← Back to feed
20.218.73.95
Location
🇩🇪 DE / Frankfurt am Main
ASN
AS8075 · Microsoft Corporation
Cloud Provider
Microsoft Azure
Total Events
44
Average by volume
Agent Count
2
First / Last Seen
2026-08-04 14:32 — 2026-08-12 10:48
Attack Types
MITRE ATT&CK Techniques
External Corroboration
Not flagged by any external feeds
Campaigns
Multi-Agent Scan
SCAN
Active
medium
119 IPs
330901 events
2026-08-12 — ongoing · 119 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
30 IPs
13378 events
2026-08-04 — ongoing · 30 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
56 IPs
105064 events
2026-07-28 — ongoing · 56 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
111 IPs
367963 events
2026-07-27 — ongoing · 111 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
102 IPs
401734 events
2026-07-27 — ongoing · 102 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
58 IPs
277562 events
2026-07-27 — ongoing · 58 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
57 IPs
216275 events
2026-07-12 — ongoing · 57 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
19 IPs
6324 events
2026-06-29 — ongoing · 19 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
41 IPs
30883 events
2026-06-28 — ongoing · 41 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
102 IPs
476890 events
2026-06-28 — ongoing · 102 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
40 IPs
52234 events
2026-06-05 — ongoing · 40 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
97 IPs
424517 events
2026-05-22 — ongoing · 97 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
44 IPs
182588 events
2026-05-20 — ongoing · 44 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
69 IPs
147845 events
2026-04-18 — ongoing · 69 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
29 IPs
44429 events
2026-04-04 — ongoing · 29 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
93 IPs
404109 events
2026-04-03 — ongoing · 93 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
23 IPs
23801 events
2026-04-02 — ongoing · 23 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
84 IPs
302613 events
2026-03-21 — ongoing · 84 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
28 IPs
89668 events
2026-03-20 — ongoing · 28 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
109 IPs
337283 events
2026-03-18 — ongoing · 109 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
111 IPs
410139 events
2026-03-18 — ongoing · 111 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
36 IPs
18853 events
2026-03-18 — ongoing · 36 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
83 IPs
260444 events
2026-03-18 — ongoing · 83 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
97 IPs
282716 events
2026-03-18 — ongoing · 97 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
52 IPs
270141 events
2026-03-18 — ongoing · 52 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
87 IPs
236537 events
2026-03-17 — ongoing · 87 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
73 IPs
189057 events
2026-03-17 — ongoing · 73 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
29 IPs
6061 events
2026-03-17 — ongoing · 29 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
52 IPs
141495 events
2026-03-17 — ongoing · 52 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
71 IPs
183861 events
2026-03-17 — ongoing · 71 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
55 IPs
217261 events
2026-03-17 — ongoing · 55 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
38 IPs
86518 events
2026-03-17 — ongoing · 38 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
70 IPs
258295 events
2026-03-17 — ongoing · 70 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
54 IPs
242632 events
2026-03-17 — ongoing · 54 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
29 IPs
17523 events
2026-03-17 — ongoing · 29 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
98 IPs
285421 events
2026-03-17 — ongoing · 98 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
62 IPs
88828 events
2026-03-10 — ongoing · 62 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
45 IPs
104589 events
2026-03-10 — ongoing · 45 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
71 IPs
276612 events
2026-03-09 — ongoing · 71 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
53 IPs
99550 events
2026-03-09 — ongoing · 53 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
86 IPs
413634 events
2026-03-09 — ongoing · 86 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
122 IPs
483913 events
2026-03-09 — ongoing · 122 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
107 IPs
372945 events
2026-03-09 — ongoing · 107 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
95 IPs
327059 events
2026-03-09 — ongoing · 95 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
57 IPs
314923 events
2026-03-06 — ongoing · 57 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
53 IPs
268163 events
2026-03-06 — ongoing · 53 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
81 IPs
118503 events
2026-03-04 — ongoing · 81 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
78 IPs
272194 events
2026-03-04 — ongoing · 78 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
102 IPs
306321 events
2026-03-04 — ongoing · 102 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
89 IPs
394653 events
2026-03-02 — ongoing · 89 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
85 IPs
270952 events
2026-03-01 — ongoing · 85 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
97 IPs
342736 events
2026-02-27 — ongoing · 97 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
101 IPs
333262 events
2026-02-25 — ongoing · 101 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
88 IPs
305606 events
2026-02-24 — ongoing · 88 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
99 IPs
334536 events
2026-02-24 — ongoing · 99 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
61 IPs
290347 events
2026-02-24 — ongoing · 61 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
93 IPs
324517 events
2026-02-24 — ongoing · 93 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
83 IPs
335289 events
2026-02-24 — ongoing · 83 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
58 IPs
308929 events
2026-02-24 — ongoing · 58 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
102 IPs
281767 events
2026-02-22 — ongoing · 102 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Session Forensics
Sessions
44
Avg Depth Score
0.25
Commands Executed
0
Files Downloaded
0
Evidence Timeline
Web Probe
bd65ddcf501b6181
25%
Loading events...
