AS204428: SS-Net
HoneyLabs honeypots recorded 13,953 probes from AS204428 (SS-Net) in the last 7 days, originating from 8 distinct source IP addresses.
First observed 2026-09-23 00:56:12, most recently 2026-09-29 17:43:22 (UTC).
Ports it targets
| Port | Probes |
|---|---|
| 3000 | 5,278 |
| 443 | 5,161 |
| 80 | 2,639 |
| 22 | 168 |
| 3389 | 127 |
| 13389 | 23 |
| 33389 | 20 |
| 33489 | 17 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 80.94.95.211 | 13,078 | Romania | |
| 80.94.95.83 | 442 | Romania | |
| 80.94.95.9 | 172 | Romania | |
| 80.94.95.116 | 97 | Romania | |
| 80.94.95.115 | 71 | Romania | |
| 80.94.95.221 | 51 | Romania | |
| 80.94.95.43 | 36 | Romania | |
| 80.94.95.105 | 6 | Romania |
Where it comes from
| Country | Probes |
|---|---|
| Romania | 13,953 |
Client strings it sends
| User agent | Probes |
|---|---|
| Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/530.5 (KHTML, like Gecko) Chrome/2.0.172.43 Safari/530.5 | 330 |
| Mozilla/5.0 (Linux; U; Android 2.3.5; en-us; M865 Build/HuaweiM865) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1 | 330 |
| Mozilla/5.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET CLR 1.0.3705; .NET CLR 1.1.4322) | 330 |
| Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US) AppleWebKit/534.10 (KHTML, like Gecko) Chrome/8.0.558.0 Safari/534.10 | 330 |
| Mozilla/5.0 (X11; U; Linux x86_64; en-GB; rv:1.9.0.3) Gecko/2008092510 Ubuntu/8.04 (hardy) Firefox/3.0.3 | 330 |
ASN report
ASN report
Loading live data…