AS202425: IP Volume inc
HoneyLabs honeypots recorded 36,736 probes from AS202425 (IP Volume inc) in the last 7 days, originating from 86 distinct source IP addresses.
First observed 2026-11-07 21:07, most recently 2026-11-14 20:46 (UTC).
What the sensors show
Probes arrived on every day of the 7-day window. The busiest day was 2026-11-11, with 7,273. Its 86 addresses probed 863 distinct ports. No port took more than 1% of the probes. One address, 89.248.171.24, sent 36% of them. 25 of the 25 busiest addresses are recognised research scanners.
Ports it targets
| Port | Probes |
|---|---|
| 8787 | 385 |
| 7001 | 368 |
| 7474 | 354 |
| 1293 | 352 |
| 42069 | 350 |
| 5200 | 350 |
| 9440 | 349 |
| 3306 | 345 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 89.248.171.24 | 13,358 | The Netherlands | |
| 93.174.93.12 | 10,680 | The Netherlands | |
| 80.82.77.202 | 5,740 | The Netherlands | |
| 89.248.172.33 | 3,741 | The Netherlands | |
| 80.82.77.139 | 299 | The Netherlands | |
| 93.174.95.106 | 229 | The Netherlands | |
| 80.82.77.33 | 223 | The Netherlands | |
| 94.102.49.190 | 212 | The Netherlands |
Where it comes from
| Country | Probes |
|---|---|
| The Netherlands | 35,138 |
| United States | 1,598 |
Client strings it sends
| User agent | Probes |
|---|---|
| Python/3.10 aiohttp/3.8.4 | 32,882 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.190 Safari/537.36 | 1,533 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.36 | 305 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36 | 282 |
| Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36 | 231 |
ASN report
ASN report
Loading