AS15169: Google LLC
HoneyLabs honeypots recorded 14,624 probes from AS15169 (Google LLC) in the last 7 days, originating from 464 distinct source IP addresses.
First observed 2026-11-06 02:22, most recently 2026-11-12 17:16 (UTC).
What the sensors show
Probes arrived on every day of the 7-day window. The busiest day was 2026-11-09, with 3,258. Its 464 addresses probed 142 distinct ports. No port took more than 5% of the probes. No single address sent more than 1% of them. None of the 25 busiest addresses is a recognised research scanner.
Ports it targets
| Port | Probes |
|---|---|
| 990 | 690 |
| 143 | 640 |
| 23 | 639 |
| 21 | 630 |
| 110 | 567 |
| 993 | 429 |
| 995 | 360 |
| 8443 | 276 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 35.210.33.61 | 121 | Belgium | |
| 35.210.181.143 | 108 | Belgium | |
| 35.210.159.255 | 106 | Belgium | |
| 35.206.131.8 | 102 | Belgium | |
| 35.206.151.191 | 101 | Belgium | |
| 35.210.72.68 | 93 | Belgium | |
| 35.206.147.18 | 91 | Belgium | |
| 35.210.157.247 | 90 | Belgium |
Where it comes from
| Country | Probes |
|---|---|
| Belgium | 14,624 |
Client strings it sends
| User agent | Probes |
|---|---|
| Mozilla/5.0 (compatible) | 4,911 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 | 1,974 |
| Mozilla/5.0 (compatible; nmap-http-info) | 123 |
| Citrix Receiver | 7 |
ASN report
ASN report
Loading