IntrusionLabs IntrusionLabs
← Back to feed

4.223.71.149

Threat Confidence
28%
Location
🇸🇪 SE
ASN
AS8075 · Microsoft Corporation
Cloud Provider
Microsoft Azure
Total Events
50
Above average by volume
Agent Count
2
First / Last Seen
2026-07-27 14:25 — 2026-08-02 20:37
Attack Types
http:scan
MITRE ATT&CK Techniques
Reconnaissance
T1595.002
Initial Access
T1190
External Corroboration
Not flagged by any external feeds
Campaigns
Multi-Agent Scan SCAN Active medium
114 IPs 328388 events
2026-07-30 — ongoing · 114 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
121 IPs 574505 events
2026-07-27 — ongoing · 121 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Ended medium
5 IPs 623 events
2026-07-27 — ongoing · 5 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan SCAN Active medium
131 IPs 637488 events
2026-07-17 — ongoing · 131 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
94 IPs 252864 events
2026-07-12 — ongoing · 94 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
101 IPs 306053 events
2026-07-04 — ongoing · 101 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
125 IPs 292886 events
2026-06-28 — ongoing · 125 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
60 IPs 228449 events
2026-06-11 — ongoing · 60 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Vultr. Scanning the same …
Multi-Agent Scan SCAN Active medium
128 IPs 566036 events
2026-06-05 — ongoing · 128 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
78 IPs 376302 events
2026-06-05 — ongoing · 78 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
90 IPs 312336 events
2026-05-03 — ongoing · 90 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
5 IPs 155 events
2026-04-24 — ongoing · 5 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan SCAN Active medium
117 IPs 372607 events
2026-04-09 — ongoing · 117 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
75 IPs 299185 events
2026-04-09 — ongoing · 75 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
126 IPs 535434 events
2026-04-09 — ongoing · 126 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
45 IPs 89191 events
2026-04-06 — ongoing · 45 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
61 IPs 239803 events
2026-04-03 — ongoing · 61 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
130 IPs 424253 events
2026-03-26 — ongoing · 130 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
113 IPs 248566 events
2026-03-09 — ongoing · 113 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
95 IPs 330225 events
2026-03-08 — ongoing · 95 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
75 IPs 313781 events
2026-03-07 — ongoing · 75 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
84 IPs 220470 events
2026-03-07 — ongoing · 84 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
73 IPs 287421 events
2026-03-07 — ongoing · 73 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
103 IPs 453255 events
2026-03-07 — ongoing · 103 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
78 IPs 323933 events
2026-03-07 — ongoing · 78 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
60 IPs 155147 events
2026-03-07 — ongoing · 60 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
84 IPs 342131 events
2026-03-07 — ongoing · 84 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
33 IPs 161740 events
2026-03-07 — ongoing · 33 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Cloudflare. Scanning the same …
Multi-Agent Scan SCAN Active medium
112 IPs 354905 events
2026-03-07 — ongoing · 112 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
134 IPs 564552 events
2026-03-05 — ongoing · 134 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
79 IPs 227707 events
2026-03-04 — ongoing · 79 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan SCAN Active medium
60 IPs 189734 events
2026-03-04 — ongoing · 60 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
123 IPs 330671 events
2026-03-04 — ongoing · 123 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
116 IPs 216614 events
2026-03-04 — ongoing · 116 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
109 IPs 315117 events
2026-03-04 — ongoing · 109 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
84 IPs 140275 events
2026-03-04 — ongoing · 84 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
113 IPs 236907 events
2026-03-04 — ongoing · 113 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
66 IPs 54760 events
2026-03-04 — ongoing · 66 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
79 IPs 274098 events
2026-03-03 — ongoing · 79 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
53 IPs 47960 events
2026-03-03 — ongoing · 53 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
117 IPs 408850 events
2026-03-01 — ongoing · 117 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
80 IPs 251750 events
2026-03-01 — ongoing · 80 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
79 IPs 116844 events
2026-02-28 — ongoing · 79 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
120 IPs 241630 events
2026-02-28 — ongoing · 120 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
99 IPs 388291 events
2026-02-28 — ongoing · 99 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
104 IPs 562142 events
2026-02-28 — ongoing · 104 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
80 IPs 335825 events
2026-02-27 — ongoing · 80 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
98 IPs 333830 events
2026-02-27 — ongoing · 98 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
105 IPs 238280 events
2026-02-27 — ongoing · 105 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
101 IPs 324072 events
2026-02-24 — ongoing · 101 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan SCAN Active medium
105 IPs 406410 events
2026-02-24 — ongoing · 105 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
66 IPs 190115 events
2026-02-22 — ongoing · 66 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Session Forensics
web_probe ×50
Sessions
50
Avg Depth Score
0.25
Commands Executed
0
Files Downloaded
0
Evidence Timeline
Web Probe 1834017a64fa61f1 newark_01 · 2026-08-02 20:37
25%
Loading events...
