AS63023: GTHost
HoneyLabs honeypots recorded 825 probes from AS63023 (GTHost) in the last 7 days, originating from 3 distinct source IP addresses.
First observed 2026-11-09 17:46, most recently 2026-11-13 07:15 (UTC).
What the sensors show
Probes arrived on 4 of the 7 days in this window. The busiest day was 2026-11-12, with 547. Its 3 addresses probed 6 distinct ports. The most probed was port 8088, with 99% of the probes. One address, 23.158.56.134, sent 99% of them.
Ports it targets
| Port | Probes |
|---|---|
| 8088 | 819 |
| 6443 | 2 |
| 443 | 1 |
| 3443 | 1 |
| 9433 | 1 |
| 12433 | 1 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 23.158.56.134 | 819 | Germany | |
| 45.66.164.25 | 3 | United States | |
| 45.88.160.151 | 3 | United States |
Where it comes from
| Country | Probes |
|---|---|
| Germany | 819 |
| United States | 6 |
Client strings it sends
| User agent | Probes |
|---|---|
| Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/120.0 | 819 |
| Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.1 Safari/605.1.15 | 3 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:157.0) Gecko/20100101 Firefox/157.0 | 3 |
ASN report
ASN report
Loading