← Back to feed

164.92.241.229

TAGGED SUSPICIOUS how we decide →
Threat Confidence
36%
Location
🇩🇪 DE / Frankfurt am Main
ASN
AS14061 · DigitalOcean, LLC
Cloud Provider
DigitalOcean
Total Events
3
Below average by volume
Agent Count
2
First / Last Seen
2026-05-21 01:53 — 2026-05-28 07:58
Attack Types
http:scan
MITRE ATT&CK Techniques
Reconnaissance
Initial Access
External Corroboration
Not flagged by any external feeds
Campaigns
Multi-Agent Scan SCAN Active medium
183 IPs 251548 events
2026-05-08 — ongoing · 183 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
189 IPs 252599 events
2026-05-08 — ongoing · 189 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan SCAN Active medium
185 IPs 251966 events
2026-05-08 — ongoing · 185 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
121 IPs 231101 events
2026-04-10 — ongoing · 121 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
60 IPs 12755 events
2026-03-28 — ongoing · 60 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
89 IPs 29696 events
2026-03-04 — ongoing · 89 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
119 IPs 209230 events
2026-03-02 — ongoing · 119 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
45 IPs 19105 events
2026-03-02 — ongoing · 45 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
46 IPs 18582 events
2026-03-02 — ongoing · 46 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Session Forensics
web_probe ×3
Sessions
3
Avg Depth Score
0.25
Commands Executed
0
Files Downloaded
0
Evidence Timeline
Web Probe b4f91369cdd10110 w4m_seattle_01 · 2026-05-28 07:58
25%
Loading events...
Web Probe b702e149e9b776a0 w4m_singapore_01 · 2026-05-28 02:18
25%
Loading events...
Web Probe 3f81e8eeb49b950d w4m_singapore_01 · 2026-05-21 01:53
25%
Loading events...
Non-Session Events
Timestamp Port Proto Event Source Location
2026-05-28 07:58:23 :80 http HTTP GET request opencanary sea
2026-05-28 02:18:12 :80 http HTTP GET request opencanary sin
2026-05-21 01:53:51 :80 http HTTP GET request opencanary sin