← Back to feed
20.83.164.132
Assessment
Port and service scanner
- Part of a 206-IP campaign probing the same targets.
Generated from the counts on this page by fixed rules; each line cites the number it rests on.
Location
🇺🇸 US / Dulles
ASN
AS8075 · Microsoft Corporation
Cloud Provider
Microsoft Azure
Total Events
7
Average by volume
Agent Count
2
First / Last Seen
2026-10-14 05:55 — 2026-10-16 10:40
Attack Types
MITRE ATT&CK Techniques
External Corroboration
CINS Army
cins:bad_reputation
Campaigns
Multi-Agent Scan
SCAN
Active
medium
146 IPs
856266 events
2026-10-07 — ongoing · 146 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
68 IPs
190605 events
2026-10-05 — ongoing · 68 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
112 IPs
732381 events
2026-10-01 — ongoing · 112 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
194 IPs
1011689 events
2026-10-01 — ongoing · 194 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
199 IPs
1043750 events
2026-10-01 — ongoing · 199 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
206 IPs
988269 events
2026-10-01 — ongoing · 206 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
92 IPs
666448 events
2026-10-01 — ongoing · 92 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
111 IPs
579361 events
2026-10-01 — ongoing · 111 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
145 IPs
837940 events
2026-10-01 — ongoing · 145 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
75 IPs
434233 events
2026-10-01 — ongoing · 75 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
24 IPs
868 events
2026-09-30 — ongoing · 24 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
37 IPs
59658 events
2026-09-27 — ongoing · 37 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
98 IPs
172890 events
2026-09-24 — ongoing · 98 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
104 IPs
154111 events
2026-09-18 — ongoing · 104 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
191 IPs
920145 events
2026-09-15 — ongoing · 191 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
189 IPs
958455 events
2026-09-14 — ongoing · 189 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
108 IPs
771742 events
2026-09-14 — ongoing · 108 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
103 IPs
659813 events
2026-06-10 — ongoing · 103 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Vultr. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
77 IPs
161700 events
2026-05-23 — ongoing · 77 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
80 IPs
460391 events
2026-03-14 — ongoing · 80 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Linode. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
92 IPs
531876 events
2026-02-26 — ongoing · 92 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
184 IPs
862558 events
2026-02-24 — ongoing · 184 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
101 IPs
409192 events
2026-02-22 — ongoing · 101 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Session Forensics
Sessions
3
Avg Depth Score
0.15
Commands Executed
0
Files Downloaded
0
Fingerprints
1 SSH client banner · 0 HASSH fingerprints
SSH Client
Evidence Timeline
Scanner
3e364d6d57ff
15%
Loading events...
MGLNDD_173.249.205.235_22
Scanner
b08065b3e2f4
15%
Loading events...
Scanner
4a08bba65ca9
15%
Loading events...