AS41608: NextGenWebs, S.L.
HoneyLabs honeypots recorded 127 probes from AS41608 (NextGenWebs, S.L.) in the last 7 days, originating from 4 distinct source IP addresses.
First observed 2026-11-09 02:51, most recently 2026-11-15 01:54 (UTC).
What the sensors show
Probes arrived on every day of the 7-day window. The busiest day was 2026-11-09, with 37. Its 4 addresses probed 3 distinct ports. The most probed was port 445, with 87% of the probes. One address, 195.170.172.216, sent 29% of them.
Ports it targets
| Port | Probes |
|---|---|
| 445 | 111 |
| 443 | 13 |
| 80 | 3 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 195.170.172.216 | 37 | Spain | |
| 88.151.33.187 | 37 | The Netherlands | |
| 195.170.172.118 | 37 | Spain | |
| 185.213.174.141 | 16 | The Netherlands |
Where it comes from
| Country | Probes |
|---|---|
| Spain | 74 |
| The Netherlands | 53 |
Client strings it sends
| User agent | Probes |
|---|---|
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.61 Safari/537.36 | 54 |
| fingerprint-scan/0.1 | 16 |
| Go-http-client/1.1 | 9 |
| Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko | 3 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3 | 3 |
ASN report
ASN report
Loading