AS206092: F.n.s. Holdings Limited
HoneyLabs honeypots recorded 180 probes from AS206092 (F.n.s. Holdings Limited) in the last 7 days, originating from 39 distinct source IP addresses.
First observed 2026-11-08 09:29, most recently 2026-11-13 15:56 (UTC).
What the sensors show
Probes arrived on 5 of the 7 days in this window. The busiest day was 2026-11-13, with 128. Its 39 addresses probed 8 distinct ports. The most probed was port 5061, with 56% of the probes. One address, 136.144.17.112, sent 56% of them. None of the 25 busiest addresses is a recognised research scanner.
Ports it targets
| Port | Probes |
|---|---|
| 5061 | 100 |
| 80 | 61 |
| 3389 | 11 |
| 3379 | 2 |
| 3388 | 2 |
| 3390 | 2 |
| 2086 | 1 |
| 2087 | 1 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 136.144.17.112 | 100 | Canada | |
| 136.144.17.107 | 11 | Canada | |
| 45.132.227.249 | 6 | United States | |
| 82.118.29.62 | 6 | Sweden | |
| 82.118.29.94 | 4 | Sweden | |
| 82.118.29.77 | 4 | Sweden | |
| 82.118.29.81 | 3 | Sweden | |
| 82.118.29.99 | 3 | Sweden |
Where it comes from
| Country | Probes |
|---|---|
| Canada | 111 |
| Sweden | 62 |
| United States | 6 |
| Germany | 1 |
Client strings it sends
| User agent | Probes |
|---|---|
| Mozilla/5.0 (Windows NT 10.0; rv:105.0) Gecko/20100101 Firefox/105.0 | 26 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36 | 13 |
| python-requests/2.32.5 | 7 |
| Mozilla/5.0 (X11; Linux x86_64; rv:106.0) Gecko/20100101 Firefox/106.0 | 2 |
| Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36 | 2 |
ASN report
ASN report
Loading