Web Probe 594c117af7a18471 newark_01 · 2026-08-02 20:37
25%
Loading events...
Web Probe 838e05469b8c4751 newark_01 · 2026-08-02 20:37
25%
Loading events...
Web Probe 5bb470bdf2bd4a9f newark_01 · 2026-08-01 17:58
25%
Loading events...
Web Probe e3064ce005bd60a4 newark_01 · 2026-08-01 17:58
25%
Loading events...
Web Probe 365aec8fe183fecd newark_01 · 2026-08-01 17:58
25%
Loading events...
Web Probe f81d991244ceff2d newark_01 · 2026-07-30 21:08
25%
Loading events...
Web Probe 239099b5be5e5551 newark_01 · 2026-07-30 21:08
25%
Loading events...
Web Probe 4b88921bf6029415 newark_01 · 2026-07-30 21:08
25%
Loading events...
Web Probe ca606f3ac3f75e25 newark_01 · 2026-07-30 21:08
25%
Loading events...
Web Probe 362d69256b9e60e3 newark_01 · 2026-07-30 21:08
25%
Loading events...
Web Probe fb49573ae6662502 newark_01 · 2026-07-30 21:08
25%
Loading events...
Web Probe 1a0103b8894de436 newark_01 · 2026-07-30 21:08
25%
Loading events...
Web Probe fcd9081c070312d6 newark_01 · 2026-07-30 21:08
25%
Loading events...
Web Probe 4011c7077efa7439 newark_01 · 2026-07-30 21:08
25%
Loading events...
Web Probe 52b0656f10ace5a1 w4m_singapore_01 · 2026-07-27 14:54
25%
Loading events...
Web Probe 11bcf3ea1c4d46e1 w4m_singapore_01 · 2026-07-27 14:54
25%
Loading events...
Web Probe f720165aaae81025 w4m_singapore_01 · 2026-07-27 14:54
25%
Loading events...
Web Probe d613e1cd26be5ae8 w4m_singapore_01 · 2026-07-27 14:54
25%
Loading events...
Web Probe f1e1ba65680f20e8 w4m_singapore_01 · 2026-07-27 14:54
25%
Loading events...
Web Probe e21d63c46c795bea w4m_singapore_01 · 2026-07-27 14:54
25%
Loading events...
Web Probe 698f119fed53abde w4m_singapore_01 · 2026-07-27 14:54
25%
Loading events...
Web Probe d6ce9acdd8f2c6c6 w4m_singapore_01 · 2026-07-27 14:54
25%
Loading events...
Web Probe f5ea085cfe33e536 w4m_singapore_01 · 2026-07-27 14:54
25%
Loading events...
Web Probe 9b16c4ed426cf630 w4m_singapore_01 · 2026-07-27 14:54
25%
Loading events...
Web Probe f1b8c37b08c575ff w4m_singapore_01 · 2026-07-27 14:54
25%
Loading events...
Web Probe 3a195e8af87191ca w4m_singapore_01 · 2026-07-27 14:54
25%
Loading events...
Web Probe b1bfd3bed610b2fc w4m_singapore_01 · 2026-07-27 14:54
25%
Loading events...
Web Probe cf806ad9f036deae w4m_singapore_01 · 2026-07-27 14:54
25%
Loading events...
Web Probe 844b584fddaf2bda w4m_singapore_01 · 2026-07-27 14:54
25%
Loading events...
Web Probe 9f7d3e918392748d w4m_singapore_01 · 2026-07-27 14:54
25%
Loading events...
Web Probe 75f96790636478bb w4m_singapore_01 · 2026-07-27 14:54
25%
Loading events...
Web Probe 57d18630c1eb144a w4m_singapore_01 · 2026-07-27 14:54
25%
Loading events...
Web Probe 31093a57d7a5a416 w4m_singapore_01 · 2026-07-27 14:26
25%
Loading events...
Web Probe bc7744163535d1fe w4m_singapore_01 · 2026-07-27 14:26
25%
Loading events...
Web Probe b146c5077c248116 w4m_singapore_01 · 2026-07-27 14:26
25%
Loading events...
Web Probe ad6d5d62cdbca59e w4m_singapore_01 · 2026-07-27 14:26
25%
Loading events...
Web Probe 9af4182de998e221 w4m_singapore_01 · 2026-07-27 14:26
25%
Loading events...
Web Probe 00afeb3445095035 w4m_singapore_01 · 2026-07-27 14:26
25%
Loading events...
Web Probe 0274382e59e7e874 w4m_singapore_01 · 2026-07-27 14:25
25%
Loading events...
Web Probe f8569605d021b919 w4m_singapore_01 · 2026-07-27 14:25
25%
Loading events...
Web Probe ebd0daf389127899 w4m_singapore_01 · 2026-07-27 14:25
25%
Loading events...
Web Probe 44790c5aefc0b97d w4m_singapore_01 · 2026-07-27 14:25
25%
Loading events...
