IntrusionLabs IntrusionLabs
← Back to feed

20.48.160.90

TAGGED SUSPICIOUS how we decide →
Threat Confidence
43%
Location
🇨🇦 CA / Toronto
ASN
AS8075 · Microsoft Corporation
Cloud Provider
Microsoft Azure
Total Events
36
Average by volume
Agent Count
2
First / Last Seen
2026-08-24 15:22 — 2026-08-29 11:39
Attack Types
http:scan
MITRE ATT&CK Techniques
Reconnaissance
T1595.002
Initial Access
T1190
External Corroboration
Blocklist.de
Reported 2026-09-01 10:01
blocklist_de:reported
DShield Top Attackers
Reported 2026-09-01 06:01
dshield:top_attacker
Campaigns
Multi-Agent Scan SCAN Active medium
23 IPs 13340 events
2026-08-24 — ongoing · 23 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
26 IPs 17132 events
2026-07-05 — ongoing · 26 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
71 IPs 250376 events
2026-06-26 — ongoing · 71 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
26 IPs 47642 events
2026-06-25 — ongoing · 26 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
28 IPs 1384 events
2026-06-10 — ongoing · 28 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Vultr. Scanning the same …
Multi-Agent Scan SCAN Active medium
13 IPs 41899 events
2026-05-13 — ongoing · 13 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan SCAN Active medium
50 IPs 114901 events
2026-04-27 — ongoing · 50 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
11 IPs 227 events
2026-04-07 — ongoing · 11 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
18 IPs 947 events
2026-04-02 — ongoing · 18 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
10 IPs 645 events
2026-04-02 — ongoing · 10 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
109 IPs 417936 events
2026-03-09 — ongoing · 109 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
45 IPs 20378 events
2026-03-09 — ongoing · 45 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
71 IPs 235126 events
2026-03-09 — ongoing · 71 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
47 IPs 82172 events
2026-03-09 — ongoing · 47 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
71 IPs 219278 events
2026-03-09 — ongoing · 71 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
31 IPs 4941 events
2026-03-09 — ongoing · 31 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
60 IPs 108479 events
2026-03-09 — ongoing · 60 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
63 IPs 240641 events
2026-03-09 — ongoing · 63 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
85 IPs 333441 events
2026-03-09 — ongoing · 85 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
22 IPs 38063 events
2026-03-09 — ongoing · 22 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
77 IPs 254232 events
2026-03-04 — ongoing · 77 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan SCAN Active medium
41 IPs 128713 events
2026-02-27 — ongoing · 41 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
31 IPs 9983 events
2026-02-27 — ongoing · 31 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan SCAN Active medium
36 IPs 150771 events
2026-02-27 — ongoing · 36 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
91 IPs 370982 events
2026-02-27 — ongoing · 91 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
55 IPs 237129 events
2026-02-26 — ongoing · 55 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
68 IPs 254937 events
2026-02-26 — ongoing · 68 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Session Forensics
web_probe ×36
Sessions
36
Avg Depth Score
0.25
Commands Executed
0
Files Downloaded
0
Evidence Timeline
Web Probe 242884dec033fae5 w4m_singapore_01 · 2026-08-29 11:39
25%
Loading events...
Web Probe 6c96f0717b4f31db w4m_singapore_01 · 2026-08-29 11:39
25%
Loading events...
Web Probe eb33e74dff69318b w4m_singapore_01 · 2026-08-29 11:39
25%
Loading events...
Web Probe ece9c9ac6a6855c2 w4m_singapore_01 · 2026-08-29 11:39
25%
Loading events...
Web Probe 24d8773639b01155 newark_01 · 2026-08-26 12:17
25%
Loading events...
Web Probe f8d8f994225b5af4 newark_01 · 2026-08-26 12:17
25%
Loading events...
Web Probe 07148590829ae962 newark_01 · 2026-08-24 18:37
25%
Loading events...
Web Probe 731b41fc4f516db2 newark_01 · 2026-08-24 18:37
25%
Loading events...
Web Probe 30f76884f14a360d newark_01 · 2026-08-24 18:37
25%
Loading events...
Web Probe 068f9f6c1e1d7d08 newark_01 · 2026-08-24 18:37
25%
Loading events...
Web Probe 66ef3f5e4b7dbf23 newark_01 · 2026-08-24 18:37
25%
Loading events...
Web Probe 23685129f94e20e7 newark_01 · 2026-08-24 18:37
25%
Loading events...
Web Probe c163214c2e8e0399 newark_01 · 2026-08-24 18:37
25%
Loading events...
Web Probe ccc5b646eb5a2307 newark_01 · 2026-08-24 18:37
25%
Loading events...
Web Probe 35bc1e0ed1644bc8 newark_01 · 2026-08-24 18:37
25%
Loading events...
Web Probe 75d763cf6daa37ba newark_01 · 2026-08-24 18:23
25%
Loading events...
Web Probe 3cb98a59bc8900b8 newark_01 · 2026-08-24 18:23
25%
Loading events...
Web Probe db6509da963fe368 newark_01 · 2026-08-24 18:23
25%
Loading events...
