IntrusionLabs IntrusionLabs
← Back to feed

4.232.93.83

Threat Confidence
29%
Location
🇮🇹 IT / Milan
ASN
AS8075 · Microsoft Corporation
Cloud Provider
Microsoft Azure
Total Events
108
Above average by volume
Agent Count
2
First / Last Seen
2026-08-06 14:02 — 2026-08-15 05:30
Attack Types
http:scan
MITRE ATT&CK Techniques
Reconnaissance
T1595.002
Initial Access
T1190
External Corroboration
Not flagged by any external feeds
Campaigns
Multi-Agent Scan SCAN Active medium
73 IPs 343514 events
2026-07-08 — ongoing · 73 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
100 IPs 603636 events
2026-07-08 — ongoing · 100 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan SCAN Active medium
90 IPs 441629 events
2026-07-08 — ongoing · 90 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
72 IPs 281909 events
2026-07-08 — ongoing · 72 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
34 IPs 8805 events
2026-06-11 — ongoing · 34 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Vultr. Scanning the same …
Multi-Agent Scan SCAN Active medium
66 IPs 277522 events
2026-05-27 — ongoing · 66 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
64 IPs 353275 events
2026-05-22 — ongoing · 64 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan SCAN Active medium
84 IPs 434551 events
2026-05-19 — ongoing · 84 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
82 IPs 309130 events
2026-05-13 — ongoing · 82 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
67 IPs 116354 events
2026-05-04 — ongoing · 67 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
10 IPs 3377 events
2026-03-30 — ongoing · 10 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
83 IPs 260444 events
2026-03-18 — ongoing · 83 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
96 IPs 397967 events
2026-03-18 — ongoing · 96 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
111 IPs 410139 events
2026-03-18 — ongoing · 111 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan SCAN Active medium
86 IPs 422933 events
2026-03-17 — ongoing · 86 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
55 IPs 217261 events
2026-03-17 — ongoing · 55 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
7 IPs 11520 events
2026-03-17 — ongoing · 7 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan SCAN Active medium
54 IPs 242632 events
2026-03-17 — ongoing · 54 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
70 IPs 258295 events
2026-03-17 — ongoing · 70 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan SCAN Active medium
38 IPs 86518 events
2026-03-17 — ongoing · 38 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
100 IPs 564074 events
2026-03-17 — ongoing · 100 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
66 IPs 269297 events
2026-03-16 — ongoing · 66 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
98 IPs 485054 events
2026-03-16 — ongoing · 98 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
57 IPs 235538 events
2026-03-15 — ongoing · 57 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
82 IPs 529868 events
2026-03-09 — ongoing · 82 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
33 IPs 34062 events
2026-03-09 — ongoing · 33 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
53 IPs 99550 events
2026-03-09 — ongoing · 53 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
82 IPs 513813 events
2026-03-09 — ongoing · 82 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
71 IPs 276612 events
2026-03-09 — ongoing · 71 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
29 IPs 52796 events
2026-03-09 — ongoing · 29 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
79 IPs 301643 events
2026-03-08 — ongoing · 79 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
59 IPs 279323 events
2026-03-07 — ongoing · 59 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
8 IPs 65967 events
2026-03-07 — ongoing · 8 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
113 IPs 556958 events
2026-03-04 — ongoing · 113 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
80 IPs 380185 events
2026-03-04 — ongoing · 80 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
115 IPs 669629 events
2026-03-01 — ongoing · 115 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
81 IPs 369727 events
2026-03-01 — ongoing · 81 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
86 IPs 479751 events
2026-03-01 — ongoing · 86 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
109 IPs 600575 events
2026-03-01 — ongoing · 109 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
112 IPs 527506 events
2026-03-01 — ongoing · 112 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
85 IPs 270952 events
2026-03-01 — ongoing · 85 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
91 IPs 549566 events
2026-02-27 — ongoing · 91 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
78 IPs 378694 events
2026-02-24 — ongoing · 78 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
93 IPs 324517 events
2026-02-24 — ongoing · 93 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
46 IPs 82468 events
2026-02-22 — ongoing · 46 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Session Forensics
web_probe ×108
Sessions
108
Avg Depth Score
0.25
Commands Executed
0
Files Downloaded
0
Evidence Timeline
Web Probe f6b8b1865f565902 newark_01 · 2026-08-15 05:30
25%
Loading events...
Web Probe b16d6756dd05079e newark_01 · 2026-08-15 05:30
25%
Loading events...
Web Probe fd86dd4a65491c26 newark_01 · 2026-08-15 05:30
25%
Loading events...
Web Probe 3867b74d2fbddd64 newark_01 · 2026-08-15 05:30
25%
Loading events...