Web Probe 3ca6846c0e57685f w4m_singapore_01 · 2026-07-27 14:25
25%
Loading events...
Web Probe 341c5b761e578062 w4m_singapore_01 · 2026-07-27 14:25
25%
Loading events...
Web Probe 1b3d96f7b9c5d79d w4m_singapore_01 · 2026-07-27 14:25
25%
Loading events...
Web Probe 829602ff26033769 w4m_singapore_01 · 2026-07-27 14:25
25%
Loading events...
Web Probe 7904df530468be5d w4m_singapore_01 · 2026-07-27 14:25
25%
Loading events...
Web Probe 176324e27a0dce97 w4m_singapore_01 · 2026-07-27 14:25
25%
Loading events...
Web Probe 3aea88c853ced969 w4m_singapore_01 · 2026-07-27 14:25
25%
Loading events...
Non-Session Events
Timestamp Port Proto Event Source Location
2026-08-02 20:37:34 :80 http HTTP GET request opencanary ewr
2026-08-02 20:37:29 :80 http HTTP GET request opencanary ewr
2026-08-02 20:37:29 :80 http HTTP GET request opencanary ewr
2026-08-01 17:58:48 :80 http HTTP GET request opencanary ewr
2026-08-01 17:58:45 :80 http HTTP GET request opencanary ewr
2026-08-01 17:58:45 :80 http HTTP GET request opencanary ewr
2026-07-30 21:08:28 :80 http HTTP GET request opencanary ewr
2026-07-30 21:08:28 :80 http HTTP GET request opencanary ewr
2026-07-30 21:08:25 :80 http HTTP GET request opencanary ewr
2026-07-30 21:08:24 :80 http HTTP GET request opencanary ewr
2026-07-30 21:08:23 :80 http HTTP GET request opencanary ewr
2026-07-30 21:08:22 :80 http HTTP GET request opencanary ewr
2026-07-30 21:08:22 :80 http HTTP GET request opencanary ewr
2026-07-30 21:08:21 :80 http HTTP GET request opencanary ewr
2026-07-30 21:08:17 :80 http HTTP GET request opencanary ewr
2026-07-27 14:54:30 :80 http HTTP GET request opencanary sin
2026-07-27 14:54:29 :80 http HTTP GET request opencanary sin
2026-07-27 14:54:29 :80 http HTTP GET request opencanary sin
2026-07-27 14:54:25 :80 http HTTP GET request opencanary sin
2026-07-27 14:54:24 :80 http HTTP GET request opencanary sin
2026-07-27 14:54:23 :80 http HTTP GET request opencanary sin
2026-07-27 14:54:19 :80 http HTTP GET request opencanary sin
2026-07-27 14:54:17 :80 http HTTP GET request opencanary sin
2026-07-27 14:54:15 :80 http HTTP GET request opencanary sin
2026-07-27 14:54:11 :80 http HTTP GET request opencanary sin
2026-07-27 14:54:09 :80 http HTTP GET request opencanary sin
2026-07-27 14:54:08 :80 http HTTP GET request opencanary sin
2026-07-27 14:54:08 :80 http HTTP GET request opencanary sin
2026-07-27 14:54:07 :80 http HTTP GET request opencanary sin
2026-07-27 14:54:07 :80 http HTTP GET request opencanary sin
2026-07-27 14:54:06 :80 http HTTP GET request opencanary sin
2026-07-27 14:54:05 :80 http HTTP GET request opencanary sin
2026-07-27 14:54:00 :80 http HTTP GET request opencanary sin
2026-07-27 14:26:43 :80 http HTTP GET request opencanary sin
2026-07-27 14:26:13 :80 http HTTP GET request opencanary sin
2026-07-27 14:26:10 :80 http HTTP GET request opencanary sin
2026-07-27 14:26:08 :80 http HTTP GET request opencanary sin
2026-07-27 14:26:07 :80 http HTTP GET request opencanary sin
2026-07-27 14:26:03 :80 http HTTP GET request opencanary sin
2026-07-27 14:25:59 :80 http HTTP GET request opencanary sin
2026-07-27 14:25:57 :80 http HTTP GET request opencanary sin
2026-07-27 14:25:56 :80 http HTTP GET request opencanary sin
2026-07-27 14:25:55 :80 http HTTP GET request opencanary sin
2026-07-27 14:25:55 :80 http HTTP GET request opencanary sin
2026-07-27 14:25:54 :80 http HTTP GET request opencanary sin
2026-07-27 14:25:53 :80 http HTTP GET request opencanary sin
2026-07-27 14:25:53 :80 http HTTP GET request opencanary sin
2026-07-27 14:25:51 :80 http HTTP GET request opencanary sin
2026-07-27 14:25:50 :80 http HTTP GET request opencanary sin
2026-07-27 14:25:46 :80 http HTTP GET request opencanary sin
{# Cloudflare Web Analytics — cookieless, public pages only. The context processor withholds the token from authenticated requests. #}