AS213790: Limited Network LTD
HoneyLabs honeypots recorded 16,874 probes from AS213790 (Limited Network LTD) in the last 7 days, originating from 17 distinct source IP addresses.
First observed 2026-11-08 05:30, most recently 2026-11-15 04:05 (UTC).
What the sensors show
Probes arrived on every day of the 7-day window. The busiest day was 2026-11-12, with 12,868. Its 17 addresses probed 42 distinct ports. No port took more than 9% of the probes. One address, 77.90.185.243, sent 90% of them. None of the 17 busiest addresses is a recognised research scanner.
Ports it targets
| Port | Probes |
|---|---|
| 1433 | 1,449 |
| 2375 | 1,183 |
| 3002 | 1,016 |
| 90 | 1,016 |
| 7060 | 1,016 |
| 8008 | 1,016 |
| 7474 | 1,016 |
| 5173 | 1,014 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 77.90.185.243 | 15,141 | Germany | |
| 77.90.185.84 | 1,372 | Germany | |
| 185.93.89.135 | 77 | Iran | |
| 77.90.185.244 | 67 | Germany | |
| 185.93.89.79 | 55 | Iran | |
| 77.90.185.226 | 44 | Germany | |
| 192.253.248.129 | 33 | The Netherlands | |
| 192.253.248.131 | 27 | The Netherlands |
Where it comes from
| Country | Probes |
|---|---|
| Germany | 16,641 |
| Iran | 136 |
| The Netherlands | 97 |
Client strings it sends
| User agent | Probes |
|---|---|
| Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; ) | 169 |
| Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/525.19 (KHTML, like Gecko) Chrome/0.2.153.0 Safari/525.19 | 169 |
| Mozilla/5.0 (Linux; U; Android 4.1.2; en-us; SCH-I535 Build/JZO54K) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30evme-launcher | 169 |
| More Firefox 2.0.0.11 user agents strings -->> | 169 |
| Mozilla/5.0 (Linux; U; Android 4.0.4; pt-br; GT-P3100 Build/IMM76D) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Safari/534.30 | 169 |
ASN report
ASN report
Loading