Web Probe 1d138e020660795b newark_01 · 2026-08-15 05:30
25%
Loading events...
Web Probe b6b9ce77b0e092a5 newark_01 · 2026-08-15 05:30
25%
Loading events...
Web Probe dd6fe17f6a86d24c newark_01 · 2026-08-15 05:30
25%
Loading events...
Web Probe 7cf0c4afc7521a2c newark_01 · 2026-08-15 05:30
25%
Loading events...
Web Probe 48120cb4b3cd2cc4 newark_01 · 2026-08-15 05:30
25%
Loading events...
Web Probe ca6c47465eb25c1c newark_01 · 2026-08-15 05:30
25%
Loading events...
Web Probe b5a759b69ca3d90e newark_01 · 2026-08-15 05:30
25%
Loading events...
Web Probe 60ec8aee86e9261e newark_01 · 2026-08-15 05:30
25%
Loading events...
Web Probe 239cbf1715627110 newark_01 · 2026-08-15 05:30
25%
Loading events...
Web Probe 5c7752cf5ccc1375 newark_01 · 2026-08-15 05:30
25%
Loading events...
Web Probe 3a35275cbb591bab newark_01 · 2026-08-15 05:30
25%
Loading events...
Web Probe 17518cea44c2a4d6 newark_01 · 2026-08-15 05:30
25%
Loading events...
Web Probe a65786081305c113 newark_01 · 2026-08-15 05:12
25%
Loading events...
Web Probe a24f969a2c9e90fe newark_01 · 2026-08-15 05:12
25%
Loading events...
Web Probe 745446f3900c89c7 newark_01 · 2026-08-15 05:12
25%
Loading events...
Web Probe 65617142454e3329 newark_01 · 2026-08-15 05:12
25%
Loading events...
Web Probe b93dd5b6f8b95a31 newark_01 · 2026-08-15 05:12
25%
Loading events...
Web Probe 3cfccc56d5ca07c0 newark_01 · 2026-08-15 05:12
25%
Loading events...
Web Probe 614f9b41d4fa591c newark_01 · 2026-08-15 05:12
25%
Loading events...
Web Probe 0e62c06240931270 newark_01 · 2026-08-15 05:12
25%
Loading events...
Web Probe c7168c09b7a1f260 newark_01 · 2026-08-15 05:12
25%
Loading events...
Web Probe 491e3e8c765a05ee newark_01 · 2026-08-15 05:12
25%
Loading events...
Web Probe 0fff9acd5e1725e9 newark_01 · 2026-08-15 05:12
25%
Loading events...
Web Probe ec2041188dc16525 newark_01 · 2026-08-15 05:12
25%
Loading events...
Web Probe 38bea7eb4e869470 newark_01 · 2026-08-15 05:12
25%
Loading events...
Web Probe 37bf532514cc5f2b newark_01 · 2026-08-15 05:12
25%
Loading events...
Web Probe a955a5e5dd8bfd8b newark_01 · 2026-08-15 05:12
25%
Loading events...
Web Probe 34d5684868fee165 newark_01 · 2026-08-15 05:12
25%
Loading events...
Web Probe 72a8aab3ad84f4bd newark_01 · 2026-08-15 04:52
25%
Loading events...
Web Probe b9f91ef6738de525 newark_01 · 2026-08-15 04:52
25%
Loading events...
Web Probe 5388af0cf0005014 newark_01 · 2026-08-15 04:52
25%
Loading events...
Web Probe ed7c1f1e4ad8aba0 newark_01 · 2026-08-15 04:52
25%
Loading events...
Web Probe e96071e0d057f871 newark_01 · 2026-08-15 04:52
25%
Loading events...
Web Probe 2e2ce4f50a39a10b newark_01 · 2026-08-15 04:52
25%
Loading events...
Web Probe ae749c8183c83463 newark_01 · 2026-08-15 04:52
25%
Loading events...
Web Probe f9d7995ed2162221 newark_01 · 2026-08-15 04:52
25%
Loading events...
Web Probe 1b9a381c6c54b6d6 newark_01 · 2026-08-15 04:52
25%
Loading events...
Web Probe 9363d1925868a7c5 newark_01 · 2026-08-15 04:52
25%
Loading events...
Web Probe f832c9ada17b55c5 newark_01 · 2026-08-15 04:52
25%
Loading events...
Web Probe 5aec5c441d40938e newark_01 · 2026-08-15 04:52
25%
Loading events...
Web Probe 5d81a752f91dd598 newark_01 · 2026-08-15 04:52
25%
Loading events...
Web Probe 3d5dd9648096086c newark_01 · 2026-08-15 04:52
25%
Loading events...
