AS21859: Zenlayer Inc
HoneyLabs honeypots recorded 3,067 probes from AS21859 (Zenlayer Inc) in the last 7 days, originating from 185 distinct source IP addresses.
First observed 2026-09-22 06:52:26, most recently 2026-09-29 06:43:32 (UTC).
Ports it targets
| Port | Probes |
|---|---|
| 53 | 132 |
| 20000 | 65 |
| 443 | 55 |
| 8080 | 39 |
| 1599 | 20 |
| 10250 | 19 |
| 554 | 19 |
| 5357 | 16 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 109.105.210.102 | 180 | Portugal | |
| 185.180.141.80 | 134 | Portugal | |
| 185.226.197.117 | 129 | Portugal | |
| 185.180.141.100 | 127 | Portugal | |
| 185.180.141.90 | 126 | Portugal | |
| 185.180.141.85 | 108 | Portugal | |
| 185.180.141.115 | 105 | Portugal | |
| 185.180.141.95 | 83 | Portugal |
Where it comes from
| Country | Probes |
|---|---|
| Portugal | 2,999 |
| Taiwan | 67 |
| Vietnam | 1 |
Client strings it sends
| User agent | Probes |
|---|---|
| Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 | 1,528 |
| python-httpx/0.28.1 | 1,264 |
| Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0 | 36 |
| Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11 | 9 |
| kubectl/v1.12.0 (linux/amd64) kubernetes/0ed3388 | 4 |
ASN report
ASN report
Loading live data…