AS17621: China Unicom Shanghai network
HoneyLabs honeypots recorded 526 probes from AS17621 (China Unicom Shanghai network) in the last 7 days, originating from 59 distinct source IP addresses.
First observed 2026-08-13 19:57:30, most recently 2026-08-20 18:49:46 (UTC).
Ports it targets
| Port | Probes |
|---|---|
| 22 | 448 |
| 8030 | 5 |
| 4000 | 4 |
| 2000 | 3 |
| 10990 | 3 |
| 11300 | 3 |
| 2086 | 3 |
| 6379 | 3 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 106.75.216.134 | 447 | China | |
| 139.227.161.56 | 6 | China | |
| 113.31.186.197 | 4 | China | |
| 139.226.161.157 | 4 | China | |
| 139.227.161.45 | 3 | China | |
| 223.167.206.173 | 3 | China | |
| 139.226.161.132 | 3 | China | |
| 223.167.205.215 | 2 | China |
Where it comes from
| Country | Probes |
|---|---|
| China | 526 |
Client strings it sends
| User agent | Probes |
|---|---|
| Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36 | 41 |
| Dalvik/2.1.0 (Linux; U; Android 9.0; ZTE BA520 Build/MRA58K) | 2 |
| Mozilla/5.0 (Windows; U; Windows NT 5.1; it-IT) AppleWebKit/525.19 (KHTML, like Gecko) Version/3.1.2 Safari/525.21 | 1 |
| Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11) AppleWebKit/601.1.27 (KHTML, like Gecko) Chrome/47.0.2526.106 Safari/601.1.27 | 1 |
ASN report
ASN report
Loading live data…