← Back to feed
20.84.80.53
KNOWN SCANNER TAGGED BENIGN how we decide →
Why: Known research scanner (Stretchoid)
azpdesmlqfqr.stretchoid.com
(stretchoid.com)
✓ FCrDNS
Assessment
Port and service scanner
- Part of a 186-IP campaign probing the same targets.
Generated from the counts on this page by fixed rules; each line cites the number it rests on.
Location
🇺🇸 US / Dulles
ASN
AS8075 · Microsoft Corporation
Cloud Provider
Microsoft Azure
Scanner Organization
Stretchoid
Total Events
16
Average by volume
Agent Count
2
First / Last Seen
2026-09-22 05:39 — 2026-09-23 23:53
Attack Types
MITRE ATT&CK Techniques
External Corroboration
CINS Army
cins:bad_reputation
Campaigns
Multi-Agent Scan
SCAN
Active
medium
91 IPs
350815 events
2026-09-20 — ongoing · 91 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
77 IPs
40468 events
2026-09-14 — ongoing · 77 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
170 IPs
482979 events
2026-09-07 — ongoing · 170 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
132 IPs
455213 events
2026-08-28 — ongoing · 132 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
28 IPs
48854 events
2026-08-02 — ongoing · 28 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
135 IPs
361717 events
2026-07-28 — ongoing · 135 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
136 IPs
426583 events
2026-07-02 — ongoing · 136 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
60 IPs
90856 events
2026-06-26 — ongoing · 60 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
98 IPs
326029 events
2026-06-16 — ongoing · 98 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
179 IPs
446787 events
2026-06-16 — ongoing · 179 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
52 IPs
61959 events
2026-06-16 — ongoing · 52 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
182 IPs
451132 events
2026-06-16 — ongoing · 182 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
165 IPs
423495 events
2026-06-16 — ongoing · 165 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
98 IPs
344544 events
2026-04-22 — ongoing · 98 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
183 IPs
564174 events
2026-03-31 — ongoing · 183 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
149 IPs
434354 events
2026-03-31 — ongoing · 149 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
159 IPs
462961 events
2026-03-31 — ongoing · 159 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
172 IPs
451783 events
2026-03-31 — ongoing · 172 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
95 IPs
342903 events
2026-03-31 — ongoing · 95 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
153 IPs
424873 events
2026-03-31 — ongoing · 153 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
163 IPs
423944 events
2026-03-31 — ongoing · 163 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
122 IPs
210818 events
2026-03-31 — ongoing · 122 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
134 IPs
136128 events
2026-03-31 — ongoing · 134 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
171 IPs
497127 events
2026-03-31 — ongoing · 171 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
169 IPs
550201 events
2026-03-31 — ongoing · 169 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
134 IPs
466182 events
2026-03-31 — ongoing · 134 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
186 IPs
452621 events
2026-03-31 — ongoing · 186 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
175 IPs
547234 events
2026-03-31 — ongoing · 175 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
32 IPs
99393 events
2026-03-21 — ongoing · 32 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
73 IPs
41496 events
2026-03-18 — ongoing · 73 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
184 IPs
541376 events
2026-03-09 — ongoing · 184 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
176 IPs
495853 events
2026-03-03 — ongoing · 176 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
56 IPs
23150 events
2026-02-27 — ongoing · 56 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
146 IPs
417183 events
2026-02-26 — ongoing · 146 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Session Forensics
Sessions
6
Avg Depth Score
0.15
Commands Executed
0
Files Downloaded
0
Fingerprints
3 SSH client banners · 1 HASSH fingerprint
HASSH
SSH Client
Evidence Timeline
Scanner
549ca8a30d93
15%
Loading events...
Scanner
997e261821d5
15%
Loading events...
Scanner
1556908b8d64
15%
Loading events...
MGLNDD_45.79.190.128_22
Scanner
3439b1e46cb0
15%
Loading events...
Scanner
1e5afe776e2c
15%
Loading events...
MGLNDD_5.223.73.96_22