ASN report
AS396982Google LLC
7-day honeypot activity for this autonomous system. First seen probing on 2026-07-08, most recent probe 2026-07-15 07:02.
209,927
Events 7d
2,824
Distinct IPs
17
Source countries
17,498
Ports targeted
Top dest ports
- 443HTTPS2,051
- 80HTTP1,837
- 8080HTTP-alt1,271
- 8443HTTPS-alt1,116
- 3389RDP957
- 990990718
- 110POP3682
- 143IMAP663
- 21FTP650
- 23Telnet622
Top source countries
- United States135,573
- United Kingdom58,861
- The Netherlands9,311
- Belgium6,079
- Singapore35
- India34
- Brazil10
- Chile4
- Taiwan3
- South Korea3
Top source IPs in AS396982
- 34.34.103.1955,643 eventsProbing The Netherlands4 ports swept 路 seen Jul 15HTTP-altHTTPHTTPSHTTPS-alt
- 34.13.210.1503,668 eventsScanning The Netherlands1,151 ports swept 路 seen Jul 12MSRPC60062602121279100
- 147.185.133.176768 eventsScanning United States695 ports swept 路 seen Jul 1510143220809559886039524
- 162.216.149.8593 eventsScanning United States545 ports swept 路 seen Jul 1563023297601121358120
- 147.185.132.226569 eventsScanning United States511 ports swept 路 seen Jul 15204384691626836146699697
- 147.185.133.70566 eventsScanning United States519 ports swept 路 seen Jul 1551534050462285133426784
- 35.203.211.197479 eventsScanning United Kingdom437 ports swept 路 seen Jul 15239253676523460263678441
- 162.216.150.233453 eventsScanning United States410 ports swept 路 seen Jul 1537699249938270143004929
- 35.203.211.80452 eventsScanning United Kingdom404 ports swept 路 seen Jul 151102827306462452589665006
- 162.216.150.250415 eventsScanning United States383 ports swept 路 seen Jul 157598373838740878747429
- 147.185.132.130404 eventsScanning United States367 ports swept 路 seen Jul 159942889544935270428760
- 35.203.210.148376 eventsScanning United Kingdom350 ports swept 路 seen Jul 15502384666240612700237908
- 162.216.149.30360 eventsScanning United States327 ports swept 路 seen Jul 153021726416134161773911235
- 147.185.133.23345 eventsScanning United States317 ports swept 路 seen Jul 1541494881169736396040250
- 162.216.149.145341 eventsScanning United States304 ports swept 路 seen Jul 159165954038518119849352
- 162.216.150.157337 eventsScanning United States291 ports swept 路 seen Jul 151118446865234436297048464
- 162.216.150.156334 eventsScanning United States311 ports swept 路 seen Jul 15317773391426339251537
- 162.216.150.45333 eventsScanning United States305 ports swept 路 seen Jul 15511155363361932264189220
- 162.216.150.116328 eventsScanning United States291 ports swept 路 seen Jul 154097827820553621700017580
- 35.203.211.226327 eventsScanning United Kingdom299 ports swept 路 seen Jul 15647905216018086933242329
- 35.203.211.86325 eventsScanning United Kingdom301 ports swept 路 seen Jul 159551226703338499712912
- 162.216.149.104313 eventsScanning United States283 ports swept 路 seen Jul 151882619816485222294057772
- 162.216.150.67307 eventsScanning United States282 ports swept 路 seen Jul 155988437284498191285131571
- 147.185.133.35303 eventsScanning United States271 ports swept 路 seen Jul 15198714564841345475167854
- 35.203.211.175286 eventsScanning United Kingdom255 ports swept 路 seen Jul 1492673403180054093048180
Top user-agents from AS396982
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity167,359
- Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)14,854
- Nps2Scanner/1.0 (+https://nps2.io/terms#removal)2,241
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.01,910
- Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/120.0.0.01,889
- Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Firefox/121.01,844
- python-requests/2.32.51,075
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36568
- curl/7.68.0410
- Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.058
JSON: /api/asn/396982. Top ASNs feed: /api/asns.