AS21859: Zenlayer Inc
HoneyLabs honeypots recorded 4,150 probes from AS21859 (Zenlayer Inc) in the last 7 days, originating from 169 distinct source IP addresses.
First observed 2026-10-06 03:16:07, most recently 2026-10-13 03:10:05 (UTC).
Ports it targets
| Port | Probes |
|---|---|
| 8001 | 55 |
| 443 | 54 |
| 3388 | 50 |
| 53 | 42 |
| 81 | 32 |
| 5984 | 31 |
| 9443 | 30 |
| 3001 | 28 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 185.180.141.115 | 209 | Portugal | |
| 185.180.141.85 | 171 | Portugal | |
| 185.180.141.80 | 158 | Portugal | |
| 185.226.197.117 | 141 | Portugal | |
| 185.180.141.100 | 138 | Portugal | |
| 185.180.141.90 | 127 | Portugal | |
| 185.180.141.95 | 118 | Portugal | |
| 185.180.141.7 | 84 | Portugal |
Where it comes from
| Country | Probes |
|---|---|
| Portugal | 4,150 |
Client strings it sends
| User agent | Probes |
|---|---|
| Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 | 2,107 |
| python-httpx/0.28.1 | 1,782 |
| kubectl/v1.12.0 (linux/amd64) kubernetes/0ed3388 | 2 |
ASN report
ASN report
Loading live data…