← Back to feed

Multi-Agent Scan

SCAN Ended medium
Why this campaign was detected
2 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close succession indicates shared reconnaissance tooling or a coordinated scan list.
Primary ASN
Subnet
Country
Cloud Provider
Member Count
2 IPs
Below average
Total Events
227
Below average by volume
Started / Ended
2026-02-22 19:18 — 2026-07-20 22:53
Member Actors
IP Address Behavior Confidence Flags Events Agents Attack Types Hostname Last Seen
79.124.40.174 web_probe 45% 259 3 http:scan ip-40-174.4vendeta.com 2026-06-13 22:48 evidence →
43.134.186.61 web_probe 24% 4 2 http:scan 2026-06-07 15:57 evidence →
VPN Known VPN or proxy provider
DROP ASN on Spamhaus DROP list
Nx OSINT Corroborated by N external threat feeds
{# Cloudflare Web Analytics — cookieless, public pages only. The context processor withholds the token from authenticated requests. #}