IntrusionLabs IntrusionLabs
← Back to feed

4.223.140.16

Threat Confidence
27%
Location
🇸🇪 SE
ASN
AS8075 · Microsoft Corporation
Cloud Provider
Microsoft Azure
Total Events
23
Average by volume
Agent Count
2
First / Last Seen
2026-08-01 03:15 — 2026-08-05 01:44
Attack Types
http:scan
MITRE ATT&CK Techniques
Reconnaissance
T1595.002
Initial Access
T1190
External Corroboration
Not flagged by any external feeds
Campaigns
Multi-Agent Scan SCAN Active medium
5 IPs 6696 events
2026-07-04 — ongoing · 5 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan SCAN Active medium
101 IPs 306053 events
2026-07-04 — ongoing · 101 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
43 IPs 62888 events
2026-07-02 — ongoing · 43 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
125 IPs 292886 events
2026-06-28 — ongoing · 125 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
83 IPs 638102 events
2026-06-28 — ongoing · 83 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
101 IPs 392582 events
2026-05-18 — ongoing · 101 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on AWS. Scanning the same …
Multi-Agent Scan SCAN Active medium
80 IPs 573471 events
2026-05-08 — ongoing · 80 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
93 IPs 382054 events
2026-04-24 — ongoing · 93 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Cloudflare. Scanning the same …
Multi-Agent Scan SCAN Active medium
66 IPs 234822 events
2026-04-18 — ongoing · 66 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
47 IPs 281083 events
2026-04-11 — ongoing · 47 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
83 IPs 598218 events
2026-03-28 — ongoing · 83 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
143 IPs 799186 events
2026-03-28 — ongoing · 143 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
77 IPs 258241 events
2026-03-20 — ongoing · 77 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
109 IPs 241446 events
2026-03-09 — ongoing · 109 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
127 IPs 242354 events
2026-03-09 — ongoing · 127 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
117 IPs 215939 events
2026-03-09 — ongoing · 117 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
113 IPs 248566 events
2026-03-09 — ongoing · 113 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
76 IPs 361198 events
2026-03-08 — ongoing · 76 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan SCAN Active medium
67 IPs 512121 events
2026-03-08 — ongoing · 67 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
123 IPs 330671 events
2026-03-04 — ongoing · 123 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
113 IPs 236907 events
2026-03-04 — ongoing · 113 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
116 IPs 216614 events
2026-03-04 — ongoing · 116 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
104 IPs 217551 events
2026-03-04 — ongoing · 104 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
99 IPs 264105 events
2026-03-04 — ongoing · 99 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
109 IPs 315117 events
2026-03-04 — ongoing · 109 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
84 IPs 140275 events
2026-03-04 — ongoing · 84 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
84 IPs 377998 events
2026-03-03 — ongoing · 84 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
79 IPs 360197 events
2026-03-02 — ongoing · 79 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
79 IPs 116844 events
2026-02-28 — ongoing · 79 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
120 IPs 241630 events
2026-02-28 — ongoing · 120 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
53 IPs 300611 events
2026-02-28 — ongoing · 53 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
105 IPs 238280 events
2026-02-27 — ongoing · 105 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
6 IPs 9046 events
2026-02-26 — ongoing · 6 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan SCAN Active medium
124 IPs 580798 events
2026-02-26 — ongoing · 124 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
111 IPs 669846 events
2026-02-26 — ongoing · 111 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
75 IPs 325344 events
2026-02-26 — ongoing · 75 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
88 IPs 229318 events
2026-02-26 — ongoing · 88 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
66 IPs 190115 events
2026-02-22 — ongoing · 66 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Session Forensics
web_probe ×23
Sessions
23
Avg Depth Score
0.25
Commands Executed
0
Files Downloaded
0
Evidence Timeline
Web Probe 1cc8f527fbc276b2 newark_01 · 2026-08-05 01:44
25%
Loading events...
Web Probe 4c75ac5eb9b94911 w4m_singapore_01 · 2026-08-02 18:25
25%
Loading events...
Web Probe 6ff2d3d57564bbc2 w4m_singapore_01 · 2026-08-02 18:25
25%
Loading events...
Web Probe 9b4377190ee0fac0 w4m_singapore_01 · 2026-08-02 18:25
25%
Loading events...
