AS42960: VH Global Limited
HoneyLabs honeypots recorded 52 probes from AS42960 (VH Global Limited) in the last 7 days, originating from 10 distinct source IP addresses.
First observed 2026-11-05 04:48, most recently 2026-11-11 01:52 (UTC).
What the sensors show
Probes arrived on 5 of the 7 days in this window. The busiest day was 2026-11-10, with 31. Its 10 addresses probed 6 distinct ports. The most probed was port 8788, with 52% of the probes. One address, 103.24.217.88, sent 46% of them. None of the 10 busiest addresses is a recognised research scanner.
Ports it targets
| Port | Probes |
|---|---|
| 8788 | 27 |
| 2375 | 14 |
| 2379 | 6 |
| 6379 | 2 |
| 6380 | 2 |
| 2261 | 1 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 103.24.217.88 | 24 | Hong Kong | |
| 39.109.62.150 | 12 | Hong Kong | |
| 39.109.62.152 | 7 | Hong Kong | |
| 39.109.62.209 | 2 | Hong Kong | |
| 39.109.62.250 | 2 | Hong Kong | |
| 39.109.63.146 | 1 | Hong Kong | |
| 43.248.10.12 | 1 | Hong Kong | |
| 39.109.63.169 | 1 | Hong Kong |
Where it comes from
| Country | Probes |
|---|---|
| Hong Kong | 52 |
Client strings it sends
| User agent | Probes |
|---|---|
| docker/26.1.4 go/go1.21.11 | 9 |
| docker/26.1.4 | 6 |
| etcd-client/3.5.12 | 2 |
| curl/8.5.0 | 2 |
| etcdctl/3.5 | 1 |
ASN report
ASN report
Loading