← Back to feed
20.79.222.117
Location
🇩🇪 DE / Frankfurt am Main
ASN
AS8075 · Microsoft Corporation
Cloud Provider
Microsoft Azure
Total Events
35
Average by volume
Agent Count
2
First / Last Seen
2026-08-13 16:07 — 2026-08-20 03:46
Attack Types
MITRE ATT&CK Techniques
External Corroboration
Not flagged by any external feeds
Campaigns
Multi-Agent Scan
SCAN
Active
medium
123 IPs
365910 events
2026-08-13 — ongoing · 123 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
139 IPs
521436 events
2026-08-13 — ongoing · 139 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
60 IPs
151519 events
2026-08-13 — ongoing · 60 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
75 IPs
397906 events
2026-08-13 — ongoing · 75 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
75 IPs
397721 events
2026-08-13 — ongoing · 75 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
40 IPs
10994 events
2026-08-05 — ongoing · 40 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
125 IPs
274870 events
2026-07-31 — ongoing · 125 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
72 IPs
422262 events
2026-07-29 — ongoing · 72 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
68 IPs
292290 events
2026-07-17 — ongoing · 68 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Vultr. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
98 IPs
230378 events
2026-07-07 — ongoing · 98 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
74 IPs
426200 events
2026-07-07 — ongoing · 74 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
101 IPs
435082 events
2026-07-04 — ongoing · 101 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
130 IPs
431897 events
2026-07-04 — ongoing · 130 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
101 IPs
234420 events
2026-07-04 — ongoing · 101 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
100 IPs
233641 events
2026-06-28 — ongoing · 100 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
112 IPs
253220 events
2026-06-27 — ongoing · 112 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
127 IPs
489505 events
2026-06-25 — ongoing · 127 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
7 IPs
13036 events
2026-06-25 — ongoing · 7 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
79 IPs
400419 events
2026-06-25 — ongoing · 79 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
93 IPs
329545 events
2026-06-13 — ongoing · 93 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
81 IPs
285144 events
2026-06-11 — ongoing · 81 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
111 IPs
367690 events
2026-06-11 — ongoing · 111 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
123 IPs
443340 events
2026-06-11 — ongoing · 123 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
86 IPs
476118 events
2026-06-11 — ongoing · 86 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
89 IPs
388792 events
2026-06-10 — ongoing · 89 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Vultr. Scanning the same …
Multi-Agent Scan
SCAN
Ended
medium
2 IPs
1957 events
2026-06-05 — ongoing · 2 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
91 IPs
312743 events
2026-05-23 — ongoing · 91 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
56 IPs
52968 events
2026-05-14 — ongoing · 56 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
58 IPs
106458 events
2026-05-08 — ongoing · 58 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
107 IPs
496601 events
2026-05-03 — ongoing · 107 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Vultr. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
82 IPs
138777 events
2026-04-28 — ongoing · 82 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
54 IPs
88978 events
2026-04-27 — ongoing · 54 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
33 IPs
193931 events
2026-04-27 — ongoing · 33 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
69 IPs
225466 events
2026-04-10 — ongoing · 69 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
106 IPs
243058 events
2026-04-10 — ongoing · 106 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
70 IPs
204023 events
2026-04-10 — ongoing · 70 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
55 IPs
57503 events
2026-04-09 — ongoing · 55 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
39 IPs
84193 events
2026-04-06 — ongoing · 39 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
96 IPs
243355 events
2026-04-04 — ongoing · 96 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
67 IPs
204107 events
2026-04-03 — ongoing · 67 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
97 IPs
465698 events
2026-04-01 — ongoing · 97 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
142 IPs
637175 events
2026-03-27 — ongoing · 142 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
89 IPs
162912 events
2026-03-26 — ongoing · 89 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
109 IPs
258886 events
2026-03-22 — ongoing · 109 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
71 IPs
376715 events
2026-03-20 — ongoing · 71 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
128 IPs
260907 events
2026-03-16 — ongoing · 128 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
15 IPs
6203 events
2026-03-14 — ongoing · 15 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
70 IPs
254789 events
2026-03-11 — ongoing · 70 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
57 IPs
151765 events
2026-03-09 — ongoing · 57 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
85 IPs
169441 events
2026-03-09 — ongoing · 85 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
103 IPs
482117 events
2026-03-08 — ongoing · 103 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
96 IPs
54873 events
2026-03-05 — ongoing · 96 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
147 IPs
603952 events
2026-03-04 — ongoing · 147 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
98 IPs
276595 events
2026-03-04 — ongoing · 98 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
115 IPs
520900 events
2026-03-04 — ongoing · 115 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
98 IPs
302049 events
2026-03-03 — ongoing · 98 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
90 IPs
277675 events
2026-03-02 — ongoing · 90 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
119 IPs
352834 events
2026-03-01 — ongoing · 119 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
101 IPs
196375 events
2026-03-01 — ongoing · 101 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
97 IPs
406827 events
2026-03-01 — ongoing · 97 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
102 IPs
608040 events
2026-03-01 — ongoing · 102 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
46 IPs
20778 events
2026-02-28 — ongoing · 46 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
132 IPs
694104 events
2026-02-28 — ongoing · 132 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
116 IPs
392334 events
2026-02-28 — ongoing · 116 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
36 IPs
43925 events
2026-02-28 — ongoing · 36 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
97 IPs
602765 events
2026-02-28 — ongoing · 97 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
94 IPs
558864 events
2026-02-28 — ongoing · 94 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
123 IPs
418460 events
2026-02-28 — ongoing · 123 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
20 IPs
7633 events
2026-02-28 — ongoing · 20 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
79 IPs
387497 events
2026-02-28 — ongoing · 79 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
76 IPs
351391 events
2026-02-28 — ongoing · 76 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
107 IPs
385452 events
2026-02-27 — ongoing · 107 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
123 IPs
473802 events
2026-02-26 — ongoing · 123 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
84 IPs
133254 events
2026-02-26 — ongoing · 84 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
77 IPs
438798 events
2026-02-26 — ongoing · 77 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
91 IPs
279913 events
2026-02-25 — ongoing · 91 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
50 IPs
57422 events
2026-02-25 — ongoing · 50 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
36 IPs
111375 events
2026-02-25 — ongoing · 36 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
91 IPs
392818 events
2026-02-24 — ongoing · 91 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
82 IPs
383465 events
2026-02-22 — ongoing · 82 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Session Forensics
Sessions
35
Avg Depth Score
0.25
Commands Executed
0
Files Downloaded
0
Evidence Timeline
Web Probe
2c140aa221140272
25%
Loading events...
