AS41608: NextGenWebs, S.L.
HoneyLabs honeypots recorded 220 probes from AS41608 (NextGenWebs, S.L.) in the last 7 days, originating from 6 distinct source IP addresses.
First observed 2026-08-08 20:50:09, most recently 2026-08-15 09:13:49 (UTC).
Ports it targets
| Port | Probes |
|---|---|
| 445 | 32 |
| 1433 | 32 |
| 5555 | 21 |
| 6666 | 21 |
| 7777 | 21 |
| 8888 | 21 |
| 25 | 18 |
| 443 | 16 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 195.170.172.216 | 71 | Spain | |
| 195.170.172.128 | 44 | Spain | |
| 185.213.175.127 | 32 | Spain | |
| 88.151.33.176 | 32 | The Netherlands | |
| 195.170.172.215 | 21 | Spain | |
| 195.170.172.225 | 20 | Spain |
Where it comes from
| Country | Probes |
|---|---|
| Spain | 188 |
| The Netherlands | 32 |
Client strings it sends
| User agent | Probes |
|---|---|
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.61 Safari/537.36 | 110 |
| Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; ; NCLIENT50_AAPCDA5841E333) | 4 |
| Go-http-client/1.1 | 2 |
| cloudflared/2025.11.1 | 2 |
| Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko | 2 |
ASN report
ASN report
Loading live data…