Web Probe 15114ada260a92a6 w4m_singapore_01 · 2026-08-02 18:25
25%
Loading events...
Web Probe bac265850a4f2d1b w4m_singapore_01 · 2026-08-02 18:25
25%
Loading events...
Web Probe ecd23ce2ac41693e w4m_singapore_01 · 2026-08-02 18:25
25%
Loading events...
Web Probe 43d177c8a23e9664 w4m_singapore_01 · 2026-08-02 18:25
25%
Loading events...
Web Probe 50c4fb9c96b06f98 w4m_singapore_01 · 2026-08-02 18:25
25%
Loading events...
Web Probe 226c60ca92ec47d5 w4m_singapore_01 · 2026-08-02 18:25
25%
Loading events...
Web Probe a182f869ea30c951 w4m_singapore_01 · 2026-08-02 18:24
25%
Loading events...
Web Probe 6c404cbbc3c1028f w4m_singapore_01 · 2026-08-02 18:24
25%
Loading events...
Web Probe 61ec6ef72d82db47 newark_01 · 2026-08-01 03:15
25%
Loading events...
Web Probe 8fc5b72c2fe5bcf1 newark_01 · 2026-08-01 03:15
25%
Loading events...
Web Probe 85e4b248ab6c4a31 newark_01 · 2026-08-01 03:15
25%
Loading events...
Web Probe 1696c4c1a6a01855 newark_01 · 2026-08-01 03:15
25%
Loading events...
Web Probe e072f5041a2c5622 newark_01 · 2026-08-01 03:15
25%
Loading events...
Web Probe 0f16b30563d50816 newark_01 · 2026-08-01 03:15
25%
Loading events...
Web Probe e4885627caa38d0e newark_01 · 2026-08-01 03:15
25%
Loading events...
Web Probe 44e464fe132b186c newark_01 · 2026-08-01 03:15
25%
Loading events...
Web Probe e4a78659ea4e3b8b newark_01 · 2026-08-01 03:15
25%
Loading events...
Web Probe 1a38e64283a436af newark_01 · 2026-08-01 03:15
25%
Loading events...
Web Probe a77d734f750b2f99 newark_01 · 2026-08-01 03:15
25%
Loading events...
Non-Session Events
Timestamp Port Proto Event Source Location
2026-08-05 01:44:13 :80 http HTTP GET request opencanary ewr
2026-08-02 18:25:13 :80 http HTTP GET request opencanary sin
2026-08-02 18:25:12 :80 http HTTP GET request opencanary sin
2026-08-02 18:25:12 :80 http HTTP GET request opencanary sin
2026-08-02 18:25:11 :80 http HTTP GET request opencanary sin
2026-08-02 18:25:11 :80 http HTTP GET request opencanary sin
2026-08-02 18:25:11 :80 http HTTP GET request opencanary sin
2026-08-02 18:25:10 :80 http HTTP GET request opencanary sin
2026-08-02 18:25:08 :80 http HTTP GET request opencanary sin
2026-08-02 18:25:07 :80 http HTTP GET request opencanary sin
2026-08-02 18:24:59 :80 http HTTP GET request opencanary sin
2026-08-02 18:24:52 :80 http HTTP GET request opencanary sin
2026-08-01 03:15:18 :80 http HTTP GET request opencanary ewr
2026-08-01 03:15:18 :80 http HTTP GET request opencanary ewr
2026-08-01 03:15:18 :80 http HTTP GET request opencanary ewr
2026-08-01 03:15:18 :80 http HTTP GET request opencanary ewr
2026-08-01 03:15:17 :80 http HTTP GET request opencanary ewr
2026-08-01 03:15:17 :80 http HTTP GET request opencanary ewr
2026-08-01 03:15:17 :80 http HTTP GET request opencanary ewr
2026-08-01 03:15:15 :80 http HTTP GET request opencanary ewr
2026-08-01 03:15:15 :80 http HTTP GET request opencanary ewr
2026-08-01 03:15:11 :80 http HTTP GET request opencanary ewr
2026-08-01 03:15:07 :80 http HTTP GET request opencanary ewr
{# Cloudflare Web Analytics — cookieless, public pages only. The context processor withholds the token from authenticated requests. #}