AS21859: Zenlayer Inc
HoneyLabs honeypots recorded 2,418 probes from AS21859 (Zenlayer Inc) in the last 7 days, originating from 134 distinct source IP addresses.
First observed 2026-08-08 06:21:54, most recently 2026-08-15 04:09:04 (UTC).
Ports it targets
| Port | Probes |
|---|---|
| 80 | 64 |
| 8443 | 38 |
| 9443 | 36 |
| 53 | 36 |
| 8888 | 34 |
| 5984 | 28 |
| 10000 | 28 |
| 4369 | 25 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 128.14.181.58 | 256 | United States | |
| 185.180.141.47 | 78 | Portugal | |
| 185.180.141.37 | 71 | Portugal | |
| 109.105.210.67 | 69 | Portugal | |
| 109.105.210.57 | 68 | Portugal | |
| 185.180.141.42 | 68 | Portugal | |
| 109.105.210.62 | 67 | Portugal | |
| 109.105.210.52 | 66 | Portugal |
Where it comes from
| Country | Probes |
|---|---|
| Portugal | 2,122 |
| United States | 260 |
| Hong Kong | 22 |
| Germany | 8 |
| Singapore | 6 |
Client strings it sends
| User agent | Probes |
|---|---|
| Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 | 1,027 |
| python-httpx/0.28.1 | 858 |
| SmarterMail-Scanner/1.0 (authorized-research) | 256 |
| Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0 | 4 |
| Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36 | 2 |
ASN report
ASN report
Loading live data…