← Back to feed
51.116.232.28
Location
🇩🇪 DE / Frankfurt am Main
ASN
AS8075 · Microsoft Corporation
Cloud Provider
Microsoft Azure
Total Events
17
Average by volume
Agent Count
2
First / Last Seen
2026-08-15 18:56 — 2026-08-17 07:56
Attack Types
MITRE ATT&CK Techniques
External Corroboration
Not flagged by any external feeds
Campaigns
Multi-Agent Scan
SCAN
Active
medium
139 IPs
521436 events
2026-08-13 — ongoing · 139 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
125 IPs
274870 events
2026-07-31 — ongoing · 125 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
98 IPs
230378 events
2026-07-07 — ongoing · 98 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
130 IPs
431897 events
2026-07-04 — ongoing · 130 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
101 IPs
234420 events
2026-07-04 — ongoing · 101 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan
SCAN
Active
medium
82 IPs
138777 events
2026-04-28 — ongoing · 82 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
33 IPs
193931 events
2026-04-27 — ongoing · 33 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
67 IPs
204107 events
2026-04-03 — ongoing · 67 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
142 IPs
637175 events
2026-03-27 — ongoing · 142 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
128 IPs
260907 events
2026-03-16 — ongoing · 128 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
57 IPs
151765 events
2026-03-09 — ongoing · 57 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
96 IPs
54873 events
2026-03-05 — ongoing · 96 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
147 IPs
603952 events
2026-03-04 — ongoing · 147 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
98 IPs
276595 events
2026-03-04 — ongoing · 98 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
66 IPs
46900 events
2026-03-02 — ongoing · 66 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Session Forensics
Sessions
17
Avg Depth Score
0.25
Commands Executed
0
Files Downloaded
0
Evidence Timeline
Web Probe
6fe4b87b074ae482
25%
Loading events...
Web Probe
4a3e2f117dc25390
25%
Loading events...
Web Probe
ac14af08b49a6ddd
25%
Loading events...
Web Probe
68d677dec17bdc84
25%
Loading events...
Web Probe
5652e1e0300ded9f
25%
Loading events...
Web Probe
e63c733da4a29db4
25%
Loading events...
Web Probe
a89fc57c50c07145
25%
Loading events...
Web Probe
7d43b541ca8864fe
25%
Loading events...
Web Probe
f8d9ed6bdfb65254
25%
Loading events...
Web Probe
de7e05d6c3cbbdc6
25%
Loading events...
Web Probe
a8cd32e1622e4880
25%
Loading events...
Web Probe
e24f2135cfc50b0b
25%
Loading events...
Web Probe
d7bb621e9f93306b
25%
Loading events...
Web Probe
d6409b6ac29684bc
25%
Loading events...
Web Probe
c466c256417e6c8d
25%
Loading events...
Web Probe
3dd5a18c9688a792
25%
Loading events...
Web Probe
560d7fde8d31f025
25%
Loading events...
Non-Session Events
| Timestamp | Port | Proto | Event | Source | Location |
|---|---|---|---|---|---|
| 2026-08-17 07:56:46 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-17 07:56:45 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-17 07:56:43 | :80 | http | HTTP GET request | opencanary | ewr |
| 2026-08-15 18:56:42 | :80 | http | HTTP GET request | opencanary | sin |
| 2026-08-15 18:56:39 | :80 | http | HTTP GET request | opencanary | sin |
| 2026-08-15 18:56:38 | :80 | http | HTTP GET request | opencanary | sin |
| 2026-08-15 18:56:37 | :80 | http | HTTP GET request | opencanary | sin |
| 2026-08-15 18:56:37 | :80 | http | HTTP GET request | opencanary | sin |
| 2026-08-15 18:56:36 | :80 | http | HTTP GET request | opencanary | sin |
| 2026-08-15 18:56:35 | :80 | http | HTTP GET request | opencanary | sin |
| 2026-08-15 18:56:35 | :80 | http | HTTP GET request | opencanary | sin |
| 2026-08-15 18:56:34 | :80 | http | HTTP GET request | opencanary | sin |
| 2026-08-15 18:56:33 | :80 | http | HTTP GET request | opencanary | sin |
| 2026-08-15 18:56:33 | :80 | http | HTTP GET request | opencanary | sin |
| 2026-08-15 18:56:32 | :80 | http | HTTP GET request | opencanary | sin |
| 2026-08-15 18:56:32 | :80 | http | HTTP GET request | opencanary | sin |
| 2026-08-15 18:56:28 | :80 | http | HTTP GET request | opencanary | sin |