Web Probe c744dd127019f70d newark_01 · 2026-08-15 04:52
25%
Loading events...
Web Probe 2c3c82f0319e640f newark_01 · 2026-08-15 04:52
25%
Loading events...
Web Probe 4eeedb3440b27ec7 newark_01 · 2026-08-10 06:48
25%
Loading events...
Web Probe 293aa34ead23e452 newark_01 · 2026-08-10 06:48
25%
Loading events...
Non-Session Events
Timestamp Port Proto Event Source Location
2026-08-15 05:30:59 :80 http HTTP GET request opencanary ewr
2026-08-15 05:30:58 :80 http HTTP GET request opencanary ewr
2026-08-15 05:30:57 :80 http HTTP GET request opencanary ewr
2026-08-15 05:30:57 :80 http HTTP GET request opencanary ewr
2026-08-15 05:30:56 :80 http HTTP GET request opencanary ewr
2026-08-15 05:30:55 :80 http HTTP GET request opencanary ewr
2026-08-15 05:30:54 :80 http HTTP GET request opencanary ewr
2026-08-15 05:30:53 :80 http HTTP GET request opencanary ewr
2026-08-15 05:30:52 :80 http HTTP GET request opencanary ewr
2026-08-15 05:30:51 :80 http HTTP GET request opencanary ewr
2026-08-15 05:30:51 :80 http HTTP GET request opencanary ewr
2026-08-15 05:30:50 :80 http HTTP GET request opencanary ewr
2026-08-15 05:30:49 :80 http HTTP GET request opencanary ewr
2026-08-15 05:30:48 :80 http HTTP GET request opencanary ewr
2026-08-15 05:30:47 :80 http HTTP GET request opencanary ewr
2026-08-15 05:30:46 :80 http HTTP GET request opencanary ewr
2026-08-15 05:12:37 :80 http HTTP GET request opencanary ewr
2026-08-15 05:12:36 :80 http HTTP GET request opencanary ewr
2026-08-15 05:12:36 :80 http HTTP GET request opencanary ewr
2026-08-15 05:12:35 :80 http HTTP GET request opencanary ewr
2026-08-15 05:12:35 :80 http HTTP GET request opencanary ewr
2026-08-15 05:12:34 :80 http HTTP GET request opencanary ewr
2026-08-15 05:12:33 :80 http HTTP GET request opencanary ewr
2026-08-15 05:12:32 :80 http HTTP GET request opencanary ewr
2026-08-15 05:12:30 :80 http HTTP GET request opencanary ewr
2026-08-15 05:12:29 :80 http HTTP GET request opencanary ewr
2026-08-15 05:12:29 :80 http HTTP GET request opencanary ewr
2026-08-15 05:12:28 :80 http HTTP GET request opencanary ewr
2026-08-15 05:12:27 :80 http HTTP GET request opencanary ewr
2026-08-15 05:12:26 :80 http HTTP GET request opencanary ewr
2026-08-15 05:12:24 :80 http HTTP GET request opencanary ewr
2026-08-15 05:12:23 :80 http HTTP GET request opencanary ewr
2026-08-15 04:52:21 :80 http HTTP GET request opencanary ewr
2026-08-15 04:52:21 :80 http HTTP GET request opencanary ewr
2026-08-15 04:52:20 :80 http HTTP GET request opencanary ewr
2026-08-15 04:52:20 :80 http HTTP GET request opencanary ewr
2026-08-15 04:52:18 :80 http HTTP GET request opencanary ewr
2026-08-15 04:52:17 :80 http HTTP GET request opencanary ewr
2026-08-15 04:52:17 :80 http HTTP GET request opencanary ewr
2026-08-15 04:52:16 :80 http HTTP GET request opencanary ewr
2026-08-15 04:52:14 :80 http HTTP GET request opencanary ewr
2026-08-15 04:52:14 :80 http HTTP GET request opencanary ewr
2026-08-15 04:52:13 :80 http HTTP GET request opencanary ewr
2026-08-15 04:52:12 :80 http HTTP GET request opencanary ewr
2026-08-15 04:52:10 :80 http HTTP GET request opencanary ewr
2026-08-15 04:52:10 :80 http HTTP GET request opencanary ewr
2026-08-15 04:52:08 :80 http HTTP GET request opencanary ewr
2026-08-15 04:52:06 :80 http HTTP GET request opencanary ewr
2026-08-10 06:48:58 :80 http HTTP GET request opencanary ewr
2026-08-10 06:48:58 :80 http HTTP GET request opencanary ewr
{# Cloudflare Web Analytics — cookieless, public pages only. The context processor withholds the token from authenticated requests. #}