AS8560: IONOS SE
HoneyLabs honeypots recorded 490 probes from AS8560 (IONOS SE) in the last 7 days, originating from 16 distinct source IP addresses.
First observed 2026-10-31 01:31, most recently 2026-11-07 00:58 (UTC).
What the sensors show
Probes arrived on every day of the 7-day window. The busiest day was 2026-11-01, with 85. Its 16 addresses probed 20 distinct ports. The most probed was port 3389, with 85% of the probes. One address, 217.160.147.226, sent 83% of them. None of the 16 busiest addresses is a recognised research scanner.
Ports it targets
| Port | Probes |
|---|---|
| 3389 | 418 |
| 8500 | 20 |
| 1433 | 10 |
| 22 | 5 |
| 5038 | 4 |
| 33389 | 4 |
| 6379 | 3 |
| 10255 | 3 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 217.160.147.226 | 407 | United Kingdom | |
| 66.179.249.162 | 24 | United States | |
| 216.225.196.202 | 16 | United States | |
| 87.106.147.134 | 10 | Germany | |
| 74.208.40.31 | 6 | United States | |
| 217.154.202.18 | 4 | Germany | |
| 217.160.220.87 | 4 | Germany | |
| 82.165.10.79 | 4 | Spain |
Where it comes from
| Country | Probes |
|---|---|
| United Kingdom | 408 |
| United States | 48 |
| Germany | 23 |
| Spain | 7 |
| France | 3 |
| Austria | 1 |
Client strings it sends
| User agent | Probes |
|---|---|
| Mozilla/5.0 | 20 |
| Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30 | 4 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) | 3 |
| python-requests/2.32.3 | 1 |
ASN report
ASN report
Loading