← Back to feed

20.100.172.153

Threat Confidence
28%
Location
🇳🇴 NO / Oslo
ASN
AS8075 · Microsoft Corporation
Cloud Provider
Microsoft Azure
Total Events
45
Average by volume
Agent Count
2
First / Last Seen
2026-08-07 08:12 — 2026-08-09 14:50
Attack Types
http:scan
MITRE ATT&CK Techniques
Reconnaissance
Initial Access
External Corroboration
Not flagged by any external feeds
Campaigns
Multi-Agent Scan SCAN Active medium
64 IPs 353275 events
2026-05-22 — ongoing · 64 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan SCAN Active medium
54 IPs 242632 events
2026-03-17 — ongoing · 54 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
70 IPs 258295 events
2026-03-17 — ongoing · 70 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan SCAN Active medium
100 IPs 564074 events
2026-03-17 — ongoing · 100 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
86 IPs 422933 events
2026-03-17 — ongoing · 86 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
98 IPs 485054 events
2026-03-16 — ongoing · 98 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
53 IPs 99550 events
2026-03-09 — ongoing · 53 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
82 IPs 513813 events
2026-03-09 — ongoing · 82 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
82 IPs 529868 events
2026-03-09 — ongoing · 82 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
33 IPs 34062 events
2026-03-09 — ongoing · 33 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
79 IPs 301643 events
2026-03-08 — ongoing · 79 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
59 IPs 279323 events
2026-03-07 — ongoing · 59 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
91 IPs 549566 events
2026-02-27 — ongoing · 91 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
46 IPs 82468 events
2026-02-22 — ongoing · 46 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Session Forensics
web_probe ×45
Sessions
45
Avg Depth Score
0.25
Commands Executed
0
Files Downloaded
0
Evidence Timeline
Web Probe 55b44c3f2a5d1fd9 newark_01 · 2026-08-09 14:50
25%
Loading events...
Web Probe a9de827f15be0aa1 newark_01 · 2026-08-09 14:50
25%
Loading events...
Web Probe 7e2bfe4cd8c950a2 newark_01 · 2026-08-09 14:50
25%
Loading events...
Web Probe 304d064b6b701a05 newark_01 · 2026-08-09 14:50
25%
Loading events...
Web Probe a9d14fd775e2672f newark_01 · 2026-08-09 14:50
25%
Loading events...
Web Probe cb9fda2dfab9cf29 newark_01 · 2026-08-09 14:50
25%
Loading events...
Web Probe 1ddf04fd30d73e8a newark_01 · 2026-08-09 14:50
25%
Loading events...
Web Probe 45f7433ee1075541 newark_01 · 2026-08-09 14:50
25%
Loading events...
Web Probe a1e13d306a60fdc2 newark_01 · 2026-08-09 14:50
25%
Loading events...
Web Probe 7c8445836e46159e newark_01 · 2026-08-09 14:50
25%
Loading events...
Web Probe d1ad3dde76311dde newark_01 · 2026-08-09 14:50
25%
Loading events...
Web Probe 2bc36ca970286f44 newark_01 · 2026-08-09 14:50
25%
Loading events...
Web Probe d9e9bca365069d1f newark_01 · 2026-08-09 14:50
25%
Loading events...
Web Probe 790e2457f8f62300 newark_01 · 2026-08-09 14:50
25%
Loading events...
Web Probe c64be2e0bb8d9de8 newark_01 · 2026-08-09 14:50
25%
Loading events...
Web Probe e6891bc29cf0d7f5 w4m_singapore_01 · 2026-08-09 13:48
25%
Loading events...
Web Probe f5af32101ed9e85d w4m_singapore_01 · 2026-08-09 13:48
25%
Loading events...
Web Probe 4166f1a67c709162 w4m_singapore_01 · 2026-08-09 13:48
25%
Loading events...
Web Probe cef69556f1c82b37 w4m_singapore_01 · 2026-08-09 13:48
25%
Loading events...
Web Probe 1843e54d4702dff3 w4m_singapore_01 · 2026-08-09 13:48
25%
Loading events...
Web Probe f87059b7c37ce41f w4m_singapore_01 · 2026-08-09 13:48
25%
Loading events...
Web Probe cd576ed54bc1c8e0 w4m_singapore_01 · 2026-08-09 13:48
25%
Loading events...
Web Probe d80cbdb7b791dc35 w4m_singapore_01 · 2026-08-09 13:48
25%
Loading events...
Web Probe 3d861dbcb348f4af w4m_singapore_01 · 2026-08-09 13:48
25%
Loading events...
Web Probe 9c7e57762cf02e11 w4m_singapore_01 · 2026-08-09 13:48
25%
Loading events...
Web Probe 625c26d459041df8 w4m_singapore_01 · 2026-08-09 13:48
25%
Loading events...
Web Probe 250fca8af7c6330c w4m_singapore_01 · 2026-08-09 13:48
25%
Loading events...
Web Probe d73e04703c7251f4 w4m_singapore_01 · 2026-08-09 13:48
25%
Loading events...
Web Probe 7ea95b2f8ae9ab1e w4m_singapore_01 · 2026-08-09 13:48
25%
Loading events...
Web Probe f468f6191a8ad1da w4m_singapore_01 · 2026-08-09 13:48
25%
Loading events...
