AS14956: RouterHosting LLC
HoneyLabs honeypots recorded 326 probes from AS14956 (RouterHosting LLC) in the last 7 days, originating from 19 distinct source IP addresses.
First observed 2026-09-04 18:11:24, most recently 2026-09-11 03:59:49 (UTC).
Ports it targets
| Port | Probes |
|---|---|
| 445 | 38 |
| 443 | 7 |
| 8091 | 6 |
| 18888 | 6 |
| 8443 | 6 |
| 25565 | 6 |
| 4444 | 4 |
| 9998 | 4 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 216.126.239.150 | 233 | United States | |
| 144.172.108.79 | 24 | United States | |
| 216.126.239.163 | 23 | United States | |
| 216.126.239.215 | 8 | United States | |
| 167.88.168.121 | 8 | United States | |
| 172.86.114.38 | 6 | United States | |
| 216.126.239.185 | 4 | United States | |
| 172.86.74.67 | 4 | United States |
Where it comes from
| Country | Probes |
|---|---|
| United States | 322 |
| The Netherlands | 2 |
| Australia | 2 |
Client strings it sends
| User agent | Probes |
|---|---|
| zern-scanner (+https://zern.io) | 260 |
| Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0 | 3 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 | 2 |
| libredtail-http | 1 |
| Python-urllib/3.13 | 1 |
ASN report
ASN report
Loading live data…