AS37963: Hangzhou Alibaba Advertising Co.,Ltd.
HoneyLabs honeypots recorded 3,997 probes from AS37963 (Hangzhou Alibaba Advertising Co.,Ltd.) in the last 7 days, originating from 269 distinct source IP addresses.
First observed 2026-09-22 14:24:36, most recently 2026-09-29 08:39:20 (UTC).
Ports it targets
| Port | Probes |
|---|---|
| 22 | 513 |
| 443 | 68 |
| 2222 | 34 |
| 9119 | 31 |
| 4222 | 27 |
| 5005 | 23 |
| 6379 | 22 |
| 1024 | 20 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 121.43.230.7 | 409 | China | |
| 47.95.199.141 | 377 | China | |
| 47.95.213.125 | 358 | China | |
| 47.95.194.193 | 355 | China | |
| 47.95.206.102 | 335 | China | |
| 121.40.42.49 | 183 | China | |
| 47.95.202.52 | 178 | China | |
| 121.40.45.43 | 156 | China |
Where it comes from
| Country | Probes |
|---|---|
| China | 3,997 |
Client strings it sends
| User agent | Probes |
|---|---|
| Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html) | 978 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.115 Safari/537.36 | 338 |
| libredtail-http | 60 |
| Python-urllib/3.6 | 31 |
| go-dockerclient | 12 |
ASN report
ASN report
Loading live data…