Web Probe 587614b9b04a70d8 newark_01 · 2026-08-07 08:13
25%
Loading events...
Web Probe 9290279e49e0e790 newark_01 · 2026-08-07 08:13
25%
Loading events...
Web Probe a599930428a5c0b2 newark_01 · 2026-08-07 08:13
25%
Loading events...
Web Probe 98796e433012dc1f newark_01 · 2026-08-07 08:13
25%
Loading events...
Web Probe 40c56d16a1b2e213 newark_01 · 2026-08-07 08:12
25%
Loading events...
Web Probe 2a264cf259be7031 newark_01 · 2026-08-07 08:12
25%
Loading events...
Web Probe 5c728963fdd070cd newark_01 · 2026-08-07 08:12
25%
Loading events...
Web Probe 2ac5e740bb69121c newark_01 · 2026-08-07 08:12
25%
Loading events...
Web Probe 516a8883bc03625c newark_01 · 2026-08-07 08:12
25%
Loading events...
Web Probe cdbb05203638387c newark_01 · 2026-08-07 08:12
25%
Loading events...
Web Probe c6d5f12734555a69 newark_01 · 2026-08-07 08:12
25%
Loading events...
Web Probe 5eb345bfd53b64a5 newark_01 · 2026-08-07 08:12
25%
Loading events...
Web Probe bca888debaecc082 newark_01 · 2026-08-07 08:12
25%
Loading events...
Web Probe b6a0506c525c08d3 newark_01 · 2026-08-07 08:12
25%
Loading events...
Web Probe 6261efc36114e106 newark_01 · 2026-08-07 08:12
25%
Loading events...
Non-Session Events
Timestamp Port Proto Event Source Location
2026-08-09 14:50:55 :80 http HTTP GET request opencanary ewr
2026-08-09 14:50:54 :80 http HTTP GET request opencanary ewr
2026-08-09 14:50:53 :80 http HTTP GET request opencanary ewr
2026-08-09 14:50:53 :80 http HTTP GET request opencanary ewr
2026-08-09 14:50:53 :80 http HTTP GET request opencanary ewr
2026-08-09 14:50:52 :80 http HTTP GET request opencanary ewr
2026-08-09 14:50:52 :80 http HTTP GET request opencanary ewr
2026-08-09 14:50:52 :80 http HTTP GET request opencanary ewr
2026-08-09 14:50:52 :80 http HTTP GET request opencanary ewr
2026-08-09 14:50:51 :80 http HTTP GET request opencanary ewr
2026-08-09 14:50:51 :80 http HTTP GET request opencanary ewr
2026-08-09 14:50:51 :80 http HTTP GET request opencanary ewr
2026-08-09 14:50:50 :80 http HTTP GET request opencanary ewr
2026-08-09 14:50:50 :80 http HTTP GET request opencanary ewr
2026-08-09 14:50:48 :80 http HTTP GET request opencanary ewr
2026-08-09 13:48:23 :80 http HTTP GET request opencanary sin
2026-08-09 13:48:20 :80 http HTTP GET request opencanary sin
2026-08-09 13:48:18 :80 http HTTP GET request opencanary sin
2026-08-09 13:48:18 :80 http HTTP GET request opencanary sin
2026-08-09 13:48:17 :80 http HTTP GET request opencanary sin
2026-08-09 13:48:17 :80 http HTTP GET request opencanary sin
2026-08-09 13:48:16 :80 http HTTP GET request opencanary sin
2026-08-09 13:48:15 :80 http HTTP GET request opencanary sin
2026-08-09 13:48:15 :80 http HTTP GET request opencanary sin
2026-08-09 13:48:14 :80 http HTTP GET request opencanary sin
2026-08-09 13:48:13 :80 http HTTP GET request opencanary sin
2026-08-09 13:48:13 :80 http HTTP GET request opencanary sin
2026-08-09 13:48:12 :80 http HTTP GET request opencanary sin
2026-08-09 13:48:11 :80 http HTTP GET request opencanary sin
2026-08-09 13:48:07 :80 http HTTP GET request opencanary sin
2026-08-07 08:13:02 :80 http HTTP GET request opencanary ewr
2026-08-07 08:13:01 :80 http HTTP GET request opencanary ewr
2026-08-07 08:13:00 :80 http HTTP GET request opencanary ewr
2026-08-07 08:13:00 :80 http HTTP GET request opencanary ewr
2026-08-07 08:12:59 :80 http HTTP GET request opencanary ewr
2026-08-07 08:12:59 :80 http HTTP GET request opencanary ewr
2026-08-07 08:12:59 :80 http HTTP GET request opencanary ewr
2026-08-07 08:12:58 :80 http HTTP GET request opencanary ewr
2026-08-07 08:12:58 :80 http HTTP GET request opencanary ewr
2026-08-07 08:12:58 :80 http HTTP GET request opencanary ewr
2026-08-07 08:12:57 :80 http HTTP GET request opencanary ewr
2026-08-07 08:12:57 :80 http HTTP GET request opencanary ewr
2026-08-07 08:12:57 :80 http HTTP GET request opencanary ewr
2026-08-07 08:12:56 :80 http HTTP GET request opencanary ewr
2026-08-07 08:12:54 :80 http HTTP GET request opencanary ewr
{# Cloudflare Web Analytics — cookieless, public pages only. The context processor withholds the token from authenticated requests. #}