Web Probe
946868aaa89cb6f6
25%
Loading events...
Web Probe
8313b9b86bc510fd
25%
Loading events...
Web Probe
d49569b2416ae148
25%
Loading events...
Web Probe
c276353dcd26c8b2
25%
Loading events...
Web Probe
000e8523e58a1e11
25%
Loading events...
Web Probe
d03407dcc3d44430
25%
Loading events...
Web Probe
ceeff5609eda7f59
25%
Loading events...
Web Probe
4e306d5860a17c31
25%
Loading events...
Web Probe
22bcd395351f9c91
25%
Loading events...
Web Probe
517d37daa05b4b8a
25%
Loading events...
Web Probe
d8304767f8edf3c2
25%
Loading events...
Web Probe
3174e4c88a6d23fa
25%
Loading events...
Web Probe
283aeba692d44bdf
25%
Loading events...
Web Probe
f0505eacb0e58a5c
25%
Loading events...
Web Probe
de1e43e0aabf494e
25%
Loading events...
Web Probe
d33eb0d9a920f552
25%
Loading events...
Web Probe
9ca1be2dd648bdd3
25%
Loading events...
Web Probe
1757b229e94168bf
25%
Loading events...
Web Probe
d0de0bc7b36f40d6
25%
Loading events...
Web Probe
5148b3573db6d964
25%
Loading events...
Web Probe
83f973677d1fe345
25%
Loading events...
Web Probe
55068a00e42f9263
25%
Loading events...
Web Probe
0b34e332436e47e4
25%
Loading events...
Web Probe
3296e286930997f5
25%
Loading events...
Web Probe
055e3e3318e3a5b2
25%
Loading events...
Web Probe
4bce706eb78334d4
25%
Loading events...
Web Probe
b9857f1ae55ba2a5
25%
Loading events...
Web Probe
b225f1970c952576
25%
Loading events...
Web Probe
24dff264268a4aad
25%
Loading events...
Web Probe
1be10c6bc899edb8
25%
Loading events...
Web Probe
6d344103befa7813
25%
Loading events...
Web Probe
46b31e8fca9498fc
25%
Loading events...
Web Probe
27405da9d5c959f1
25%
Loading events...
Web Probe
f973640ff553fbf6
25%
Loading events...
Web Probe
3bf9db1ad0eefcf5
25%
Loading events...
Web Probe
20d19ff5d799e642
25%
Loading events...
Web Probe
0b83e445866bc829
25%
Loading events...
Web Probe
2f34e1b2bc84f19a
25%
Loading events...
Web Probe
dd742b203859df0a
25%
Loading events...
Web Probe
5490516c531d81b0
25%
Loading events...
Web Probe
7ab1e9641b7de0d5
25%
Loading events...
Web Probe
0f66d90dc290b1ab
25%
Loading events...
Web Probe
4386deebad5d2d33
25%
Loading events...
Non-Session Events
| Timestamp | Port | Proto | Event | Source | Location |
|---|---|---|---|---|---|
| 2026-08-12 10:48:45 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-12 10:48:42 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-12 10:48:42 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-11 14:18:51 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-11 14:18:49 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-11 14:18:48 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-11 10:52:05 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-11 10:52:03 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-11 10:52:02 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-11 05:26:03 | :80 | http | HTTP GET request | opencanary | sin |
| 2026-08-11 05:25:57 | :80 | http | HTTP GET request | opencanary | sin |
| 2026-08-11 05:25:57 | :80 | http | HTTP GET request | opencanary | sin |
| 2026-08-11 03:40:19 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-11 03:40:16 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-11 03:40:16 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-08 17:41:13 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-08 17:41:12 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-08 17:41:09 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-08 17:41:09 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-08 08:23:44 | :80 | http | HTTP GET request | opencanary | sin |
| 2026-08-08 08:23:44 | :80 | http | HTTP GET request | opencanary | sin |
| 2026-08-08 08:23:38 | :80 | http | HTTP GET request | opencanary | sin |
| 2026-08-08 08:23:38 | :80 | http | HTTP GET request | opencanary | sin |
| 2026-08-08 08:11:49 | :80 | http | HTTP GET request | opencanary | sin |
| 2026-08-08 08:11:48 | :80 | http | HTTP GET request | opencanary | sin |
| 2026-08-08 08:11:43 | :80 | http | HTTP GET request | opencanary | sin |
| 2026-08-08 08:11:42 | :80 | http | HTTP GET request | opencanary | sin |
| 2026-08-07 12:31:21 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-07 12:31:20 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-07 12:31:20 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-07 12:31:16 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-07 12:31:15 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-06 06:37:27 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-06 06:37:24 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-06 06:37:24 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-05 19:28:54 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-05 19:28:51 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-05 19:28:51 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-05 02:32:57 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-05 02:32:54 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-05 02:32:54 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-04 14:32:43 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-04 14:32:41 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-04 14:32:41 | :80 | http | HTTP GET request | opencanary | ewr |