HoneyLabs
LookupEnrichFeedsCVEsCampaignsASN IndexMCPBlogDocs
Dashboard
iAnonymous lookups: 10/min, 100/hr per source IP. Sign in for a daily credit budget (free: 500, pro: 50,000) and history.

Filtered actors

query: asn:12389

271 unique IPs · 3.7K events · 1 countries · 1 ASNs

Activity · last 30d

2026-05-05: 46 events2026-05-06: 118 events2026-05-07: 705 events2026-05-08: 107 events2026-05-09: 70 events2026-05-10: 69 events2026-05-11: 63 events2026-05-12: 135 events2026-05-13: 143 events2026-05-14: 128 events2026-05-15: 124 events2026-05-16: 113 events2026-05-17: 42 events2026-05-18: 133 events2026-05-19: 138 events2026-05-20: 59 events2026-05-21: 112 events2026-05-22: 123 events2026-05-23: 48 events2026-05-24: 56 events2026-05-25: 131 events2026-05-26: 40 events2026-05-27: 80 events2026-05-28: 158 events2026-05-29: 121 events2026-05-30: 56 events2026-05-31: 75 events2026-06-01: 160 events2026-06-02: 111 events2026-06-03: 136 events2026-06-04: 86 events

peak 705 on 2026-05-07

Top source networks · click to refine

AS12389 Rostelecom100.0%
query: asn:12389×window: 30d
Refine
Turn this query into a daily email digest or an IOC feed URL.Save as feed
IPCountryASNTop portsEvents
188.254.76.32🇷🇺RUAS12389 Rostelecom22/SSH427
90.151.171.108🇷🇺RUAS12389 Rostelecom8080/HTTP-alt 1080/SOCKS424
85.237.63.7host-85-237-63-7.dsl.sura.ru🇷🇺RUAS12389 Rostelecom445/SMB64
85.237.53.179host-85-237-53-179.dsl.sura.ru🇷🇺RUAS12389 Rostelecom445/SMB48
178.185.223.124🇷🇺RUAS12389 Rostelecom445/SMB40
92.126.144.42🇷🇺RUAS12389 Rostelecom445/SMB40
90.151.105.34🇷🇺RUAS12389 Rostelecom445/SMB40
2.60.126.66🇷🇺RUAS12389 Rostelecom445/SMB32
2.60.243.50🇷🇺RUAS12389 Rostelecom445/SMB32
78.29.122.218PPPoE-78-29-122-218.san.ru🇷🇺RUAS12389 Rostelecom445/SMB32
178.35.152.250🇷🇺RUAS12389 Rostelecom445/SMB32
79.126.124.194🇷🇺RUAS12389 Rostelecom445/SMB32
5.142.160.61🇷🇺RUAS12389 Rostelecom445/SMB32
95.139.236.235🇷🇺RUAS12389 Rostelecom445/SMB24
77.106.56.5🇷🇺RUAS12389 Rostelecom445/SMB24
83.171.96.57🇷🇺RUAS12389 Rostelecom445/SMB24
212.220.105.138🇷🇺RUAS12389 Rostelecom445/SMB24
90.151.105.35🇷🇺RUAS12389 Rostelecom445/SMB24
176.211.128.18🇷🇺RUAS12389 Rostelecom445/SMB24
5.141.84.117🇷🇺RUAS12389 Rostelecom445/SMB24
91.122.30.133🇷🇺RUAS12389 Rostelecom445/SMB24
213.177.122.109213-177-122-109.dynamic.mts-nn.ru🇷🇺RUAS12389 Rostelecom445/SMB24
82.208.85.18382-208-85-183.static.mts-nn.ru🇷🇺RUAS12389 Rostelecom445/SMB24
5.141.117.4🇷🇺RUAS12389 Rostelecom445/SMB24
5.137.95.200🇷🇺RUAS12389 Rostelecom445/SMB17
2.60.123.30🇷🇺RUAS12389 Rostelecom445/SMB16
178.47.143.178dsl-178-47-143-178.permonline.ru🇷🇺RUAS12389 Rostelecom445/SMB16
178.185.223.117🇷🇺RUAS12389 Rostelecom445/SMB16
178.69.71.214🇷🇺RUAS12389 Rostelecom445/SMB16
85.93.55.57🇷🇺RUAS12389 Rostelecom445/SMB16
176.211.12.118🇷🇺RUAS12389 Rostelecom445/SMB16
176.49.128.49🇷🇺RUAS12389 Rostelecom445/SMB16
87.117.63.129129.63.117.87.donpac.ru🇷🇺RUAS12389 Rostelecom445/SMB16
176.211.16.67🇷🇺RUAS12389 Rostelecom445/SMB16
90.151.105.54🇷🇺RUAS12389 Rostelecom445/SMB16
188.113.59.105🇷🇺RUAS12389 Rostelecom445/SMB16
178.64.190.54🇷🇺RUAS12389 Rostelecom445/SMB16
94.233.234.40🇷🇺RUAS12389 Rostelecom445/SMB16
78.29.126.255🇷🇺RUAS12389 Rostelecom445/SMB16
85.95.173.235tts.moris.ru🇷🇺RUAS12389 Rostelecom445/SMB16
212.220.122.228🇷🇺RUAS12389 Rostelecom445/SMB16
78.36.15.168relay.mauocsp.ru🇷🇺RUAS12389 Rostelecom445/SMB16
92.100.62.229🇷🇺RUAS12389 Rostelecom445/SMB16
2.62.115.110🇷🇺RUAS12389 Rostelecom445/SMB16
176.211.16.106🇷🇺RUAS12389 Rostelecom445/SMB16
178.47.41.246🇷🇺RUAS12389 Rostelecom445/SMB16
85.237.57.11host-85-237-57-11.dsl.sura.ru🇷🇺RUAS12389 Rostelecom445/SMB16
178.66.182.127🇷🇺RUAS12389 Rostelecom445/SMB16
178.47.50.186🇷🇺RUAS12389 Rostelecom445/SMB16
82.208.86.16682-208-86-166.dynamic.mts-nn.ru🇷🇺RUAS12389 Rostelecom445/SMB16
Showing top 50 by event count. Window is the last 30d. Add or remove filters by clicking any value on a per-IP report.