IntrusionLabs IntrusionLabs
← Back to feed

207.154.243.117

Threat Confidence
41%
Location
🇩🇪 DE / Frankfurt am Main
ASN
AS14061 · DigitalOcean, LLC
Cloud Provider
DigitalOcean
Total Events
2
Below average by volume
Agent Count
2
First / Last Seen
2026-06-20 11:26 — 2026-06-20 16:55
Attack Types
http:scan
MITRE ATT&CK Techniques
Reconnaissance
T1595.002
Initial Access
T1190
External Corroboration
Blocklist.de
Reported 2026-06-20 19:02
blocklist_de:reported
Campaigns
Multi-Agent Scan SCAN Active medium
15 IPs 43576 events
2026-05-29 — ongoing · 15 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Vultr. Scanning the same …
Multi-Agent Scan SCAN Active medium
26 IPs 19590 events
2026-03-08 — ongoing · 26 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan SCAN Active medium
14 IPs 7164 events
2026-03-08 — ongoing · 14 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
29 IPs 12209 events
2026-03-06 — ongoing · 29 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
52 IPs 54049 events
2026-02-24 — ongoing · 52 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
61 IPs 114611 events
2026-02-24 — ongoing · 61 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan SCAN Active medium
5 IPs 504 events
2026-02-22 — ongoing · 5 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Session Forensics
web_probe ×2
Sessions
2
Avg Depth Score
0.25
Commands Executed
0
Files Downloaded
0
Evidence Timeline
Web Probe df07e0584bc8bbbd newark_01 · 2026-06-20 16:55
25%
Loading events...
Web Probe 5991e8676f4c9860 w4m_singapore_01 · 2026-06-20 11:26
25%
Loading events...
Non-Session Events
Timestamp Port Proto Event Source Location
2026-06-20 16:55:52 :80 http HTTP GET request opencanary ewr
2026-06-20 11:26:06 :80 http HTTP GET request opencanary sin