AS8075: Microsoft Corporation
HoneyLabs honeypots recorded 16,818 probes from AS8075 (Microsoft Corporation) in the last 7 days, originating from 2,203 distinct source IP addresses.
First observed 2026-09-22 06:49:52, most recently 2026-09-29 06:47:57 (UTC).
Ports it targets
| Port | Probes |
|---|---|
| 80 | 3,773 |
| 3389 | 1,135 |
| 443 | 598 |
| 9200 | 197 |
| 5985 | 168 |
| 554 | 157 |
| 102 | 142 |
| 8554 | 121 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 52.157.33.111 | 652 | United States | |
| 20.205.12.169 | 556 | Hong Kong | |
| 13.77.158.0 | 415 | United States | |
| 20.219.11.16 | 341 | India | |
| 4.185.40.215 | 299 | Germany | |
| 20.219.2.60 | 298 | India | |
| 20.204.110.107 | 279 | India | |
| 20.58.177.98 | 268 | Australia |
Where it comes from
| Country | Probes |
|---|---|
| United States | 12,526 |
| India | 1,390 |
| Hong Kong | 775 |
| Australia | 559 |
| South Korea | 455 |
| The Netherlands | 339 |
Client strings it sends
| User agent | Probes |
|---|---|
| Mozilla/5.0 zgrab/0.x | 1,916 |
| Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36 | 314 |
| Microsoft WinRM Client | 129 |
| libredtail-http | 99 |
| curl/8.18.0 | 46 |
ASN report
ASN report
Loading live data…