AS49870: Alsycon B.V.
HoneyLabs honeypots recorded 3,445 probes from AS49870 (Alsycon B.V.) in the last 7 days, originating from 7 distinct source IP addresses.
First observed 2026-11-08 07:21, most recently 2026-11-15 06:15 (UTC).
What the sensors show
Probes arrived on every day of the 7-day window. The busiest day was 2026-11-08, with 675. Its 7 addresses probed 18 distinct ports. The most probed was port 2053, with 93% of the probes. One address, 45.81.23.14, sent 95% of them. None of the 7 busiest addresses is a recognised research scanner.
Ports it targets
| Port | Probes |
|---|---|
| 2053 | 3,217 |
| 8080 | 137 |
| 3128 | 46 |
| 443 | 4 |
| 999 | 4 |
| 1081 | 4 |
| 1082 | 4 |
| 7890 | 4 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 45.81.23.14 | 3,262 | The Netherlands | |
| 160.119.66.206 | 135 | Seychelles | |
| 160.119.71.168 | 34 | Seychelles | |
| 160.119.76.137 | 9 | Seychelles | |
| 45.81.23.7 | 3 | The Netherlands | |
| 160.119.76.50 | 1 | Seychelles | |
| 160.119.71.193 | 1 | Seychelles |
Where it comes from
| Country | Probes |
|---|---|
| The Netherlands | 3,265 |
| Seychelles | 180 |
Client strings it sends
| User agent | Probes |
|---|---|
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 | 3,200 |
| Python/3.13 aiohttp/3.14.5 | 43 |
| zmap-proxy-probe/1.0 | 34 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 | 12 |
| python-requests/2.34.2 | 2 |
ASN report
ASN report
Loading