AS132203: Tencent Building, Kejizhongyi Avenue
HoneyLabs honeypots recorded 460 probes from AS132203 (Tencent Building, Kejizhongyi Avenue) in the last 7 days, originating from 213 distinct source IP addresses.
First observed 2026-11-08 07:23, most recently 2026-11-15 06:41 (UTC).
What the sensors show
Probes arrived on every day of the 7-day window. The busiest day was 2026-11-12, with 100. Its 213 addresses probed 25 distinct ports. The most probed was port 80, with 41% of the probes. No single address sent more than 11% of them. None of the 25 busiest addresses is a recognised research scanner.
Ports it targets
| Port | Probes |
|---|---|
| 80 | 188 |
| 443 | 154 |
| 3000 | 54 |
| 22 | 13 |
| 8188 | 8 |
| 3389 | 6 |
| 30400 | 4 |
| 6000 | 4 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 43.167.198.92 | 49 | Japan | |
| 43.163.108.20 | 27 | Singapore | |
| 150.109.197.225 | 27 | Japan | |
| 161.120.180.21 | 22 | China | |
| 142.86.3.245 | 18 | China | |
| 161.120.186.93 | 12 | China | |
| 43.130.246.117 | 8 | Japan | |
| 43.154.8.36 | 4 | Hong Kong |
Where it comes from
| Country | Probes |
|---|---|
| United States | 116 |
| Japan | 101 |
| Singapore | 83 |
| China | 52 |
| Hong Kong | 36 |
| Germany | 29 |
Client strings it sends
| User agent | Probes |
|---|---|
| Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1 | 257 |
| libredtail-http | 49 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | 44 |
| Mozilla/5.0 | 26 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/131 | 22 |
ASN report
ASN report
Loading