HoneyLabs
KEV
LookupKEVMCP
Data
The datasetDataset and methodCVEsCampaignsPayloadsPre-disclosureEmissions IndexPortsBlog
Integrations
OverviewFeeds
PricingDocs

AS215925: Vpsvault.host Ltd

HoneyLabs honeypots recorded 1,583 probes from AS215925 (Vpsvault.host Ltd) in the last 7 days, originating from 22 distinct source IP addresses.

First observed 2026-11-04 04:22, most recently 2026-11-11 03:58 (UTC).

What the sensors show

Probes arrived on every day of the 7-day window. The busiest day was 2026-11-07, with 280. Its 22 addresses probed 37 distinct ports. The most probed was port 9090, with 14% of the probes. One address, 45.198.224.125, sent 46% of them. None of the 22 busiest addresses is a recognised research scanner.

Ports it targets

PortProbes
9090221
5555216
8080200
80182
8081176
60001146
443376
818153

Most active source addresses

Source IPProbesNetworkCountry
45.198.224.125734United States
45.198.224.85230United States
154.80.128.121110Hong Kong
154.80.128.170108Hong Kong
154.80.128.124100Hong Kong
45.198.224.8974United States
154.80.128.19972Hong Kong
45.194.92.5559United States

Where it comes from

CountryProbes
United States1,178
Hong Kong405

Client strings it sends

User agentProbes
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0734
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36146
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36129
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.3631
Mozilla/5.0 (Linux; Android 14; SM-F9560 Build/UP1A.231005.007; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/127.0.6533.103 Mobile Safari/537.3627

ASN report

ASN report

Loading