IntrusionLabs IntrusionLabs
← Back to feed

20.207.202.183

Threat Confidence
42%
Assessment
  • Part of a 169-IP campaign probing the same targets.
Generated from the counts on this page by fixed rules; each line cites the number it rests on.
Location
🇮🇳 IN / Pune
ASN
AS8075 · Microsoft Corporation
Cloud Provider
Microsoft Azure
Total Events
4
Below average by volume
Agent Count
2
First / Last Seen
2026-10-15 15:03 — 2026-10-22 09:31
Attack Types
http:scan
MITRE ATT&CK Techniques
Reconnaissance
T1595.002
Initial Access
T1190
External Corroboration
Blocklist.de
Reported 2026-10-22 06:01
blocklist_de:reported
Campaigns
Multi-Agent Scan SCAN Active medium
42 IPs 56700 events
2026-09-14 — ongoing · 42 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
56 IPs 143793 events
2026-05-11 — ongoing · 56 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
169 IPs 484999 events
2026-03-09 — ongoing · 169 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
4 IPs 19256 events
2026-03-01 — ongoing · 4 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
160 IPs 563679 events
2026-03-01 — ongoing · 160 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Session Forensics
web_probe ×4
Sessions
4
Avg Depth Score
0.25
Commands Executed
0
Files Downloaded
0
Evidence Timeline
Web Probe 7718b0e2fe7762cc w4m_singapore_01 · 2026-10-22 09:31
25%
Loading events...
Web Probe 14505729c496a092 w4m_singapore_01 · 2026-10-22 09:23
25%
Loading events...
Web Probe 31e295d66bba5e9e greencloud_phx_01 · 2026-10-15 15:03
25%
Loading events...
Web Probe 5b8c0a56065c7c1a greencloud_phx_01 · 2026-10-15 15:03
25%
Loading events...
Non-Session Events
Timestamp Port Proto Event Source Location
2026-10-22 09:31:40 :80 http HTTP GET request opencanary sin
2026-10-22 09:23:59 :80 http HTTP GET request opencanary sin
2026-10-15 15:03:28 :80 http HTTP GET request opencanary phx
2026-10-15 15:03:23 :80 http HTTP GET request opencanary phx