AS51396: Pfcloud UG (haftungsbeschrankt)
HoneyLabs honeypots recorded 14,271 probes from AS51396 (Pfcloud UG (haftungsbeschrankt)) in the last 7 days, originating from 56 distinct source IP addresses.
First observed 2026-09-22 08:41:54, most recently 2026-09-29 08:39:33 (UTC).
Ports it targets
| Port | Probes |
|---|---|
| 12345 | 802 |
| 2345 | 686 |
| 6767 | 681 |
| 12321 | 545 |
| 9999 | 432 |
| 9001 | 281 |
| 2002 | 278 |
| 10001 | 277 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 176.65.149.152 | 5,119 | The Netherlands | |
| 204.76.203.231 | 2,863 | The Netherlands | |
| 176.65.134.48 | 1,136 | Germany | |
| 204.76.203.221 | 677 | The Netherlands | |
| 204.76.203.213 | 675 | The Netherlands | |
| 204.76.203.222 | 665 | The Netherlands | |
| 204.76.203.214 | 663 | The Netherlands | |
| 204.76.203.4 | 516 | The Netherlands |
Where it comes from
| Country | Probes |
|---|---|
| The Netherlands | 12,292 |
| Germany | 1,964 |
| Ukraine | 9 |
| United Arab Emirates | 6 |
Client strings it sends
| User agent | Probes |
|---|---|
| Go-http-client/1.1 | 591 |
| 0day | 154 |
| Mozilla/5.0 | 102 |
| Mozilla/5.0 zgrab/0.x | 51 |
| Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 | 28 |
ASN report
ASN report
Loading live data…