AS48090: Techoff Srv Limited
HoneyLabs honeypots recorded 11,153 probes from AS48090 (Techoff Srv Limited) in the last 7 days, originating from 20 distinct source IP addresses.
First observed 2026-11-08 03:50, most recently 2026-11-15 03:41 (UTC).
What the sensors show
Probes arrived on every day of the 7-day window. The busiest day was 2026-11-10, with 3,522. Its 20 addresses probed 6,372 distinct ports. The most probed was port 22, with 17% of the probes. One address, 93.123.109.204, sent 58% of them. None of the 20 busiest addresses is a recognised research scanner.
Ports it targets
| Port | Probes |
|---|---|
| 22 | 1,865 |
| 443 | 1,268 |
| 1723 | 236 |
| 80 | 166 |
| 8000 | 158 |
| 81 | 152 |
| 8080 | 95 |
| 17000 | 79 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 93.123.109.204 | 6,461 | Bulgaria | |
| 45.148.10.5 | 578 | The Netherlands | |
| 45.148.10.152 | 488 | The Netherlands | |
| 195.178.110.204 | 474 | Bulgaria | |
| 45.148.10.157 | 470 | The Netherlands | |
| 195.178.110.159 | 466 | Bulgaria | |
| 45.148.10.141 | 453 | The Netherlands | |
| 45.148.10.151 | 434 | The Netherlands |
Where it comes from
| Country | Probes |
|---|---|
| Bulgaria | 8,333 |
| The Netherlands | 2,820 |
Client strings it sends
| User agent | Probes |
|---|---|
| Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36 | 453 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 | 215 |
| Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 | 140 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:129.0) Gecko/20100101 Firefox/129.0 | 82 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 Edg/128.0.0.0 | 81 |
ASN report
ASN report
Loading