AS215925: Vpsvault.host Ltd
HoneyLabs honeypots recorded 5,085 probes from AS215925 (Vpsvault.host Ltd) in the last 7 days, originating from 27 distinct source IP addresses.
First observed 2026-08-08 05:51:44, most recently 2026-08-15 05:45:46 (UTC).
Ports it targets
| Port | Probes |
|---|---|
| 80 | 368 |
| 30120 | 325 |
| 5000 | 180 |
| 8332 | 140 |
| 541 | 130 |
| 8006 | 121 |
| 8080 | 105 |
| 60001 | 89 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 45.198.224.228 | 786 | United States | |
| 45.194.67.8 | 468 | United States | |
| 45.198.224.26 | 442 | United States | |
| 45.194.67.27 | 430 | United States | |
| 45.194.67.30 | 369 | United States | |
| 45.194.67.26 | 301 | United States | |
| 45.205.1.242 | 277 | Brazil | |
| 45.205.1.246 | 263 | Brazil |
Where it comes from
| Country | Probes |
|---|---|
| United States | 3,374 |
| Brazil | 1,711 |
Client strings it sends
| User agent | Probes |
|---|---|
| Mozilla/5.0 (compatible; FlowIQLabsBot/1.0; +https://flowiq-labs.com/scanning-info) | 2,895 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 | 778 |
| Go-http-client/1.1 | 423 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46 | 202 |
| ProxmoxChecker/1.0 (+script) | 121 |
ASN report
ASN report
Loading live data…