AS12389: Rostelecom
HoneyLabs honeypots recorded 1,143 probes from AS12389 (Rostelecom) in the last 7 days, originating from 82 distinct source IP addresses.
First observed 2026-09-22 04:07:21, most recently 2026-09-29 03:40:02 (UTC).
Ports it targets
| Port | Probes |
|---|---|
| 445 | 670 |
| 37777 | 234 |
| 1080 | 180 |
| 8080 | 35 |
| 1433 | 12 |
| 23 | 6 |
| 80 | 2 |
| 22 | 1 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 37.79.38.109 | 234 | Russia | |
| 90.151.171.108 | 212 | Russia | |
| 87.103.170.45 | 24 | Russia | |
| 85.192.147.108 | 24 | Russia | |
| 212.220.110.22 | 24 | Russia | |
| 88.200.214.88 | 24 | Russia | |
| 92.124.137.255 | 24 | Russia | |
| 93.120.148.94 | 16 | Russia |
Where it comes from
| Country | Probes |
|---|---|
| Russia | 1,143 |
Client strings it sends
| User agent | Probes |
|---|---|
| Mozilla/5.0 (Windows NT 6.1; rv:16.0) Gecko/20100101 Firefox/16.0 (+https://best-proxies.ru/faq/#from) | 53 |
| Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) | 3 |
| BTC Tools v0.1 | 1 |
| python-requests/2.32.5 | 1 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 Edg/151.0.0.0 | 1 |
ASN report
ASN report
Loading live data…