AS402226: OnlyScans LLC
HoneyLabs honeypots recorded 32 probes from AS402226 (OnlyScans LLC) in the last 7 days, originating from 2 distinct source IP addresses.
First observed 2026-10-31 19:19, most recently 2026-11-06 22:41 (UTC).
What the sensors show
Probes arrived on 5 of the 7 days in this window. The busiest day was 2026-11-04, with 14. Its 2 addresses probed 5 distinct ports. The most probed was port 80, with 69% of the probes. One address, 68.69.177.112, sent 69% of them.
Ports it targets
| Port | Probes |
|---|---|
| 80 | 22 |
| 4433 | 3 |
| 4443 | 3 |
| 5000 | 3 |
| 4444 | 1 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 68.69.177.112 | 22 | United States | |
| 68.69.177.101 | 10 | United States |
Where it comes from
| Country | Probes |
|---|---|
| United States | 32 |
Client strings it sends
| User agent | Probes |
|---|---|
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36 | 16 |
| Mozilla/5.0 zgrab/0.x | 10 |
| Mozilla/5.0 | 4 |
| curl/8.1.2 | 2 |
ASN report
ASN report
Loading