ASN report
AS8075Microsoft Corporation
7-day honeypot activity for this autonomous system. First seen probing on 2026-07-10, most recent probe 2026-07-17 21:57.
10,446
Events 7d
2,028
Distinct IPs
12
Source countries
324
Ports targeted
Top dest ports
- 2556525565226
- 443HTTPS225
- 9200Elastic210
- 3389RDP178
- 80HTTP178
- 8080HTTP-alt142
- 8443HTTPS-alt100
- 445SMB92
- 10210292
- 139SMB78
Top source countries
- United States9,891
- The Netherlands193
- United Kingdom132
- Poland112
- India52
- Ireland20
- Brazil15
- Sweden15
- Singapore7
- Germany4
Top source IPs in AS8075
- 20.215.50.93112 eventsProbing Poland4 ports swept 路 seen Jul 13HTTP-altHTTPHTTPSHTTPS-alt
- 20.168.118.8566 eventsProbing United States1 port swept 路 seen Jul 14RDP
- 4.210.177.13132 eventsProbing The Netherlands1 port swept 路 seen Jul 15Minecraft
- 40.124.80.14918 eventsKnown scanner United States12 ports swept 路 seen Jul 1749112380411891609000
- 4.180.183.24218 eventsProbing The Netherlands1 port swept 路 seen Jul 16Minecraft
- 20.193.146.15918 eventsProbing India4 ports swept 路 seen Jul 165544200320874003
- 20.163.15.16716 eventsKnown scanner United States11 ports swept 路 seen Jul 1771998192HTTPElasticDNS
- 20.94.216.12216 eventsProbing United States9 ports swept 路 seen Jul 17707011774899543218181
- 20.65.194.7716 eventsKnown scanner United States9 ports swept 路 seen Jul 175557077SMB598430001
- 20.61.126.21116 eventsProbing The Netherlands1 port swept 路 seen Jul 17Minecraft
- 135.237.127.8216 eventsKnown scanner United States9 ports swept 路 seen Jul 165000809918245803232400
- 40.124.175.2916 eventsKnown scanner United States9 ports swept 路 seen Jul 154332117429030RDP7574
- 20.118.227.2015 eventsKnown scanner United States9 ports swept 路 seen Jul 17433014005984HTTPS-alt8581
- 20.64.106.4115 eventsKnown scanner United States9 ports swept 路 seen Jul 1772228099HTTPSRDPDocker
- 20.64.104.6214 eventsKnown scanner United States9 ports swept 路 seen Jul 16Oracle833319628118109
- 20.64.105.22114 eventsKnown scanner United States8 ports swept 路 seen Jul 178889555549894118Oracle
- 13.89.125.2614 eventsKnown scanner United States9 ports swept 路 seen Jul 17133711742Elastic3133711743
- 4.228.106.1914 eventsProbing Brazil6 ports swept 路 seen Jul 1740023005200320873002
- 20.65.154.11714 eventsKnown scanner United States8 ports swept 路 seen Jul 1618245Elastic771SSHHTTPS-alt
- 20.127.224.6314 eventsKnown scanner United States11 ports swept 路 seen Jul 175672995127080879060
- 20.118.202.20914 eventsKnown scanner United States8 ports swept 路 seen Jul 162078115SMB94439999
- 172.202.118.4014 eventsKnown scanner United States7 ports swept 路 seen Jul 17IPPSMB21815938RDP
- 13.89.121.9214 eventsKnown scanner United States8 ports swept 路 seen Jul 175135418580300015986
- 20.64.106.3914 eventsKnown scanner United States8 ports swept 路 seen Jul 162304Elastic52011741Oracle
- 20.169.105.5714 eventsKnown scanner United States10 ports swept 路 seen Jul 168834IMAPS8001MSSQL109
Top user-agents from AS8075
- Mozilla/5.0 zgrab/0.x1,774
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko, Yokohama Institute of Information Security https://www.iisec.ac.jp) Chrome/124.0.0.0 Safari/537.36112
- Go-http-client/1.140
- Cabur茅/1.0 (BR Threat Intelligence Research)16
- Python/3.11 aiohttp/3.9.112
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.3610
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.159
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.368
- Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.07
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.06
JSON: /api/asn/8075. Top ASNs feed: /api/asns.