AS8075: Microsoft Corporation
HoneyLabs honeypots recorded 11,164 probes from AS8075 (Microsoft Corporation) in the last 7 days, originating from 2,290 distinct source IP addresses.
First observed 2026-11-08 07:31, most recently 2026-11-15 07:26 (UTC).
What the sensors show
Probes arrived on every day of the 7-day window. The busiest day was 2026-11-09, with 2,276. Its 2,290 addresses probed 326 distinct ports. The most probed was port 80, with 15% of the probes. No single address sent more than 3% of them. 3 of the 25 busiest addresses are recognised research scanners.
Ports it targets
| Port | Probes |
|---|---|
| 80 | 1,730 |
| 3389 | 376 |
| 443 | 217 |
| 9200 | 170 |
| 102 | 108 |
| 25565 | 107 |
| 22 | 102 |
| 8443 | 90 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 20.214.165.240 | 314 | South Korea | |
| 102.133.224.63 | 306 | South Africa | |
| 102.133.162.110 | 249 | South Africa | |
| 20.120.108.52 | 198 | United States | |
| 20.87.24.214 | 156 | South Africa | |
| 4.168.232.22 | 153 | South Africa | |
| 20.106.75.210 | 153 | United States | |
| 20.169.53.32 | 123 | United States |
Where it comes from
| Country | Probes |
|---|---|
| United States | 9,661 |
| South Africa | 944 |
| South Korea | 320 |
| The Netherlands | 71 |
| Ireland | 58 |
| Japan | 33 |
Client strings it sends
| User agent | Probes |
|---|---|
| Mozilla/5.0 zgrab/0.x | 2,042 |
| curl/8.18.0 | 48 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 | 15 |
| Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36 | 8 |
| python-requests/2.34.2 | 6 |
ASN report
ASN report
Loading