AS25369: Hydra Communications Ltd
HoneyLabs honeypots recorded 934 probes from AS25369 (Hydra Communications Ltd) in the last 7 days, originating from 629 distinct source IP addresses.
First observed 2026-11-02 06:03, most recently 2026-11-08 15:28 (UTC).
What the sensors show
Probes arrived on 5 of the 7 days in this window. The busiest day was 2026-11-08, with 387. Its 629 addresses probed 53 distinct ports. The most probed was port 1000, with 12% of the probes. No single address sent more than 2% of them. 22 of the 25 busiest addresses are recognised research scanners.
Ports it targets
| Port | Probes |
|---|---|
| 1000 | 110 |
| 80 | 42 |
| 18000 | 35 |
| 24000 | 35 |
| 40000 | 35 |
| 47000 | 35 |
| 49948 | 35 |
| 14143 | 35 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 85.204.70.98 | 21 | France | |
| 85.204.70.104 | 21 | France | |
| 69.5.169.109 | 6 | Germany | |
| 185.38.148.114 | 6 | United Kingdom | |
| 69.5.169.12 | 5 | Germany | |
| 69.5.169.117 | 5 | Germany | |
| 194.88.98.108 | 5 | Germany | |
| 69.5.169.22 | 5 | Germany |
Where it comes from
| Country | Probes |
|---|---|
| United Kingdom | 507 |
| Germany | 315 |
| The Netherlands | 70 |
| France | 42 |
Client strings it sends
| User agent | Probes |
|---|---|
| Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/) | 875 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 | 42 |
| Python WinRM client | 1 |
ASN report
ASN report
Loading