← Back to feed
20.203.243.122
Location
🇨🇭 CH / Zurich
ASN
AS8075 · Microsoft Corporation
Cloud Provider
Microsoft Azure
Total Events
19
Average by volume
Agent Count
2
First / Last Seen
2026-07-31 15:38 — 2026-08-07 19:13
Attack Types
MITRE ATT&CK Techniques
External Corroboration
Not flagged by any external feeds
Campaigns
Multi-Agent Scan
SCAN
Active
medium
69 IPs
178691 events
2026-07-04 — ongoing · 69 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
85 IPs
178169 events
2026-07-04 — ongoing · 85 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
19 IPs
6324 events
2026-06-29 — ongoing · 19 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
41 IPs
121046 events
2026-04-15 — ongoing · 41 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
51 IPs
82328 events
2026-03-30 — ongoing · 51 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
50 IPs
64921 events
2026-03-20 — ongoing · 50 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
50 IPs
50428 events
2026-03-18 — ongoing · 50 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
36 IPs
18853 events
2026-03-18 — ongoing · 36 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
72 IPs
201639 events
2026-03-18 — ongoing · 72 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
97 IPs
282716 events
2026-03-18 — ongoing · 97 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
29 IPs
17523 events
2026-03-17 — ongoing · 29 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
87 IPs
236537 events
2026-03-17 — ongoing · 87 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
98 IPs
285421 events
2026-03-17 — ongoing · 98 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
71 IPs
183861 events
2026-03-17 — ongoing · 71 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
52 IPs
141495 events
2026-03-17 — ongoing · 52 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
86 IPs
234813 events
2026-03-15 — ongoing · 86 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
81 IPs
118503 events
2026-03-04 — ongoing · 81 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
102 IPs
306321 events
2026-03-04 — ongoing · 102 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
40 IPs
103145 events
2026-03-02 — ongoing · 40 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
27 IPs
10172 events
2026-02-27 — ongoing · 27 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
102 IPs
281767 events
2026-02-22 — ongoing · 102 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Session Forensics
Sessions
19
Avg Depth Score
0.25
Commands Executed
0
Files Downloaded
0
Evidence Timeline
Web Probe
494d66afefdf9581
25%
Loading events...
Web Probe
e836de2ada702258
25%
Loading events...
Web Probe
1ed63f9bb2ae9196
25%
Loading events...
Web Probe
3b11925019e4a222
25%
Loading events...
Web Probe
f6cc5355423a742c
25%
Loading events...
Web Probe
1b520bcc4afff2b5
25%
Loading events...
Web Probe
48da8fd7fc77602d
25%
Loading events...
Web Probe
fd0ec46eb11948af
25%
Loading events...
Web Probe
5913a8f1c3919fff
25%
Loading events...
Web Probe
6b3ad35f333807ab
25%
Loading events...
Web Probe
914c5eda0789d6ae
25%
Loading events...
Web Probe
2e4bccd4acad0843
25%
Loading events...
Web Probe
92fe6e70ad867de2
25%
Loading events...
Web Probe
eb90f0127a1d2e6a
25%
Loading events...
Web Probe
4311786e91712ae8
25%
Loading events...
Web Probe
8929b2a44f5e8b62
25%
Loading events...
Web Probe
b8efb91fbb3c3c9a
25%
Loading events...
Web Probe
0a79035d4419d93f
25%
Loading events...
Web Probe
b8840d1381f8d929
25%
Loading events...
Non-Session Events
| Timestamp | Port | Proto | Event | Source | Location |
|---|---|---|---|---|---|
| 2026-08-07 19:13:38 | :80 | http | HTTP GET request | opencanary | sin |
| 2026-08-07 19:13:37 | :80 | http | HTTP GET request | opencanary | sin |
| 2026-08-07 19:13:28 | :80 | http | HTTP GET request | opencanary | sin |
| 2026-08-07 19:13:27 | :80 | http | HTTP GET request | opencanary | sin |
| 2026-08-02 21:47:19 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-02 21:47:16 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-02 21:47:16 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-01 20:52:17 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-01 20:52:14 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-01 20:52:14 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-07-31 15:39:01 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-07-31 15:39:00 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-07-31 15:38:59 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-07-31 15:38:59 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-07-31 15:38:59 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-07-31 15:38:53 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-07-31 15:38:53 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-07-31 15:38:50 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-07-31 15:38:50 | :80 | http | HTTP GET request | opencanary | ewr |