AS12989: Black HOST Ltd
HoneyLabs honeypots recorded 1,024 probes from AS12989 (Black HOST Ltd) in the last 7 days, originating from 8 distinct source IP addresses.
First observed 2026-10-06 03:24:23, most recently 2026-10-13 02:28:30 (UTC).
Ports it targets
| Port | Probes |
|---|---|
| 102 | 43 |
| 8139 | 36 |
| 10000 | 16 |
| 503 | 15 |
| 9943 | 12 |
| 47990 | 12 |
| 443 | 10 |
| 5432 | 9 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 86.54.31.36 | 260 | Canada | |
| 86.54.31.44 | 248 | Canada | |
| 86.54.31.32 | 194 | Canada | |
| 86.54.31.34 | 150 | Canada | |
| 86.54.31.38 | 149 | Canada | |
| 86.54.31.40 | 12 | Canada | |
| 2.59.21.51 | 6 | Italy | |
| 86.54.31.46 | 5 | Canada |
Where it comes from
| Country | Probes |
|---|---|
| Canada | 1,018 |
| Italy | 6 |
Client strings it sends
| User agent | Probes |
|---|---|
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.36 | 394 |
| Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36 | 364 |
| Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 | 31 |
| python-requests/2.23.0 | 8 |
ASN report
ASN report
Loading live data…