AS47890: Unmanaged Ltd
HoneyLabs honeypots recorded 1,176 probes from AS47890 (Unmanaged Ltd) in the last 7 days, originating from 12 distinct source IP addresses.
First observed 2026-11-02 23:41, most recently 2026-11-09 23:20 (UTC).
What the sensors show
Probes arrived on every day of the 7-day window. The busiest day was 2026-11-03, with 187. Its 12 addresses probed 159 distinct ports. The most probed was port 22, with 69% of the probes. One address, 2.57.121.25, sent 28% of them. None of the 12 busiest addresses is a recognised research scanner.
Ports it targets
| Port | Probes |
|---|---|
| 22 | 807 |
| 7890 | 25 |
| 443 | 18 |
| 1080 | 18 |
| 20002 | 14 |
| 1081 | 13 |
| 7891 | 12 |
| 8080 | 12 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 2.57.121.25 | 333 | Romania | |
| 2.57.121.112 | 248 | Romania | |
| 193.46.255.86 | 226 | Romania | |
| 80.94.92.130 | 168 | Romania | |
| 92.118.39.246 | 84 | Romania | |
| 92.118.39.76 | 46 | United States | |
| 92.118.39.181 | 34 | Romania | |
| 2.57.122.103 | 18 | Romania |
Where it comes from
| Country | Probes |
|---|---|
| Romania | 1,127 |
| United States | 49 |
Client strings it sends
| User agent | Probes |
|---|---|
| Go-http-client/1.1 | 90 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 | 82 |
| Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.115 Safari/537.36 | 77 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.3 | 8 |
| asusrouter-Android-1.0.0.3.58-163 | 6 |
ASN report
ASN report
Loading