IntrusionLabs IntrusionLabs
← Back to feed

45.156.129.117

TAGGED SUSPICIOUS how we decide →
Threat Confidence
25%
Location
🇵🇹 PT
ASN
AS211680 · Sistemas Informaticos, S.A.
Cloud Provider
—
Total Events
3
Below average by volume
Agent Count
1
First / Last Seen
2026-06-30 09:56 — 2026-07-13 18:31
Attack Types
http:scan
MITRE ATT&CK Techniques
Reconnaissance
T1595.002
Initial Access
T1190
External Corroboration
Not flagged by any external feeds
Campaigns
Subnet 45.156.129.0/24 SUBNET Active high 🇵🇹 PT
5 IPs 25 events
http:scanssh:bruteforce
2026-02-26 — ongoing · 5 IPs from the same /24 subnet (45.156.129.0/24) were observed attacking our sensors within the same time window. …
Session Forensics
web_probe ×2
Sessions
2
Avg Depth Score
0.25
Commands Executed
0
Files Downloaded
0
Evidence Timeline
Web Probe 3510024a9ba7964b newark_01 · 2026-07-13 18:31
25%
Loading events...
Web Probe 2c41b444c9bc9ad6 newark_01 · 2026-06-30 09:56
25%
Loading events...
Non-Session Events
Timestamp Port Proto Event Source Location
2026-07-13 18:31:55 :80 http HTTP GET request opencanary ewr
2026-06-30 09:56:41 :80 http HTTP GET request opencanary ewr
2026-06-30 09:56:31 :80 http HTTP GET request opencanary ewr