Web Probe a7c7ae1f07141550 newark_01 · 2026-08-24 18:23
25%
Loading events...
Web Probe 06e323f12089277d newark_01 · 2026-08-24 18:23
25%
Loading events...
Web Probe 8f88157529eda8f7 newark_01 · 2026-08-24 18:23
25%
Loading events...
Web Probe a87f130233d89cae newark_01 · 2026-08-24 18:23
25%
Loading events...
Web Probe cd0ceaf5153c9c06 newark_01 · 2026-08-24 18:23
25%
Loading events...
Web Probe 4defe8c62fcfa351 newark_01 · 2026-08-24 18:23
25%
Loading events...
Web Probe 724e7f1cfc08e2b5 newark_01 · 2026-08-24 17:44
25%
Loading events...
Web Probe 76b4f8179a888c5f newark_01 · 2026-08-24 17:44
25%
Loading events...
Web Probe 9842d8303e73e945 newark_01 · 2026-08-24 17:44
25%
Loading events...
Web Probe acc2e1550bc1609e newark_01 · 2026-08-24 17:44
25%
Loading events...
Web Probe 21637984bbc29e0a newark_01 · 2026-08-24 15:22
25%
Loading events...
Web Probe 6090f68d2e490253 newark_01 · 2026-08-24 15:22
25%
Loading events...
Web Probe 192a62887c97aa64 newark_01 · 2026-08-24 15:22
25%
Loading events...
Web Probe e0b442122e3d5d77 newark_01 · 2026-08-24 15:22
25%
Loading events...
Web Probe fba76b4e998a7a20 newark_01 · 2026-08-24 15:22
25%
Loading events...
Web Probe 0a6e19cf75baecdd newark_01 · 2026-08-24 15:22
25%
Loading events...
Web Probe 201236641ce352fc newark_01 · 2026-08-24 15:22
25%
Loading events...
Web Probe 8f5d50e689bb3920 newark_01 · 2026-08-24 15:22
25%
Loading events...
Non-Session Events
Timestamp Port Proto Event Source Location
2026-08-29 11:39:38 :80 http HTTP GET request opencanary sin
2026-08-29 11:39:28 :80 http HTTP GET request opencanary sin
2026-08-29 11:39:25 :80 http HTTP GET request opencanary sin
2026-08-29 11:39:23 :80 http HTTP GET request opencanary sin
2026-08-26 12:17:46 :80 http HTTP GET request opencanary ewr
2026-08-26 12:17:46 :80 http HTTP GET request opencanary ewr
2026-08-24 18:37:10 :80 http HTTP GET request opencanary ewr
2026-08-24 18:37:10 :80 http HTTP GET request opencanary ewr
2026-08-24 18:37:10 :80 http HTTP GET request opencanary ewr
2026-08-24 18:37:10 :80 http HTTP GET request opencanary ewr
2026-08-24 18:37:10 :80 http HTTP GET request opencanary ewr
2026-08-24 18:37:10 :80 http HTTP GET request opencanary ewr
2026-08-24 18:37:10 :80 http HTTP GET request opencanary ewr
2026-08-24 18:37:10 :80 http HTTP GET request opencanary ewr
2026-08-24 18:37:10 :80 http HTTP GET request opencanary ewr
2026-08-24 18:23:14 :80 http HTTP GET request opencanary ewr
2026-08-24 18:23:14 :80 http HTTP GET request opencanary ewr
2026-08-24 18:23:14 :80 http HTTP GET request opencanary ewr
2026-08-24 18:23:14 :80 http HTTP GET request opencanary ewr
2026-08-24 18:23:14 :80 http HTTP GET request opencanary ewr
2026-08-24 18:23:14 :80 http HTTP GET request opencanary ewr
2026-08-24 18:23:14 :80 http HTTP GET request opencanary ewr
2026-08-24 18:23:14 :80 http HTTP GET request opencanary ewr
2026-08-24 18:23:14 :80 http HTTP GET request opencanary ewr
2026-08-24 17:44:32 :80 http HTTP GET request opencanary ewr
2026-08-24 17:44:31 :80 http HTTP GET request opencanary ewr
2026-08-24 17:44:31 :80 http HTTP GET request opencanary ewr
2026-08-24 17:44:30 :80 http HTTP GET request opencanary ewr
2026-08-24 15:22:55 :80 http HTTP GET request opencanary ewr
2026-08-24 15:22:54 :80 http HTTP GET request opencanary ewr
2026-08-24 15:22:54 :80 http HTTP GET request opencanary ewr
2026-08-24 15:22:54 :80 http HTTP GET request opencanary ewr
2026-08-24 15:22:23 :80 http HTTP GET request opencanary ewr
2026-08-24 15:22:22 :80 http HTTP GET request opencanary ewr
2026-08-24 15:22:22 :80 http HTTP GET request opencanary ewr
2026-08-24 15:22:22 :80 http HTTP GET request opencanary ewr
{# Cloudflare Web Analytics — cookieless, public pages only. The context processor withholds the token from authenticated requests. #}