IntrusionLabs IntrusionLabs
← Back to feed

93.152.221.158

Threat Confidence
41%
Assessment
  • Part of a 242-IP campaign probing the same targets.
Generated from the counts on this page by fixed rules; each line cites the number it rests on.
Location
🇩🇪 DE / Frankfurt am Main
ASN
AS197170 · TechTies Inc.
Cloud Provider
—
Total Events
2
Below average by volume
Agent Count
2
First / Last Seen
2026-10-20 22:07 — 2026-10-22 01:37
Attack Types
http:scan
MITRE ATT&CK Techniques
Reconnaissance
T1595.002
Initial Access
T1190
External Corroboration
Blocklist.de
Reported 2026-10-22 00:00
blocklist_de:reported
Campaigns
Multi-Agent Scan SCAN Active medium
242 IPs 935750 events
2026-09-22 — ongoing · 242 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Subnet 93.152.221.0/24 SUBNET Active high 🇩🇪 DE
5 IPs 176 events
http:scanssh:bruteforcessh:connectionssh:proxy-abusetelnet:bruteforcetelnet:connectiontelnet:proxy-abuse
2026-07-16 — ongoing · 5 IPs from the same /24 subnet (93.152.221.0/24) were observed attacking our sensors within the same time window. …
Multi-Agent Scan SCAN Active medium
241 IPs 715467 events
2026-06-28 — ongoing · 241 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
241 IPs 944770 events
2026-04-10 — ongoing · 241 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
175 IPs 715086 events
2026-03-01 — ongoing · 175 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
4 IPs 18972 events
2026-03-01 — ongoing · 4 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
147 IPs 467556 events
2026-03-01 — ongoing · 147 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Session Forensics
web_probe ×2
Sessions
2
Avg Depth Score
0.25
Commands Executed
0
Files Downloaded
0
Evidence Timeline
Web Probe 31193cd9b8eca829 greencloud_phx_01 · 2026-10-22 01:37
25%
Loading events...
Web Probe 30d3eedba893855e w4m_singapore_01 · 2026-10-20 22:07
25%
Loading events...
Non-Session Events
Timestamp Port Proto Event Source Location
2026-10-22 01:37:03 :80 http HTTP GET request opencanary phx
2026-10-20 22:07:37 :80 http HTTP GET request opencanary sin