AS174: Cogent Communications, LLC
HoneyLabs honeypots recorded 1,565 probes from AS174 (Cogent Communications, LLC) in the last 7 days, originating from 16 distinct source IP addresses.
First observed 2026-11-06 16:50, most recently 2026-11-13 16:25 (UTC).
What the sensors show
Probes arrived on every day of the 7-day window. The busiest day was 2026-11-08, with 305. Its 16 addresses probed 532 distinct ports. No port took more than 1% of the probes. No single address sent more than 15% of them. None of the 16 busiest addresses is a recognised research scanner.
Ports it targets
| Port | Probes |
|---|---|
| 17778 | 12 |
| 3557 | 12 |
| 1454 | 12 |
| 44336 | 8 |
| 31443 | 8 |
| 18682 | 8 |
| 18095 | 8 |
| 14631 | 8 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 207.90.244.28 | 239 | United States | |
| 207.90.244.4 | 228 | United States | |
| 207.90.244.19 | 218 | United States | |
| 207.90.244.12 | 204 | United States | |
| 207.90.244.18 | 193 | United States | |
| 207.90.244.14 | 190 | United States | |
| 207.90.244.26 | 125 | United States | |
| 207.90.244.6 | 114 | United States |
Where it comes from
| Country | Probes |
|---|---|
| United States | 1,550 |
| The Netherlands | 12 |
| Bulgaria | 2 |
| Venezuela | 1 |
Client strings it sends
| User agent | Probes |
|---|---|
| Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36 | 770 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.36 | 750 |
| Python/3.12 aiohttp/3.14.5 | 3 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 | 2 |
| Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36 | 1 |
ASN report
ASN report
Loading