← Back to feed
51.103.152.96
Location
🇨🇭 CH / Zurich
ASN
AS8075 · Microsoft Corporation
Cloud Provider
Microsoft Azure
Total Events
23
Average by volume
Agent Count
2
First / Last Seen
2026-07-31 22:09 — 2026-08-06 16:22
Attack Types
MITRE ATT&CK Techniques
External Corroboration
Not flagged by any external feeds
Campaigns
Multi-Agent Scan
SCAN
Active
medium
96 IPs
421829 events
2026-07-29 — ongoing · 96 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
94 IPs
273305 events
2026-07-27 — ongoing · 94 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
36 IPs
98872 events
2026-07-23 — ongoing · 36 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
95 IPs
372779 events
2026-07-11 — ongoing · 95 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
107 IPs
365511 events
2026-07-02 — ongoing · 107 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
28 IPs
109686 events
2026-06-29 — ongoing · 28 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
22 IPs
35900 events
2026-04-18 — ongoing · 22 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
47 IPs
32120 events
2026-03-30 — ongoing · 47 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
87 IPs
241511 events
2026-03-20 — ongoing · 87 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
137 IPs
588863 events
2026-03-17 — ongoing · 137 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
105 IPs
516224 events
2026-03-17 — ongoing · 105 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
95 IPs
239704 events
2026-03-17 — ongoing · 95 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
113 IPs
320705 events
2026-03-17 — ongoing · 113 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
128 IPs
310115 events
2026-03-13 — ongoing · 128 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
94 IPs
291911 events
2026-03-13 — ongoing · 94 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
137 IPs
310162 events
2026-03-13 — ongoing · 137 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
126 IPs
331321 events
2026-03-13 — ongoing · 126 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
61 IPs
152304 events
2026-03-08 — ongoing · 61 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
87 IPs
307730 events
2026-03-08 — ongoing · 87 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
121 IPs
430104 events
2026-03-07 — ongoing · 121 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
50 IPs
184362 events
2026-03-07 — ongoing · 50 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
87 IPs
279396 events
2026-03-07 — ongoing · 87 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
96 IPs
289695 events
2026-03-07 — ongoing · 96 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
84 IPs
220470 events
2026-03-07 — ongoing · 84 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
73 IPs
287421 events
2026-03-07 — ongoing · 73 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
103 IPs
453255 events
2026-03-07 — ongoing · 103 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
131 IPs
643095 events
2026-03-07 — ongoing · 131 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
139 IPs
675253 events
2026-03-06 — ongoing · 139 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
134 IPs
564552 events
2026-03-05 — ongoing · 134 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
127 IPs
306388 events
2026-03-05 — ongoing · 127 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
98 IPs
333830 events
2026-02-27 — ongoing · 98 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
61 IPs
114839 events
2026-02-26 — ongoing · 61 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
118 IPs
521779 events
2026-02-24 — ongoing · 118 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Session Forensics
Sessions
23
Avg Depth Score
0.25
Commands Executed
0
Files Downloaded
0
Evidence Timeline
Web Probe
c155c7ab0eaefbff
25%
Loading events...
Web Probe
3dee587e729ed0c5
25%
Loading events...
Web Probe
d97ed54367e4b9d7
25%
Loading events...
Web Probe
55dad6528639511c
25%
Loading events...
Web Probe
5831306d474d47ca
25%
Loading events...
Web Probe
d8ecb44024a5ad89
25%
Loading events...
Web Probe
8411b5a22c725824
25%
Loading events...
Web Probe
920702a5b27884cb
25%
Loading events...
Web Probe
5cdbdb8ce77f3419
25%
Loading events...
Web Probe
9e3058e8281af5d3
25%
Loading events...
Web Probe
ac6b506e25c1c58e
25%
Loading events...
Web Probe
6b9dce37c2603340
25%
Loading events...
Web Probe
6afed42b8e1b4269
25%
Loading events...
Web Probe
717e225595ecdc11
25%
Loading events...
Web Probe
ed50a4ce7d70513d
25%
Loading events...
Web Probe
36a7040df3e72397
25%
Loading events...
Web Probe
f7bdc4a717b830f9
25%
Loading events...
Web Probe
5678d3cbbc73d620
25%
Loading events...
Web Probe
cf04caadf905f4cf
25%
Loading events...
Web Probe
df2c2eceeee2d155
25%
Loading events...
Web Probe
ccb056588bb891aa
25%
Loading events...
Web Probe
07fe0d06a0a14b06
25%
Loading events...
Web Probe
34111d1dced656a5
25%
Loading events...
Non-Session Events
| Timestamp | Port | Proto | Event | Source | Location |
|---|---|---|---|---|---|
| 2026-08-06 16:22:04 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-07-31 23:08:18 | :80 | http | HTTP GET request | opencanary | sin |
| 2026-07-31 23:08:17 | :80 | http | HTTP GET request | opencanary | sin |
| 2026-07-31 23:08:17 | :80 | http | HTTP GET request | opencanary | sin |
| 2026-07-31 23:08:16 | :80 | http | HTTP GET request | opencanary | sin |
| 2026-07-31 23:08:16 | :80 | http | HTTP GET request | opencanary | sin |
| 2026-07-31 23:08:16 | :80 | http | HTTP GET request | opencanary | sin |
| 2026-07-31 23:08:15 | :80 | http | HTTP GET request | opencanary | sin |
| 2026-07-31 23:08:12 | :80 | http | HTTP GET request | opencanary | sin |
| 2026-07-31 23:08:12 | :80 | http | HTTP GET request | opencanary | sin |
| 2026-07-31 23:08:05 | :80 | http | HTTP GET request | opencanary | sin |
| 2026-07-31 23:07:58 | :80 | http | HTTP GET request | opencanary | sin |
| 2026-07-31 22:09:38 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-07-31 22:09:38 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-07-31 22:09:38 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-07-31 22:09:37 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-07-31 22:09:37 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-07-31 22:09:37 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-07-31 22:09:36 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-07-31 22:09:35 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-07-31 22:09:35 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-07-31 22:09:30 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-07-31 22:09:26 | :80 | http | HTTP GET request | opencanary | ewr |