← Back to feed

20.118.133.132

Threat Confidence
16%
Location
🇺🇸 US / Phoenix
ASN
AS8075 · Microsoft Corporation
Cloud Provider
Microsoft Azure
Total Events
10
Average by volume
Agent Count
1
First / Last Seen
2026-08-17 18:26 — 2026-08-23 07:42
Attack Types
http:scan
MITRE ATT&CK Techniques
Reconnaissance
Initial Access
External Corroboration
Not flagged by any external feeds
Campaigns
Not associated with any campaigns
Session Forensics
web_probe ×10
Sessions
10
Avg Depth Score
0.25
Commands Executed
0
Files Downloaded
0
Evidence Timeline
Web Probe c9c5914e364f5a69 newark_01 · 2026-08-23 07:42
25%
Loading events...
Web Probe 5474d78791e09205 newark_01 · 2026-08-23 07:42
25%
Loading events...
Web Probe 9d85294ae7473e12 newark_01 · 2026-08-23 07:42
25%
Loading events...
Web Probe 40b962c2f1615003 newark_01 · 2026-08-20 22:08
25%
Loading events...
Web Probe 87d5808147dfb0f9 newark_01 · 2026-08-20 22:08
25%
Loading events...
Web Probe d424fab572c39ec5 newark_01 · 2026-08-20 22:08
25%
Loading events...
Web Probe 6cc96bf3a8dcd1a5 newark_01 · 2026-08-17 18:26
25%
Loading events...
Web Probe af0248e7817c08d5 newark_01 · 2026-08-17 18:26
25%
Loading events...
Web Probe dae183b7f3954fb9 newark_01 · 2026-08-17 18:26
25%
Loading events...
Web Probe 5bba25064c358a9e newark_01 · 2026-08-17 18:26
25%
Loading events...
Non-Session Events
Timestamp Port Proto Event Source Location
2026-08-23 07:42:10 :80 http HTTP GET request opencanary ewr
2026-08-23 07:42:06 :80 http HTTP GET request opencanary ewr
2026-08-23 07:42:05 :80 http HTTP GET request opencanary ewr
2026-08-20 22:08:16 :80 http HTTP GET request opencanary ewr
2026-08-20 22:08:13 :80 http HTTP GET request opencanary ewr
2026-08-20 22:08:12 :80 http HTTP GET request opencanary ewr
2026-08-17 18:26:17 :80 http HTTP GET request opencanary ewr
2026-08-17 18:26:16 :80 http HTTP GET request opencanary ewr
2026-08-17 18:26:13 :80 http HTTP GET request opencanary ewr
2026-08-17 18:26:13 :80 http HTTP GET request opencanary ewr
{# Cloudflare Web Analytics — cookieless, public pages only. The context processor withholds the token from authenticated requests. #}