Web Probe
e2f3e7134ea74625
25%
Loading events...
Web Probe
48e90d2f99fb0246
25%
Loading events...
Web Probe
c90072807594a0c8
25%
Loading events...
Web Probe
311375237cc514d4
25%
Loading events...
Web Probe
01d0892a5b773d54
25%
Loading events...
Web Probe
198703b99fa46367
25%
Loading events...
Web Probe
76bbc53c3cd15427
25%
Loading events...
Web Probe
2bb9d6dce0695199
25%
Loading events...
Web Probe
cada640a19f9d25d
25%
Loading events...
Web Probe
f327300f1bcc43a8
25%
Loading events...
Web Probe
5119d0d37f30e899
25%
Loading events...
Web Probe
e1134efed092002d
25%
Loading events...
Web Probe
5e052bd3cda19a41
25%
Loading events...
Web Probe
99cdd2f9df8c8f3e
25%
Loading events...
Web Probe
07dd41c4a5daf825
25%
Loading events...
Web Probe
e53ae413a376fbf2
25%
Loading events...
Web Probe
148159ca6a0dd33c
25%
Loading events...
Web Probe
9c361bd53f3083ef
25%
Loading events...
Web Probe
7d9b73217d819379
25%
Loading events...
Web Probe
cf1cab90bf633817
25%
Loading events...
Web Probe
2aa76f3edd375d75
25%
Loading events...
Web Probe
91ff98c1d85b33cc
25%
Loading events...
Web Probe
d6f66a8813e71fdc
25%
Loading events...
Web Probe
fb616d56a42ffd62
25%
Loading events...
Web Probe
de604d34af6e1456
25%
Loading events...
Web Probe
70790224f326d595
25%
Loading events...
Web Probe
362361a554ec91e6
25%
Loading events...
Web Probe
56ee1e680e514b85
25%
Loading events...
Web Probe
0fc7f99fd6fc2ab3
25%
Loading events...
Web Probe
8dccaa32974bac92
25%
Loading events...
Web Probe
a5df2b995408dca0
25%
Loading events...
Web Probe
082cd079f436c908
25%
Loading events...
Web Probe
c68f1a1b42fc1418
25%
Loading events...
Web Probe
94e505b1e05dca1f
25%
Loading events...
Non-Session Events
| Timestamp | Port | Proto | Event | Source | Location |
|---|---|---|---|---|---|
| 2026-08-20 03:46:34 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-20 03:46:33 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-18 21:08:12 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-18 21:08:08 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-18 21:08:08 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-18 21:08:07 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-18 14:22:18 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-18 14:22:18 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-18 14:22:16 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-18 14:22:16 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-18 14:12:09 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-18 14:12:08 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-18 14:12:06 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-18 14:12:06 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-18 01:41:39 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-18 01:41:39 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-18 01:41:38 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-18 01:41:37 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-17 08:29:39 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-17 08:29:38 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-17 08:29:37 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-17 02:38:28 | :80 | http | HTTP GET request | opencanary | sin |
| 2026-08-17 02:38:27 | :80 | http | HTTP GET request | opencanary | sin |
| 2026-08-17 02:38:27 | :80 | http | HTTP GET request | opencanary | sin |
| 2026-08-17 02:38:26 | :80 | http | HTTP GET request | opencanary | sin |
| 2026-08-17 02:38:26 | :80 | http | HTTP GET request | opencanary | sin |
| 2026-08-17 02:38:25 | :80 | http | HTTP GET request | opencanary | sin |
| 2026-08-17 02:38:25 | :80 | http | HTTP GET request | opencanary | sin |
| 2026-08-17 02:38:24 | :80 | http | HTTP GET request | opencanary | sin |
| 2026-08-17 02:38:24 | :80 | http | HTTP GET request | opencanary | sin |
| 2026-08-17 02:38:20 | :80 | http | HTTP GET request | opencanary | sin |
| 2026-08-13 16:16:50 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-13 16:07:21 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-13 16:07:18 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-13 16:07:18 | :80 | http | HTTP GET request | opencanary | ewr |