IntrusionLabs IntrusionLabs
← Back to feed

49.235.136.28

Threat Confidence
25%
Location
🇨🇳 CN / Shanghai
ASN
AS45090 · Shenzhen Tencent Computer Systems Company Limited
Cloud Provider
—
Total Events
15
Average by volume
Agent Count
1
First / Last Seen
2026-05-06 08:50 — 2026-08-29 14:14
Attack Types
http:scan
MITRE ATT&CK Techniques
Reconnaissance
T1595.002
Initial Access
T1190
External Corroboration
Not flagged by any external feeds
Campaigns
AS45090 Shenzhen Tencent Computer Systems Company Limited ASN Active medium 🇨🇳 CN
28 IPs 507 events
http:scanssh:bruteforce
2026-03-06 — ongoing · 28 IPs from the same network (Shenzhen Tencent Computer Systems Company Limited, AS45090) were active during overlapping time …
Session Forensics
web_probe ×15
Sessions
15
Avg Depth Score
0.25
Commands Executed
0
Files Downloaded
0
Evidence Timeline
Web Probe 3a7bb91409cca736 newark_01 · 2026-08-30 01:32
25%
Loading events...
Web Probe 9d6858d745e94cd3 newark_01 · 2026-08-29 14:14
25%
Loading events...
Web Probe ce473ce196a65896 newark_01 · 2026-08-16 09:36
25%
Loading events...
Web Probe 63253c54f0c4d7c2 newark_01 · 2026-08-15 20:51
25%
Loading events...
Web Probe 460373253b07e172 newark_01 · 2026-08-10 21:47
25%
Loading events...
Web Probe 8e2b5b81d1568632 newark_01 · 2026-08-03 20:23
25%
Loading events...
Web Probe c259dc6c805394f0 newark_01 · 2026-06-22 01:56
25%
Loading events...
Web Probe 033f6c2a5540f9c0 newark_01 · 2026-06-21 20:44
25%
Loading events...
Web Probe 721e0f8773ed9752 newark_01 · 2026-06-16 10:08
25%
Loading events...
Web Probe 7e071e13a92ed247 newark_01 · 2026-06-14 04:37
25%
Loading events...
Web Probe 89a3e19ec1e3fa37 newark_01 · 2026-06-13 01:53
25%
Loading events...
Web Probe 5e0bdb7a1a185096 newark_01 · 2026-06-01 07:43
25%
Loading events...
Web Probe be7a8cd293703f3c newark_01 · 2026-05-28 16:11
25%
Loading events...
Web Probe 5e88722b427e7118 newark_01 · 2026-05-25 19:09
25%
Loading events...
Web Probe ac8823729d12ecb6 newark_01 · 2026-05-06 08:50
25%
Loading events...
Non-Session Events
Timestamp Port Proto Event Source Location
2026-08-30 01:32:51 :80 http HTTP GET request opencanary ewr
2026-08-29 14:14:05 :80 http HTTP GET request opencanary ewr
2026-08-16 09:36:55 :80 http HTTP GET request opencanary ewr
2026-08-15 20:51:12 :80 http HTTP GET request opencanary ewr
2026-08-10 21:47:14 :80 http HTTP GET request opencanary ewr
2026-08-03 20:23:48 :80 http HTTP GET request opencanary ewr
2026-07-04 18:56:51 :80 http HTTP GET request opencanary ewr
2026-06-22 01:56:20 :80 http HTTP GET request opencanary ewr
2026-06-21 20:44:40 :80 http HTTP GET request opencanary ewr
2026-06-16 10:08:10 :80 http HTTP GET request opencanary ewr
2026-06-14 04:37:59 :80 http HTTP GET request opencanary ewr
2026-06-13 01:53:58 :80 http HTTP GET request opencanary ewr
2026-06-01 07:43:22 :80 http HTTP GET request opencanary ewr
2026-05-28 16:11:30 :80 http HTTP GET request opencanary ewr
{# Cloudflare Web Analytics — cookieless, public pages only. The context processor withholds the token from authenticated requests. #}