loading events...
Web Probe 7ff37bc72841e4ab newark_01 · 2026-07-20 19:34
25%
Loading events...
Web Probe 3ec1577a8b7ae41b newark_01 · 2026-07-20 19:34
25%
Loading events...
Web Probe 047f1f8046c3dda7 newark_01 · 2026-07-20 19:34
25%
Loading events...
Web Probe 1f9b58b405f0ee51 newark_01 · 2026-07-20 19:34
25%
Loading events...
Web Probe d7a7df72c0f9d15f newark_01 · 2026-07-20 19:34
25%
Loading events...
Web Probe 39a8ce4b893c8382 newark_01 · 2026-07-20 19:34
25%
Loading events...
Web Probe 94ee35dffc57b934 newark_01 · 2026-07-20 19:34
25%
Loading events...
Web Probe 085fc2c5b168f649 newark_01 · 2026-07-20 19:34
25%
Loading events...
Web Probe 450f4494b5faf2b7 newark_01 · 2026-07-20 19:34
25%
Loading events...
Web Probe a7f1c53a76e14416 newark_01 · 2026-07-20 19:34
25%
Loading events...
Web Probe 090bfb9eba63133b newark_01 · 2026-07-20 18:30
25%
Loading events...
Web Probe 169ec4f228cc6f3f newark_01 · 2026-07-20 18:30
25%
Loading events...
Web Probe b952ae4497ebe8b7 newark_01 · 2026-07-20 18:30
25%
Loading events...
Web Probe f77f3890c682b300 newark_01 · 2026-07-20 18:30
25%
Loading events...
Web Probe d6863bb9a106710e newark_01 · 2026-07-20 18:30
25%
Loading events...
Web Probe b2474436947eb8a5 newark_01 · 2026-07-20 18:30
25%
Loading events...
Web Probe 8a1d8fd3b24df632 newark_01 · 2026-07-20 18:30
25%
Loading events...
Web Probe 188b6487e43a287a newark_01 · 2026-07-20 18:30
25%
Loading events...
Web Probe 4329704adce57196 newark_01 · 2026-07-20 18:30
25%
Loading events...
Web Probe 093e598c58cefb86 newark_01 · 2026-07-20 18:30
25%
Loading events...
Web Probe ff78c2c8dd2e5736 newark_01 · 2026-07-20 18:30
25%
Loading events...
Web Probe e296757507c7335d newark_01 · 2026-07-20 18:30
25%
Loading events...
Web Probe 26207dd80b8b2c39 newark_01 · 2026-07-20 18:30
25%
Loading events...
Web Probe 5d60a10689f619ff newark_01 · 2026-07-20 18:30
25%
Loading events...
Web Probe 8ce347f2afe939fb newark_01 · 2026-07-20 18:30
25%
Loading events...
Web Probe e2bdd712aa75f82c newark_01 · 2026-07-20 18:30
25%
Loading events...
Web Probe f51a48b18f9e1ad9 newark_01 · 2026-07-20 18:29
25%
Loading events...
Web Probe a776d879c35b756b newark_01 · 2026-07-20 18:29
25%
Loading events...
Web Probe f002ed48096af8a7 newark_01 · 2026-07-20 18:29
25%
Loading events...
Web Probe 86cc94cef51fb16e newark_01 · 2026-07-20 18:29
25%
Loading events...
Non-Session Events
Timestamp Port Proto Event Source Location
2026-07-23 12:13:15 :80 http HTTP GET request opencanary ewr
2026-07-23 12:13:14 :80 http HTTP GET request opencanary ewr
2026-07-23 12:13:13 :80 http HTTP GET request opencanary ewr
2026-07-23 12:13:11 :80 http HTTP GET request opencanary ewr
2026-07-23 12:13:10 :80 http HTTP GET request opencanary ewr
2026-07-23 12:13:09 :80 http HTTP GET request opencanary ewr
2026-07-23 12:13:08 :80 http HTTP GET request opencanary ewr
2026-07-23 12:13:08 :80 http HTTP GET request opencanary ewr
2026-07-23 12:13:07 :80 http HTTP GET request opencanary ewr
2026-07-23 12:13:07 :80 http HTTP GET request opencanary ewr
2026-07-23 12:13:07 :80 http HTTP GET request opencanary ewr
2026-07-23 12:13:06 :80 http HTTP GET request opencanary ewr
2026-07-23 12:13:05 :80 http HTTP GET request opencanary ewr
2026-07-23 12:13:04 :80 http HTTP GET request opencanary ewr
2026-07-23 12:13:02 :80 http HTTP GET request opencanary ewr
2026-07-20 19:34:55 :80 http HTTP GET request opencanary ewr
2026-07-20 19:34:55 :80 http HTTP GET request opencanary ewr
2026-07-20 19:34:50 :80 http HTTP GET request opencanary ewr
2026-07-20 19:34:47 :80 http HTTP GET request opencanary ewr
2026-07-20 19:34:44 :80 http HTTP GET request opencanary ewr
2026-07-20 19:34:43 :80 http HTTP GET request opencanary ewr
2026-07-20 19:34:43 :80 http HTTP GET request opencanary ewr
2026-07-20 19:34:43 :80 http HTTP GET request opencanary ewr
2026-07-20 19:34:42 :80 http HTTP GET request opencanary ewr
2026-07-20 19:34:41 :80 http HTTP GET request opencanary ewr
2026-07-20 19:34:41 :80 http HTTP GET request opencanary ewr
2026-07-20 19:34:41 :80 http HTTP GET request opencanary ewr
2026-07-20 19:34:40 :80 http HTTP GET request opencanary ewr
2026-07-20 19:34:40 :80 http HTTP GET request opencanary ewr
2026-07-20 19:34:39 :80 http HTTP GET request opencanary ewr
2026-07-20 19:34:39 :80 http HTTP GET request opencanary ewr
2026-07-20 19:34:38 :80 http HTTP GET request opencanary ewr
2026-07-20 19:34:37 :80 http HTTP GET request opencanary ewr
2026-07-20 19:34:36 :80 http HTTP GET request opencanary ewr
2026-07-20 19:34:36 :80 http HTTP GET request opencanary ewr
2026-07-20 19:34:28 :80 http HTTP GET request opencanary ewr
2026-07-20 18:30:14 :80 http HTTP GET request opencanary ewr
2026-07-20 18:30:14 :80 http HTTP GET request opencanary ewr
2026-07-20 18:30:08 :80 http HTTP GET request opencanary ewr
2026-07-20 18:30:07 :80 http HTTP GET request opencanary ewr
2026-07-20 18:30:06 :80 http HTTP GET request opencanary ewr
2026-07-20 18:30:06 :80 http HTTP GET request opencanary ewr
2026-07-20 18:30:05 :80 http HTTP GET request opencanary ewr
2026-07-20 18:30:05 :80 http HTTP GET request opencanary ewr
2026-07-20 18:30:05 :80 http HTTP GET request opencanary ewr
2026-07-20 18:30:04 :80 http HTTP GET request opencanary ewr
2026-07-20 18:30:04 :80 http HTTP GET request opencanary ewr
2026-07-20 18:30:04 :80 http HTTP GET request opencanary ewr
2026-07-20 18:30:03 :80 http HTTP GET request opencanary ewr
2026-07-20 18:30:00 :80 http HTTP GET request opencanary ewr
{# Cloudflare Web Analytics — cookieless, public pages only. The context processor withholds the token from authenticated requests. #}