AS201814: MEVSPACE sp. z o.o.
HoneyLabs honeypots recorded 22,371 probes from AS201814 (MEVSPACE sp. z o.o.) in the last 7 days, originating from 24 distinct source IP addresses.
First observed 2026-11-08 08:25, most recently 2026-11-15 08:25 (UTC).
What the sensors show
Probes arrived on every day of the 7-day window. The busiest day was 2026-11-13, with 6,222. Its 24 addresses probed 4,310 distinct ports. The most probed was port 3389, with 14% of the probes. One address, 94.26.68.90, sent 48% of them. None of the 24 busiest addresses is a recognised research scanner.
Ports it targets
| Port | Probes |
|---|---|
| 3389 | 3,030 |
| 443 | 819 |
| 4153 | 416 |
| 10800 | 416 |
| 3629 | 408 |
| 16379 | 408 |
| 10801 | 407 |
| 1 | 400 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 94.26.68.90 | 10,823 | Bulgaria | |
| 95.214.53.196 | 3,879 | Poland | |
| 45.141.233.16 | 2,984 | Bulgaria | |
| 194.180.48.47 | 2,781 | Germany | |
| 109.205.211.52 | 727 | Azerbaijan | |
| 45.141.233.9 | 458 | Bulgaria | |
| 194.180.49.41 | 398 | Bulgaria | |
| 45.141.233.71 | 81 | Bulgaria |
Where it comes from
| Country | Probes |
|---|---|
| Bulgaria | 14,931 |
| Poland | 3,910 |
| Germany | 2,792 |
| Azerbaijan | 738 |
Client strings it sends
| User agent | Probes |
|---|---|
| Go-http-client/1.1 | 2,322 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 | 12 |
| Java/1.8.0_511 | 2 |
| Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.1 Mobile/15E148 Safari/604.1 | 1 |
| Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.6 Mobile/15E148 Safari/604.1 | 1 |
ASN report
ASN report
Loading