← Back to feed

104.251.180.112

Threat Confidence
40%
Assessment
  • Part of a 237-IP campaign probing the same targets.
Generated from the counts on this page by fixed rules; each line cites the number it rests on.
Location
🇨🇭 CH / Zurich
ASN
AS402253 · SKN Subnet & Telecom Ltd
Cloud Provider
—
Total Events
2
Below average by volume
Agent Count
2
First / Last Seen
2026-10-19 20:35 — 2026-10-20 02:06
Attack Types
http:scan
MITRE ATT&CK Techniques
Reconnaissance
Initial Access
External Corroboration
Blocklist.de
Reported 2026-10-20 11:01
blocklist_de:reported
Campaigns
Multi-Agent Scan SCAN Active medium
10 IPs 26233 events
2026-10-19 — ongoing · 10 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
75 IPs 88631 events
2026-10-17 — ongoing · 75 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
5 IPs 233 events
2026-09-25 — ongoing · 5 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
50 IPs 305373 events
2026-09-20 — ongoing · 50 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
54 IPs 62179 events
2026-07-18 — ongoing · 54 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
3 IPs 24666 events
2026-07-02 — ongoing · 3 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
212 IPs 748902 events
2026-06-26 — ongoing · 212 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
147 IPs 555122 events
2026-04-21 — ongoing · 147 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
9 IPs 200 events
2026-03-24 — ongoing · 9 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Linode. Scanning the same …
Multi-Agent Scan SCAN Active medium
27 IPs 35821 events
2026-03-24 — ongoing · 27 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan SCAN Active medium
231 IPs 851235 events
2026-03-02 — ongoing · 231 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Linode. Scanning the same …
Multi-Agent Scan SCAN Active medium
237 IPs 960556 events
2026-03-02 — ongoing · 237 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
110 IPs 265142 events
2026-02-27 — ongoing · 110 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Linode. Scanning the same …
Multi-Agent Scan SCAN Active medium
183 IPs 724055 events
2026-02-26 — ongoing · 183 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
232 IPs 873983 events
2026-02-26 — ongoing · 232 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Session Forensics
web_probe ×2
Sessions
2
Avg Depth Score
0.25
Commands Executed
0
Files Downloaded
0
Evidence Timeline
Web Probe 9d7ce62006cf1a37 newark_01 · 2026-10-20 02:06
25%
Loading events...
Web Probe 457e65fa80d0ed1c w4m_singapore_01 · 2026-10-19 20:35
25%
Loading events...
Non-Session Events
Timestamp Port Proto Event Source Location
2026-10-20 02:06:40 :80 http HTTP GET request opencanary ewr
2026-10-19 20:35:41 :80 http HTTP GET request opencanary sin