AS8452: IDDQD-AS
HoneyLabs honeypots recorded 486 probes from AS8452 (IDDQD-AS) in the last 7 days, originating from 63 distinct source IP addresses.
First observed 2026-11-06 09:31, most recently 2026-11-13 03:06 (UTC).
What the sensors show
Probes arrived on every day of the 7-day window. The busiest day was 2026-11-08, with 102. Its 63 addresses probed 9 distinct ports. The most probed was port 445, with 87% of the probes. No single address sent more than 7% of them. None of the 25 busiest addresses is a recognised research scanner.
Ports it targets
| Port | Probes |
|---|---|
| 445 | 425 |
| 1433 | 30 |
| 37777 | 11 |
| 80 | 8 |
| 4899 | 7 |
| 8040 | 2 |
| 21 | 1 |
| 5432 | 1 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 196.202.93.55 | 32 | Egypt | |
| 196.219.202.74 | 32 | Egypt | |
| 197.39.200.93 | 24 | Egypt | |
| 41.32.8.157 | 24 | Egypt | |
| 102.41.198.122 | 17 | Egypt | |
| 156.203.249.84 | 16 | Egypt | |
| 41.38.203.16 | 16 | Egypt | |
| 156.207.231.118 | 9 | Egypt |
Where it comes from
| Country | Probes |
|---|---|
| Egypt | 486 |
Client strings it sends
| User agent | Probes |
|---|---|
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/126 | 2 |
| Mozilla/5.0 | 1 |
| Python WinRM client | 1 |
ASN report
ASN report
Loading