← Back to feed
20.169.49.48
Assessment
Port and service scanner
- Part of a 261-IP campaign probing the same targets.
Generated from the counts on this page by fixed rules; each line cites the number it rests on.
Location
🇺🇸 US / Phoenix
ASN
AS8075 · Microsoft Corporation
Cloud Provider
Microsoft Azure
Total Events
9
Average by volume
Agent Count
2
First / Last Seen
2026-09-27 09:41 — 2026-10-03 14:04
Attack Types
MITRE ATT&CK Techniques
External Corroboration
CINS Army
cins:bad_reputation
Campaigns
Multi-Agent Scan
SCAN
Active
medium
233 IPs
695804 events
2026-10-01 — ongoing · 233 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
189 IPs
465066 events
2026-09-07 — ongoing · 189 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
172 IPs
647330 events
2026-07-04 — ongoing · 172 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
153 IPs
200350 events
2026-06-09 — ongoing · 153 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Cloudflare. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
233 IPs
767752 events
2026-05-06 — ongoing · 233 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
245 IPs
693438 events
2026-04-15 — ongoing · 245 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
261 IPs
678904 events
2026-04-15 — ongoing · 261 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
135 IPs
478832 events
2026-04-15 — ongoing · 135 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
172 IPs
587015 events
2026-04-15 — ongoing · 172 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
224 IPs
645020 events
2026-04-15 — ongoing · 224 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
245 IPs
759893 events
2026-04-15 — ongoing · 245 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
260 IPs
788883 events
2026-04-15 — ongoing · 260 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
170 IPs
607164 events
2026-04-15 — ongoing · 170 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
79 IPs
80919 events
2026-04-13 — ongoing · 79 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
129 IPs
278980 events
2026-03-21 — ongoing · 129 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
134 IPs
209652 events
2026-03-21 — ongoing · 134 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
123 IPs
415032 events
2026-03-02 — ongoing · 123 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
233 IPs
677517 events
2026-03-01 — ongoing · 233 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
113 IPs
406757 events
2026-02-26 — ongoing · 113 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
3 IPs
956 events
2026-02-26 — ongoing · 3 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
189 IPs
629083 events
2026-02-26 — ongoing · 189 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
199 IPs
610035 events
2026-02-24 — ongoing · 199 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Session Forensics
Sessions
4
Avg Depth Score
0.14
Commands Executed
0
Files Downloaded
0
Evidence Timeline
Scanner
91c0231439cf
15%
Loading events...
Unknown
87c712e280a0
10%
Loading events...
Scanner
fac2ad5c1c54
15%
Loading events...
Scanner
2a531d8f9a1e
15%
Loading events...