IntrusionLabs IntrusionLabs
← Back to feed

52.141.45.117

Threat Confidence
45%
Location
🇰🇷 KR / Seoul
ASN
AS8075 · Microsoft Corporation
Cloud Provider
Microsoft Azure
Total Events
31
Average by volume
Agent Count
2
First / Last Seen
2026-09-11 23:49 — 2026-09-15 17:05
Attack Types
http:scan
MITRE ATT&CK Techniques
Reconnaissance
T1595.002
Initial Access
T1190
External Corroboration
Blocklist.de
Reported 2026-09-15 17:01
blocklist_de:reported
Campaigns
Multi-Agent Scan SCAN Active medium
100 IPs 309870 events
2026-09-12 — ongoing · 100 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
116 IPs 343076 events
2026-03-21 — ongoing · 116 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
96 IPs 309655 events
2026-03-03 — ongoing · 96 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Session Forensics
web_probe ×31
Sessions
31
Avg Depth Score
0.25
Commands Executed
0
Files Downloaded
0
Evidence Timeline
Web Probe d9577f060f6879c5 w4m_singapore_01 · 2026-09-15 17:05
25%
Loading events...
Web Probe 171b9a0bb1af5f58 w4m_singapore_01 · 2026-09-15 17:05
25%
Loading events...
Web Probe f9081c595b7e8c6b w4m_singapore_01 · 2026-09-15 17:05
25%
Loading events...
Web Probe ad99c9ea749da642 newark_01 · 2026-09-15 11:08
25%
Loading events...
Web Probe 5d243505c23d5a93 newark_01 · 2026-09-15 11:08
25%
Loading events...
Web Probe 1dd3d0901135b07d newark_01 · 2026-09-15 11:08
25%
Loading events...
Web Probe 628bd95ea1167b5e newark_01 · 2026-09-15 11:08
25%
Loading events...
Web Probe f41d05b750e2a8c9 newark_01 · 2026-09-15 05:02
25%
Loading events...
Web Probe ba2c63e19cb76f0f newark_01 · 2026-09-15 05:02
25%
Loading events...
Web Probe e7cf12a02b204b1b newark_01 · 2026-09-15 05:02
25%
Loading events...
Web Probe bafa8c763f71b7ea newark_01 · 2026-09-15 05:02
25%
Loading events...
Web Probe ba725b9ccc94c324 newark_01 · 2026-09-13 07:46
25%
Loading events...
Web Probe fed0bd5b3190ea45 newark_01 · 2026-09-13 07:46
25%
Loading events...
Web Probe 71a49fd65524418e newark_01 · 2026-09-13 07:46
25%
Loading events...
Web Probe a74107d70595d742 newark_01 · 2026-09-13 07:46
25%
Loading events...
Web Probe 5f25a1c470a25462 newark_01 · 2026-09-13 07:46
25%
Loading events...
Web Probe a04561d9d373034d newark_01 · 2026-09-13 00:19
25%
Loading events...
Web Probe f4e218a66079627f newark_01 · 2026-09-13 00:19
25%
Loading events...
Web Probe 5536d0aefe7f5868 newark_01 · 2026-09-13 00:19
25%
Loading events...
Web Probe 940c463d116049fb newark_01 · 2026-09-13 00:19
25%
Loading events...
Web Probe b0a044463de61a08 newark_01 · 2026-09-13 00:19
25%
Loading events...
Web Probe 63f7cbadc1a0772c newark_01 · 2026-09-13 00:19
25%
Loading events...
Web Probe eac095af2fcb381f newark_01 · 2026-09-13 00:19
25%
Loading events...
Web Probe b17449b8d7c0e71b newark_01 · 2026-09-13 00:19
25%
Loading events...
Web Probe fcd5da5b21631f90 newark_01 · 2026-09-13 00:19
25%
Loading events...
Web Probe cb42cf156826d61e newark_01 · 2026-09-13 00:19
25%
Loading events...
Web Probe 07f56df1e26f4acd newark_01 · 2026-09-11 23:49
25%
Loading events...
Web Probe ba6ba8336abd0504 newark_01 · 2026-09-11 23:49
25%
Loading events...
Web Probe 639d44f2a90a0f5e newark_01 · 2026-09-11 23:49
25%
Loading events...
Web Probe a01d8a8fbfd9e6d0 newark_01 · 2026-09-11 23:49
25%
Loading events...
Web Probe d8b14f1fdc7a50c0 newark_01 · 2026-09-11 23:49
25%
Loading events...
Non-Session Events
Timestamp Port Proto Event Source Location
2026-09-15 17:05:50 :80 http HTTP GET request opencanary sin
2026-09-15 17:05:49 :80 http HTTP GET request opencanary sin
2026-09-15 17:05:49 :80 http HTTP GET request opencanary sin
2026-09-15 11:08:14 :80 http HTTP GET request opencanary ewr
2026-09-15 11:08:06 :80 http HTTP GET request opencanary ewr
2026-09-15 11:08:05 :80 http HTTP GET request opencanary ewr
2026-09-15 11:08:04 :80 http HTTP GET request opencanary ewr
2026-09-15 05:02:23 :80 http HTTP GET request opencanary ewr
2026-09-15 05:02:16 :80 http HTTP GET request opencanary ewr
2026-09-15 05:02:15 :80 http HTTP GET request opencanary ewr
2026-09-15 05:02:14 :80 http HTTP GET request opencanary ewr
2026-09-13 07:46:16 :80 http HTTP GET request opencanary ewr
2026-09-13 07:46:15 :80 http HTTP GET request opencanary ewr
2026-09-13 07:46:11 :80 http HTTP GET request opencanary ewr
2026-09-13 07:46:08 :80 http HTTP GET request opencanary ewr
2026-09-13 07:46:07 :80 http HTTP GET request opencanary ewr
2026-09-13 00:19:48 :80 http HTTP GET request opencanary ewr
2026-09-13 00:19:45 :80 http HTTP GET request opencanary ewr
2026-09-13 00:19:44 :80 http HTTP GET request opencanary ewr
2026-09-13 00:19:44 :80 http HTTP GET request opencanary ewr
2026-09-13 00:19:42 :80 http HTTP GET request opencanary ewr
2026-09-13 00:19:34 :80 http HTTP GET request opencanary ewr
2026-09-13 00:19:33 :80 http HTTP GET request opencanary ewr
2026-09-13 00:19:33 :80 http HTTP GET request opencanary ewr
2026-09-13 00:19:32 :80 http HTTP GET request opencanary ewr
2026-09-13 00:19:29 :80 http HTTP GET request opencanary ewr
2026-09-11 23:49:38 :80 http HTTP GET request opencanary ewr
2026-09-11 23:49:35 :80 http HTTP GET request opencanary ewr
2026-09-11 23:49:32 :80 http HTTP GET request opencanary ewr
2026-09-11 23:49:31 :80 http HTTP GET request opencanary ewr
2026-09-11 23:49:25 :80 http HTTP GET request opencanary ewr
{# Cloudflare Web Analytics — cookieless, public pages only. The context processor withholds the token from authenticated requests. #}