AS205759: Ghosty Networks LLC
HoneyLabs honeypots recorded 429 probes from AS205759 (Ghosty Networks LLC) in the last 7 days, originating from 7 distinct source IP addresses.
First observed 2026-08-29 03:18:13, most recently 2026-09-04 15:50:20 (UTC).
Ports it targets
| Port | Probes |
|---|---|
| 80 | 14 |
| 443 | 8 |
| 5432 | 7 |
| 8941 | 6 |
| 8940 | 6 |
| 8939 | 6 |
| 8938 | 6 |
| 8918 | 6 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 43.228.157.185 | 363 | Pakistan | |
| 64.89.160.111 | 23 | United States | |
| 36.255.97.72 | 20 | Pakistan | |
| 36.255.97.174 | 8 | Pakistan | |
| 46.151.182.191 | 7 | The Netherlands | |
| 64.89.161.91 | 6 | United States | |
| 43.228.157.53 | 2 | Pakistan |
Where it comes from
| Country | Probes |
|---|---|
| Pakistan | 393 |
| United States | 29 |
| The Netherlands | 7 |
Client strings it sends
| User agent | Probes |
|---|---|
| claude-code/1.x | 363 |
| Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30 | 16 |
| python-requests/2.25.1 | 4 |
| Mozilla/1.0 | 2 |
ASN report
ASN report
Loading live data…