AS20473: The Constant Company, LLC
HoneyLabs honeypots recorded 9,307 probes from AS20473 (The Constant Company, LLC) in the last 7 days, originating from 39 distinct source IP addresses.
First observed 2026-11-05 08:19, most recently 2026-11-12 08:17 (UTC).
What the sensors show
Probes arrived on every day of the 7-day window. The busiest day was 2026-11-09, with 1,598. Its 39 addresses probed 15 distinct ports. The most probed was port 3389, with 98% of the probes. No single address sent more than 13% of them. None of the 25 busiest addresses is a recognised research scanner.
Ports it targets
| Port | Probes |
|---|---|
| 3389 | 9,092 |
| 443 | 35 |
| 2000 | 25 |
| 8080 | 23 |
| 80 | 22 |
| 4153 | 21 |
| 3000 | 20 |
| 1080 | 16 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 149.28.101.219 | 1,204 | United States | |
| 70.34.202.156 | 1,145 | Sweden | |
| 149.248.44.88 | 1,010 | United States | |
| 70.34.199.88 | 664 | Sweden | |
| 155.138.198.123 | 523 | United States | |
| 65.20.103.53 | 455 | Spain | |
| 104.238.183.180 | 422 | United States | |
| 144.202.27.1 | 404 | United States |
Where it comes from
| Country | Probes |
|---|---|
| United States | 4,196 |
| Sweden | 2,192 |
| Poland | 570 |
| France | 535 |
| Singapore | 487 |
| Spain | 479 |
Client strings it sends
| User agent | Probes |
|---|---|
| Mozilla/5.0 (compatible; CyberConvoyScout/1.0; +https://scout.cyberconvoy.co) | 83 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/125.0 | 14 |
| asusrouter-- | 4 |
| Mozilla/5.0 | 3 |
| vllm-scanner/0.1.0 | 3 |
ASN report
ASN report
Loading